Viewing Collection: network_analysis

Collection compacted!

Simple
Advanced

_id	sha256	timestamp	analysis_successful	csv_reports	html_report
69ed082259a6632dae07de31	e37c838dc5eaa1b302ffbd8721c6a5f52a068e8f78bbec63b…	Tue Apr 28 2026 14:18:13 GMT+0000 (Coordinated Universal Time)	true	* LARGE PROPERTY * ~293 KB Preview:{"network_analysis_domain Click to fetch this property	* LARGE PROPERTY * ~224 KB Preview:"<!DOCTYPE html>\n<html l Click to fetch this property
69edd82659a6632dae07de35	2aa5ce3561dc657a157460383c7c9b8db54ac8a6969627009…	Wed Apr 29 2026 19:32:32 GMT+0000 (Coordinated Universal Time)	true	* LARGE PROPERTY * ~480 KB Preview:{"network_analysis_domain Click to fetch this property	* LARGE PROPERTY * ~189 KB Preview:"<!DOCTYPE html>\n<html l Click to fetch this property
69edf0c659a6632dae07de46	02aa8cabeea2a0120a31adbf0886f821d10953fc6d4d9cd19…	Wed Apr 29 2026 18:19:26 GMT+0000 (Coordinated Universal Time)	true	* LARGE PROPERTY * ~111 KB Preview:{"network_analysis_domain Click to fetch this property	<!DOCTYPE html> <html lang="en"> <head> <meta…
69edf36a59a6632dae07de57	6ba13af0263cd61f957f2ce738120c8a419e1eb157e489bc7…	Tue Apr 28 2026 14:15:10 GMT+0000 (Coordinated Universal Time)	true	* LARGE PROPERTY * ~197 KB Preview:{"network_analysis_domain Click to fetch this property	* LARGE PROPERTY * ~148 KB Preview:"<!DOCTYPE html>\n<html l Click to fetch this property
69f0fd1b59a6632dae07de69	c5ae6f6ec23fd8d5ba1343e49bf805bbc016545715a413227…	Wed Apr 29 2026 10:06:02 GMT+0000 (Coordinated Universal Time)	true	* LARGE PROPERTY * ~888 KB Preview:{"network_analysis_domain Click to fetch this property	* LARGE PROPERTY * ~416 KB Preview:"<!DOCTYPE html>\n<html l Click to fetch this property
69f21bf559a6632dae07de81	360e6f2288b6c8364159e80330b9af83f2d561929d206bc1e…	Wed Apr 29 2026 20:37:12 GMT+0000 (Coordinated Universal Time)	true	* LARGE PROPERTY * ~593 KB Preview:{"network_analysis_domain Click to fetch this property	* LARGE PROPERTY * ~349 KB Preview:"<!DOCTYPE html>\n<html l Click to fetch this property
69f2532259a6632dae07de84	4792cd702b952d39c1cd215f842223b96e2c17ce9981629cc…	Thu Apr 30 2026 00:21:14 GMT+0000 (Coordinated Universal Time)	true	{ "network_analysis_domains_ips.csv": "name,ip,src,av detection,reputation,malicious,internal/ external\n", "forensic_timeline.csv": "timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_k06rf0y2.pcap,\"Payload: filter: ((ip \|\| ip6) \|\| (vlan && (ip \|\| ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #5\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #6\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #7\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #8\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #9\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #10\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #12\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #13\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n##\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #15\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_io_graph.txt\n", "carved_files_analysis.csv": "Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-30T00:21:10.163754,Tool:tmpk0lq2e1u/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpk0lq2e1u/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer, ext case header footer, Graphics, jpg y , x10 , jpg y , xe1 , png y , x0a , gif y , x61 , gif y , x61 , Documents, pdf y , x46 , zip y , x04 , Executables, exe y , x5a REVERSE, elf y , x46 REVERSE, Multimedia, mp3 y , x33 , mp4 y , x70 REVERSE, \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-30T00:21:10.168265,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpk0lq2e1u/carved/scalpel/audit.txt,468,518356d9e441f4710189ddf7850c3dea,c59a2471e3317a8f2025c7131964255b98e1370cf29dc77352d430b50a4b70ac,4.95,\"Scalpel version 1.60 audit file, Started at Thu Apr 30 00:21:10 2026, Command line:, scalpel -c /tmp/tmpk0lq2e1u/carved/scalpel.conf /tmp/filtered_k06rf0y2.pcap -o /tmp/tmpk0lq2e1u/carved/scalpel , Output directory: /tmp/tmpk0lq2e1u/carved/scalpel, Configuration file: /tmp/tmpk0lq2e1u/carved/scalpel.conf, Opening target , /tmp/filtered_k06rf0y2.pcap, The following files were carved:, File, Start, Chop, Length, Extracted From, Completed at Thu Apr 30 00:21:10 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6b 30 36 72 66 30 79 32 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6b 30 36 72 66 30 79 32 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a\n2026-04-30T00:21:10.161689,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpk0lq2e1u/carved/foremost/audit.txt,698,96b211fc4117dd9fcd05c9a5f434f275,23598b9fc1ff3b14bf0bcc70ac3a7a098bd5cac8796860e04fd5a34a99ea3515,4.84,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Thu Apr 30 00:21:10 2026, Invocation: foremost -t all -i /tmp/filtered_k06rf0y2.pcap -o /tmp/tmpk0lq2e1u/carved/foremost , Output directory: /tmp/tmpk0lq2e1u/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_k06rf0y2.pcap, Start: Thu Apr 30 00:21:10 2026, Length: 3 KB (3820 bytes), Name (bs, 512), Size, File Offset, Comment , Finish: Thu Apr 30 00:21:10 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Thu Apr 30 00:21:10 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6b 30 36 72 66 30 79 32 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6b 30 36 72 66 30 79 32 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 33 20 4b 42 20 28 33 38 32 30 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a\n", "network_analysis_protocols.csv": "Protocol,Packets,Bytes,Packet %,Byte %\nTCP,16,3138,100.00%,100.00%\n", "network_analysis_ports.csv": "Port,Packets,Bytes,Packet %,Byte %\n443,16,3138,50.00%,50.00%\n49899,9,1278,28.12%,20.36%\n49892,7,1860,21.88%,29.64%\n", "packet_forensic_timeline.csv": "Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-29 15:13:19.749145,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:20.054794,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:20.664177,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:21.867300,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:23.070404,5,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb701000080062956c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.........)V..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46849, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:24.273504,6,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70240008006e954c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....T..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59732, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:26.679735,7,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70340008006e953c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....S..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59731, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:31.492126,8,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70440008006e952c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....R..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59730, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:33.806131,9,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59581, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:34.116976,10,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46854, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59580, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:34.726326,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46855, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59579, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:35.929634,12,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59578, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:38.330775,13,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E....\t@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59577, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:41.289985,14,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70a40008006e9afc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59823, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 15:13:43.140551,15,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" \|>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:52.747085,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411404 Ack=1369756557,525400577f945254007bb792080045000028b70c40008006e9adc0a87aa804d519f0c2e401bbc6bf148c51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59821, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411404, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n" }	<!DOCTYPE html> <html lang="en"> <head> <meta…
6a13e92c32de6bb6782baac8	637175bedfe6852886341e15c4d48241d7a58083a45272df0…	Mon May 25 2026 11:46:12 GMT+0000 (Coordinated Universal Time)	true	* LARGE PROPERTY * ~126 KB Preview:{"network_analysis_domain Click to fetch this property	<!DOCTYPE html> <html lang="en"> <head> <meta…

Rename Collection

Tools

Export Standard

Export --jsonArray

Import --mongoexport json

Collection Stats

Documents	8
Total doc size	2.08 MB
Average doc size	266.81 KB
Pre-allocated size	772 KB
Indexes	1
Total index size	36 KB
Padding factor
Extents

Indexes

Name	Columns	Size	Attributes	Actions
_id_	_id ASC	36 KB		DEL